{"type": "bundle", "id": "bundle--281701c2-635a-4411-82a1-f15d652041a3", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--a78383e8-e6a7-4556-abfc-9dbd7490fb38", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--d2cb63ab-b786-4d5d-aa61-da293d490203", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--e2fd983c-0dc7-4283-8560-c2ee36f871eb", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8f7d435b-a120-4df7-a5a0-37ffae210e9b", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--64dde9d3-f735-494e-acb3-7f5aa970c9fc", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a76cf63-602b-4105-bb7e-d3910a2b7410", "relationship_type": "located-at", "source_ref": "infrastructure--64dde9d3-f735-494e-acb3-7f5aa970c9fc", "target_ref": "location--a78383e8-e6a7-4556-abfc-9dbd7490fb38", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0c6cc14c-a2c3-4748-9e68-c174feb0fd29", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0081d00-3477-4f87-ae79-fc02582896c4", "relationship_type": "located-at", "source_ref": "infrastructure--0c6cc14c-a2c3-4748-9e68-c174feb0fd29", "target_ref": "location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--86fad510-e3a5-45ae-9124-1f4dcb7d382b", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--402e4739-797d-4250-8432-06a18b3b05a2", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bef757a4-5b8a-43a6-a424-0886d31e63c0", "relationship_type": "located-at", "source_ref": "infrastructure--402e4739-797d-4250-8432-06a18b3b05a2", "target_ref": "location--d2cb63ab-b786-4d5d-aa61-da293d490203", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0ff81c9c-0328-44c9-9dd3-f379ff658a83", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c55440b-06f9-45c1-acf2-23ab3f23f056", "relationship_type": "located-at", "source_ref": "infrastructure--0ff81c9c-0328-44c9-9dd3-f379ff658a83", "target_ref": "location--e2fd983c-0dc7-4283-8560-c2ee36f871eb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--6a3988e2-ec90-482a-9f11-83517d34c093", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--62a7a717-4d3b-4237-b884-1f1053f65275", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--710d1cd9-33d6-4cc2-af13-80da47bcbcb2", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--c5a5ae54-1fb8-46f1-81f4-1262e773c2d3", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--65c7d527-eaf2-451e-bf2a-2dbe9cca3f63", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--97843c72-fe8a-4ebc-a62a-e2024f91a438", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5395f62c-6ac5-4d8a-940b-2b66cd5d30af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.164.66.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e34da96-1f81-4975-b6c0-58c0a8ffc7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.86.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09319c5-4249-409d-8662-3be680d9f2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.177.63.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b546f0d8-f32b-4943-83c3-9f5aaf0f0700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.193.63.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07be617-52b7-4a3a-9e42-5b429b1929bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.197.102.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1488dbd7-214a-4514-8f84-c3c6d24ccfee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.214.214.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7c7008-ecbc-4533-b801-5f47c2c9c0bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.238.106.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5764f1b2-76ce-410b-8675-ad273076d274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6468c36b-387c-4af4-83c8-c513077904b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3eb750-c55b-413a-96d2-f9661ad42ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6afec6-236b-42fa-bd70-552127c34cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6d6b66-c6f8-41fb-80df-70f3af23ca02", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.27.170.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dea09a-39f2-4e07-9cda-ed1959edb8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.32.57.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f9c788-6266-403a-91ce-ef9cdf1d735e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.143.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27772405-9a9c-4206-99cd-69d00a689157", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.68.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee45894-6a54-47f9-a075-3004b63e509b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.53.199.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a9d7eb-9cd5-47ba-b065-a955109ece10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.71.91.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d6e32c-5273-4738-bb28-b131daad6080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b508c54c-00f9-4df9-9d57-6a90e266741d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6ba252-6d42-46b8-a634-de9df4b87c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9610095d-b16d-4d71-90b5-665ee8454641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc05ca7a-8f74-4273-8d64-651e28079062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8964465e-ec78-42db-8331-12b23d29565d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e322d563-37d7-4ec1-9237-bad36208cc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca7177a-78da-45e1-843d-dc745857500f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae979dd-432c-49b6-b4f2-dfd982c5c676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f245a307-7a96-4e0e-bf58-179879a811a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e2d97e-a450-4beb-a8cf-fa547428e103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dade2f-31c0-4dee-b73c-dd605f3214e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7483c8-b1f3-44e3-b6f4-33271e338cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4cfa4e-a9ab-4d02-b449-872a8f55c7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6faec82-b599-407c-b427-bcff44b5d8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672eb516-dc4a-433e-9750-2ca20d36da07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5206e350-8126-4479-9831-28a8e3deda65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b635e62-f430-43f4-80cb-4a2b6cd5b62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee16d01-73f7-43a7-8f4f-b06593762377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa22bed-c835-4584-a0bc-8eac6221144f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4de3474-ec89-4ddd-ab22-727d795cbdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92826b87-e6b6-4337-812a-d989c70482c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493cb2f8-88a5-461c-bd2b-5aa3b0563bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44362d58-e6a2-4bbb-a144-f739fc542aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0436f97-6db4-488c-8108-84838ab03e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb6b588-f0d1-47e6-a3b2-b567a7a5117a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da561bd-0d27-4a55-8332-6e1df6143b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ea1db0-3792-4019-95a1-3926156ef872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f52769-b2ef-405c-ae7c-ecb05b6a2283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dcb654-d486-41b9-90ff-ad41688355f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130ade03-d7f4-4780-9e03-30f4288f7656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5897e26-dd7d-4927-9e6e-b590488c2e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f02cad4-7e0c-4319-a834-20b4e820d920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e4cf35-add7-440e-a523-b7da8b6532e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ebafe9-7fe3-474a-b3ff-f6b176f8cf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d1d5c9-fb68-4344-969e-1d2c4ff84c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cc4029-b03c-4d37-90b4-1bd4889821bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b632019-c4b7-40f9-8db5-c77527c3a59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04779fd0-acfd-42b1-8916-48ef4d4d4b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4e19c9-6e01-4e6b-b9f9-b961ae16523b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29af5466-e165-49a7-a812-e021a60cddc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f27d54-e84f-42fe-a0ea-5da72da7bb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5753e4c-9cf0-451e-9eaf-09370256d2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abb9c0f-f661-433d-9dda-7436f401dbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd50607-4811-428a-8918-dce8508be592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60de3df-36b4-4702-b9b1-ae77cd233d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139bcadf-9705-41ae-b611-03d400e22a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b434b921-7494-4089-85f9-29e52f1b4918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09cffe6-3d40-43d8-95e3-12bb3c1d1a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8c8085-dfa9-4306-b94d-14e87f60f61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c992bee-dd4b-426a-b538-db722795405c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.161.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fba7a06-b869-4d45-8b99-adfc1822f572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222a118e-a87d-4bae-967b-6751adebebca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f55bb3-8a27-46e5-8fdf-75fa2f430d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.195.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d8acdb-a1a8-40d2-856c-1e70a126aecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.135.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbf28ba-77b4-49ef-a312-937815f5bb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.141.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47164f3-10e7-4cbc-9d4b-2b3d85535d37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.22.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4d3406-5200-4e7b-8cec-3638b3e61d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.133.227.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c34118-c3fb-46c9-b47e-a6eab21530ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.243.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b3ead4-3e39-49ca-9b5e-9daa75fb9c1d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.77.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59579c9a-d69b-409f-87a3-2f18494c2a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51e1b47-56b5-4acb-b310-98edc4b1d7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.107.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3a1b67-aa90-41cb-a482-dd9d4130fbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29cdf01-02c0-4b25-bb77-0d0ee29248ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.227.203.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1210df59-4dac-4ba9-925b-6fc35a6e2964", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.188.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3601a91b-bbe1-4606-b9af-3f7b457eb6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e7d64f-4545-4020-917a-4c4977aaa998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671ba2dd-ccf6-43e2-b15a-ac5eabfb26bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e5053f-5b60-4d1d-8070-bb78a10d1a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9f9d39-4e01-4842-8010-7d940dbbe77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f95bb9-43d0-45dc-bb7c-accb70839f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e59f11-e932-4a3e-bf1f-bc424e838b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccce933c-cbbc-4e75-a48c-ed8e5e7631a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c430f136-e906-432e-aead-a294aaf610a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38226507-0781-4609-a287-7ec569bb5f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8309a776-7419-4b29-90b4-6daee1e8c564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65d42fc-654d-40c6-89e0-78495aba45fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b23fb6-fe82-4a02-8f9e-549545240d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdace297-aa4c-4d89-9acf-199d913575da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c739f84-3e39-4b3d-8f5a-ef4e9583bec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ead1a37-d174-437c-a3af-9020fcaa19e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f649be-3e2b-4ee0-af04-fff7c1294b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bffcc93-107f-4df5-91a0-003c769601b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19bcade-d911-411a-8b63-2ca91d0edade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897ac56b-57d2-474a-be8a-06b25d432844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79732055-52f8-4241-b83f-39d1c7444087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec1b85e-726e-4ffe-b502-04184a0eba29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58dcd17-d428-4de1-84ff-3e5756987032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f23d61-1116-4cc7-8e7a-e56194c71e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56186196-1490-47cd-b8b4-f331012ff6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d600a2fc-7004-4649-af90-91d5f70bf7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d6af61-e18c-4ff1-89ad-40a1b09bd697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9aed9f8-a6fa-4d40-baac-e4905945fce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3786a560-8e6c-4ddb-9c65-30ce68dd62de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc266222-ea5a-4bcc-baea-e6826c2eba4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceca5210-43a3-46e7-81cd-d8541895fefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefcb47d-8fa0-4ae4-b2b2-8b671d1c703d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f65c89-903e-4190-b504-f4b3c085ad46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce954a7f-f0ff-4583-a734-601a7ce4b6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.156.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746b37a2-9b61-4d86-942d-fc36644dbd27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.27.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21011c5d-93b3-4351-9fef-6de370062d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.8.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3169808-6f7e-4d89-b508-d072d65d03e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.53.236.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7438f56-f242-442d-a2c8-0bbd07abf08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.14.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d61613-aa0a-42e0-be1b-5f43bc28dc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.215.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f1173f-db74-4a4a-ad17-3954e545c1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.95.175.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb935350-e599-4ff0-9c0e-925eb70a5c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.201.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc30d73e-79d0-4402-b543-980887d48ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.99.53.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5f1d46-a4fe-4411-b023-12dda2a87a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.138.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1745f468-a511-4149-8f3d-22fa2e2b39a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3888c317-cff4-407d-aba5-61ae2097518b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.148.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c9810c-7d3e-4a4d-9d03-204ee8e2ff40", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.218.89.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a36d48-f08f-4000-8cb6-21a3f9e0a076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.22.81.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cefa74-f0f1-4776-844d-1273d1956b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6957b4de-1ffe-4c1c-8e94-ab75fff6df5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.222.184.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9aa735-8d55-448c-b144-5814f932f681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f87068e-2cac-4666-bf74-85acabf86e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.91.92.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13dfd07-c549-49a1-9b55-8abdfd3005ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.97.159.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e614345-078a-4432-ab1b-9333bf7377b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1327ee01-f5ec-4230-aa9d-9079ad7e82ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaea4af-23bb-4389-bd99-80335af1c9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.101.162.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0553bfa2-c366-442b-8677-8c2f17fa1795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87df1a3c-fb3d-4038-acae-3ec91658fdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.107.95.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513fc069-6777-4e41-9952-d2abdb47ece7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8498d354-aba7-45b1-8a02-5f15fedcf96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.119.17.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a20af50-3fef-49c4-b151-fc413bbe149c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.121.90.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ec48da-ad84-49d2-a5b6-a3441e9e2621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.204.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8faf86-7af2-49ba-9ef4-8229749d799f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfa2564-20b4-4e56-9bb1-05001b9cfa74", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2816f09e-d3c9-4b84-8ea9-9503ce34d293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.45.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b86622-6c3a-4a83-bbc8-9369d2badae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa42a7ba-ba2f-406a-9fda-d3dac9bc6538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497f1c09-3f3e-4046-9c8c-6590a6651a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d3f224-073c-46a8-b034-580b4496db18", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.11.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23b5605-2ebc-4caa-861f-604694a10082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba5cbb-73a6-4381-b9e6-3c738b97ceae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.237.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a6c804-47f5-4502-8297-4b1106ba76d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.148.100.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8087ebb-671a-43cb-aa54-60e3359fd3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc709b-57c0-44d9-a556-c03c305332e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c15e9b-175e-4df8-aa33-b3315dc481f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1765f9d0-5467-4e56-8a51-49628693b61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66ab7e5-e129-4874-8337-4680c3fbce16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80a0ed7-8f61-4a09-8091-f82f2c5aa200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021c4400-db60-4df9-999b-46ac207d55ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.158.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e048e0-5718-4ba9-bb01-916089567dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.56.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7a9294-96ba-42a3-ac28-3c7bfccc042a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.212.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a05638-a27a-4b8d-b6aa-e69e776453b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.26.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa67d874-240f-4a72-b4c3-5c575287b08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e74727-c015-4589-8ba4-504dfa41d2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.111.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b567c458-8566-46d0-972a-a92bef1fa2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.118.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff87fac6-f37c-47eb-9da8-83c6f7a8a0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.182.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14d2c1f-20f1-482b-9932-7256d60d451a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.183.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eddafb-1463-4421-bb83-00fe4d08d253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9aecf0d-5200-42dc-b496-5905dca9ec8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.109.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0654d9b-71f3-4b19-a32a-eb597289ad19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c594ce2-bf12-466e-98b2-8f3d98b3f050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb11279-b356-487d-835f-d9f41c1ac783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08872d6-49c7-4889-9bc0-b88fba836915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e434a85e-1a0e-4b57-adeb-d361f160d088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16045c9f-ceac-437c-b9db-4ff50ebe85e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.240.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38277232-89e7-4185-bec9-ab65bf6a2870", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.46.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef25179-5c6e-4532-bc5a-822567f85e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.255.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf77e2d6-1d7c-4ad6-8cc4-08930e043e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.160.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f146637-6b51-4fb4-a623-db522018b63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bfe1c7-89ca-437a-91e0-379f94299b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.232.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a0ac79-54cf-4e2e-96e0-c1050c966b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.185.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f1055d-388e-4955-9450-1101f895b6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.146.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e114ed5-591f-4a33-9fa3-5a7f7c0d20bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.147.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfef4bbc-000b-4399-90e6-e9b4f4357cd5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.208.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e757561-52bb-48b0-acd8-a5b1890d92cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33c470d-dac2-47a0-b176-754587d78a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d920587-2628-4617-bc80-b4e99e5e5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a447a9b-c5dc-437b-98ee-fdcb48c47c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.107.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c8e98e-7e79-4a7b-9478-8893f81fd33b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.243.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c50c4d-77e6-4acd-8d2e-15847b0094ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.191.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ee50ef-f26f-4ce5-ae5c-880fd3379146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.236.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee07d8b9-e87c-4a6d-99b6-103c19d0f38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.194.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d751166-e485-4927-9ca8-4aef7e87aa0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.201.144.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54280d-8ea4-4334-8547-fbc6e0cc746a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352c429b-2ff9-436a-90d5-6b9394c23480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc40e36e-9244-4972-9f1c-be0a6fbfce2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06afe288-e963-4011-835b-b20243bb30da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8232888-901c-4fc6-b65f-d9c556d860a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e77764-5e7b-4e62-841a-f5bf0ee6dc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6d02ea-7a26-4b1c-a5cd-a5e7dbc9136d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.205.13.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3b6304-4738-4aee-830b-c88500bb4c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.209.145.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ed7a07-67d9-45c3-8a11-28999492f47e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082de3d6-33c4-4fef-a9de-fbe61e2fa3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea192ca-c72f-4fb6-a48a-5479a011f4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e673285f-0bdd-4f65-9018-bfe02be5999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c42d4e-883f-4d9f-9b9b-2f302bec5941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.228.36.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682c3c90-f87d-40ff-be75-6121a2264dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.230.63.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef00f686-9abb-42b3-9dba-9f6718fac05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519f1520-5690-4242-b91e-9f6976c3af15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e0a9f7-179b-4322-a38e-1efa5ff031b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f426c3-9efe-48f3-8432-b7ca8f9d0bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a891dd9f-1e75-41e6-9c3e-b5f4f5ac0d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bf42da-6b6b-4574-a54b-468844ec054e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5424ae9d-dafb-4a80-823e-0495f52216d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c715b91-f132-470b-aee8-307c82ae552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6d5331-3d40-4dd8-8a5c-4046c125035b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b7d5c7-a958-417a-8072-1fd636083b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d769cdd-d414-425f-85cb-4a402eb4d139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88414bbf-83ab-48e3-8e9d-1b58a33651e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b53769-fa14-4764-a89d-b13ade693c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66e86f5-0d4e-4d12-ab5b-2c7fc87bcada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d72743-3fd7-4c5f-b2d5-306aafce8a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cdef25-35ef-4b84-814e-71d06b1fe6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380f48b4-9b2e-4de5-bab0-1c38cfa30ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7985b5b8-6d71-4521-a1e7-a1f0689eaac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58e19d8-e4bd-4a2d-8b90-4384d1464955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e937b9fc-6469-4df6-83ad-e3952120892a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa116b64-23aa-4573-8bcb-8de07feb22e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c73399f-43f1-473f-9521-a72b30663c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dba09d-6c6a-43c1-a0a8-7d011f7ab720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aa9a0e-1e0c-4e94-8832-96691654948a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8afb64d-5bf2-487b-9456-d9971b6ccac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00d5d27-c2e8-43fa-bd68-5711a3c006b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c61b852-6e84-4c4e-890f-b326843fc7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.120.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cedcce-c6b7-4c48-977c-523ec784a1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.200.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e860c229-9dc4-4b41-b1fa-8a072f975500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b067ff-7722-45bb-ba9b-96f4ae3ada60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ae138f-9e83-4771-a12f-d1d85e5a3a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec6d0fc-164e-4599-8a89-72e3ef21a01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.176.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da59893-a051-4887-a571-24f7698bcd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9294490f-1f00-4a17-abad-5dd698042646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bb0af7-187e-4098-83d5-35f35438b400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fff5722-5b4f-4829-bcaa-be8e5f25b4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.78.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae617349-f0e4-48a2-85d1-277162f02d09", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.38.219.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b01af22-7c45-4845-a378-9bc2bec953cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.140.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bfd0df-4021-4160-bb45-a4fa682603d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.30.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cefe6f-d861-4ebd-b275-da86469a83d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.30.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff951d0e-a669-4c1d-91f9-e01147c811ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.48.192.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0164a237-12a8-4a1e-9ee3-369ce52430d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.49.129.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62040a89-0316-43d4-a2d8-634eacc028ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54de242c-6777-478a-8c5a-e9155796239a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.184.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40abfe40-182a-4699-818e-9d2cf466bbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e934a2e3-d999-4709-9855-02170fe363f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c268043b-e1d1-4e91-b6e4-692b7c74def8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.60.12.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df90607-e3b3-4d95-af5f-3da620b480ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.68.68.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a39a4ca-ac50-4553-9dfc-70d0f8d670c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cefd53c-5683-4c3e-befc-0e902027924c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.207.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc574f9e-6040-4c54-9dac-48661818c512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fb4296-ca7a-4ccd-96ca-ad06e725a65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.197.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35712ab7-9c0a-4bc4-9171-0493164bc273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.203.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a68f57-2a75-4550-a6af-a29516f462b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.88.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46bce02-d4fc-4ba1-ac8d-0323fe9aa36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7485d3-085d-43c0-9de8-ec465e1084b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd5ea73-d9cc-4426-b873-a4ce3af9b125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d928278b-27cc-4349-8c0f-9f55f7107e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.79.182.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628427ca-f42d-4fb6-85c5-891b562c22b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaa749a-b952-4018-986f-d93a805fb2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066ddd32-24e8-4c78-bc75-d9e45e681934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.93.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b506eb-aa9a-4fae-bd7d-48097b7430e6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.84.164.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceda623-e79b-4a66-8ce4-597fff291e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88594688-ce02-495b-a02c-990e5d0ad904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d436541-6ad5-4ce5-b7fe-9bc3fd0caa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1662ecc8-5ffd-46d6-a8b7-fc3da14ea9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386f5a9b-3b71-43b6-8943-2a7cb26763dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8184fe8-ef31-410c-a65c-397cf4f1e7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3068ae8-9486-4c2c-85d4-46a4fc5dbbb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315e7bed-1ab3-4a54-b515-f0db047c6a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f65c982-94eb-427a-8a5b-4db2aa435a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68beb864-0878-424d-b2bc-b67b2ae534a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0ae470-b403-48af-a2c0-46fb2b10d38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9644895-48b0-43d1-b212-e35f7f282a9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441444ba-b0a8-4b27-82c1-f43a1b24a14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.94.238.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97b4a6a-fbc7-44d9-9660-5c6fd5d94358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.96.16.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc53e51e-ded6-411c-92e3-2769afb5cb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.176.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6dac60-2c77-46e2-87d4-40c0cdcfdca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.128.137.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef34307-8d07-4c34-8094-7e2b3f1d7493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.128.140.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da316e9-ad4b-4cc0-abcb-3d7a9b23cc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.100.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a6cda5-8247-40d0-affb-dd37269d9c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4aac60-4593-4893-98d4-95a1259f6918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598ae555-8000-4742-9d02-2b4d06c209ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243a2a25-6bb9-48aa-9b52-474f38c09071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d61903-f1da-4dac-a143-bce20c471886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0eaa53-fe47-41bc-9489-6b42f297c3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e78c6c9-625e-497c-85d9-46f8752b7a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d8e401-3aca-42b3-a4f0-85b4b1ec5059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d89eac-e72e-4c8e-8277-aac7db3a8930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4c6699-c4fa-45e9-ad19-074166dcb963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6df3caf-35b3-4798-b6b6-2f8aabb5bafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90557e0-7739-4054-be38-a8917668a273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32034ff3-8e9e-43cc-848b-d4c722369a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c778e48-23b4-4dcb-bb6c-cb80dcf8b76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c6bcb5-6afa-43d1-ace6-852a97ea7104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645be057-36ef-415a-a721-4ced402a6221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc58040-a4d3-4ed6-8a69-20ba27d42f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cff8d7-aef5-40c4-9f5b-2f6690c9df1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00973cb-b0d0-48ad-a1ab-377e31bb0991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4099635-81aa-4316-b909-23671a88631f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55af4bc-e5dd-4593-a8f8-3ad4b68d8389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f06217-28d8-48be-b0a2-404450bf0a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bce9804-b841-4359-89bc-908f8cf55a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3090f9-509c-4666-b717-48bf283d6ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376e60a3-0720-497e-8677-12d21493134b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5eeb824-0262-48b1-9704-157c7f70ea0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3f63aa-5791-4c25-8e1e-806e964aa5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7892e233-f8e9-4ed6-99c9-93eb5152d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f6dc1d-9ca4-47af-b822-2bfa001b650d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665d7318-d30a-47b3-92b0-a958057a8a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49efa331-2361-469c-8de2-89e348e65f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4015282-765d-4367-8ae2-92079dbbec43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9f79b3-9fc2-4862-a4f9-d4c45223317e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f8b3cc-01d9-4464-844a-a76a41da92bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c66b35-25bb-448a-8e32-140348f2df47", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38811a7-eafb-402d-a2d2-cb41bf43f2db", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6255960b-0b31-4b58-b1c5-fa72158b3adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f09305f-b5b3-4ec7-a638-c902d81fe88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362a4be5-ee1b-4cfe-a124-b1ccd0e476ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7343015-bb44-4d51-8ac0-3f978a9f2195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354532b9-7adb-4daa-9a9d-6f949d44283c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4766330-d11a-487f-84ca-152d872e3e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398291ce-7174-4d3c-8ed5-c30aae978bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560c6dd6-7f3c-4c31-938e-f6b989d2e528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3b3604-49be-4b2b-a85f-d288fd5ac13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d859a8-35d9-412c-bf29-66dc70286084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35b9e7d-d4b1-49e9-b12a-f2cde53579b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10e551f-1d41-4655-8185-94efb558adfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.11.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08767b22-e38c-4456-bf96-fbd3a8eff9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75890593-9908-432c-8326-a5949950af03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.96.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c53f95a-3d83-432b-9827-21bfbead57b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.98.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1846279-0087-400d-aab8-37a55041535e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19a0403-6432-4e9e-91d0-eef244dcda83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.135.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dead2dc-bddf-47f4-89fb-9e2a4d71fd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3443f2e9-a895-467f-adb5-9433a1fdfa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.4.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decc007e-1157-4f02-b87e-b11b95c0291f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.209.11.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b394f5d-a01c-4431-a992-8041423d392c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2829c10-f0b2-43dd-a646-1bdb3d650ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.215.255.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d3cfa4-d0fa-4852-b0de-f55ec700bef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d44365-cfb3-4b2a-95d3-c442287ef875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edca783e-0dc4-4462-ae24-74523fe269a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.219.232.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fa74a2-0cc7-46ea-9757-bdd47eb3a845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.224.31.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3afa82-63a4-4536-8581-030477d5213f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d08343e-592c-46b1-aa0e-1670d8a72cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.32.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab32cc7-ee6a-43b9-996f-3c2936197e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92c1619-4b78-454a-8d87-94f8e15c7e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98b2260-6133-46d3-978f-9ba52c8828b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ed9fc8-5503-47f6-9b23-e45412f1eb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b8572d-72d5-4f0b-aafd-83679f8e66ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b1ca3b-880b-4089-bad0-5d3db793c373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f43de40-4707-4174-9355-9e41d7210930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96955215-1610-4391-b87e-58ef1b738e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cebc40-bbf7-44d7-82e0-a70f411fa680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.228.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c309782-4853-49c5-9967-6162d646ef92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac6558a-3560-4023-a891-5f2ecb769f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0e7e04-2c46-4026-8317-a59bea3fa035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb86916-67ca-4442-93f0-037f7ec0b316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2d53ab-3fc1-4669-a65d-2c5992d7dcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.74.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a72c10-e4c3-459f-acd7-ee14c4a8a49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5d204d-8052-4425-bc3a-991352ac0c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.122.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a88222-1e1b-4e3d-8a93-837e685ec6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a2ac39-74a2-4c7c-8426-1c8b014c98b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f4b5c1-c73d-433f-9c18-7ab2ea397743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.67.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd8846c-de87-4f9a-8b11-d7e34ef0fa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.109.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa650bbc-b623-4ac4-85db-328c4bc1f919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207c3664-e391-4da5-889e-af55b4631eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.206.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4742fca4-9a20-4fc6-a77c-0a0e303ff7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.118.9.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4d4288-c623-4a00-8eb4-97869ab7cd18", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.158.48.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519a209c-6361-43f1-9e57-4b4a4c23529d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.186.227.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d618319c-3de5-4cdb-8377-288554b5a201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.197.14.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d30fcc9-03d0-43b6-8703-36eb720520d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.27.148.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b443c2-40d4-4160-874c-2907d925d4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.30.51.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d9f2c8-9e96-42b7-b629-bf065023dfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.1.175.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548cb3e4-a044-4c8a-a79e-e6ca653e0715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9a1aa5-be37-4eb2-a6fa-fac5fe95b53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3c319d-a615-40d8-a682-c5bb1509b1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.119.165.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5e3349-5269-45e4-a7a9-8ff195a53288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.108.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e428c8-fab0-4d8b-9110-c8013b20ae97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.148.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e215a62-9304-4ab3-84b1-06e2c5b60d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.43.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b16f8bb-c87b-42ff-a0c3-8dffa9d36ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.120.62.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bb8ec8-7e82-42d1-a1ea-8bb8798bc8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.125.128.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa494d98-d780-4643-9ae3-42fc12702af4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.124.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc872d66-db56-42a4-9027-5e2bcb1bcbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.136.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c465e6-930d-4d9a-8ee8-01fb854931ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.165.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf1f231-d74f-44d9-89e8-0d97b201d0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.41.137.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09c9036-667b-492b-80a8-79ea41c443c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.31.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dd6643-8def-4e7f-a5ac-5e588a99d8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.59.3.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3ee2aa-f24a-45ec-a01c-4984f68ca922", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.101.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45f3465-f42e-475a-b865-ea6bffa0d7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1dbae8-d9d6-48e8-b615-e6bf1353fded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63be2d2c-5ce8-41c3-99fb-f77b9d81e8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c32b869-58d0-46a6-a1ff-0a31bace1ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.141.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4325cf3c-60c4-4549-bff6-9b64913c16cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d295b18-e8a7-481f-9dc8-985783aef9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebe5de4-1f48-4f52-84cc-049316a88796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39f7ecc-5239-4a99-8ba1-71b0d087924c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7086af4-3612-4754-b96f-643bbc41a7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd629e2-5269-4e58-8c01-8e4eaa1100bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841710c5-1c69-4536-a35d-7873a6774300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad4b344-b725-4909-a5ac-101086cb9881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc1e6f1-23f3-48c3-8b42-2e692cf705ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aacc36d-0b5a-40cc-b4b4-d29d29de9591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebf8b46-a9f1-4fb6-a7a2-8e4b3c242881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.185.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bbde62-c135-40ba-bcdf-0224fb123101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f23c27-ad53-4e20-b4dd-f8ea16f2eb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d4d4c1-3430-4984-ac95-b2b6774c25f7", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.190.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e946ff8b-55dc-443b-9b5d-24bf245534da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf35290a-f8f2-49ba-875d-f74121e2d53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da3a228-66c7-4c81-b7be-061314bc91f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.64.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3d2232-6b24-4131-bc1d-c837624a74d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.65.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7eac01-9318-4299-88b7-961c88d6cab4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.66.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6f967c-d672-4e09-b9fb-4805a9b9ec7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.132.88.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04789f4a-381e-4b54-841b-18648f68ef12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cfb8e3-47f0-41d7-a60c-55c599057501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85639e6b-89a2-4dde-ac04-c1eec1be26df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb38ae1-9db9-4fe8-a5c4-834eb4c4dbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81074b9-cad7-4143-9334-9b7e71d6ae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f9e61a-690b-4531-aac0-5655c4b117cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bbc18d-2321-4e05-bc4a-c3b5954ad0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b849d580-c9f0-403b-a097-6a65c8c061c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e257aad-649d-4823-9a5b-94414addd658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd472ef0-e668-4ab6-b20a-6532701a687f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd14554c-dfa2-4e50-abc5-908147f443ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3835d21-069e-46c9-8af7-803ea2931519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b47a0d1-445c-4c22-8cba-96dcc266efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4858db61-8d09-41df-88ca-667147400a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7641e02-cdf6-4f2a-8a84-c67f46f581e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c732d4dc-4d6c-40ea-baf3-544923a55e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4be4c0e-0fd0-4cd1-8a7b-f09c37d6e20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f59b9c0-d179-4b30-8dee-046e4aa0f936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94198c1b-551a-46f4-b4d6-414de7e4b60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2e12d2-dd68-4744-b68d-791cc0f178f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24e08a7-7e66-4b7e-b0a2-0a62c4d7eb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253dbc2c-6b8f-4a58-8a57-715825cbf601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dede97-37d5-4738-92a6-b9f4aa1a5177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27be369-447f-4827-a5ee-ef990eeeee29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7810b6a-836e-4f2c-a7ff-4254fb98faea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0fdad2-641e-4e42-a6ed-3b288443f750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a18ef2d-793d-494a-9586-f7e7500c5434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d68d71-229c-4cea-9462-8be17c621c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c66847-b36c-42dd-8cf8-6f338ae2b175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73298f26-27fe-4037-8cd1-6ca865868fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af313d02-f82c-4425-b48a-b6b5cf70532c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33daeccf-b26a-4baf-86f3-1ee65eac367c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1431f8b3-2c50-42fc-a006-98939c42d700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcd5671-62e9-4a01-89fa-1f9fdafc0926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7b47f5-95d8-48ac-812f-5aee60fb25cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac633cc5-e90b-49ca-ae54-4872daa31328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58a7dc8-c8a4-4047-acde-842a057bfb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8aedbd-9d48-4bc0-8346-2e02713186ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca0dac7-aa8c-4272-a328-7b334f27281b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2f94c3-b019-43a5-b8a2-7fdf518a566e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b129b4f-b397-4d2a-8295-0cc045a35501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f016d49c-b837-48fa-9cb8-bb8775a81931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95620b56-2c38-434f-9bc9-6d0605d3f0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84337a0b-eb6c-43e9-93a5-7a41d2d2cd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcc6098-11c0-4f30-8b2e-0d053b4fbee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce3f8f2-9539-4d23-8f41-e65d46be4d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b49210-8efd-404b-b81d-eeccf56297bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49755433-a991-44f5-b794-ac298eafe9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.85.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d8acac-8fd6-4965-b8ef-489264e60ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8044899-eae6-4d53-a31c-507204b1626e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.227.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b6034b-f440-439c-a099-4c778c666ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.244.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8268c53-f6d3-4b9c-af46-c266c8a4306b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.1.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970d50ac-7ec7-4835-a3a9-52d98ca884c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.47.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66256764-6dac-4d5d-9fde-01f8fcfc9c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.150.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00a461f-0794-4600-b133-c6317f09c753", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.154.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad9a51f-e394-4500-9d70-70dd03013f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fbf690-f6c6-4796-9800-0597f3cea792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd2131b-a987-43b2-aa56-5b62c42ca7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.173.24.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f851a15-fa82-46cd-9300-8e5ff2e83a94", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fca0aa-97e7-44dc-80f5-9b89202dda8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.34.48.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6864f8-8200-41fc-a9c9-d23bd46265c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9fe62b-9834-4559-9dd0-6ea0bbefc591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebc776a-6b03-48c7-af30-d65e26f3fc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f5bc3a-c61a-4ca2-85b3-d51490c88d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f577e9-fdbe-43ff-8500-d416b46dece1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfba4e3b-f767-4ef9-a605-ed34d965ab66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.107.243.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f0fa94-f15a-43cc-b83e-9fc04bb39315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.247.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3029d67b-c0ea-4941-a561-9e5e5787fbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.253.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b45531e-0ffd-4147-9e52-bd9d2e0c7916", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.125.139.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f665f7d-e191-4380-848f-6afd85e63407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.167.249.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5ce433-cbd1-43cc-bcd4-495f7d9b308a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.169.213.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd612e9-d0bc-4d56-8279-0d1240027668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.175.215.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad32be6-e075-4317-957e-61931c9ef9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.176.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0d7b58-84f3-4021-b11f-3d850c1a270c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d71226d-e012-450b-b148-1d073a637dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82cda7d-1f03-4254-82ab-bb67fef700f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.229.119.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9647d8f-d781-449d-b660-25b58a44dc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f12f95-7f83-4556-938e-cd6b85ebf64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.76.127.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dbb6b4-5517-4e4a-9861-3408bda5122b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d50479a-b4d6-466b-824d-895b24bbeb67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.14.190.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cbd142-3063-4d0c-98f5-315e647cc302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.178.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8261dd6-f288-47e2-bc5a-e72bafcfc59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.182.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91159361-a98d-43b2-ad4f-7627eac9a431", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.24.36.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f27a671-8288-4290-bde0-7f814f312eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.247.232.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf65c0c-4156-4494-a712-c607ab00f1a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.201.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e70526-6cc6-45e1-bc48-06d5c2cec6f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.202.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d70996f-c804-4a6d-b6fd-84bf90c7e846", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.202.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773a7569-db9e-4a43-a32c-519962f0608c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.34.30.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96692a77-6ec7-46d5-8a46-7b888f5815bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.52.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7555ef24-e74e-4d8f-93ad-84db07ce3d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.39.242.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd35fc7-1001-42ef-a400-0432f5703b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.13.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9720f803-7baa-48a5-81e0-e93201ed7ffa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.224.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188dbf4a-f22f-4038-bd06-e3079a72c280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.226.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eae0287-a08a-4f82-91e4-2003749536d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7154f5-598a-413a-88a4-96a3007ec3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09929ac1-58fb-4830-8d12-12ed09722fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca441fc2-f456-4cb8-ac1b-92d4de42ba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.21.105.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4d6a4a-4109-446b-89cd-ee38c4c8e262", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa28a839-911e-425e-8175-2eb3d03355d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.242.24.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60f4d4a-87e9-4a89-bb2d-1ebd12e29735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.248.9.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c25d47-41ae-460c-bdb5-0efe6fad3778", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.47.243.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9fe0f6-d48f-4a4d-9d45-ffa920fc9311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.147.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4090aa1-2433-4c70-a157-298cd5a4e42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.59.6.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60005d9e-288d-458f-99de-1e2e4def585a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.70.1.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ec1525-8a8d-45f5-845d-dc4a9f02e111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.90.159.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084ae3cf-b38a-460a-9699-05c261c79ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.128.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80ff647-25fd-4b2b-a134-c3c8e0d95cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.62.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2fd3b4-ec54-4d12-9d2e-adc763fdc72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.119.183.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb8bcf0-7d54-4006-bb70-adca656f7071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.18.182.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8688d5-3a08-4870-a509-c09bded3a1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.213.120.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc67fc97-5cd1-461f-8fe0-09c3a209e4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.213.187.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e05b651-e66d-4b39-b066-1b4870eb15d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.216.108.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871dffe0-5c7b-4a98-9f0c-594915b55389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.254.223.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90be5021-644c-44c8-ad7a-e344db89a6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.4.79.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6aac2b3-3941-476d-9705-25b981896820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.124.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73979036-3cc2-4426-bd8c-1a0570e8272f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2909472-f05f-40b0-85ed-9327c0d56ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.48.17.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0a494c-048e-4cef-91ad-5560bce67d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.51.27.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157cebc5-a6d8-4fa5-86ea-8dfb942fa5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.242.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbdbf89-d55d-4ee0-9ff7-2d876dd06bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.78.3.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366224ae-89f4-4522-bf4b-58ab58128d0e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.118.224.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a44b54-fb24-4f56-b7bf-957df68001f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.118.224.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a682916a-a29d-4a18-b1d7-2e0ec5d68a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.130.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eadcd6f-706f-4922-a987-493f10f63ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.163.254.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d279c76-dd23-4854-970c-d1c6cd39dcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.164.234.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd181bd-500a-43b9-8828-b57667996be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.175.240.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f914c3-4d67-4283-9b62-f862a2040a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.199.229.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309f62a-d08a-4558-bea3-ef5bd700dae9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.20.4.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdb164e-232c-41b8-9b67-32306a180343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.159.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292ec1c5-635a-42c3-b479-352e20b47248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.214.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97ce321-ab6b-4e9e-b911-0b54a634c9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761e757a-d383-4fd4-8340-8b4ef02a0d59", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.234.89.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579db265-8a3c-4847-80b2-bcdb8e405ad7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.250.177.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0483015e-c34c-4e4c-b359-6b85af6a5ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.187.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8add42a6-a3c6-4259-8f4d-10f14bf75e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.62.129.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147d1c7e-3751-4eb8-8887-6822b294a130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.87.163.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf746a72-59ff-448f-adff-5955184d35e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b515b58-a537-4ef7-9401-3aedee8d9fd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3559bd87-44e0-4475-99d5-330986211cdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899c82fe-0980-4cee-aec4-7244a33a4e1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f7234f-82b7-481a-a212-c42ec65231e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e7ce76-20f0-4dcb-90fd-1f032bbd3fea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77b181-5b32-41b6-9425-f05115ff79ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7690e5-ff34-4516-9ea8-e55970822da8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d03c83e-28dc-4a5a-b673-e57053de242f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24af791-f4dc-464c-be75-6c3971b6624a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d0ea97-eb79-464e-b479-73f91908b1e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b441cbe6-b39e-4144-9691-671a5aaa0597", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728b006f-8976-483a-97eb-5324fdb0a838", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffb3792-f4d2-4fa4-a248-26b6807d04bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec4f7b0-7fa6-4d8b-bc74-3f55c0a61c89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c4ccc4-c032-46a6-815c-efd03010ae08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d68e24-bc7f-4d86-8748-bff322431338", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e146bef-c33a-4a79-9669-fba1ffbc0eef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f34c88-7da7-447b-8aca-2ef8533d7ecd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed47d57-d8c5-494f-935e-0be49693ec9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5984d39-d334-46a4-8de2-9972ac2ddd0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e4fcc6-a917-4cca-b322-ca9f3aba66f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fdc782-2357-4723-a344-0e708bc3534d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.147.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c959a91a-2998-464b-ad52-0590e8f69c14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f59ebb8-c828-4d0c-b7d6-ff184fcd80bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313f745c-3b26-4e4a-b52b-1594f8d097cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252d21cb-98d0-4856-8d3a-e3ff11101419", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70fc6f6-07fb-494c-aa54-e911bd25b79d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dfa14d-c669-4f35-a33d-00b8efe6483b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84b44fb-71cd-40d5-8d7d-9eed358b8142", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b7ddb3-863a-4b1e-8932-c419e636e6d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc55fecb-2db2-4bdd-bf95-691d05dca4c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7df673-1378-4e66-97a0-6679359af715", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5869ef30-d546-4000-954f-b0aa606c1e8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6715e878-386e-4871-86aa-b41f824ec607", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e631b6-7eb3-43aa-88e6-97c6769adeba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b29a74a-9a28-4c73-9969-3afcb8a0c20a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49bce13-d5db-4c51-9de4-0d3d77bf22d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dc1ab4-73ca-417f-9ffe-8da6ed2a5478", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3b137d-276b-47d2-b459-fe65e0cb8b7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4559328-5692-4ef6-af03-531a7babfb67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2b866e-aeb2-4d1a-a913-045ca88e2adf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2315347-ef2a-434f-ac30-4033637d7f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.138.100.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daa2cea-9f0b-4039-966e-037bd10352ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.200.210.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2190e7-26c0-4517-8c7e-6323f70b01b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.215.179.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd4b28e-cca3-465e-92e1-17c954f3b1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.227.108.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5aa179-c7b9-43f7-b4cb-ad960024d863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.12.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cfe31f-651c-425b-ae5a-4a47663b24f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.160.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9945a6-8164-4bde-851a-489bb9503409", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.203.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b7b40d-8279-41da-85b8-0faee963e237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.40.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141c3105-b624-43be-8283-c102dac7f68c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e54f0da-6d64-4e2e-ac25-b870177ffa04", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.38.29.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a28670-a0c2-4e67-af53-621ac13850e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.37.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74730e47-e73c-4ffd-a26e-459e2a8c66e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.79.151.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a2aa80-2da2-4f3b-807b-0a26f6e3c0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01538521-621f-40f6-9ba6-59fc5054e089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.114.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392cfca7-a519-4615-8faa-001fc8ee5a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.118.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d965b95-ad3c-4c05-a722-75ebceb21a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.128.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38ea6ec-5f4b-4fc8-b7e5-bad1819b8bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.143.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b585454-45a9-40bf-8afc-6800e86e0d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.154.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4762b03-d0e3-40de-9856-c36db7416ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.155.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f14a6f-d2f1-4533-b1b3-a753adca410f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.230.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5754bb-a136-49b3-96f0-37b5c7ffc336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec716e6-7e5c-49b6-acf4-dba3c36f4021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.36.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896cfa60-bd00-434b-9f70-fea4dad4f9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.20.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996d927e-d0fa-4231-b444-154282c1e668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.5.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae44a89-c8b5-45c3-a1eb-40b6e78feed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.73.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89157d39-9bf6-4822-8db3-278baaaa3768", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.8.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e79a69-7dd1-46fd-9087-681066b3ad74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.202.46.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdb78ad-0d62-4e7f-b65c-2d903683c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.220.156.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093d586b-e27b-4663-964e-4f928946a1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.221.235.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e20805-e2c0-431c-b84d-cad116b50198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.230.250.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f7b0e3-2bf1-4bf5-a6fb-a2a3c1090cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3d6740-dd54-4b68-81e6-bd17e7b83018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.241.238.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b64b238-aed5-431f-a185-84eae451353f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.219.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af65df0a-ab29-4c48-b3b3-2a00e86c2bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.4.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bde7c7-d4fc-4462-9c9e-54c09bf5b9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.123.150.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053365b3-e8a7-4460-b6a2-31780c8e538a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.142.99.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe5ba1b-035f-4541-892e-a9138f104251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.220.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdcbb10-4fbd-42b3-bde4-82c9fa66c531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.88.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6eab5c-abce-41b9-b6ef-26e6fa90e67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.74.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190980b6-6582-4be7-a813-a40e3f821408", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.17.238.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b37176-22df-42cf-9fbb-6f7d79bd954d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.171.162.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa869edd-fb59-431d-8834-fc3c9b2d515f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.200.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e960b5f-9a6d-4505-a341-3d599af84f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.200.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b3f02a-9db8-4d6e-a793-c6e1575d324a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06c8c65-46c8-4d67-8ff2-d10b9525c405", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7f84b9-d702-4eb4-a371-4c13a3fff983", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0df93b-510d-4261-a246-47c31398f0dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbee9444-6516-46ef-b5c1-dbc24ef56faf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590db620-badc-4b41-a574-54869775fcfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdca90a1-ee4b-4113-b275-21c994b2b254", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c567cb70-c9b4-46d0-a1f0-ae44d0d0c4d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c1ee48-86fe-4603-92d2-540f5b588c87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeef5e8f-61f3-40f2-a6f6-9b46639bc6eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307d20cc-d37c-4602-91bc-7764793c3cff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654a12d2-5cbf-40b1-9afa-83eaf98cfa3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffd9fc4-c5ed-4c36-b916-417f0394e6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19d71f9-9c9b-4086-9ac7-ea1e9d4847f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.108.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6716099e-8562-4798-9bcf-beb074509428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.212.146.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd920ed2-0182-41c0-a8bf-7d9642a50eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.233.153.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943cd9fc-ec4d-4258-b85f-edd033e06d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.237.129.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c80e63-97c6-4b4a-bb4b-3cdc1b80c9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.241.133.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bc514c-e23c-4dc6-a4f2-df9c47cb1ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.49.233.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d007410-194e-4063-b809-21e6f5dc1d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201e4a54-67a1-40f1-bd41-80957232fb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.71.106.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345552f4-62c5-4c02-ad89-571c53b3d411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.151.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08bb558-53bb-4364-b130-26d795895f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.242.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112eeac9-cddd-47f8-9c4c-b016d691c1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.141.241.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4284e9af-618a-4005-a7b8-f4c2ec1132d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.15.189.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba65a747-a0b8-478b-a8b3-a2bcdf4a0647", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.158.66.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca179644-967b-4143-9b7d-249dd275095b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f27b6a-69c2-4e7f-a30b-23935f8f5954", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.26.208.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fbc9e4-2517-4c11-a315-27668f511bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.28.102.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c6cb2-d8f4-44b5-a09f-f842ff6cb18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.33.242.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0645a5-f940-4278-b585-11eb95c4135b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.115.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571cd823-0e7c-4ea6-a711-e2072d1b953b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.122.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab00b777-f992-4cba-a86b-885458da3679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.127.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ebd737-e2fb-4588-9c42-f3732eb42caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.89.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d85a46-58b2-465a-8ca3-5e5a4c04441b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.186.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f439b290-8887-4f8a-8f68-c21a452541b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.215.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed3da79-532f-4b7a-b94a-8e543c902acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.40.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36009266-35fc-4bb6-aa8a-908731579b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.51.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4354849a-8da9-45f3-a8c8-e0061a795ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.23.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f7d93b-1191-42bc-b11d-792c2adea621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.123.1.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1130948d-eb3a-4ffb-a234-6dc5dd8e67ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.166.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7242ba5c-9753-45eb-886d-4b12e870febf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.238.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593f3573-0ee5-46d0-8839-86d068190692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.170.193.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36faf273-d8f5-43b9-ac57-d2bf3a552380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c74f44-05f4-4512-adbd-78ae23b15c45", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0759ae4e-ccf2-4ea9-9276-71c3f25f54cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da790355-897b-4110-8ca8-839b6bf0642d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df4b62a-e9b3-45ae-b1ea-3153708887c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5b697d-4869-4c2d-bd3f-898088b97aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7654e1e6-4717-4621-ad76-9c5b10431e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bc6ede-a620-4e27-a40a-f9bc8a84e434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db377f0-38f6-4254-ae15-3f9eb3b4f038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84de852-fba4-4d77-965f-7bda5903aa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fa70bd-31c3-4bf1-a5dc-10281fa0752a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e8aea1-e5d9-4015-83a9-54104e1ca4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51c9213-2f83-4c0b-ab35-103859755423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac8d146-2dbc-4867-b035-a6cb7577d1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34e7672-c4f1-4aac-b1a3-802edd259d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494cf83e-ca83-4bb2-bfce-078e30154d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55bf183-7819-4b0e-936e-6bc01e4219ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b355fd-1fd4-459e-9ee1-55afb890aaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4ef140-4a50-42a3-8521-d22dfa000d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe6ccf7-d4a3-4d9d-adbf-546dcbf31aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b4aab4-0226-4793-a09c-5413ab486ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f0e684-61f9-40ec-a0e6-179b2df7dd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef825ab3-5c58-4719-8f09-a6118102be5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce210de-ab8b-4945-859f-f66cc75730cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea29043-995f-4599-b13b-91fc69569cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4965d97-4642-41f0-9496-2ab03d6b153c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e915736e-af57-4bb5-941c-250e310a9ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433b6b7a-e0c5-4f0e-8ea8-ff6d0fb939d0", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4e02be-6b75-4d6f-93a5-0801fa764c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ca2287-170f-45d3-a03e-4ed4e9a6aeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c20f01b-ee00-495b-b3b2-c35c0646239a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c2e432-e16e-4487-aa6b-6cd0b79b1a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4a8047-2518-4b6c-90e6-a9a85d0fe2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ff3b8f-2a9e-4be0-b9dd-ac5b8573637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a19131-3edf-48a7-b5a4-77e96ea9f91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d24955-377f-4445-8abc-85ffdb6bcaf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895ea004-89aa-4352-a4f5-f18d3d6fea7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2016dbfc-256d-496e-bb79-33c09b08d9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8bae6e-2e9f-478e-b694-b747b5ffd02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b205e3-06d2-4d04-b673-58eb1f04c22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e861268-70e6-4992-91c9-c794fa227145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e326a2b6-091d-4155-abe8-2a19d52ae3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8894148-6d8f-40e2-9828-2b968b5d05f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6796f2-b61b-4c4d-99d3-31d69292ebcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e923651b-c5a5-4bbb-aa7e-64a1eca4e3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c5e72a-4a3d-4378-941e-5d03478a3c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f726032-cadf-4c51-b45d-a2d5a221f841", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.229.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfcd12d-ef3b-4c28-b45f-4e062efdd36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de65d98e-05a1-41c7-a3ff-ab3fc227736a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff98b9e-a1f1-4c28-b7a9-82dadcfafe75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284e30ab-d4c9-4d58-b886-e3da3d8abb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba4413e-ad1a-490e-8599-8faa6fdc1726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c33def-74c2-4738-a061-6deabd649749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49a0825-c734-44ed-9650-9e4a6698f6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2891c50-2e9a-490a-b731-d9af3e0da1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d87718f-0e49-414a-81c4-36f64a28ae58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a02127e-8739-4929-abeb-b28ec7f2f358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67202af2-4f93-4a10-89f2-19b7877eb8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab2b85c-1af8-490a-b6fb-9a1a02582e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac14de70-f56d-4182-93d3-556a5756201d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db97285-fa80-4ef3-9b99-e817c3686fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2891183c-9237-4feb-b547-6d02b5685613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a62466-57a2-42de-988a-2e789481186b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7706e5d6-79e4-42f3-ac4a-e4a2dba583a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1a5dbc-9077-41b1-9523-6662e02bf910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db119464-7260-44d0-82d0-7dd3014afd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d2841e-837b-435a-925f-e62bed25d448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbd3d34-4625-4070-9d6c-727b252dbab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.34.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1318d3f8-75a9-4692-9343-349449480bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196fc4ef-299d-485c-a29c-37f76b78a496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbe5f92-126e-4cc1-8114-cf3859df39fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5abfa8-b88a-4668-a909-72a2e06a8120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6d97b2-8734-400b-8d09-200b6a30b1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e815e5a6-3a6c-4875-9c9d-1f7e960010dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d2b873-18d3-4f4d-9031-4259e1ddee71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b232208a-9e5d-47b6-bb9d-5d6e2dfb111d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbbb030-1b70-4b34-8f97-e52bb71a0090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09316ed8-d47b-4015-a469-f6f069adb641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56d148c-dc9d-4d4c-b6a2-f4bdd78062e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d703ea65-7164-4a2c-bd60-2c408ec23e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468c5489-1bbf-4943-ad2b-6be6255374ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18143b2b-7cd2-463a-afe8-21e46ff02697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.80.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400d9aa0-204a-41e2-9942-85a2c18e933b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.13.208.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966fe686-4800-45d6-b5f9-1006eefabac8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.157.76.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ada2f18-46f1-4f78-acd7-d0b4e33b228f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.206.113.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdc7c1a-9c89-48d2-9a77-1aa0406ef2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.253.93.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820902a5-c67e-4028-997c-005a3a73ee70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.129.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa942f6-fb15-41ae-ac93-6f30dd0cacbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79184eb3-7660-4a39-be16-e0c32a05d8cd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.181.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f7e56f-5787-469d-a5d7-eaf0b7b6c7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.48.135.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36beb718-dffb-4932-bc8c-ee3409c8ac53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.223.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26ca70a-5c85-458c-972a-47e95f28e264", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.207.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ffb69f-d2d0-4cfc-a67e-6f7e727e1058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.164.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15199e08-2b41-4053-bd9a-f4c8b7d70e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.106.187.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ae32ad-4269-4173-82bc-de1a6ba4c2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.203.25.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716eb34c-8238-41ec-b3e4-2b31b3b4db5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.224.55.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa36b81-6cb1-4d6e-b9a4-79df3288ee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.24.230.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c43cfeb-adf8-4d10-a1a2-a7167d4bd913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.155.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7135f8f-373c-475d-9521-e91873253573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba53c96-ab5e-4cfe-be83-e48c9e7955e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.138.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d2cdf3-b06a-40b4-9098-74e6ab6798fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.194.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c5fa21-2c8d-46c0-baa5-77f97a006db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.32.92.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86680e24-2046-4589-9706-750619e5127f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.102.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8c51f9-bf4f-49af-baa8-9d0dbe1b3301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.114.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbff38e-1b87-4f52-abb1-7a7e1c7aba38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.22.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdd8dd8-b93e-4fac-93c1-5eab173b8513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7128b23f-6f0b-4a87-a0ec-18107366aae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.4.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f817e3d-70cf-4842-abb3-fd3bf785e10f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.43.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfeeab66-0cde-4469-8a45-aa36bad4ad7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.97.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fcb1f1-b9a8-4cc3-a4af-2c9e021eee2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.190.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8888c003-cd70-4d1c-a4ed-d8094f50f755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf4dd9-6843-4655-9808-3ebd6ab4a673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.222.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043141bc-21f0-4cbb-98c4-a7963a02e37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.121.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f509c8b0-8ade-493c-9c91-d6fe0c8f075d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.131.238.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edba26c0-af8a-4a71-9b48-72dff37702a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.151.171.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dd88f4-515f-42e3-86ea-924c3f967a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380c06a1-51af-43c2-8cab-37e736109fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.169.181.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13a1fe1-a713-46d7-ba2b-03eb0014fb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0b399a-5684-420f-819c-c24e19bc1818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.173.173.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baae4a4d-f574-47cb-8419-e91370375764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.180.67.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df6b617-c75b-4221-8dc7-2e3777db5abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.202.130.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e65017e-8e36-4516-b603-6e5984d4bbfd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.227.152.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f8d8c8-7566-43e9-9cd0-c6f25f886f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.231.24.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f9a642-ec95-4ba8-b606-925215f32ba3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.28.236.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97bf410-2f54-4e7c-afcc-524025c5bedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3f84c6-3f2d-4fe7-86d9-6213d9903c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.210.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0b36c9-6401-42b9-ac0c-00d7322f9fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.50.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a44e81-d9d6-429d-b184-6ce5e041eb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052478c8-d58c-4361-993d-54b8dee8e098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5e9210-9487-4a57-8e25-7f1b1c34d73f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.83.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c087b6-2a29-4734-8d76-5d3e7585c1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.88.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a6ed4d-6545-4197-89ab-085a432a9611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.94.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab45d02e-8a4f-4050-938f-117c2ee7fcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.161.52.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2ca812-3337-4f6b-ac6e-172768da7105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.184.75.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ba9286-8623-412b-8af2-e7063cb49f18", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.202.41.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8a95b6-eb26-479c-a515-ac6e6c4b8209", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.224.240.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcefb63-ebbe-4103-98f8-4eed37fb86b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.108.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a35ac78-ccbe-40ab-9689-223f609606b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.255.35.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522a26d5-9c4b-40cb-8400-c7f67e5f3f8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.236.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a4ec11-1593-4d71-9ced-bf9b23e1e807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fba899-d57c-4b04-9071-be111ec12096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2bf9b7-cfc3-4f01-b5ff-37ff67c56fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09250a7-9ac4-4b58-8009-979751c2147d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa082cb1-3cb5-48f6-b775-aea5faebda48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea922cd-94f7-4076-a133-31ee565ee5ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.112.134.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac9d64c-26e9-4aa8-b5f7-39c4529e6a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.12.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2f4bd8-3fdf-4847-b979-99c11905c6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.16.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e973419-c9e1-4dc4-adab-d5ee870801bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.27.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e9d3ef-514d-40cb-983f-989071593d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.159.100.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24578e7e-ee63-4cbe-9c22-232bc6acc1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.152.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2c5ebd-82d0-4db2-bc08-a513f59f4b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.81.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f1f759-43ab-4c5c-af68-a7f7a1c9cd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19899bd5-3013-4c71-8001-f8d9e392cfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.237.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5187293-9ea2-46f0-bd6d-6891e53afa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.238.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf74188-3a6a-4c70-9d89-eb467193acde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.129.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65faf08f-c6d3-4492-a470-5099415b457f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98488e5b-b0ca-49ea-87e1-7d0dae8b64f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ba92d9-d710-4760-9783-0ced2d1fed21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224da7b7-621c-4413-9e5c-d1df48e1a94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.192.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e3f0d6-a621-47b9-bbed-e712c6ec88c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5912de6-5c77-4604-8419-90b5a1bcd3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7956fdbc-a8a9-450b-a68e-1e66f3e0a7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10049633-efc3-47ac-bed2-887e82144fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2701229-cb51-4c8e-9fb9-53524999e840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea277daf-787b-4769-8b58-cc537fbc19c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b191c4-8337-4a0a-8195-b5ab9550b15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f86735-9a8e-42cd-9a78-17fe04b54585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e78209-001f-48f7-9c4b-4649b24fff27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ce944b-9255-473d-b54d-2289f049f130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d4134-2069-4422-9a38-e8f517c1519f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4b2663-0976-41fb-8e14-c5582ef5fb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.219.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ea6c50-06c2-4c87-b56d-71c75c3e0d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716c08a6-63ec-469d-ab5f-b7ce88808d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.228.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a95c85-ee87-4901-bbde-873b998b1ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.131.111.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc47fdf3-9f5c-4d7a-b358-79014076e982", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.193.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da9b2ec-909c-4acd-bbdc-7d5a7508bfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.158.123.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d2ebd2-3648-4de2-9430-3901c7ef4887", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.160.173.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d4d062-cd17-4aec-ba1d-bf2388fc7c3d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.174.36.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a2a9ad-e736-419b-9805-7dea0832a2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a87b08-c528-4341-8351-e549fb3cb832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.205.0.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780005d5-d908-4066-a5b9-cadae356ce47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.42.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61a93c5-c5a3-4cbf-a856-85255274d5ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a947328a-eb05-4ac4-9fed-0d333a12baa3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.78.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d9d17f-1127-4906-a12b-04687a88cede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.179.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aec48d3-7cb3-417e-81ef-dbc71e2fe965", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.6.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43c129b-c8eb-4e41-a361-e46e125b58c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.70.167.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef3c172-a1e7-4e8d-887a-0a9508b38c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.90.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac1acf-2152-4627-bd70-7d3c75f718f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.135.130.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7865ecd-d95e-432a-a574-7ea5d437af25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.137.242.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5134c3d-5f33-49cd-af7a-4bfc75824001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.209.66.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857b6611-655d-47d7-9b6a-ae0a4af12f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.228.37.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e7d833-8532-4aef-9213-a561384d0ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.240.188.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac09164c-ecdb-4b1f-967f-fdadb542e919", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.253.121.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cefed9-0ebb-47c2-b24f-10ffa6bdbef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.74.27.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac13aeb8-0504-416d-a381-c53838620550", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.74.55.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3359f4-fdb8-47c3-8904-9f7d33f7bad5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.76.228.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fc5be4-1b95-4daa-a92f-225146226852", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.91.33.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523a1efb-c0c6-4547-bfac-21fb6db9dbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3d0dce-dc8f-4d81-a542-f558a7673754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564f0b12-446a-4ca9-84d7-2aa46bf1d443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.131.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1675a2-a53b-45a1-9e17-d2ce795f96f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.32.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0294b56e-ba82-4f03-9112-6e33b33c4cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f42a07-7e59-494e-b5d0-0ce7f5295198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.38.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a6307c-f365-4720-94f3-22a6659e6a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8d6856-4bd7-421f-8183-882f5b7d3ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb5d9f9-4ad5-423d-9e92-d955ba656a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e514846-b713-41ad-a0aa-857816148fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0108eebe-c97b-41fb-a85c-39e29f14d508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097f5392-7357-4432-8c31-114a2dea3906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0112e37-b6e6-4a64-a90f-bd123bd8ff03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.231.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b941ed-459d-4de9-ac6e-e6ebaebe46d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9e5aa7-640f-4ff8-918a-9fd15344db7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b28b2d-7ccf-47ae-9bc9-5dd948130bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f09697-55be-4462-a498-b7b4ff967777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7480554-fa5d-4830-8b95-b44465ebd5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a557ec1-3a27-4bfb-8ef9-945de314d460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c974b4fa-1c68-4161-9309-00f5ff6e30b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685c915d-c39b-4e9a-a054-2e0c10eeedc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c22330-209b-4b96-a0c4-8226cd15919d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0943e6-c5a1-41d8-82f7-538f14779c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.8.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f6ee10-4ceb-4c7f-8459-3ce6a3e9861a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80fd727-746c-48e2-9e96-25295cbd80e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb857be-eeff-4e64-befb-50141371e505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42e0a9d-5f7f-4d98-8dc4-c6d9f48552c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4f32d0-20a3-47c8-975a-4929c1e4ae21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0a30b6-cdd4-4753-9d44-9269a7220d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304fd25e-a09a-4751-b5a5-74c6250b8227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5910451-ed56-44dc-b8df-3fcea419872b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad78545d-8082-42da-bd8c-27c8544c8e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121a4ca8-1d0d-4b3b-bc59-3919556ed38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.241.229.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5099e7-89b5-4c4d-93b4-44cf5df942f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3abc61-da41-4110-9112-74f7c3d6344c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.156.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b6cff5-dec4-4d52-814a-7a020bc49705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.201.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d8a0da-cccf-4bc4-804d-147aa3103038", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.205.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16958007-6bec-4f12-8e0e-ca0d25330d0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.94.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd638ae1-122d-47e8-8a9d-7d66d9354146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.146.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12dbda5-4369-4293-9dca-1cb5d41a67e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.137.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad4062f-9891-4de9-91f6-e335e6d4b64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.210.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc470e9-ece9-47c4-967c-aef5b04ec963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.97.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a88fa2-de3f-4234-9115-04779b1537a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.235.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbab73e8-4677-4c45-8274-c1dd0199bd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.53.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e40395-79d8-424a-ae5d-e2c5b3964fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.95.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9590ae-4100-4a08-b87a-1a06b1d28ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36436db1-80d2-48f3-bb37-4812343bbadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.178.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c55c3d-228f-4058-86e4-583ff7a711ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.243.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cfa66f-317f-4b98-8523-8dab0ecdbe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.59.197.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a449a924-56f0-4e6b-bd6b-0a8e3c080a99", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.59.79.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4c7126-4382-41ee-bffb-61b90d4c7f2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.67.236.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfcccce-e852-4de8-99db-c2927670e48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.83.162.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3737fa85-2fc0-415d-93fe-0b0d342d4cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d8fba1-19d0-4b25-924b-1eb52b19b190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d672f11-2674-4f40-a647-1af86e42d13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de2f7c1-198d-4890-b86f-29024a31c45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52ab90a-152d-4c95-a666-e4684cf44f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3068f438-d54e-4dd4-b23f-aa69704215ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289c941a-3a43-46fa-808f-b68394031c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bde470e-2166-4322-a8b4-2e9b12c04d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c637ba-5560-47ca-8f9d-4a4641899aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025648f5-c210-4cda-9695-6af15a96c90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d521d6-47b5-4449-82a4-3f04509e6c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8676ccc2-b220-4481-932d-5ba734359a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11de8dd3-280f-4a28-921e-b3e49797246f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ada7fe3-e855-4e87-a5ef-bb6bddd64ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd10eaf7-4558-46bb-9668-693c53c3501d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8eddc9-1e70-491b-94bd-bc648e15164c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042e00da-7426-4e69-a931-24df153ced6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87747f05-6b38-4100-923b-b368a4cd4b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c486d809-1072-4755-a58e-0d74ddc88ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba0c2d6-336c-4d6e-a55a-b90eba7a206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316da565-3379-4b7a-aa69-55c660fb925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221bdaf9-e90a-48b4-aab3-1929c4d60198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecebb680-8c9c-4d93-a16e-a0e0f3f6e26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cbbc61-fe98-4a12-ae3a-0712bb5bf22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.83.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d096236d-38f2-44e1-b4a2-67683cc43f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.232.3.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad3714a-882f-4a06-babc-e40dfa6de677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.165.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1257d5-6463-4569-8224-f8740607cb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.211.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22903416-6773-4fe2-bcd1-79bc0b24d3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.220.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3502579-c986-4eee-a042-b73dc260c995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.221.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3937bfbc-39e3-49bc-8526-ed6e8b053b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.106.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5304e3c3-4a66-4646-9530-1ef7c7fbd15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.118.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f2fb07-6c60-4faf-8251-b0a206bfad25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28339a2-52c5-4e34-aaa5-cb1aee2cbac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.190.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0363f6fd-eb7f-4206-b554-740de60d1d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1a4b5f-27c0-43fa-a340-94cda580ba55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.72.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d5d76c-b49f-4233-9f25-a5cfaf39297d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.153.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c84159-b7a6-427d-92ed-bd445724920c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.161.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df67eeb-809e-499b-a447-cfa514934882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.214.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32622426-47f1-4645-a9ad-20063057c6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.21.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa64354-f1d5-4c10-b6ea-a15e1d6a69cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.7.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63a5e1a-0cff-4fde-8764-8d7e86fb2906", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.106.137.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2556b676-cc32-4bca-9b73-f8c7044696a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.104.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a561602-aade-422e-8366-d22b35a712f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.106.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df946f41-a2b9-4550-80fb-8d80514745e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc73920-1ed0-45df-9440-1ed3d5dce915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad947f6-3dd9-460d-ae70-d20c192f612a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1ba36e-80be-46ea-85af-0a1c9ec2b45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce86389-2b33-4f84-86c7-81c5b278d177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54effa35-4e78-4d14-ae75-85535db0fc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2908fbc-2df8-4f6b-8980-4e6d9679ab37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de60c12-1743-44bb-97f5-749db2ee8e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c32b8e3-2930-4c04-a4d7-4d1012e10e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99d8a3d-6966-4ef2-b6ad-762967dcbabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8c4722-b24d-4c62-9b26-8c71e5735703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7a95a5-85e9-4670-9d8b-9e94f58c9ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9cbd7c-57d3-4320-a2b8-b99b68fa4a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e29d1b-62e7-4393-b784-b2432181546b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2998ac-8288-41fb-b499-457b1f2da05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.201.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707e7232-0d4c-4ed0-ae19-72033846002f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625d2671-1696-42f8-8e58-e867ab0bbb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad62752-fe2e-4d3e-9601-da596098dbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642a2f6b-2e99-476f-89b8-75fb00ecc3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42368afc-fd63-4d98-93d4-fb6f353644dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.120.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af47299c-4d16-4be4-8bb1-5ffb495ef01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.121.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cc34fe-e47a-4bda-999a-aa6b86157156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c79f8a-c4aa-4a4c-8534-7b37df7e3f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb1f8b9-00c7-4df4-9b27-c724a5b5f9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87c511c-b1a1-4dbe-8929-713f537844db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e886fa-042e-46ae-b972-303321813d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52adb30a-a2f9-46c2-865e-5efde789315f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3300810-ce1f-4ac1-939e-d5b6f0414170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3672163c-323f-41b1-9a4d-d10e088caabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef0a141-1c3d-491e-ae4c-8c8fb9e896df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ac6db5-8304-4e70-bd13-3008910dae1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b896f9ab-6315-479a-9c23-4efdcedddd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abcaf3e-c1c4-433c-8d72-7d695a702633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099a912e-a44e-411b-aa61-2d350b26f17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc1eaee-b775-458a-baf6-b4452c2a6ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac3faa9-6a83-47f6-9079-b7953720ad8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d89a317-fc42-41be-95ca-c3bec875d705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2236f8d-5801-4fb5-a053-2cecd3088c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ad73d2-be98-46fb-8eaf-a89fb6744ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b06b4d3-9523-4494-af0c-331c58e8b6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0dcb32-2f9f-495e-98a5-5486da6456df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d9135b-e109-44f3-aafc-54ae0c6d1022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e8142d-077f-4032-98e7-1b85f0b72c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c72fa42-9877-4e82-92c1-c4c9ec5f5834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676dcb1c-2279-4110-970d-16d27b5cd32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b847edf-4197-4e47-b9c8-5a7b00299e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcf8048-8ed5-47d4-8202-d8f9ed4841aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7df9169-ad3b-4909-a229-bd4f206889a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cef8a3-6411-42c2-9bda-32b2f2fc2581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07d87b7-e697-4879-bc51-ebe717b1ddb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220221db-1ef4-440c-866b-a3ed8ed0bdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8feb915d-daa9-41e1-8e2c-fd2658ec16c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a871bfec-d0a1-4612-971a-852309bb5085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b49e17-301d-49fb-8839-69d9979736b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58eaff7-636e-433a-a87f-5b5bfe152834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897ef271-ccae-4293-82b2-94a6e84e382d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6d1acb-34b1-4904-8a32-f17400d231a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74368e9b-743a-4e6f-877d-5c4a4402a800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365a909d-29a4-4807-8e58-29aa0440ea94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198f3c11-4919-4d8d-b4b9-f2fba546b16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f73c4bb-a88e-4894-b607-580e9c4e96d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d745194f-f7d1-464c-ab6b-2d373c2f4341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845d9cee-dfa2-4369-8b9d-d7b5b6395a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f4c66-b08e-4eed-bba5-c2ee0d209b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.81.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b24902-111d-47e6-8a88-4c4ba7c541ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.85.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1471ba-dfbf-443b-9182-c75c17a8a612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.124.35.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fe775d-1b90-41e1-a09c-f9bbbd396fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e66be86-fa7a-4831-b771-0051b3a6a1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfb522e-c628-49d1-9a07-ec68ec4464fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.17.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac9ab2d-4eb1-492a-ba46-a4b6e135b8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544f6e0e-2ad0-41e7-8d74-3a82948ee1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.146.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e413fea-a5c1-4db9-a024-e7cd34ece962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.150.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87440513-1aeb-46c3-a139-633e49fc0844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.25.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3555b2d5-1d17-42d8-b8da-5b94c75f9105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f829c4a9-8e2d-4fc8-b894-0f4e83598c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42027387-77e0-4171-83fa-e97317046a94", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.0.54.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d347cfc5-46c2-4a43-bdd5-0b818d6d15fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.113.22.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e698ad0-1d23-4149-9175-6398487d5edb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.114.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b594c3-2130-4a64-97b0-63ecd7da9f6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.16.177.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eb4c4e-ab85-4703-9170-b5ee2512fe10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.101.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af624b5-0b6f-43a3-a5d0-550bc983b933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67a5252-408e-4c53-aa51-e9e2ebb80689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.165.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0852c1f7-e386-4ea5-a124-844b9d47d9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.208.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c75c5aa-5b2f-49f2-ad26-3d919c1c3c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.210.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e4cd94-c108-418e-b065-6a222e83d957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.42.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f2c7be-ef32-4b85-bd91-a380992c9e1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.100.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7509ca-0db0-46eb-8360-df7132f254b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.201.32.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bace25a7-74c0-4785-9b0d-fce55cac5cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24be788-e5dc-4336-abf5-17c263bda6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bf37d4-cd6f-43fb-85b7-b2ed1b1a6e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750ed4a4-d2a5-4dc4-8bfb-14fe69a4ae36", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb54f1b9-fb1b-4052-a43f-9a9e4c09ec91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.255.6.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7a840e-b1d4-4150-a8ef-dd5df08f3d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.129.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445bbdf5-c13a-48e0-b53a-64d360da1972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.153.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f563e3-c1aa-4b90-b73a-d2a1ca346015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.2.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2311861f-63aa-4ade-803e-a4eaa767818f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.228.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78cf04c-20b9-4e26-b647-11431d4d9196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.243.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d53d950-ee1f-4b37-8b4f-4b3301a34ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.27.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f43b26b-6e3e-4fa4-850b-f7f1f2f6510d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.51.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0632d47-c6fa-4bd7-999f-b5f9f9738366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966a6b54-7ece-4207-9bd5-9f8db179aaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.66.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b761b6c4-4356-4ce5-9ba1-0a07945ad99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.9.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d26997-5b63-4232-be1b-7540a149e43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.95.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcb9341-e0f2-4bb0-9c5d-1e732e0d3650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.109.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5a3e32-5bec-4085-8c63-1670861173de", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.129.20.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d306dff-efd1-4028-8438-938a70b876b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.43.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b85ab8-a64a-4d5a-8df3-8e91a6280940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efd6207-cae8-418d-b3fd-4fa7364741da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda7e7db-8e4a-4d8d-ac3c-9c98c22fcb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4165352-2cac-47fb-8030-0c6e73443bae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.155.134.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18b41b9-5a49-4130-bc7c-525ccabf9ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08a6ae6-1ac4-4c5a-a293-d66334fce3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c27dec-298e-421a-932f-9f04b675f090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.155.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00fa307-eaaa-43d5-b270-e786149747ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695bb01a-4ec3-43f8-9051-905b1a8379b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77534040-e18a-4fbb-aefe-f95322376fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f810d028-99ed-402e-a13b-b62b48dd005f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.167.216.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f28570-329a-4436-a439-cf55cd90b2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.190.128.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b57a852-bc9b-49fd-afae-2dd72395378b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.198.30.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c41e7b6-685e-4abe-887c-587d4d94bd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa92077-6f4d-4833-97d0-a7bb534aa4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.255.113.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd934be-9004-46c4-a3b8-95a0d9865c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d6e330-f720-484b-8bd4-3975971415bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc62ee6-f094-4055-8936-d2811a49e478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.147.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3fc522-fe08-4455-b57a-0d1849d00611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc4d70a-2296-4149-8bd1-9901c24ca3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.185.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc05e12a-53cc-4970-9a7f-ea8f2ccbd8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.6.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f60d59a-868d-4e89-bbdc-130ed435b11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.104.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379bb228-d724-4443-97cd-9b52a7a63746", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.104.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19d89bb-1017-417d-837e-02976c670300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.10.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b88892-af02-4866-b395-9b8e79cff05d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dc151a-0f01-4dad-a5bd-d5f0706e58b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c669f14-0db0-4c59-9767-975e3d1f0643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcf331e-405c-4593-bf2c-584a1071d997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4bb004-df87-4fcb-93f6-4ae41925944b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2e5c74-9f11-4165-b218-58b5f5fb0d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b26a099-b5b1-44fd-8163-bba3d5f48be2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fb4fbc-9cf2-43ca-838c-19b3d3562afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e661e47e-34ec-40c7-8932-ae9855e7ea7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.95.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edecc440-ef6e-4bec-8fa8-18a6f95c4897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.152.90.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760a50e3-a2b5-42ae-9754-fc7ec3403e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.162.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349266bb-b879-457d-80bd-c1f8096833ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.96.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012c60a2-2006-4c22-afeb-1d924842c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.216.64.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cbf1a0-ac48-48c6-b479-3a9b33951896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.23.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafc17fe-dd89-4bc3-a67e-c855b684f9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.81.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddeabc5-ff27-4b35-9be1-8ade6369a0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.221.164.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ed60d7-34d3-4f58-af5b-32c40d07deda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.163.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d67be6-6dff-4e54-bc5b-a5fcd2208343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203d9a65-37f3-4ad9-84f8-3d7527880cb4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.173.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd1b4a3-84e5-4b87-a8f0-b0027f8a2c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.228.96.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7277d43c-1700-44fb-8db5-aba2c070851f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.235.99.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee519b5-4054-44c3-a056-5811f50e8b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.236.186.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e972a5ce-8454-4aa7-bff4-a5691ff5f0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.36.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66611e1-03fa-4f8e-bc3c-a655691aaf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.70.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b95532-6d8e-4528-b684-99192be22740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.38.15.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e4824c-f85a-4229-a8a5-124762e16259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.210.9.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5229e2c-5980-4231-946e-cd5e41f3fdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.213.99.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9307ab29-8759-4372-bf44-cce9d10ff88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb659a7a-d368-40d3-91c6-fedd182ba897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.83.50.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5770c70e-128a-4404-8b60-b4f904b5a03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.105.68.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332c86f1-6f69-412b-83df-b298ac2c199a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.1.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f1e450-7cdd-4f22-8a61-325c8e76d590", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9279beaf-d6d4-4c8e-9d95-ddbcb3e95e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b2a689-c4fa-4c27-a7fb-a11c38161124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.32.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b38ccd7-3695-4799-98e2-58dceeae31ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.145.202.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6017d215-276a-44a3-9dfe-0f6fce826c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.164.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136ce01b-f6a0-4669-a84f-bd47922ff97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974d7efe-280c-498f-912d-8c2c4d10eef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9c480d-002a-4042-b33e-fc97a425473e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93774e68-5396-4dc0-8f46-36a22f065711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf2b679-16a3-4bf4-9ef5-98fa54c616c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.111.152.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b94fee-ec0a-4e1c-a0e8-2ab158ac2a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f442d31-b70c-436f-adf0-69d506884b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.135.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be05211-70b9-467b-87dd-9b4bb2e3ea09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.200.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01d89d7-e46c-400c-9d11-3f36fa8b8138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76218df0-993e-43b9-bc44-8eaeb5aa40d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.225.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fb9fd8-ec57-466e-817c-110a2cd9b987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.230.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb226cc-23f9-424e-86ae-121c639d1383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.239.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547b095d-8f04-47b8-b57f-d2ee62bfda34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.33.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b121aa43-a51e-4276-90ed-1bc2fa7e210f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.60.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da755082-eeb4-40ae-b33a-24d82eab09aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.157.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0705c16e-4700-4544-95d0-92eef7752008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.193.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e207696-d876-47d9-b04d-b0a72b88a14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.105.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52173ab-1881-4d70-a8e8-e02044afc6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aae5ebf-ca5c-4f72-8db6-28cdfbfe2eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.120.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a971b55-6c30-45ff-a560-ca419bef13e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6e6ed4-aec3-4422-b702-edf6161c33bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.167.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300c95ff-d6d1-42de-add0-8edbcea5dcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.49.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d3e42f-ec78-4ffd-b1cb-122ab24b8189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.138.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc84f976-fde3-45ff-bcb2-6b67e6e42b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74b4603-701d-4d89-981f-ecee65ce39cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e44b1bf-07e7-4b66-a606-916c9054909a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c310557c-1120-4a26-8283-563b477d905b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bd39bc-2807-4ebf-9b31-cf2aea57a798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b31ea0e-b9c4-4695-b7fb-b4de18de0cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59a4456-e9b8-4785-841a-ce945173c8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fac600-38de-4d59-8b6c-d3ff1fd33e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8d8375-8f08-4fc6-b641-b12fbf078a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b429e2e4-b1f2-4cb7-a80c-d9a2b84237a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122dea73-b666-4576-b3ff-0ebf75c36bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972374a2-5741-4dc4-81e6-83060df17693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5985933f-3cd5-4664-80d1-68ac0013eb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddb3892-6830-445c-a9a1-2defa55b0c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a47053-8a2a-45bd-883e-1744165b2cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6101c2f1-e389-4503-b654-e38fa4ae5019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b323f4-50bd-491f-8c8c-9a76bd2b2a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226476cd-4658-4668-8bb2-73e25e3c8515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9242ff4c-ff4c-44a9-ab9d-0d34801499f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25c95ba-ee6b-4a04-b4c8-f58124830be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129c0dfc-7cad-4eb1-8dde-f7663e756e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736623d6-bace-4601-a9f9-05031e89a8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b945bd-bda2-42be-bf27-bb39de53be22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9539644e-fd98-44ea-8d5c-c178de969606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.217.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deb4ef9-f7a6-4c19-bb80-ed872605c8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f548a098-8aef-4380-aaf9-814bf82bb773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbbd7f3-a1e0-48ff-b7e8-f3872af8a4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.130.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94065159-caf9-4848-8d1e-1626a39ff422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4911eb6a-b556-4618-b209-fc80b37228da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.132.100.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc9ff7c-8e9a-42d2-a8d8-8fd67c06872b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.82.12.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c3c050-3566-42b4-92a8-5271cc0b399e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.225.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8171219a-6472-4112-9d6e-61b74dd22afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.125.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c009615-434b-4e30-99b2-720b381b5051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.130.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8611f185-d17d-4b22-b03a-44c7d585032b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34077ac9-98bd-4c2a-ae94-5d9c9f06d7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965648c9-479c-47fa-bbc5-9d3fe4e5a245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433b9469-491d-4d12-a581-44a617ed6f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.213.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc7c6df-3ef3-405d-8e49-e6b39f531a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.223.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341d3393-8f4f-4c3c-acb4-dd2c164f658d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d7c39c-e719-4e1e-ae8f-e9733dd5308b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f001c43-92ac-494a-8d7e-8b19292ce43d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.80.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d271ccf6-c68e-4ba0-90ec-d977ca378db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.83.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866eb4ed-6096-4883-af91-a524cabde68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.255.75.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723d15e2-159e-404d-bccd-c84696957790", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.245.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1aafa7-e2ec-48ea-9cd1-d00865c62f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe05985e-617c-4e50-886b-0a4121b3d0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76719028-79f5-429b-9b3d-ba06c0f129fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89103ed2-0e3a-476c-9499-5319d24b01ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65e6a8d-4d34-4779-9156-9906e2eb9990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.124.212.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5033562-2319-46a6-826c-a10820edce73", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c82510-fe05-4ee8-ae7a-8622b8bd3cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31f92b9-733f-45c0-915b-033393b01f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce84cf07-7347-4865-915c-a8dc19cfed3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084916f2-c0d5-4c3f-b1eb-a5d9976e99ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6760cb0f-f823-4a6e-8ce6-3ba276396c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaccbf9-8f6a-4a1e-a700-84f0eb27ed98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3defb6c1-f7b9-4f02-8d0f-c8f2967d9b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaa3f54-483c-4eca-9a16-cf575bacdae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450bddc6-edcf-46db-86ad-25d7606d74de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60ea48e-ed37-4924-b6cf-8b917f429109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb12590e-87f1-4ddc-a3e5-fa3b98a68b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c59c7ab-6d02-48e0-9516-b7fdf2f754eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048e5d2f-bf0c-40a9-9e7c-1928de4dad11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c57daaf-10a0-444e-a780-0ecffe6f94b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f695c806-15a2-48bd-bc45-5f328e641f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb23a440-7fc4-4154-bb1c-5e246b29fce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c60c356-bd91-4f43-8544-496e97cab473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eaeb69-573f-4270-b233-d64b6d19c5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b124c75d-3705-47dc-ac29-def523ba15e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ba4bc7-da79-4059-8416-7c0ded3ded46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e90d75d-2639-49df-82fc-88cb8558265e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827ea009-12ce-4106-a7df-db279c9b3fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bec7d8d-aed8-436b-a4a3-5cb8c8379393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f724c73f-62d8-4809-ac22-735d5ba1969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a96b62-62a2-4361-b4d6-18bcb32b16d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c863b9-918e-49d2-b54d-b07960645814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98dc4d2-cd04-44b4-8fe0-080781af7e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98527cd5-6d75-496e-afd0-fac7c6322b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba3f496-1704-453f-be46-50768d8842b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1570295-7aea-4502-aa03-94a5fe796675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da49ff6-4eae-4167-8907-c0fc393cf87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55b9623-db7a-48b6-a725-183f5195c187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d0c595-1209-4809-a9c8-48cebaf4024d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e5dded-c4ea-48f1-87ba-a03dc2053962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a492b28-43e1-4946-aa1e-97258e0e09fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629b12c-32c0-4079-b8e1-06311cd96b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6735f8e-7c88-4b84-9538-c2f7820b313e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463f1561-ddaf-4613-9ded-bed1c15ab106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f8cd77-24ac-43f5-939f-6365d599a162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a23c8a-ce98-424b-a062-04bad5f456ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f3cfa3-8fce-476f-bb5f-505f7b455e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee6ebb9-34df-45ab-96d1-0e6819169223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581a4851-3b7b-4d7e-9b4b-087d8dba1719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0dc03a9-1bf0-41fc-84d4-e50c3436826a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cfd136-d321-4f08-aa83-ee980ac500d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307ea9cd-d6f1-4d62-849f-9666781e7c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6eeccc-c240-4901-b288-324f9facc4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c720749d-f403-40ac-b6c5-c887328370d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1901c6d6-c6d0-49ed-ae2f-8001aa160425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6335bcf-5be4-4066-a294-ba72d3ae469d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703c9beb-1720-4777-8332-79ec324aa200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79378778-5189-4e97-b762-98ab9d6bb51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a598de-8b47-474a-8869-2b4d5bbdeee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6317c15-8911-4d7c-98cd-3171bcc3a648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61e9570-5b1c-49f5-99dd-5190581c71de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97db0a7f-d16b-4df3-96e6-a1f40de32bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7067dd1d-0a92-4aa4-a433-4390e0a6c82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19827901-a7a4-41f9-b847-17153a0f0590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b18f13-ec51-4720-b5ea-8252cced0fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240643e-4cc4-41b4-aa07-8a26d266bb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cb5842-8501-42bc-b27e-3c2dc16ee02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5baab8-a1bb-474b-82d0-3f252bc57878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eae9e07-db98-4509-b8b0-07375241132d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803d8c60-9195-4b58-b54f-fc694573eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8065eae2-07eb-41a7-bb91-be3bad9da979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5e35fc-b3ef-4011-89ad-d7ff5cccb1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f39644-0019-4e45-bdf8-372b0baa9e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82f0c4c-45fb-4f6c-85d4-d7018e703465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ad10f4-2d18-4445-82d6-058a856323c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671f9c3e-5f2b-41a7-9769-a42c8b25ede9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534d5f5b-a0ca-4291-9071-fd0123ef2c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3d2c94-aa30-4e8f-acd8-876bb8482dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29878daa-b010-4f0e-8e46-79dcf22fefab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacc04aa-36ac-4951-873a-892efaac2a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44b5616-de51-437f-90e2-b2ec789bee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffba104-7364-4805-be61-ce0b038510d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874cb0a-0881-4633-bb76-943dbb657367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0110fdb9-b989-404e-890a-349a593dcd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4fe5d9-1211-4ac2-90bb-dcd6349e79c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8dd884e-08b1-40aa-9107-1120f500437c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80966436-0d27-43f4-a8d8-157c4d4e4d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bccd1fd-491c-4b97-94f0-a51245e5c2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eae6bc-bd06-41f0-a7f7-2b02d939b661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ddd82c-1362-437b-ae9d-364dbca8761e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b654c6c-2c4e-46a7-af19-ac389f7c0eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435539ec-c3a2-4ab8-8f5a-e62946868114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143c57a9-ccb1-4ea5-b8e5-102051a861a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767d1c4b-1505-4ee2-a42a-76bf97f22a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df62aedb-b05c-49eb-8052-62ba44c59722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9271dd8-0257-4f55-b3c7-9f0b53860514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5694afce-91ea-48bb-8cbc-158dfe1b3196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1805bffa-eae5-4e85-8128-421cc940916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fca9b7f-f244-45a6-a815-5c3e9893e4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c53ec72-13f0-4eaa-ba6e-17ca84da7b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9edf0e1-ea17-4dd6-afae-6b24aef66dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2660cf-449f-4d6a-b6e7-5a00db632a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0540e96-1a1c-49b1-8478-1d6d04360bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd8aa89-c8a8-4f90-a034-d2b9ff395d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcad8625-1967-4c97-87d1-c86d0068d9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b39cb0-4d3a-4850-a935-e0e5aad626ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef85a7e-64b3-4b21-a4e7-93bcd6a2afdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c100f4-5a54-4e35-8c81-1f41700061b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad135ffe-b9cc-43dc-bec5-35e674329568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4783c8-14e0-4521-8aa3-6b37e0c5189a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e237bbb1-5397-4b23-b367-922c5d618ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3657ad-6275-488a-8608-946cc88a0649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f37286-0eb1-420b-9ee0-55448961d0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d95dc8c-9c74-47d5-bc62-6b4056cde603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b624e350-9fb7-4ba8-9bdf-b4941ec1ab87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c263c0a0-fb45-40e3-937c-da55056d4c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9388fe9-ce22-4ae5-b104-59b21bc4aece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d216395-5cd6-48c5-aa4f-29bc8ec057a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f737e5a3-238d-45e9-8803-ecabdaec7e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46936518-27e0-4b3d-8316-5d4b7e58b390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579f3010-e2de-4b14-b493-1b55011cd78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701b1f62-e9a1-453d-a883-6068b19d32ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e048fb6-da3e-4111-8d0b-b8ec2d24065e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6315028f-6f01-40be-a101-c5baddcb497a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27df043-5de8-4574-8658-b3d51316591c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e64c3b0-122c-40d9-ac2a-34b6e783727c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae5ee6d-d11f-4285-8f4a-c814ae65d52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3424b0c9-d665-423f-9f11-6e039f54d72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1a1cbf-39dc-4810-b21a-840ed32d2843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1893175b-6612-4147-a8df-c2f89f44cc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd4a7fd-8614-47b4-b6c5-308fbfe0569a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776baa31-fa33-4d60-b48a-b102f99273d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96237be-937a-475e-9d3e-5f88d936c656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f41b1e-cdf5-4e9a-9f0b-18822c0eb479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd39217-b900-4282-bfe6-a18e7df93f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d636c26c-8f31-482c-a36a-71eb151b1d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ed0c42-4dce-44c2-bed7-17f45ce2299b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35f0088-e714-42ee-b898-27ce05bf7a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c0e686-c17c-4bbf-b56a-d7338c51d06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fad43e-a825-4173-98fa-7b8e0405083f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce41ce8c-d737-4e30-a320-4805c6bb2d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa3211c-4bae-4fab-af08-7f97d61490a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cdd292-8497-40f3-9cc5-b61844e162e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148b38d4-c202-4729-a1d6-665b4cc32e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdcd4be-fe88-43ac-a2da-e6b51d0444d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2768e86e-a7b8-4598-bc1a-3c2f1c2ba213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c1670f-ed33-450e-91d6-69e5f4968363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11da20d1-28fb-43d0-b335-96ce986cf4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bbab0a-550c-4fd1-ba26-a52123b18fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89968048-5c14-4510-805e-f2781317ece0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4910c057-adc9-4c18-a99f-586566ce4b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b92e9e-a42b-48e1-bb21-913b49912d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825e8320-5238-4e76-b43e-458bc421f09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240edf22-74e1-456b-9504-0e82058861b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7014850-fa78-4956-9fef-69f214108134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc69f6c-1a57-48ce-8927-ae8dc18535d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d3dfcf-5acb-41fc-ad0f-aa2eb404a88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd06a6a2-f928-4b6b-b329-5661a3e17d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5646dbf7-f3a5-46c5-b356-fb3078cc1d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f752da-c5f8-4f02-ae64-3e46d01a80ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5661cdf-b959-4039-987b-f2eab15e507d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe669b1-96c3-410f-a368-edd627e85961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1d18c2-4502-45f2-ab93-f6683e9b0c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6c3e03-9a45-4eff-b6cf-30da4513dea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99a1058-d5b4-4b3d-9ea4-588c7de7da70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fe6f71-de08-47b5-9d85-31f94432d148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d28329-298b-43d7-8c12-78555899b178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c09a3fa-67be-411c-8fa0-5266d4bcf18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed13e5d4-3dfa-4f75-be5a-12b1b2347cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef40c361-50ee-461e-8e40-2e7db3ff546d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035a9c6e-3a49-4f4f-b2f3-32b7c9de818e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9487cdfd-08b6-4676-8a14-a10acae9f4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a36f85b-e75b-42b0-8684-dd60ad32363d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386b2c22-d3df-405d-8695-351fc75defee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693f461c-cec4-4c7c-92e8-3361e1ef0473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ba7e73-8dd6-4d64-8500-f87a9ef53927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202a465d-d983-448b-b199-835d19aa3c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba9a9d8-075f-445c-b570-c141c0061569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc9a972-3788-4c3c-8ba7-582b073b27d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66f2155-6e6a-4dfb-99e2-1610faacd561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7c49e8-2c7d-4ee5-942c-280692c3858d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdf1fc8-4d90-4ff8-ae4e-8b1dbfe8adfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50ceaff-5e83-4ea3-b181-38c01a1f37b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62873d12-39d0-4f83-95d2-e1dfa395ba4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a411bb-f985-40cc-adfc-2e1983607f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aafec8-ca88-43fe-a87f-e9f76c8b0aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c12af3e-d912-4d34-9de2-dd4ddbb12ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87b4a0b-acca-410f-8ded-5aa737001014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cd986a-1376-47a9-a997-69abec1cbdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a271399d-e0d2-4c66-96ef-288410c23ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f4d150-94ac-46b6-ba38-21ddbf44e0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e04651-9b51-4b57-95dd-13081210fe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214cebc1-1937-4835-8bcb-227c860da4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcc306e-07d3-40e3-ab60-abcf208343cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf9c4af-a69b-41db-8e12-0721ff542979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b267f44-4f26-4e78-8900-41aa75c6915d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116fa84d-5a5b-4338-8f04-9d9b42aa894d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dde4bb4-6b1e-4906-b5c7-740c64cd08ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302234e7-f5fc-41c8-8f41-59bf8f60c349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a8fb98-4c4a-4ae9-8fb6-c11bf1bf2f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd8d8b7-ba75-4004-a937-e17697f461df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb74431c-c0b7-4f84-8b3f-4ffa2db02705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c713558-6b23-4c6b-9aaf-15afe45c5bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc36de08-c0cf-4fb6-b326-1731a494d73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1ac197-09e0-4222-b68a-8377b2f13294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ad225c-740b-496a-9371-49e106b6ecff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b894d16b-0854-410b-9634-4d0e8ae1b26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47fa6a5-64b1-4477-9ae9-5446d33be00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fcc951-b1a5-4a97-b740-e12521e07041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b9bdd0-2005-419d-b49d-247b09c04aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91db0b46-6793-4db7-8bb0-81a0805c2d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24637d4-0fa0-4390-b7b6-d3e33f28120f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f5063c-1ce3-44de-b608-159f3fec79a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b75ee86-77bc-437a-9894-fcc9ab610078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bc38d8-f44a-4c62-b86f-e9dfed59bcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4062f2-da0c-4efe-a238-06258d8253c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28baca24-9ee6-4db9-a964-f3ae5084eee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c5947a-69d6-4bff-a05b-f7bdffc36abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68558da-ad80-46c8-a091-3724475beb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d375cd-f950-4208-9365-995bac557d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce76211-408b-4d13-8c50-9972fc8e09d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec4403f-5ffb-47b1-b9f9-0291809cd033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe2167d-2fdf-42dc-9861-5d2471dcce3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c35fae0-1f8d-47c4-9ce5-1e8771aa332b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97646d94-1f6a-4395-a0c4-e753d624a1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fe6d9a-09d4-4ba7-a9b7-1143a25c6e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd67ae4a-dd26-431e-a55a-2b9d30e70b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e24312-f6b5-4f7e-a3fe-1134f4dff822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cba8d1c-f9aa-409b-a5f6-bc06d2c04dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2513e23d-fc0f-48c1-9de6-1b95f9e00ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1e5729-b27e-47f5-9d1f-1c9e3e54896f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803fa9a6-1522-4f64-9134-f51132765e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c76135-28c3-4f2d-b208-c104e8066e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2ae877-cf11-4bff-835d-cfe1e244538a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb67f6c-4549-4f6b-990d-d8f76583695c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9319fc-7289-4df4-ac12-1739605fe921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d907928c-395e-41be-8930-183f95655691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad09b8b6-3b3f-4358-b5ea-bc3994ace139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbfd69c-fe28-4ec5-a3ad-20532fc24649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85937930-fc08-4046-b505-3353b059fd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c6f279-3065-46d3-9901-d5ea58c01b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467d4893-493f-4196-8055-592a3965ccbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16bfa22-afdb-471a-8eca-43afbc8d6185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abddb3bc-7993-448b-abb4-c72da7c45f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88da9c71-b36b-420e-800b-529080a8edca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45648d06-ed36-4cc3-ba2c-ced74993273d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472d4498-52ca-474f-87d8-7d299a54a677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e74291e-a819-4df8-a2a8-85c32fa7ae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7515028e-2815-4b91-9f9c-042e276ae610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b7f7a8-00de-4ca3-b9b4-1de9f7b04bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb81b32-5215-439c-bd3c-4f561165718a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaab657-d7b1-4b3d-a168-f9e631095095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd24b6a-5c81-44a1-867f-b4da346f6ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22161394-230a-473b-b103-360c49aba90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15caac64-01ca-4c24-b8e1-7cea5bf837ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99621612-18c5-475b-b865-f63f7bca11e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d94418d-52c7-4aeb-8097-a9bb26cb8474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a37a4d-e009-4192-a9a8-fca44371f340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cbea52-620b-4332-8600-6c8cd4b0aa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6bc3e4-865b-4519-8c77-bb2dd4228b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95412f23-bc5c-447d-95d1-0c32f7d509a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bd7cbe-f083-4d8b-8486-a14b7eef82fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d59612-d701-41b9-9068-f557dc2423ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa1e56c-d629-438e-812f-412d6f5904b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97d414f-2061-4f56-9c32-173c69c210ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c2cdd0-e56b-4a4e-8965-3966a416199e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa0f932-3b19-4ac0-8170-db30d058659c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0234fdd3-d18e-46c7-87ad-92f3ffbf2801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9c98a7-abb6-41bc-ae62-337d2b2bc25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8372b487-d22a-47a6-86fe-6f300c60b3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d5cf17-8800-42c3-ae0c-a1e8fca60c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5e186c-de8d-4d58-b396-4034d1d5e49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e125dfbe-9cf4-4051-8bb5-40ec127b4a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7185b380-77e0-4ddc-98f4-df425a9eae79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c989ad5-2fd7-43a3-bd83-edd070b0724b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463404c6-3c40-42bc-a87e-1d9ae0706930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1536d711-c430-4cc3-8f8c-6b1d4b4da0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a848a25-d9e0-47e2-bf57-540c5e825e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12772baf-8ee9-4fee-a00f-e1c9c87cc312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e2fa91-75af-4491-bcde-144bdf2194ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461c7ad0-86df-4b01-b809-3395f43d5f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dae71b-ef6a-42fd-8322-4325ceb51d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c7b814-b952-4df4-90e8-79a80f8334be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f5a67c-657c-4e00-b19b-50d4f09e95a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.197.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ffd8cd-4275-4349-a1e5-2525e444c7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e51005b-7f4c-4814-a964-ace2bb1f75d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e27956c-6b11-467b-acc8-1283aef04142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.50.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39275223-8d55-46d0-aacc-4f5c6dc59f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.60.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c922de66-f272-4db6-ac0f-7b3ecfda550b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.103.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6faaa1-e45b-4757-99d5-33a4c11251fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.78.161.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12c1d75-20f3-4366-883f-a8b1fded3f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.196.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5db2499-5852-4686-9bd8-b4bdb68920d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.196.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbdb1dc-d0ac-41e6-b3ab-4d66e7f01dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.196.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fe2851-95ce-40e8-bbfd-1f187f62e2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.197.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ab884d-1945-4cd9-98a5-dbb6903cffa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.197.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cccdd0-d05d-408a-a4f4-f61670767b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.197.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622d479f-b7ea-4ea9-8d3f-f65898355141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.197.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c80a20d-0dbd-4001-8e65-01e753cf5ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.197.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ba86cf-8654-4872-b46f-f795db0de6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.198.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1acf7e-958a-4811-a336-cb240706c7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.198.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6e06d1-9e98-4156-b89e-3d4f7ba093e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.199.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0590431e-068e-41c1-929c-a514e71e7aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.199.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc4b525-a9dd-4850-a7e4-4a996563b984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.199.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b44c84-6795-4ab4-937b-c31cad92d7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.199.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d1f5d3-ca17-4a3e-8123-d5339d385748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.199.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b01ef2-49cb-4c7f-b2b3-c1d99df11ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.199.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81426c40-0011-4826-be3d-b971b66bf943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.137.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12b1f84-2301-4558-b412-ba29961ac100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0dd90e-4914-4467-919e-b99a7cbf4318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084ee3af-1081-4b87-9ee2-77777eb1f097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f8a0e1-b483-4178-84d3-bbf9c44acabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.24.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3a522f-6a0f-47c7-bc6f-ad894acb0094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103c55cd-573f-4d94-b93f-edbb788715ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58957a92-fe9f-43b9-b372-ce47b0336f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209fc173-5bff-4847-ab26-3cead53adae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a67a79f-7b01-4e56-8db7-01777d2c769a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04f237b-84ff-46d0-935d-1e0edeaf5c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.142.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0ea810-4efa-4374-af7a-d0d5383402ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.76.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890d803e-03e7-45ec-ae29-11bcdaeb30a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.111.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7b5c88-6f97-4ae1-af7c-34be2819d201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.248.61.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a64b84-3b5d-4fb5-b2cb-78e66aebd73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.22.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ee428f-24e0-4507-a8c9-09048eaf1891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.80.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb087eeb-a488-4cf1-b066-5e7002ab8e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.129.34.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97209084-0c8d-45af-8035-392498172a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bac039-ae42-46de-aa2d-51104da536c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.234.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ad28a6-374a-4239-8f0a-d69b011ffcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeae88d0-50f4-45e5-acc9-ffbe3f287dc3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b22631d-8d38-4566-837f-825f6a824187", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3215a123-7e73-4e03-b7f9-e34802ab4629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66aa3ea-e7c1-405a-b4ba-1a579b60b9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.169.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51243f6a-0a74-47c1-8836-b58ecd0a28bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.228.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459c7782-35cd-4617-be95-397f4c761fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed659349-7253-4a04-8a89-db3765e9bef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8953a449-5965-448d-a6e5-92196adff195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b7b2c2-027e-4927-8694-64423cc68dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36456677-79b8-47de-9997-a340bf65005f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407ee12a-2fb7-4ea1-8080-c3bdcf734336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e900ad43-bd50-4480-8388-bdfe8f124333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09fa8e2-a5cd-4018-8e76-8f42589eeba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fee9c3-88bc-4593-b286-fdc50efc8f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb52f1b-bf95-4527-a3c5-72a096e2af88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07385547-e0ef-4156-9168-1a87368fb031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76426e7-8a18-48c2-b7e3-bf43c8e24eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c94b94-8472-4c3c-b3d8-b64c487b7fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8d03e3-6f19-4968-99c0-bcd2d251c52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b651a3c-4f3b-4bfc-9e4d-5cfefdbab104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77a8db7-44bb-4271-b57a-c8967503abc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6f58e8-f229-4058-9a65-eda50ffc0a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd19479b-1d27-4708-8c76-1881256e4275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e95f02-9e8c-4547-bce2-7facb456a2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d261c09-6b93-49b0-bdb3-2ba7563a2fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac41b231-617c-48d6-96f9-b4c62071d1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31156411-8d3f-44a7-8cdb-05626cc1e845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae0db56-2f50-471e-9566-8b96868c5ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d14510c-3577-4f3f-854e-b1c129af86ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee51f803-6053-4826-9ad8-ec807ed534c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16673c3-8542-43a3-bd08-c58855b03961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6abf33-58d4-489f-b532-fb5bf6161d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0602ae5e-7aab-4f02-8e39-bde1d563d672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595d502d-f050-4f6b-b04b-7c8358764c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b5cceb-d30e-4cf0-84e0-5625d7b44228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8798315-69fb-4d87-9e9b-78cc1c1078a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831e15aa-ce54-46d6-8d6f-4154b8462c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefbfa63-8be4-4f69-8be4-4e45d817e238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9a991c-ec36-4686-910f-4e8dddd38ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd8fb81-2b55-46f7-8451-f962b0254942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303aef7d-a107-410d-9742-66dcc6a54dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bef8f46-7463-4a58-9ab4-9dd008e24e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd3c051-e5ca-468e-b54a-4172ef7855ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b923c6bb-e0d8-4c11-bfc1-690ec5fdca39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11685a9-35df-4998-a782-3943dcec428d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c116de24-cc76-4fc9-aee0-1a8d84ffc097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc2ff18-feae-4969-9689-3c965e7ccc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14df0cec-3927-48c1-b55b-594a2beaf498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f29457e-8fe2-47a6-b02b-aac07127d7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf9cc07-a798-4393-949d-d2a81f37de27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9901293-b39e-423e-9f7a-c79387c353d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a471c0f2-cd72-422b-b2c4-705939bbfa92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc928fb4-14c5-4028-928c-8e2d0d5f57c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390ada13-a491-4df4-99ad-855cf0b9dec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a40833-2e91-451e-8b58-50e097f6e062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffb7e5b-481b-4ce3-a39b-e58ca269064d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d49b85-1af4-416a-80cf-e475a49614f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3c9138-5490-43f9-9b4d-f4c9bd1a2380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2c6eda-779a-45dd-94a3-a21216fc45ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7b08cf-0689-4377-9170-fd29ec81d3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b865cf-1a3f-4a0f-b2c3-816f095b2f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8638cbe-712d-446e-a785-b88f59ab95e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d987a62-a5d5-49d2-94a9-aad1ed475006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d27a4c-aa06-453d-b9b9-ef995b7e0151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5f1475-da69-442a-847d-10d11c2dd02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29071124-b313-4657-af64-b0f20078c3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e07750-533d-4444-84b7-dc0542b84b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa0827f-e5ac-46f1-ae68-e630ca77b987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f7aa75-488a-447f-9346-de11799a88ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1533e392-0135-4306-8b25-d8bb5b450f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e212ed71-0e7e-4fb1-91a4-2d587799af4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.214.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55e6858-f746-4284-95ee-2f5462fc5732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.51.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ba7927-9a09-443d-b5ce-3d8d26c57330", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb4f2f2-98f1-4f87-8056-54c233609e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.150.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095c3181-2d6d-482b-a291-2a7882789701", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.40.78.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb23775-9b98-43f8-980e-620be82ed97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.77.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c64a97-e0a1-4ebc-b1d8-41a238bd757e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.160.194.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aab19d2-5cc8-4aa8-8e4e-e9fb9d3046da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83ffd2f-155e-4d63-ba69-cb1ceab7ca87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c960b930-9b46-4649-af67-d37bac4123d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea490c4-c994-4336-9397-d37908beeafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b118b78d-efce-42e1-8958-c7859d1fea43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bc913b-7100-44bf-84c5-2802b9aa341c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38454ab-641f-40f9-b47d-3a5779103708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d1b1c7-458c-40a9-bc0c-34293890a460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d7c48e-9306-4f41-9dc0-27bf4abe9add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a881f86-b2bd-4d03-99c7-e55645948d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b262958e-badb-4cfd-8af2-684df47e7bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bec9adf-81b4-4937-abb6-9d917352ba42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73f9034-36c0-416e-bbcb-30d9db116107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e1b625-37e2-4c47-9f20-69d775aeccae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c534637-1d8d-46b5-ad4a-34bad08c5317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3a7930-a7bc-499b-92b2-4fe5cce71613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b392d2-39c8-4961-bec5-9c46888fb220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b629ea-db00-4bb8-90f1-2be73e8d9187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26274883-f24e-4405-8ac4-5150cd8975eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee22f983-8621-4cd0-8949-a05b4cb057c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ae6537-773d-43ea-a962-d16fe6eb5b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27f5b85-a671-4770-b756-301ce6aa260a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf66531-e88c-4804-ad65-0fba9d459bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec5fd0c-2636-447b-bf8c-9a7f9793c8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6a4d56-d776-465a-ab9c-75c4613a3fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd97480-c025-49d9-92bd-603679437cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2b59a1-71f7-46b5-95c5-66ae54d29016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ad5d25-b864-4fe8-bb08-86bbf64ba05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a98b6e-f848-4d34-9aed-393aebba33cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb77664-167f-464f-9824-c416935beb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2004f50c-cb80-462e-81ed-d799d5f6c916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7724b4f9-3d99-441a-988e-d295e0e9d714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378c0d6e-13fc-4ca2-9288-bfe055feed68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.145.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d393a8-18ad-4863-a716-33fe0203ec66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03b4695-5649-4af2-8e40-4814c1341d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85d8e4d-18a6-4e4c-b9b4-479989d88bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497893c6-92a6-47a5-954a-8c03b518864d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f742fd9e-9f38-47cb-a7f6-c2c33504bd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffb5cfd-6085-4622-8fa8-c6dffe03c894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe91002-2847-4965-a5f9-f74bdb52ce42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2f6538-602c-4aa8-a64b-44caccdd1082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cbc1d2-5a74-4329-88c8-84ac1d8ddcd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d350b3b5-8e1f-485e-9c37-3051e4582b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049831c7-c1bf-4c17-aca4-7ad6a9c5e9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9818d0a4-ffa1-4644-85b8-33351b6692c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daa716e-e360-42ce-acfb-6198981cd19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7eb011-063c-4ab9-86f4-667b42720497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f3eb34-3a09-454d-9217-dc0bc16d33a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab2a698-f374-4816-858e-61cc7a66ce3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9989a9-a563-4a74-a4f6-0c8a9de41966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af84c44-a258-45cf-b5a2-7369d8b842bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef8687d-b589-4a63-bfe1-1113a942349c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d662598-92e0-41dd-9638-4e912c179e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9122337e-4dc9-49ab-8e9b-848d6d078e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8d9a0a-d452-4bff-8fa2-b476ff58a485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7042ee-6930-42fc-ab62-561a76a7175a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2264fc30-868c-44ec-8a20-90ea3776cce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7844a0-aca1-445b-a89d-cf83a755554a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0b87af-4627-4267-9abc-61707d1ea67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257118dc-88b8-46fb-9e9f-6cfaa555fc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0ffe54-49d9-436d-a816-7941dc6f2aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deedbdf4-a600-4d44-a7d9-75e2af0297c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4477ff1-1cc7-42bf-aa57-df8798bb5b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a24995-dee2-4ddc-9622-f215e6986e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b803429c-e8ee-448d-af22-081e3a666384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08db2b3f-f749-47c1-94d0-033d77f14cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2888a918-71f5-4d1a-a895-6f3964e769ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591afe7e-7e53-4a95-8322-2814476325d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc363a6-3ccd-4192-9a98-a7efcb9a8054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d871e12c-900d-4654-8797-8b1e2bfe7534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a21421d-ccb0-4a72-acb8-c7c0411c5b66", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deb72e7-50f1-44d1-ba2c-0d58fe0e8d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7921e3-f629-4c56-a4ce-c36e54ced639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccad205a-a3f5-4920-91e1-370889f0fd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43800ffa-4842-41f3-9adc-7f32fbac83c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b094b4-21bd-4e5d-a8d8-ef92bcda395c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16f0195-617b-4193-8a82-9e6ba36612db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f8c5d1-091d-4907-8ac9-3c4cfecc12ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b91b98-18fa-42e4-b8f3-62ee6654ea54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa544e4-c522-4554-b773-699284c5ecb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549cbb14-7f48-4f7e-917c-1a16da606d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2581f62-c0c7-4571-8a02-7e5b24ccc258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd23450-7fad-4519-ba27-05385ac6534a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb863dd-2b93-4586-a633-a266adbaeee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d81e30-ea65-4ccf-b7b3-39d17338e6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1667fead-f35b-4d62-b730-911b77ab409d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1526e371-99ec-4e54-8104-2f2209a27133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0792ee5-1ea7-4098-ac91-234f9d0d4e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21084bc1-f17a-4aaf-95cc-fadeceec2e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07259e8f-6b6c-4a17-943e-a6cbcac9704f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd428ce-3724-4e6d-a3a5-b20dc9283584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e49e03b-252d-4803-8a16-40556e0d0e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32c94df-26ae-4a4e-b7d1-a5d20344d315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a1c8fc-d698-4a47-ace9-b5e55ca4e6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b465cc5a-2fb9-401f-93c5-93d5dc106558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba1ff92-c8b9-4f6c-bb27-2463f880e1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dabd54-6345-4faa-89dd-a23ec2b73bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2425d424-5c95-473c-adb3-ed6cf3ac6eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f274565d-4afa-4c01-8bb1-96eb30f66ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309542d5-8368-437d-9823-42cfa59c55db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e5a0c2-3edf-4629-a363-0579f3ace260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c0d9d7-b1ea-433f-bff1-665f2b18a438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80109195-85ca-40f0-b4f2-8fee08a147ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc3da22-4b71-4827-9649-c909fe0382bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d567449-534d-437f-817c-23b3decfe96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffa37ba-03bc-4fe5-8ad7-83cd8edf5092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce59620-16e4-452f-ab14-80b1c6602531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800ce1ec-9d73-4a67-b193-02217edd35b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7baa54-a4c4-4d9a-9694-0bbb30bae91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b952a1-c9d5-46a4-9e64-619432e98a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4379c14-70c4-4436-ba1b-fdc80a069603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63561a13-4377-4a8a-9868-af45b161e84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3a2edf-b2b4-481c-a951-b0c4f78e5c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0fe063-645f-4fa4-8ba0-b3f18402f68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ba6499-c813-43a4-96ee-2666681b0089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cde630-3bfc-47de-bd7d-5f4c67432f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6b408e-ab27-4e6f-9292-5fb7cb81cb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6787025d-5a26-45cb-9e07-7acdf2bab3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4517887-b7ea-4c72-a777-6809177027b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ef8723-d139-4d05-bf3e-959534f7d82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a2ab96-9f0b-402e-827c-189ee2a5e21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95efda2c-3ce9-4260-be86-a56a05fea643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8042ab44-60c5-4abc-a51a-5ed3044351f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d525e93a-4d52-4827-b44c-51ebcbdd1d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d03f842-4b2f-4f0c-a542-ad5fb5e78a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf664ca-8a37-4e13-bdd4-32ab56830004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecacd2e2-103a-4dc6-ba13-ca2135064009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673466d7-962c-456f-8336-5cfab2fd9038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7201129-d00a-4ec2-966a-35db58f773cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b58af9-ec93-4a3e-a748-85b27fed88e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4505c347-705c-4a9e-b114-6a5b1f3e49fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9f77ed-5a1c-4a7f-96ed-6ee84de7e9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d2e0e0-556d-4a04-be90-f948e5e48e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fb028e-1018-4fce-9871-586eb2284be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3481b7ec-8896-411f-b6ec-438411ee2655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78224973-5c43-444f-aa20-5493f3e873b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6ede63-0d17-4db0-b59d-088a04b474e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764401be-454a-4c92-b292-b7ec601b04b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7f35b4-61d4-4078-b008-e011f99d1fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c4ad7f-4c1d-45f6-b10a-bacb330e66cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c027052a-6015-4ce1-bcaa-ebb5a55ea623", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbca9a0d-7b9a-470f-9176-6a2248c11607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bf0977-bf17-4524-8b77-8eafd8f2887c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa87ceb-d42e-41bb-93cf-aea8b80d655e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34ba8cd-ecff-4825-b880-6309ce2218d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faca4bdd-4645-42bb-8a17-36c3bdcf0533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a964e0e-2e3f-402e-898d-ab17f1883094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f85666e-cacf-4a1a-84c6-1811458f45e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2651248-32e2-4f59-b8ec-22e9f88d6c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d736319f-cee4-49e9-b4f9-1e20b7b2b516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbccefd-b05f-45ac-a53c-0c618a64ea1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bf75d7-d79b-4688-80f8-3db04e45b1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b2487b-f778-4d88-8afa-7f0ce99ce81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf3043a-66c4-456b-adb7-922bb279d632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb411c11-d5bf-4585-a384-e8dfa6046718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deedcbe-b627-4a91-a135-c55fe218dbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4492b7f6-1d9b-4ea4-a842-4f8fb364cae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8289b825-5673-4a53-ab81-926e539ebf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee3dc75-bdae-4686-8aa3-49c1427dff17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfd0891-c42c-42e5-b0b3-6e3a9df157e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd099ff3-6b3d-49ed-8dff-11388ce1b375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f627fa-f94d-4177-a8e5-f3954699a0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9744bf-4b2d-4199-80c5-d4662c80947a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24ec6ae-5766-4132-b7f9-5863a44f13fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ab1951-571e-46d9-ab4d-ad2eef60a0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398d77c0-a412-4f59-9152-92886c64ff9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40d7d6b-abcd-4644-a9ea-4a1ef95f1fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9a2bda-4594-445e-a16f-6d3fc4d974ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8471760f-cf81-4a34-8035-6213d48370f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63288332-117a-4635-8881-53e6062a0e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee76782e-e2d8-4b0b-93d4-76275d8e9516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c8be44-3b93-46df-9cea-6bc15331cedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbd0b2a-5d3c-4f07-91ae-585425a69d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa0af6e-afec-4ce3-8485-45d51c1b43d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ea7b05-8e6c-472d-85e8-9143e9680f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dcc444-d709-47a8-a5a7-d1f03a328fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f48818-2db9-449e-a864-60691d73d9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6af3fe-49f4-4766-8e25-bf35ae625f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e90e40-8fa4-4aae-abca-55bf10454e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ed349d-e837-43c3-b644-d59aaff62338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f7f2c7-9fe8-45ac-9d9b-d4db15098279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ed6118-29fb-4d20-b8f1-f63da183e418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c7e7d2-641e-48ac-826a-5cd01358ae9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46080e61-b23d-4f2c-a956-da9c6fc5461a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.140.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480e1760-f604-4296-b78e-55fb4a40eb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2f532b-5dfb-4259-be68-7d267ddfc149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8488bca6-aa15-447e-93ac-3562f9f44113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.248.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e15b48-38d9-45d3-91a6-9fe9b0450f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.254.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736ac0bd-607d-4d34-99d3-5b1d6dcf0e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9e88b8-04a4-428d-a674-d20098242311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.126.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23ee024-0c00-4685-b8dd-6de38d05a395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6e523d-fbef-4206-9dcb-9f3e8e3859af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.33.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f32e7f-a155-48a7-afcc-b95a931f95c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.33.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e22037-756c-4cda-af6e-117e10f89402", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.40.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea32aa9-90e2-4998-9198-8f7de7389dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.126.185.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1837fac-0486-491e-8fd2-5e6376171783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.66.195.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5517d3da-5b28-4fbb-9090-8797369ab973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.251.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00df600b-04a4-4505-978b-468880a9e626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.10.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f33fb1-c15b-43ee-ba64-f34de240e443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.10.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8511f939-25cc-42ef-a1b7-408980c6a609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.11.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984a4b5c-a4a4-4ac1-8af8-1cf27c5ea686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.11.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35cdb67-98cc-4c30-9528-e846224b5d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.11.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec724c7-0e2d-4b9f-935c-53628e105361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.12.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75de5506-33c0-4f11-9c63-1c43d33ac180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.12.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206d17b5-37b5-460a-9887-6be87d85d920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.12.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b867f4dd-a8a0-4190-b5d3-3cb9c0a67404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.12.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aacf2b-283b-445f-a387-ab335cc43b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.12.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3812bf36-c55f-4a1c-bf5e-d25fbcecc13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93602b8-7bd0-47d5-af05-3584c769211a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb64c2f8-e43f-4855-b105-0ff6d6010239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d5421a-4fe3-45fd-8088-546e023f7c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c37af2-3012-41de-84d2-a7787ef20140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ced47e-0d18-404e-949e-72aed6a46588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce6fdbc-1d55-4be6-a2c4-1de93e096ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.13.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7adb04-7aae-4478-9ca8-e5b01c8e9cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.14.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f19012-92c7-4cfd-9b38-461cf6e34a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.14.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dedb3a-5b61-43d8-9b06-abb770e8eeec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.14.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a43a58c-c15f-4664-91ec-d7ee707aa280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.14.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f15d962-d2c7-4151-9333-39167bbb9ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.14.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b264d63b-4bd3-46c6-8447-cdbca8cfbed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.15.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c0f05a-c468-4449-8fd3-69d8995482e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.15.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e19caf3-f3a2-4e21-8dad-952786a14184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.15.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66956b9d-b466-4ab7-9f58-00cbad1bceb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.8.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46f0843-a6e7-4888-914e-c9a3828af2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.8.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4362b0-3687-40bd-a489-d244a322bc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.8.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff2719d-ea41-424f-99df-7fc9755ab8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.9.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6039bf6-ba59-4896-afd9-ecaefd7c4ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.9.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdc4e4d-04e2-45d8-b98f-9ca08d666217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.9.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d13c809-627f-45ed-adce-69d7af58448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.9.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e968a17-8258-4dbc-ace9-c8b031adb7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.9.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46569fb0-66bc-4695-bb73-cc47d56efb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.9.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639f3636-1950-45cb-9fa0-d268704d48d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3509f69f-b174-4d16-97fb-6cd62a78406b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.61.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06610ff-cc01-40e7-9792-550b18c40af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca10d9ae-96ee-44e8-ae5f-0ee1cb462a03", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa37228-18e1-4565-ac1f-492c6cff6e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.194.111.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ca19b0-55e9-49f8-893d-cc570a561930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396898e9-4592-402c-8b30-067d1af620cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded5a070-3264-4d41-9d0d-976283661f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcd4a6e-797b-4900-8c5a-c5a8d6147db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf5df00-7bef-4756-8b81-3ad32a9a67f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0951b2-7794-43c9-bc81-2042af7c107d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b004b601-76cd-456e-a965-de422e111b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c3bd0d-f260-46ae-bd34-c9853cb2f0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031b3c3d-8108-4f81-b4ff-eef485628873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246ada91-7a52-4e2a-86a8-4619106ca7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9303644-963b-472a-95f2-a8f8dfa226e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b573994-8d75-4f53-8480-45893e705e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bc64e2-a0b0-44dd-91f8-69cc71b7f480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9cd008-f9b0-46e9-b93b-80357650fedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910b0e8d-1db1-4423-9de8-d0adf0df945e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.69.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c70bd7-e5a0-473b-9ff4-db540035f65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.4.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ad00db-1a91-4943-a457-a981bf2bae0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.114.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d0a8d7-56aa-4908-8274-db1b1e7ebad2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.35.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82aeb092-e763-4e34-8ac6-e636df91b38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.39.83.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da94c9c8-10b8-431d-8437-97d47a832f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.47.30.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7859afca-cbbb-46de-9357-9b8f58ce710e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.61.72.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b513a541-ca01-4b25-83ea-274b437ef9b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.102.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa92dc5-5d02-4199-8fb5-c61563d134d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.82.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b18b42-bcfd-4e1d-8fd6-f319eec1ecfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.195.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb0813c-bb48-4640-acc4-5facc1beec0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.201.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c804cfc-0a63-47fc-a330-582425d5b635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.12.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fa0d18-e5d2-4925-8c0a-71e349abeaba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.16.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1c7d88-f18b-490a-ae43-7b1f21fd4a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6d11d4-10de-4813-a9eb-fcb9ca60d75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b36d1e1-ba05-4cdc-a371-de7938754cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125f855a-a3d0-4e8d-b98e-e90a3c1fbccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294881da-3c21-4e45-8e12-35f426fb005d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189dbf37-0902-4507-88e9-7d770018f7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ee792c-60d0-474e-acef-dc04c35c0779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facc2278-328c-464b-897a-fbc3ffb0a911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536f1c4a-74bf-4a0f-9e02-4ea7d412255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d86198-aebf-4c1d-b920-06b8922465d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b9d64-2851-47e6-aae8-94048120d565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c21f0-1a07-4b69-8d67-cc112612edb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d1ff2f-1df6-4398-b3e8-d66b1f235f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a353c98-1e77-4616-92e7-7429da23d1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfa598c-f7ae-4a89-9c90-819556ba4e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2a87d6-cf81-46ab-b374-3c455ae4350a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07084dee-1816-4a3a-a1c4-7a14047e45aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679f54be-cb9b-43fd-97d6-6136ab0df2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b9a80c-44c7-41ae-9533-77ba518c1485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a018c0-fb00-4cf9-9644-bbbcefa324f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136ef7f6-b496-4589-91ba-666af44cf4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5bf2db-fb8b-4f75-ae5c-aee74c56b0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf16778-fae6-41d0-9b98-a5968004792c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d72bd75-8510-4272-88b2-263a8a513a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38197e9-f8c0-43a4-bdf4-1456966edcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50afd90-505e-481d-8d72-d6c8d55c648d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245cbd3e-04c6-4704-ae8a-2866342e215e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8d94b8-4a5b-4471-a5b8-5ed0436048a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcfceaf-997c-431b-bbd5-f974c57d4a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad614ef-08a8-4519-9dea-ec0ca685368a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4f7b8f-7c9f-47d8-a440-6bb5cb39c94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d469f53a-c709-44b7-904b-9e7d4c3126ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd651b4a-cfd9-43e5-8f14-4a44a10721a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b99ad4-860c-4bcc-b40e-07b7a09df7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8dc559-94b7-46ff-a883-6a9dc4ee23e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac74d7-c016-4bde-809a-de9856cbf676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b199a3a1-b751-44f4-a940-e508a6336e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8615a2ae-2fb0-4f56-bd5e-789eb87885bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4165033e-4bf1-4723-ae7f-c923bb2ced97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db62746-6563-4fed-8bae-796d7d631ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.212.117.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cff93c-a48e-4aa3-8db8-1bb6f939073f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579467b4-1c16-4a3b-865b-df9fdf86a523", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.245.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390ffde2-8919-4a42-a73f-ab88d5da9bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.145.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5634fe65-d948-46f3-8f3d-97316bb93206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.236.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a04711e-7d88-4555-8504-be1b5196918b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.216.224.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7cc515-7abd-4caf-abe4-f4fdc03e2ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcc9df8-9608-4dee-8375-f3d7a7a8e62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7532a2a9-1da3-42da-95b3-88d4f6351095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.237.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f55536-169d-4813-afaa-a912f74b8097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.163.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd971e7-9489-420a-a3f9-94ec019e6a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9ca84d-ecf6-4542-b7d7-af4862b53f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.13.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d053d872-5689-4f4c-8d43-3e7c24580362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.236.74.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd8fb08-f238-4337-bf18-e87e244d7b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.251.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2cc9ac-b226-48c1-a9c6-9194ed747097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.3.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09537a60-3ffe-459d-8361-be8c4b5ed32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e6ab83-012a-49ac-894c-fa1f617a1e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.239.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c189b06-6b30-49a1-a447-95952765c20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.246.66.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dd8e80-c343-44bc-9d7f-fca4221f3737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245c4011-bbd7-4bfe-8043-dde0529ad910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4910a33e-00b4-4df8-a03c-071670510c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4d9f43-044a-4617-b5d9-2eabb0469e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.52.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5836dee2-dce3-48aa-b78d-1bb518bf3c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.137.189.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69d061f-f569-44bb-b2be-7de311477aa4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7453be2-c84a-4378-9bbd-6fbf457b1ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.161.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8ede68-4413-4cab-8972-7008568c941f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.17.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6556718f-849e-4c47-9f98-4e6dc6fa473d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.180.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f179ec37-1402-499c-863c-8b26c78f7b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.185.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cade05-6572-430d-92b4-453613718469", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.205.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0a158e-6df0-4772-937c-372cdfcd7402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.208.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7780709f-42b8-44e9-8916-349710042ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5489963a-9c70-4081-9b63-bea3c687c9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.107.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc3d434-8fb1-4d0a-9b14-5a5ebfe67668", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.135.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc836c2-3dca-47b3-ac0d-efda08734719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.213.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533fb3b9-3062-46fa-8999-335aa9604b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdadd49b-c295-404e-91e3-21d9fb6b0330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.240.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d7dd77-d265-4c39-8b29-ae8591652151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.35.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628fe1da-68df-4cff-ad87-949ae40cd4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.65.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79667654-c4b8-4fe0-9ea7-3df8d541e4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fd4b3a-1733-4217-a3f0-d51220a6a13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.82.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6ce880-4ed2-49a4-903b-39574f5bb2c7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.86.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60228279-e03d-486c-a971-524bb95abf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.160.198.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac90f9b-673b-4849-99b4-cb3006974768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b588821-a884-4155-88cf-e4f4d277475d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add90265-b85f-41c5-9eee-dbdadea77b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.174.211.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17533331-0737-4ee4-a9ff-be3ef129759f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.101.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c9db73-eeaa-4283-bc0a-faa53159e498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7042101c-511e-489f-9306-69c6b14170d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.255.74.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5532af2-74f6-46e0-b0bb-035ed1f27964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.201.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c2e88f-4947-4dbd-9f47-4d875df4371e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39197a52-30a2-4837-a9d7-912ed8f10c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cba4bd-8b53-4c84-8226-8540c213be97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ea72cc-793f-491d-960b-97d537992a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c7aa26-182c-4ffd-a354-477cd65e6834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.171.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27d2797-d5f9-456e-b89f-c784fd726d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.212.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e8ac4c-f238-4765-933e-f58af10567c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8474f7-0616-4d42-b81c-88cb3dba7d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.231.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f070e6e-1ad8-453f-98ed-9b7e8b78b61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d82c67-fcb0-4392-9d0d-89fc75eb11f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.114.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c3a623-3de7-4d6c-877d-5ee650373efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.120.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59e876a-052f-4e5f-a95f-833ebabbf83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d27aee5-b2f7-453b-8ff2-ffcdf9b3c5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048ee296-4eaf-49b5-aee1-02a7dbab8913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.216.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85a0286-bdec-4ab8-86e1-99eac156e5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.219.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605e0748-466f-4cb9-9ac5-1483267940c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.91.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5a70bc-42d9-46bb-9464-d0f55d544091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.111.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867c40e7-be74-4018-90da-88dcc6180789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.132.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634e16a8-0479-41a7-8a5c-4368c7d8b476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.156.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71d6ffe-cb3b-4585-a5e5-85edb2380041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beac4b64-efd7-4800-821e-05fb4e8b48c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.38.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae56a4a7-eee4-47f5-8e73-725a2e74d700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.41.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519c0965-c1be-4dec-85b1-4c5d1bdb0e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.51.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d64d9a-577e-4ae6-8cbb-b5a8648670fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be88b5b-11f1-4e61-89e4-52695d04f21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70637a2-1ff4-4cd3-95fa-23190cc6d8bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.208.71.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9549506-466b-4667-bcce-76a40e4d9af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b2d3c-d2d3-4e47-b3c2-a7dd857a3a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ff5a13-970e-4cb4-885d-8239ee96344d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251a7b7e-0f80-404f-ba86-8ac6b1ea9944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.244.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e1e781-33b4-46b7-a4e4-5268c22a164e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.29.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539c965d-ea34-46b7-b2c5-00aa3b1cb96a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.169.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57acd0c-516f-428f-abda-183732625de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.108.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0c3f8d-3bfb-45b9-8538-7e989c8c0661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.142.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4026f93a-3420-4156-87fa-fb3cd3fa54ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88edbc38-5d29-47d2-83d9-6c4c7252eb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866a9c03-a4ca-496b-9bdc-c3ddbe080cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe67b9a-f649-4bb5-8768-14317f391db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09bca2c-4ca4-43a3-b674-ca5d43934288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd607b6b-ba04-44ee-b486-423dee69f368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cff0ae3-a1af-4f71-8741-240e4c40ead3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471796ae-3f88-4422-914b-3a20efafed72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ce1636-457f-45b5-94cb-1654ecbeb401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b9a678-2a9a-4fc9-a419-f0e757394022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af96838-e327-48c7-913f-c0f6dc55c0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ac40a4-bcaf-4946-a6e4-8236a64c8f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bac86f-ad29-4600-8e19-95ce6a320e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11db530-ef2e-4749-8cbf-f8f0c5264816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c4eb69-c1e1-4f56-b0e7-8a484d747e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a162758-0953-4d19-bb12-b6f19502d3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d780a082-e68d-412c-80e2-eeedfbacb567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730c2456-6a84-43cd-9b62-e324bea004ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d583248c-ce85-4bd2-b866-3357c3379148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.172.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c887f053-046f-45f1-a54c-5acf4aec8f69", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.132.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f77c173-19cf-45e8-a5b0-f5064ff9f432", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.56.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f35acd7-5150-482a-849b-1a4d92ef24d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.189.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a51abbe-3a5a-4f64-a8b3-0ccc834324e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.239.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cee334-e6c2-4b13-a00d-d6f0da8d94c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.106.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a103e500-924f-4963-97c1-1ee5752432e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.108.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df31ff7-883f-464f-9887-48542503d1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.126.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1737b8c6-898a-45c6-bae3-303e4e354587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130523ef-c25b-4588-a35f-97c86cc6fdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.169.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d4cc8f-5c85-4248-a5d5-177fc0e0b6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdaf4bd-5f96-42a9-94b5-bb20e2d63a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.55.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634590bc-e7c9-4eae-8dae-22a29f1cf416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.76.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9c59e0-dc36-45d7-a76c-7899885b79c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.9.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d643fc8-83a3-4202-b8a6-f8f45a3039cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.103.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1629e9d9-28b3-4064-9653-65b69af20102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.157.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2f1be1-f08a-42ab-8847-c5f138a98f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.73.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2a1f86-73ae-4d0e-bdb6-8b81af50b677", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.243.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e963c6-749b-44f4-ae83-580b1768805c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.99.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a643cd59-1390-4f30-b1cf-9e437cd18d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347e9408-f041-4fe2-ac19-85f0b3ad4049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbce3c38-7b18-4182-b377-b720a21e78df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b514305-c513-40f7-b74a-ca0ae102f9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6eb840-95f0-4087-8b1d-be8988cf7eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b905ca0a-6702-4146-8658-31278731d3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5859ff0-a088-4ec0-8567-55cc083f8f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf50ade8-4572-40ee-8f53-bca0d8a6a0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2892d21f-ffa2-4d24-952c-c39ed4f88fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98c74a2-9a49-4951-875a-9c9e76310351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17862fb7-b798-49fc-9597-0654509273b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5af1c1f-e303-43dc-8729-c227ee4e8d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374c3a93-cc34-466d-9e00-22425e333e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897e80d1-385a-4266-8dae-59c14a7cdd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a751243-f20f-4133-9873-d5bae618227a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8314eeb0-55cd-4516-891b-7e75d2364db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7aa46f7-0594-484e-a09b-18ba385dc152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f573106-185f-481d-a68e-87425d4b9c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535f56b0-b516-484d-8a90-3caef087f5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7efd37a-28eb-4cea-a747-ebb8b58f97ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2c61eb-4aaa-4040-a1a3-178a6cb3ff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc682b7-a8f9-45c7-b7e9-e3db253391b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104ac52b-d301-484b-90bf-3f8a8cd79541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b502ba-d15e-4742-aeca-e84e45955cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff561bae-cf58-4818-9758-29d766074494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c6aabd-b6f9-4a73-9bf1-910d10fba8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf665315-dd8b-4af8-aff6-1d97d9404805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82239c3-57b7-4f89-951b-8c7f9bf66cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeca14b-31a5-4772-9ce7-501104745f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6433b618-e985-4684-afea-6e29c6e113c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9f12e0-08c3-457a-b3e9-37db37293862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65457e05-f99f-4c19-a6d0-011f1ea6e5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6080ce6-c3fa-4865-a4af-22115ef58fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b46f090-9976-4e89-bcaa-bfe7cd36dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0031ef-3e17-4c0c-b860-b885176a1889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ab61f4-b2f3-453b-b9d6-b09e22b7acae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97bd055-60ba-4d17-8788-f49e7c22f61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ace1626-7733-4e7a-b9e2-2fe6fbf48bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4f9b45-dfb2-4fea-bf71-f0f26e441043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0a8768-ce5a-4fe4-aa6d-94e88990e579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa48c48-be5d-42a3-8760-8b12f1724188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ab0953-5322-4628-b71b-7a4f483134a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ba49a5-c6c9-4f21-abf0-bbe7af50af7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37268b88-5d06-4e9e-9f3e-1bddc00807be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b080603e-9090-4e02-8a0d-5926352315f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c754c3b-8ee7-48a0-ab78-86cc7ac95ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9566f30-5980-4486-a4f8-3f1d13e39239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dd8928-7c55-419c-9045-b362fbd5203c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26ca974-efcb-417b-84f2-4e26ec62df6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e2aaaa-fac6-443f-a5e8-fb6cf8e42855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656912df-b7df-452b-b439-528a9b0bbf94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5faed2af-7b21-484d-b09b-f8ac024ed872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97411a73-3823-40fe-ab4e-fcb18ab6126f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e129640-380d-4230-8c41-0672638826dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374fb0b1-7232-472f-8138-680ebab3665b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7e8635-48db-4380-b008-a659a58c63cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a077e3-98d3-4489-844f-4eec01d21aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f0aa9d-5ec5-44bb-91ee-a5f13ede838f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465075ea-90f0-431c-a468-e37211c80cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57450a2f-941e-4157-86c4-1a791f971620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c199b86-2bf1-41f6-aa95-2705243f6f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ada7b1-5175-49cc-be48-448911704316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f27b78-8dd1-47f9-9c3f-8e5c76239e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5defdcc-48d3-48ed-84d5-4040e1712d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2420b586-6403-41c8-aeec-46ec5262aab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7081c7cc-4ac3-4a21-8d8c-b601225fa459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce5c865-1e43-4d52-acac-36038bbc65d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e1cd56-f154-4a8c-b540-2b57166c3803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ce7610-cbfd-4c8e-b052-689f50499b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1d72e7-fc84-4fad-b086-eeacdc41a8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223248ed-91a7-4bae-9e4e-7ff855b578eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71c5eb5-4f7d-4ecd-840a-c26358b12b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154db0e3-275e-415c-855e-32cc9a4f6c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c9167b-c0ed-4c77-b3f1-a8251eb2dd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6d65b1-2abb-476e-aba7-892b52460e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794e804c-5d5e-40c5-a3ae-d5772c1e17f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80d4e59-c6e3-4e25-beac-61dc0c041559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6396b4e-ed19-4e15-8aae-fd83d88adbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7806db2-b5cc-402e-959d-19cb2379e237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae400dbf-b516-4561-9d0b-fa4b9a561f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbe6f48-6a9e-4ba6-b9ba-62c157d6243b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a1fbc2-1b88-4d94-914a-090e6968647d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f99fad2-295d-4abb-8a60-7904d5dbf810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05ff53a-73fb-4d1f-b38d-5a57eee28a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2352c82-a038-4d3d-b108-b0dd8b52297b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4e4dcb-b5aa-48d6-9f48-eac4120d73e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25f5c12-cd9a-4636-a676-e214eaaa0e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22ea075-9a0d-4e14-8683-dc324b97a899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2944e5de-a1ac-4749-9d45-bce26d347e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1206fe-989c-47df-98a8-1755474422fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f95093-659a-4501-86bf-5fe1f914b674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22b7350-e248-4e8a-967a-263c48fb4cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22651537-bafb-467e-9d60-ecfdcc30c9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9504b4-af82-4c8b-9a44-0e35a5e455e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99b1b32-d328-41d7-8831-492f3ac9406c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd3349e-a137-4f15-98b8-c5a1a364388e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fda84e-f5a4-44b0-b9d4-e2227e4fab50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4800cb-08cf-48f2-9363-197f41ebb90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356bcd91-7069-4113-8e1e-9c3c60d2cab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a9b897-640b-409b-8d16-e8c06a3bac7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dd05a7-6fdd-45f7-9733-e65f3065b6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9c7785-6b60-461f-b249-1dc580bde10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f3fd89-80c4-4e57-a111-f3db99dedb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36ffbff-2a37-45a9-b7e0-b3aa10759af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee3fa45-2ee2-4fb9-b3a7-aa8e167da115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352699d7-1bba-4ef7-ac62-4b2206d3cad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8068ea-a20c-48b4-b825-20af4d40a2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36734d4c-c2de-4bac-92d3-6cba423e7d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e31a6c-a8eb-440d-a29f-ac0440022707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427721cc-7e1e-4f21-aa0a-a17c8f0c1260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250eef27-49bb-42d4-880a-4bb2e645e5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb65152-a257-46f2-9604-07562e8fe4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311a58cf-e213-43d6-8f42-48ae587fab4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc777a5-f432-4ba7-b6c8-8f75f7e42074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e723fa-e9f3-45b9-89fe-0b4c31acfd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2c028c-c04b-446a-b0ba-6d2f09309f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67744ae2-2916-415a-9d6e-fdae9fd178fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36fedf8-49f0-4721-bd21-b3fd4a8e59c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c69f74-a7c7-444d-bb71-525f967424f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d88989-a23d-4e0e-bc8b-32772e384535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b751e8c-c5e7-454a-b0ba-45e84a9d02eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3034edc-be28-4346-922f-79984e79bafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4e6143-4e66-47d4-ac18-7dee90f23e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557468ca-22d5-419d-a26d-0fd7d7a03120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21ccd1e-d209-49c1-b77b-6f1330cfa4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47db924e-828e-4359-9341-b30f6b7f7d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc80a9f-ff81-4064-9244-d92e45728e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa33aea-6370-465f-a087-60fb9e3d93e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597e78c9-db29-477e-97ec-0a6e0f09e0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e498e5-385f-457b-9ea5-a952b7a854ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abea6da7-a84b-4fa0-a2d6-00586158aeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e005ac0-c42d-4852-9da1-9635f61581f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db1f7ff-3d12-46f3-9130-d67280ef4309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe346c80-7fc1-480f-8ad5-c9548941044a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8122fb-7754-4b0a-9a73-623523873601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359bbdc7-a089-462c-8a5f-96ef13768d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96d5bf3-d979-4e70-b0bd-76eb8a637060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e4f1d0-246e-457b-a053-b745ced96486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee70253-c3d4-4db4-8b50-af7b197c1549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ff7916-7860-42b8-b9f7-0fd0d03c1e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6595c3be-bd73-4e41-8193-9c29ceb919cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fee575-b6fa-47a7-b5ca-82faf34280a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7119dc-c74a-4739-823f-51498a1d68cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17f1810-ba0f-439c-9eb7-1a5b435bb9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c085236-00f3-42ed-b01f-7053c27922bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689de169-62f2-439f-9fc7-783bff43f961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1af028f-8d33-4f04-8e47-c9ca3cc80e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cdb217-851a-4e36-8150-b73669bdd520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd9c3fe-56b0-47ca-b937-1b8d79018d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5a361b-f007-4291-bca2-baae8a29ae05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae090f51-f457-4f66-9a27-6e5a985325c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b10d65-f47f-43e8-a527-0db2cd38d886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c1f42-a4fe-44a5-b55b-93602f5fffd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2f483f-08df-468c-82a7-a9797dd92418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3078ee-51f2-4355-91cd-9cd151900a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4155952-54ff-42fa-a43f-3872689a26f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8d0de1-2c4d-45ac-91a6-872d851ae76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2277d7-312a-4c04-9112-f36b9a2534ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc07323a-cdc8-4bfd-a544-e9d61c8e1dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aeb12d9-4e63-43e6-8acb-18304c83321e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08134e8-00b9-4018-ba69-de0e4b40266e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342562ff-5e21-4352-8b15-4945810d7d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae3b3bd-e4b6-427d-8976-3c8c66c94589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d097f5c-d6a8-40de-a9b2-1189c6a0afa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f6e8c4-7527-4956-90cd-4a94b647380d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2c2dc5-b43d-4652-af7d-c4e645402705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc695d8-5466-4471-bc63-5b7047713018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a601c469-2983-4b70-8ca8-87cc13780605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac140a3-8c3d-4f36-8c7e-2e28513a97c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bbe70a-f8ca-4b55-93d3-a5ef71e29993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fac633-9aeb-45b2-a669-974065805080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebd1d80-df47-4853-93b6-a9054169b8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e15d27d-fb3b-43c5-8b46-ed88c021d454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01403f49-01ee-4a11-8555-9faed37ee05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3058ca38-e9a9-4583-a17b-321cfcc5f57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44d86dd-558f-4bc9-856e-46934d3fa017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040ea58b-1410-42f1-b5e6-aa295d8a3afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19602d51-07c5-44bc-8d9a-2b9bc1c5c24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db629ee5-bee0-4a7b-993e-3bdd63a220ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d3b085-da5d-463c-9105-04b32df0297d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e000b0d-ef56-4d26-9ab7-5ecf2ae26497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ea18cc-b4ac-4dec-9fe6-d6154acd3c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d723c6-7b03-4cc0-bc5b-c398b8b96739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049fcde3-26ba-47d2-a890-bd2cc24bd6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55271f8e-8f51-4b0a-93be-9d1cf370913d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744a1c8e-770c-41d8-9e4b-9feafb1fc3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257aa655-1692-4275-b415-f6fb050f2f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dce6022-ad72-4a48-8b4d-cbae9e368728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d17e659-c9c9-425e-9011-0b2a2a5af27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb32a5b-a941-43ff-a5c9-8f74036c6ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f861db-df9a-4632-93d7-8edf2cdac81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4121cb4b-eba1-4a93-a63a-c51cbc0eefd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e4d39f-747e-4143-be3f-af5e40c3f708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28379fd3-b0ac-4734-ba8d-c405401bff97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a76e1f-b8c9-435a-86cb-c01ab80cf229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798ada20-01df-40b1-8935-219c28855a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553e38c4-4107-4b7f-af46-8ba284330ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89490e65-c154-4708-854b-b51aa1346b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f22fe7-0190-4fe1-8ecf-a9f3d1131aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650a00f4-eecc-4d9a-8cc0-6c791715e39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffe349d-8981-46f3-9652-3c8284f9d929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2606d27-2533-409b-a833-6547132f9681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3475275-5b8a-423c-933c-b26966a1c9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6444994-6408-449f-8106-998722a62644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce43805-8e4c-4bb1-a8fe-63fd34b81ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09989953-89d4-44ae-aafa-38e06e273ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda31869-f6d4-4186-9862-662eeaa8220b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a862122-1bcc-4a51-b36a-b40565091ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1b9183-bf3c-40ac-9d2e-defbddcd7588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9202eab3-756d-45fc-a6a2-924d6e97fe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae3629b-3abb-4a50-b9ff-38f14ff1a87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d826333e-45f6-4beb-8304-f870039f3d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b077ff74-504c-4f31-a0df-97c16d155f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ad2695-abd0-4f63-afeb-09ecf6030753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b30e28c-4991-435d-ac41-d7778b93e003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667ee94a-fcd8-4883-acd6-e3f4c7c3735d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3053190b-ce09-483a-9876-5d5649656fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ff2ef2-91b5-4664-bc65-c8a10948cba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375ff7d0-fe05-4830-9db4-d472c04dd51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f897eed9-1259-43e5-ad67-97fdfb86c78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3982809c-1adc-4c97-a967-6c6aca6890d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8c567d-c289-4aea-8398-026562bd1cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a401ce4-ef66-4ed1-84b6-6f71a06a0ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4775c20c-8c8d-48d1-872b-aa527f376215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dfae98-1b4e-4bc4-9684-f0b0dedef47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786bec22-d304-4046-b34f-ca4045a67186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831215ca-98d2-4e52-8664-7f3a33a5b5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b15f0f3-7756-4ebd-9b56-e217f8ada8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8851e4a-c106-4e5e-b9d0-6d4bc4bd3009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15de1acf-56d9-4147-b3dc-f0b92acfdd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d739e2d0-8e61-4654-8322-d0473276f37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc12a10-c1fc-4cec-a865-0e52da00ce35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68875056-ee3c-4149-9cd6-97bef293cc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00453e51-727b-4229-930b-7d96f7d76130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ad711a-91fc-4e19-8d67-1b856c983897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edcd637-d9a0-4d76-900d-10af8d5cc7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.116.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2707bbc-a960-48d7-9fc6-5dffea44297e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.175.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5e34db-a69d-4c55-907e-0a92d6f71da9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.210.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3442e023-806f-4f9b-862b-9de63d6c30cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.71.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9fc1dd-87e8-4dce-8b45-7f9597cc4860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.99.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e11365-b626-4476-9105-b63a8d476287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.251.122.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4516f81c-8d3e-4304-ad76-359d5dd9dfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.192.217.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365cbda0-1cc9-44fa-813d-e5f7cae91f2d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.53.180.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57a73e1-fefb-4f83-8081-eb15fc62da21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b85935-ebd5-47ed-b7b5-ad06c03b1c94", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef251ec3-4dd5-47a9-8f3d-85d50573ab8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6149e0-8455-4864-8905-4c50cbe9bf2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06790aa-2a85-4eb1-80c1-bbfac809ddd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.0.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cae8ea-db57-4e92-a29b-ac9af1ce701e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6637957f-1882-4f2e-ad30-f0dcf9162723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.231.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f179fc-edfb-4eb1-a77f-fadc5b02ae79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.103.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6713a08-983c-40d9-b02b-7235584e4b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.129.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544d310f-5fa6-46fe-b635-95f08fb92c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452a300e-b216-4c53-a563-a84682d5b84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.175.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92cc0a9-82fe-4401-978b-b571aee974ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.194.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3cde1d-050b-4cc8-afe0-829c4454d9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.200.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edb5373-0638-4350-b91d-9cb37f96007f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.206.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15daf3e-e933-443e-9fb1-8c48dd189334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.74.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a229038-552a-4418-b4d6-a97a69e8bdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.126.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e51d2c1-1e86-4327-8b97-79dc1b43f0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.166.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97c1d9a-cf3b-4068-8f29-54ab6afe104c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6475ce70-45b8-4b18-a1fc-c01a1586b05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7984b0c9-f041-48bc-8cd6-3954d33f99b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fbd85d-b137-4904-8e72-6b3576340bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa737f6-bd29-4a80-9b22-29d01931efc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172ccd16-098c-4f72-9590-6164ffcf0699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ab0ede-5aa4-4b15-ac07-31f6e0cf37bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50700b0c-9c07-4513-bcc5-c99b4fafda60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c0fb6b-a119-456c-9458-60281031c698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f13710-e210-483e-a56d-aab1332d913a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c799a2-17a4-4eab-ad63-3e03f01681cb", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7172d57e-992d-44e0-9dff-9aca04c62b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fcdf97-d87c-4e76-8097-dd40b59ed176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18c3cc5-fa66-4140-941c-21706ff2da2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2db12ad-308c-4b09-a76e-7f4ce1eb33d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e4ffde-41b7-452f-8160-e1c1957dca3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e44819f-1d67-4e70-8900-cea0d053ba9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8cf043-531c-4e86-aed6-45c2cbc18b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37881f6-d375-4680-b643-f40f0018d434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f4734d-47d1-4daa-a5d2-39be756b822f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c59942-4c10-4721-80ad-1e8d5f2bb354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58192434-a14d-4cf4-a02e-9e00cb86af98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ae0da0-1e11-4645-a32a-2519573b0948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e273a6-3346-4be6-bd12-4c67631d97dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3d893b-56c4-4d49-8d04-5810dd4fbbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa31d47-8eaf-40cb-b657-9cfde729eaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d736744f-e1a2-4648-b403-6898ea3c0b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220d4f07-64b1-4659-a4bf-7e9209202c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e07f577-058e-41f0-8e16-70c9e50f6a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7067df-66cd-4684-82f6-b93fea55a95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef656a70-66c2-4d97-8dff-4a3a7ab9d45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd7bb89-9519-44a3-b78b-4a73bea4997a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881bd793-64c0-41dd-99a3-25df2199baf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec25ad3-bc8c-4366-a4d6-c5459f183ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8076339b-7016-459b-9def-d540760fe6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525d2aa9-3475-4fca-bdca-1d7e5196e9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf709c43-fdc8-4c40-9729-e815403419f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6141cb26-ee85-4d33-9402-b8521321de6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e16696a-b012-4c1c-8f66-2546546e04d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadb3e9b-d703-43f3-aa37-fd8fd2627e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b326351d-52a0-4bf3-97a1-059f23fef27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c36b92-5b23-4d7e-8ba2-47093ba31e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddfaf6d-3611-41c4-819d-2ee4841f7594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8062d962-ea51-4e97-a3de-c508af230ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1969e3-05c8-4102-a432-56f6049d40a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a004237d-fd8d-4929-8a27-462da6501e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17320d17-3f3e-422d-b38e-b5b7d13d96c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7d0275-edc8-43af-ae91-59e15e884308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ba6664-542a-44c8-9257-96703163febd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc74a25-917a-4f6e-9e47-891ec37f3aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30557ab-9122-4b28-8079-e7f7d4ea2b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae3ece1-0cc7-42ff-9c41-f81576358e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c230546-8ad7-41bd-ac12-0a6a63122c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea4f148-fe36-4a27-90a3-f72b6fd6da71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d746f3bf-8bca-457f-ae50-b4ffa07b2ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a17f41-c7b2-4c86-8b38-dc7c2cfcae57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f396d4cd-ad8e-4087-993b-46feeed3f052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdb9c24-d356-485a-8653-174f4cb0e562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e55eed8-eda7-45ac-9918-62cd54569e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cb985e-89d1-4c9e-bc70-42dc03f91ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2cd566-baed-4451-b372-3c12c970ddf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ca7cc6-9e70-4681-b263-ea96b110a33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272d6726-a23c-4536-a996-e663353c473e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c67ec3-f3ad-4f63-907e-ded3c1b02fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647f3108-e9ea-4821-a673-a8059c5a90a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b01c40-920d-41a9-addd-c1b81df88afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f9442a-9534-42ea-9a0c-98822380f321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b877d6-c879-443f-8ed1-a5f057d318ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0bfc32-24d2-4ded-8e12-8ccccd7c38e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15ac441-c844-4da0-94a2-da9c87266577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3c7b1e-e709-4d1a-a0ce-e51885598cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b3c81f-1242-4bb1-993a-ade7592ccdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0b96d4-2bd0-4cd4-88d9-3e4fb9022bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e937817d-149a-4f9b-8da6-71013bf99e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cce535-5738-4b50-9d0f-c9d12a149d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e80db6-65a8-4437-b2b2-805d43bae434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c17927-bf16-40b1-ba63-b358d4039ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a96d8c6-d6eb-4e2c-8044-a6222ad9f89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d71aac8-cc0f-47ec-8b06-3e50d24e2d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2243d614-9f83-43c8-86d6-887102793b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb01fb58-76ec-47b1-9de9-60d97e8f0762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fbf7a7-b86a-4e6a-aded-6a9be13acaea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5252329-578b-4b5f-a5d6-d260d3f4729e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4984957b-ca34-4d58-886d-9c9629f3a8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74336062-bf7b-44a4-b9fd-c070c2802c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b4a612-1e77-466b-928c-dc5ef5e85be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01315b9-b35f-41a4-9db9-2eadade8def7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afef46d6-79de-4835-83c8-65424dbaa02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2691f99-523a-4d81-b8ec-52a00b394f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06464c15-a428-4de8-8dd4-d531259b3a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5edb9d2-8345-43cc-8f82-2ecc800d439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e92b733-4ce6-461b-9ca3-02a8e10c07c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bc8631-b525-403b-8cdf-f3289f1c820b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04562419-e76e-4b3d-9e70-561670cfcbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae266136-1344-42c0-a4dd-b1ace4f67926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a99cff-3376-4d08-b8ee-d81ec0b9890c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e820f54-d180-4cc5-b45d-ec144fe155e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dda1034-2596-4689-bda8-d1a325905320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805a3f7a-beaa-4d95-b416-b1622237d8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7abbe19-c286-4847-9efd-ead234217573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe50a52f-93ba-4f72-af77-5eaef71ccb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1604e8-7abc-46bc-9187-cc951f365247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c37098-53e2-4145-8145-b0ac37aeaa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e4f036-e57c-462b-a25e-f67ee006736c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74fe080-645a-42fe-b6ef-abec1c9e7aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44033c40-ea8f-409e-af12-bbe73755bc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57f2be0-82b3-48d7-af55-eeca51384aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad68d14f-0e43-4ee6-8803-96813af6488b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28303c4f-9729-4a72-a387-d79cef1f036e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87232e17-d9cb-4629-a4f6-348d0146a1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f411d9dd-8e15-461f-850f-8c0e6790c0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b53dc7-bbab-4fc3-a52d-c933e3c37149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bfe4ef-3b61-4b9d-bfee-0d9bf68dbd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9360b24-3875-465c-9e26-941cbcb6fc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2038f74d-1d68-48e6-ab77-1bf6cc682f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b780ca6-7145-456d-b570-a89f26cffc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34357c4a-5e90-476b-84fd-3afd183e0ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c63795d-1f22-41f4-bf2c-d0b533199177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2fbdcb-4ecd-43c4-a6bd-4204a7fd4c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902b57be-702e-4224-9ddb-fdfa7084b96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5e66ea-4cb2-49e4-bede-3a36857fc573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6af921-8b9d-4df7-8fdb-1920d2efc6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc18991-8fcd-471c-9443-c03cfcface29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75867f82-0e74-4400-a79d-22423b128c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb75e47-bfec-47cc-840f-d4eda452ac3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2227c1e-5a45-40ba-911a-07aeb2cc2303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828c77b0-27aa-48e7-abd8-b7f20a9cbb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a534fc9-e6a0-4ffa-8f16-c93debaf6403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c580ca09-cb3c-4928-a55c-df34ddbfceb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e36225-ca70-4197-a1fd-58d262ecec33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17e9681-b719-43c4-989a-4f8ba7fa4210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4301d06e-407e-4488-ad7f-8fffc1b4b2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fa0471-d48c-4d0b-9a52-f17a3f26a071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c700104-d3a3-4000-817e-ed65ddcc7e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d56c24-3cd1-4627-a86d-53903837b8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0084633-3260-4926-82da-57f4ac048eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3376dd3f-ef67-4bbb-8cdc-0e90ee518ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b3b50f-da26-4517-9887-f56e72d28596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6be90b-b63b-4a92-af0e-357cc1631a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d051c06a-41bf-41c6-815a-0156edc26dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8db124-7869-482f-ab84-045758116ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a921b308-946a-401c-9105-62a918e4ac7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b87d5b1-4d98-4161-9381-218c44e036bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7bdc93-8c1a-42d0-a9c4-01b7d94e3b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a2b6a9-baf7-47ef-a1de-51ed2fdacad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458ffc55-57d0-4464-b21f-5b26ddc903d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eb7c0c-5434-468c-8aa6-171030d9fb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43a9589-a2c6-4ef5-827e-90b3000e133e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4d26e8-329a-48cc-b399-50c4bd9ed115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8d21ff-eecb-4a15-b94c-ffee70c111e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64895639-6dc7-4833-a87d-d1316298998a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ae1970-097f-495a-95c0-a0af8902b8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb311d74-cd94-4f53-a86b-5483e4f9513a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4796aea8-03eb-43c0-9081-e3903b61b0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458a2292-c868-44cf-a352-39922142a0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67cf82b-22da-475c-b957-652f5f848af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47890c3e-8414-4e55-9a10-cbff1ee56941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7c63a4-de32-4066-a5b4-b33bc60b2b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e62a545-0985-4fd4-9c90-34a051784506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa6357e-bb5b-4ea7-86ce-b2c77890a065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4de676-1bda-41d1-9643-9b2c76567a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa366d5-8e65-4b20-a0ca-6e8acbc13c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e3c7c5-41ac-4aaa-81e5-b2dbcac466d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f1c1b2-a0c3-468e-9ef8-c250d0ddb528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138f9609-1ac0-4820-84bd-7563749e7f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c803c175-7d5e-421f-afd3-f8d09e4f081e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74849fc7-519a-4737-be1c-f98cb9f99913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da449cf-bb19-4c2c-a8f1-22dfe45a68ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c5f18b-3f6d-45c5-acb3-cb227a85ae8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905d436f-6a5c-48ca-aaa4-0ffd50afa1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3661ea-07b5-4cd2-8c40-f6a03dc15ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7e74b1-d3e5-47cf-be47-8139d899425d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ee45f7-8698-422f-a7c8-91383b9274ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aee06a-c227-4e7b-8108-8238e9256290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051f5581-7a59-4292-b062-03adba79b92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b95d3d-f274-4611-82c1-d8e61674b9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd295a4-c9cc-4e7b-bd18-a738da96c890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc4cbd4-9739-4f25-934c-1dd9da46a155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0225900c-b234-46d7-9855-1d75dc08775c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63232a70-5c93-47b2-942b-b967ceeb9442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01796587-de0f-4292-ae2f-6f6dfb40d84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32102501-3578-40dc-8ebd-82040a651185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62186c65-62e0-40ff-afae-b8774ca66bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220d7514-66a2-43c7-8433-ac207d8c8aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e05ff11-954f-4f9d-bd34-02e3256731ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddf6e23-89cd-44e7-901b-ed2446c18e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940b7846-2226-40ef-a30a-b1896b943934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6e156c-8be4-4cbf-bca2-9e529af93393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41244c92-3e67-44fc-ab58-5ced134574d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed12776-34dc-4b12-afca-57217e04cc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997aaef8-15b2-467a-96f3-7f833e02efc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433835b2-549e-40fe-87f7-2b8bd061397e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46de581e-9ae8-460d-99fd-98bfc613cb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cfd6d8-becd-4191-a04e-9e1416093fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed61b812-af29-4440-88d7-532ed41932ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5097dc34-9f90-4994-ab07-25da0b1e438e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb86a18-6b06-4702-a526-8eba96eebc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd6278e-5bd8-4d80-95ca-7d554a9766db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de61511-17c2-4bab-9623-c8c58330b158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f6fec3-6e8f-4987-a500-f352455f8877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df2bf08-fbd1-4ab3-a0cb-07df7d61d2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d5f254-3db1-46fb-aa4a-186f7398e2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6782f1-410f-4d67-b5d9-286aa3ff889e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6933c7d-62ee-4a69-a671-74c82194ffcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0194275-22e2-48bd-9f1c-551029b80d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e09d39-6fbb-4031-ad73-629701562242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f572283-ac34-4430-923f-202e24c3cd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f64ddb-3c47-46f5-ab74-d10465d20e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf63486-cbdb-474c-808e-a4ad15bb9b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535b23dc-836d-4b77-84bd-0ab35cdeccb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73efc7af-843f-4c7e-967f-ea561efac9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf7440d-b23e-4de6-afde-14026c82644b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72447a38-871b-4a32-876f-002b28c9f4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f2f8df-8ae0-45a9-b768-c679381d583f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.252.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efbdcb1-17c9-4120-b1aa-c43a4f805df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57c1348-919d-48ef-980a-b0e9600bf840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9b0f34-172f-412c-8110-69d431cd86f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.3.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5fa921-c7ce-45d0-a088-a9418c1d97dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cb7ed4-2510-4e33-9487-7a521a11fa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793ad71a-41fb-4916-98d0-bdf2be616cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0e4599-530c-471d-8e17-b0b86dbcef72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e39509-5808-480d-ad8c-a03fea051017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e68ae2-f701-40c6-be13-ff06cad5e220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0330c63c-b8ff-439f-a4c5-d58847265096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c19dc7c-16f9-4196-a218-21a2d804f888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41110b3-0634-4e88-9dcf-ae79f3f9902e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4436136e-fe7c-4c4c-9386-02a2a246862a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a57b0e-5ac9-498f-936b-bf62ffac04ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27101feb-3442-4315-a286-031d1b7d4fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d10002-3db9-4c6b-a55a-43b913dbcac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d61d2b2-4036-4ddd-a87c-4ab4d349082b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14ade18-826e-44b9-b311-646554abc4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496186fd-5ef2-4f30-9911-b0ce5992e304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a560605d-f660-4b9e-8227-361eb673f0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195f9675-da41-4ffc-871e-2449e30d731e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db03ce1-e9cc-4b78-b9eb-68902577a359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686f6a9d-30e8-410c-a3bd-6f0bca10dd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6da68e8-352c-4232-91d4-0e5aee5d45e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68141e35-c827-422d-b5c3-c81eb232ef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69444fe-4996-4fe0-88c0-5f9f33921a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50175ad1-45ff-49f0-959c-7009adb433e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4c0932-0720-4963-9c53-8691148b0013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f3de01-b531-42c9-b0b0-64e44a691ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e848c9-774a-41af-882d-8980497a17e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5c6539-c751-4a11-a226-f5c7f0a96ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ce6b31-8767-4acd-a081-ffc527c2bc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f9658a-d3c9-4ba6-9d2f-54601620848e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1962313c-488d-4994-9162-50e72bb7ca73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69386db-42f5-475b-baca-17d5fbcbe2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f0a413-e150-4521-840d-5fb34141e0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55084b2-a05b-4830-ad5f-04ed78342d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352d728b-5607-43ef-81af-521906f1eb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55cdb1c-d995-4436-beb8-bbd6ac6250ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c779f2-6f93-4d23-ada0-f98a18420c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74e92c3-db83-4751-af59-37071fd45e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7856e5a0-67a2-4e93-93c0-0ed47bb0c317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcd27c1-00f4-4276-913e-89b95909119d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8549ad-c97e-48d7-8d99-5f251543f5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d837f8-1c90-4029-b81a-39e1246d7f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0afd63-e7e4-4365-b0b5-a88d5ffa08a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ed4710-5eb5-4b71-8e1f-aefade90e5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac28f152-a8a7-4ce2-847c-b6f02f2bad5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07660088-2e1f-4024-85d3-52ddded33e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560bee51-93d9-4190-9ad9-2ff41d4bc898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.0.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eaeb2b-6eb8-48d2-9151-e07297429ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.113.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d135ff9f-e164-4e4e-9551-234821640cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.146.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbeba8dc-30a3-469b-bac0-7baae512ad96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.146.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1edce49-0d5d-4649-9c93-f4c8e4fefb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.248.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5743b847-e000-46ad-914f-3ce28668ccc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d436f8-bae6-4643-af0a-cbc3614e0ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39a9e37-9773-4e2f-801c-bc18d54f8ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8860e4d8-b3b2-4ac9-b2ef-24d18757ce59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.71.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3f417f-1d2d-4ce5-9fb8-5d49b1ed2664", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.170.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531360d0-04a6-499c-a03c-f32250e0fc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f19f026-020a-4db5-b16c-90b8aa93a23b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.231.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7c2cad-23fa-4364-bede-e2f1c6600e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.26.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abff44c0-9410-41df-b4a7-ab51b6d6dc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0287a6c6-1588-43b1-afb5-a3609dd14cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.54.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a922eb74-287b-49e3-b970-715a2ad75798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb46efb2-00de-470f-a3a5-29f677eaea72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.109.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e197229-d2a4-4b77-90c5-3cfd6cb9c3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.168.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669ba271-8ccf-4245-9532-5cdaa3860ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.177.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0b6263-6b2f-4275-bd9e-b0067f6a1ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.61.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11358002-3d30-4105-9ff1-54d7f3f8a6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.68.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930cba65-4e24-489e-bc49-2df39aff49ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.96.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb33d26-10b8-42dc-9e8e-d6fae57aeb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.215.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d5a2be-a524-4f1a-a21d-626833ec2cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.223.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c65ec26-96be-4766-af7d-a289bc580ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.240.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7ff325-f55e-4a45-9aa0-49e1ac6941ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.104.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76673a22-a37e-485b-98eb-c619e5c00101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.104.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a535d233-c0c7-45c4-b607-233a69a60f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.111.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14524536-a63c-46bb-9858-b08180e4b75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.142.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4018c94d-9002-4fb2-af30-14c05f42e467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d71c39d-76d0-4ba3-b523-dc31343d660f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.49.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd740f47-ca11-42b1-92aa-0e8b07b0772c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842339d4-c4d1-4a28-a628-c111d12abc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd414a71-00fd-4dfa-9e53-e80315d32aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.205.0.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00497233-83f3-4fb0-99fe-f9a8be42d0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.56.16.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30748c57-9dc5-428a-9521-7787aea7e630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.11.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08601e7a-b7c8-4bd0-95a4-2047d54cee01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.229.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5332e9-2292-410d-8afa-13f0dfd1c692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8618d6a7-0908-4a5c-9d33-f60edd81c843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.44.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5f8ca8-b497-401d-ba11-dc880ae6dbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.57.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a569a6d-8208-4d88-9dc5-c0b14dafb917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.95.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f181e01-d77e-4cb3-bcef-604170b5bcb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.116.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56620b5e-dfe3-4838-808d-a2bbb72e0dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f346d560-fd3b-40e2-b6b4-400d5a440625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e816e3c-88a3-4b14-98f9-3e0e3b8c38eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0998e4-9632-4c26-b6a3-17a5ef472826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a01854a-aff4-4e39-9677-185a3d88ca90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cef2d6-9ee9-41fb-8db5-d25f1c99c387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a8c9dd-6e8b-4b36-90f9-afc13bab2d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615ede92-cc1f-4a95-893b-02bf97315fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc97bce3-d792-4ec2-9cbf-5bd3084b542e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da263371-e8c1-4e86-9c00-2e743dcfae2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0054f3-5c37-46ab-966d-bbb30349c307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c474e6e3-d692-44f6-9ae6-de835599cb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11c06a7-fd1b-48ad-8d33-6b854c918bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c188ac5a-39e4-4ddb-aa1d-3eb22a89d437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b72fda-5f99-405c-a1e0-c0492c084057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b75a91e-0279-40e1-b2d9-7e12780736c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c882545-42f1-4187-90e9-e57dd687bf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a77b2f4-9561-4fd7-b600-d4f3d3730060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94cd9b5-1432-413c-97ca-2cf514058b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3778349b-db18-47a1-9b63-5888dd080ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c6befa-c0c8-44c6-9db8-bf220e4a2442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0607965f-5d95-4cb9-ba9b-6579735e96ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4aeff3-fb39-4cda-adf2-2def73cde26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785c8419-66ef-4a34-a6d9-1c37a9852edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e3e95c-b686-4980-b072-c31ef33d8759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c11d578-1779-401c-a418-7db24a010e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033cee23-b275-4927-a93d-422cae81c59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcd3aed-4b26-4858-a0eb-e7ca0bdb7679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a806a77-9072-4e60-8141-83bf03671298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e8814b-1959-45ed-8d92-8d7d527c224b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6844941-e178-4e39-aa32-53158b68e0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316cb7bf-eb2b-4956-8a47-a1dac30c7381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb55f51a-756f-43a4-96c7-0dd3ba97e738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa97985-7df4-475f-8653-ea852ad29f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e378b246-7c20-4ea2-91f5-ee6ee80e6b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8228421-e3b4-49bc-bf0f-b31c3302d196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00daa4cf-f2ff-4110-aeaf-da27d101594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb046af-6921-4e7a-81c3-b6c604ec215a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3623d655-2127-4ac8-b18c-780d840f36c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85bd34b-84c5-49e4-b3df-0a3e266d6a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dac8b6-a0e3-4dc4-b844-82866a6ccff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a30282-f7ff-4c54-8025-fe120705fded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed1526b-1fb2-4671-b35e-9a3337d5cd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3a172e-1aa9-496c-a287-1b3e1fb0718b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1793c5c8-8d41-40e9-8893-ba6a0821d79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99653fcb-2ef8-4223-b067-5ac3b0e6e72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6723742-1b0f-46a9-a112-5fc4758e7601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521358fa-0a5b-47c0-bc7f-82f7c8d64791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44bc020-9377-4ad1-a34e-605d4b46cb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c52722-e14c-4730-a80c-afa02029d302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1746dc06-7a88-48c0-bbe5-00d6d0163538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703571e1-3f88-44bb-909f-6d49c6fb56b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1eeed5-a54b-4b43-9c3c-9e568114c927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9380b520-ee11-4dc9-8ea4-85945c6a1f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b93c20-8761-4105-aa7a-725554e81178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeff8532-3231-4faf-bb5c-6454b469c0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed41b922-884e-4f0b-a906-3d60f6797661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757be3ff-2fd7-4dc9-8672-67974413ef1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c6e38a-915d-4f4a-b0ba-31ef880fd1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.101.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8616548-da30-41e0-b2fa-60bff51b67a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbac9e5-2241-41c8-bb0d-a22f13784dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.72.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626af175-969e-46a5-a8d2-d24e2518a3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fb9547-c4dd-4683-8fb9-8ed9ed642c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff0d160-629c-4fed-bd3e-c4d67932674f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.61.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b86ff0-5422-4ee6-9744-a874e38ae1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.123.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea03aee-48d3-4c44-aff2-a8f847116ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.19.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2673b78c-7e4c-4b34-a958-83fbe39cbe8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.80.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9cc29b-5ff5-4ac1-bf69-dfc8494d5381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86681767-7ff6-4279-9b5a-1ed8c56a5f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d502008d-9319-436d-87bc-47486932f52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.228.236.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dd0f78-9ae1-445e-8dcc-31f26ececce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.62.16.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dabb47-ad09-4e2e-9759-52c0e022b9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7213d47-1bf8-4ad8-add6-fb38dd558418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fa1c34-1d2d-4b40-8438-9bae20f9fb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.228.66.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff861c2-3c8e-4dae-bd98-1a72117f43ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.143.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26ed99e-8579-4f3b-8fce-e120b956551d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.35.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b71da9-40c1-46d4-b9e9-ba9f918e7f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a68fe9c-574c-45cd-84c2-14424e82fa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52fe188-f300-4242-8960-215d2d6776ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0ee0f6-d168-4074-90a7-91f1e2b12f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bfd593-eecb-475f-a1e3-465b9d4c4bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61091aa4-cfab-4d70-aa9c-b0d3bfa55108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814b74e2-c19d-426d-b03a-3276535e5e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069d3409-740d-4c95-8599-0ebd6874e21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.150.0.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2231350-69cd-4983-8e35-e82b75cefc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.155.12.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac79e14-ebd6-48ee-a65f-2ef16849200e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.168.6.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14486fbd-df18-4ff8-9285-87ddc1cfa2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c468e81-e8e3-4890-a374-cf5d6658374f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064af5d0-a900-4b85-962e-df56c74aec0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1159e895-cf6f-4e9a-8954-99b3c3bed9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a64d47f-224c-4f0b-abd1-a0ee191ff7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750ff906-ced4-4691-9cb9-ce77aeea1639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629c1873-725f-4908-86ea-7ae4c5329457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776553bf-a8e0-4cdb-9da1-56d95903e302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835b68ac-efdd-4d37-b4f7-04969c6d2861", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.244.140.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5472cc3c-a9d6-4d8b-8562-fbc90d08e136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db43f7b1-2b27-4c4c-9e78-0d1dbdc52969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c042559d-a827-4634-94cf-3c22b832af95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1166a4a7-82dd-4baa-a8de-e529c2f97abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.81.146.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0867e4ee-7491-458e-80bb-8968eae75a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.225.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4161d6-b2d1-4f37-bd6f-590ece4bc58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.149.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598306a4-6773-474d-95b4-b34777283339", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.224.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adba6544-7a33-4afa-8be3-ce20f1667089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.231.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acb692c-f98b-42e4-b032-5a52f5592bd3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.117.197.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfc9655-6d2e-405d-8411-4844ef79f647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.24.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7217fabc-4ed6-4ef8-a782-46421a366bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.28.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6904018e-4660-48f5-8906-bd5009ff1c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6857bbb-ff78-4dd1-86e6-aa0b303bd393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.224.87.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466e2a34-6b51-4b37-b344-013ad88329bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b065a58b-1bce-4caa-98bb-d04dd608dcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.47.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c745942-59b0-4eb0-9c32-604a67096be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.93.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e64754c-8de2-4c0c-889c-3fda40875ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.8.138.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b690ced2-4e1e-461d-9e89-f95a6465d916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.80.9.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e21c86-3f86-41ce-a258-0481e1a90ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.91.6.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cfb867-be4d-48de-9562-8d5193887706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851ac744-d796-485a-b787-869e5fcf0548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166205a0-e624-4bf9-9e55-96f491722fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace23bbd-3069-4e33-b7bf-ccb1480cc220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89211e36-a640-454f-8b63-440fe2cda497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e351cecd-da0f-40bd-a13e-a925d782ca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d4d211-748b-4919-aa53-2816faab2a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2a04a9-d857-4136-af49-c71692d858a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a207a5b5-7762-488c-a6c7-f53f460be8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5610d4-95bb-4673-9c32-21b395d2ea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad328bd4-4c5e-4ff3-aead-90babb21dfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f14a5f-7b44-4f41-946d-1127172571c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c75a0c-ba20-4ce1-8df8-f7dab4bd8828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf6a6fb-6057-44df-ad05-b957cadda29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026b1b8d-ebf0-4584-b750-234f758e47bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46a5d65-a29b-4c86-86a1-0c5caea509f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d22cd8-177e-4fc8-8c2c-45ffd25d3d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9746390a-70d8-409e-bacb-7af49648bdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f065d774-82c1-4864-b583-7801da108b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d667d23e-5889-4a7b-9130-6233ff6f3f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4144137-5181-45f5-b62c-1ef8c1778d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f910d9-5d6c-4e90-a41d-8dd14b698f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32728d39-664b-4f2d-8dc0-22a82b42e744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7167690d-f9f7-4c3b-b0b6-13ddb7fb9d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.64.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df97eddf-b949-4bd2-8b76-aa1e1651705f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.93.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27b4292-b77a-4361-a706-7294cf663740", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae982cc-6fa8-4338-8a4a-66fc87709068", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9c9a6b-4ec4-4c4f-a07c-0c2aa272af15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f55e12-944d-4ee4-84e2-894305f3ab0d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a455cb07-192a-42e6-b6d0-004733b0ac03", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3fed92-9727-4cea-b947-da371c744f9d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba3e129-6945-4a50-a62b-026a6f559847", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949e6628-2511-425a-b221-6d5c5aa46a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.17.249.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80badf8-e69c-4a12-9404-7c0759a9d167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.243.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa3359f-db31-460f-8d63-771667096516", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.131.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee2c6e7-a60a-452d-9503-a609fe1285ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.188.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc759e7a-9156-4015-87c3-6d0412e44f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada449da-3c92-443c-a02f-0c14e09a1846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31efe0f7-c4f0-47c0-96a1-b954fe48b3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.5.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b426ab6-3b40-44ad-8a0e-c2f459b1d5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49003bd-1f2b-44f6-9d1e-ac6a1a63aaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.119.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41032e9c-8370-4554-a330-9177203b338b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.119.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9173c16-73bb-487e-b17b-361991fcfde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b954173-73e8-4001-ae7f-6ba95ef2c369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.179.52.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87424114-76d7-4620-892f-3573adbc76c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.192.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde1e137-4938-487b-b3a7-d1ea8d96a2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.213.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14455e24-eb20-4924-91b1-323ae0903dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.225.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f0d183-a20f-46e8-b540-4bfaf118b640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.95.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4beac4b4-d2a5-4d2d-8242-8a8e235245ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.184.209.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db40612-d52f-409b-8303-6f2119fcc5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.112.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151a17ce-dff2-436e-96db-80382488b235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.2.5.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1c20c5-8835-4d9e-b262-2d1b8bb0cbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.105.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8429ba28-07a3-4e2e-b2e3-0aeaf280693e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def4ba61-764c-4833-bcde-fc1d17ca0b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adf3281-3cb5-4ee7-a6bc-43c94455da87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41607efa-c4dc-4957-9c2a-be5de110fd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a70c312-82d8-47e3-9621-3717b27e3451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dc25ad-551f-4217-a457-ade3f8ef22d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1c4548-5055-4734-9dd1-7117ea41aa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2144a581-b1e2-4cc3-9e05-917748ad4770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f06b87-8c13-415a-91eb-5562eb9f9d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ebe9b1-f5f0-4b03-ae07-d88dfc257329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4659fd23-9027-4b42-b9d4-370a8c2ea049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ec2c24-04f3-4afc-a668-38b512c5611e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7d1da9-f65c-4388-8646-a200117dad49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de7c561-e5fc-44c5-a762-4e950ba8124e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a2715e-a574-4ba9-b855-d728cbbcdae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2e819f-f345-4ec3-b59e-12e276b34ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47cc3b0-a881-4f28-843c-55f344fff21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4029521-236d-472a-a221-bfb5e399c171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce777c8-31fa-4fe3-a2ca-ad3626c2b4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417e1028-8e34-4bc5-b31e-bb60dc537de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a68d3a1-ef9d-4339-9dad-00515d20f13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cba851-5077-4fc9-90e7-ac985fc4dcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.224.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3541022-89fc-4e38-86d3-1006054a1cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6d8361-1d85-4fa8-b3f3-fe8a4bb81fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.25.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6af099f-1496-4821-b0e0-9a39337e5baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08cfba8-a711-4f77-ad0a-c465f164e6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbf91ef-fcd1-4631-9f26-78262e5701a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.81.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6899a338-8586-4e84-8019-6b4b845a17f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b09c4b-9817-4f86-b8d5-2743c98b7e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55aa3047-837e-43ec-97d2-553eab88a5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.211.56.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa435e6-afd5-4382-b177-6a4d68ee72be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.179.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39559dde-8825-442e-9e68-51071c5211ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd5f914-807e-4da3-9822-fc327fa08d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fe9162-7c50-4df8-8fad-f8f3c8c060f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c86b3cb-a586-426b-aa77-54e29656546e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940ac1fc-84c4-4e7a-9033-d5d556bd1918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e26b317-b7c3-4da9-89ad-436f96bda736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f3d2e1-ee16-4834-a61d-5708b61bfc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f86c24a-9c8d-4921-bbd4-5d6224b38d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa04fac5-f9f9-473a-8fd3-e14357d5a384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f221767-28fc-494f-a9ae-dc56ec802a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90399dc-5446-4a4c-b8cd-fad673f063de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b2154-08c2-4315-9061-e8a4aff71e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019cd511-45db-4e2d-8d32-a85b1a8d0645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.104.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c095dd69-30ba-4ef4-ad4e-fa54a5cfbaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dd9f12-dff8-4bf2-8601-ec3a8fc8dfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45edc7cb-89de-45b0-a510-e228f3f254da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cf6134-3a31-4d08-9682-f6aec774a226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365340cf-e495-4a29-ae27-1fba6e47d54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceec511-7b1c-4166-bcaa-269882628d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15d3846-8281-4cfb-9745-42a898a223e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcac7a12-4696-4f46-addb-bcff027b366a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fa1096-5c73-42e2-878c-5ae05aa61df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dce6ba9-3ece-45ad-933e-539e3bd61d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51188a6f-8b4d-4ff2-adde-6031e4d432a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80c84f6-bae5-4c70-8476-b56445962b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db507f25-3119-4275-afac-78f79695a2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d1359a-11cf-426b-ac2a-b5107ac7a7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.219.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09225d4-6997-414d-bc11-4046e3271579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed01490-f7a3-4a42-ace1-7bada5f75d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.231.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9d654f-3af6-4b18-a96d-afd2fb47bd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ec1a41-1903-4f96-a477-db1b960dc6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8296b42-9642-4276-a16c-4dd257348b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d38347-e6c5-475f-be0b-d1f4d7b17a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0627c121-35f7-4438-b947-9df4459dc0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.84.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a05f5e-ade4-47d0-802b-7b2fb0975d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d907a4-2a10-4bce-877d-b4635079c5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252d3638-e84f-4428-b182-903c17dbe87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5aefd08-0e5d-43b5-a117-e2b562d9f097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bddbe6-88a9-41ad-8ef0-0f3784902330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041df810-b775-442e-a666-cac219071ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ee3ce2-fdd4-42c8-b80a-12191099e5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52134fd-5b22-4441-82d7-6fa4c9f5d5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186dcc8a-bf36-4d95-a59b-5df4542450db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3c640c-32cd-4a5b-8919-49f448bdc684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990b3633-cf7d-4fd4-ae08-c35e54fa3206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67985dff-f9d0-42ad-a6c9-18e1cf68a3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81fb5cf-9896-4f4a-baea-048deb04d03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7344cd0-e0b3-43ea-a83e-243c88e4a8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127ee514-b169-4057-8986-a64445d3d3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d34925e-b1cc-4ecc-b7f6-13293a5ea58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce32b34-102f-4bf3-8470-775ee4746f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e442f3-e93d-427f-aedf-25d1ade215fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703df276-8630-4b38-afe9-97024a7ca689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf20f06a-7996-4e1d-b87a-3d05b5fc799a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce35c80-f3c7-452d-8011-65492a27d59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ff8791-bac0-44e7-88c9-79621638d411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb1b48a-62c4-4c27-a0ba-958550c4219d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb35c894-2b2c-4d88-9ded-50cd7a92bb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa2b8d7-f049-48f0-bd88-5f6c77e3ad31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3eb245-5bfe-478b-bff7-c87109ac1417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521aec8c-5829-4c0c-a7f6-4a43760fcec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6d1813-29b8-4069-8487-8099373079db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c423214b-7814-4b14-a3b4-3b32c99f9ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827ddc47-ef24-4640-b5e1-964c8bc71ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8833d6e9-c4eb-4c96-9ab8-10c2ce820557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27af5c71-67cd-49d5-a6f7-c1e5fa066073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcff4ef-3415-475a-a511-ac53565318c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc1448a-f735-4bc5-bd87-477fc9e4b667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.241.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7c2567-3b20-4173-8bb2-05262bfdabf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a4c77d-d0c9-47f7-b3b2-7835af79bbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58736bd4-8294-4e5e-82dc-08cd2259c09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.212.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a47247-f622-48cb-9e23-f1cdfc7f3f8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015a7ecc-1187-4cce-a6fa-21565c5305d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dc86ba-377e-45b3-b6af-8684f1f6bb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9920da2c-2fff-443d-8391-fd0ee7355f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.205.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afd8a11-8712-4de1-88b5-bf8a2d43947a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.213.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ec1e6c-cfb8-45e3-91cd-75c6b96af8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4514af2b-9b93-43dd-8d72-c904337c7782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.220.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7fef20-ff55-4c20-be4a-d114b836b050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638a807c-6c47-4eb7-81fa-50687ba29073", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.213.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d561f0fc-f4db-4f4b-850a-56da7c3d3901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d894733-419e-4581-a1a5-b019eb734969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54634480-755d-4b2a-b983-bd50565b257b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9cf7ed-a269-4dab-9fd7-ad582cf8dc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6182ad-d69c-4175-aa48-2ae35cf5e32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ee3371-83e3-4dbe-9fd1-db4e0779e1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c900dd3-01d3-4049-8dde-9a67d2b3c74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca838e6-6e32-404f-8d20-bb255587af08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9f930-1853-4579-bd66-ad4c5a9cc8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211ee587-073d-4cdc-ad10-96487a83fb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5012246b-1c88-4c4b-beee-217511312cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2c6337-8e42-4c1c-af45-822f1d816436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa9b1a5-ec00-426e-b0d9-c6ab4678bed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816597af-4784-441f-94ce-3c66141cd6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf832ae8-3832-4974-8b7a-5b3fa9b29628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743639a4-722c-4100-8fe5-f9f412a39c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065581fd-5ffb-4b08-928f-cd2ddabdaa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464ab512-3535-4bdb-a309-4869b889a713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75f6f34-693b-4a2a-a984-e59e32ccc117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a853eee5-ac09-4829-8617-33e45e594c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4473b99-dfa3-4f56-b9fe-c3212d438758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc8bd6f-c361-4be7-9f76-de915007547b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2201dda2-f5aa-4ad7-9b7a-c7dbd53e33f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0641324-0c32-46f4-8a59-6f07b9ae3ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a593ad3-5d57-4bdb-99fc-08ba4d3b73e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64c22c5-6c8e-4935-bef9-6b2b30ec0ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16246c3-bb41-445f-b48d-3cfbdbda7d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae8fd1e-e533-49e6-b3ab-2ceb1bc7c4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.94.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db259d36-b902-4767-b840-234daa62a779", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.35.25.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83686a3e-4ab5-434d-958b-cf99d7a17190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.101.31.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfd7d41-2b8d-4482-b3cd-07d89a12c63b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.36.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aeec2f-a5d0-4afe-9e8f-0115a155409e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.37.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43551f38-3068-4332-97b8-2bfd3bbb2f62", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.13.1.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaed31e-0d58-4130-9e34-a128a4cd438c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.148.152.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfebc77-9e4d-49cc-bfc1-094dbb628e58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.178.110.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6396334d-5cd3-4995-b422-842692f7b4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.181.100.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14c86c5-028a-4ebb-a265-5ffcfb343d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.19.75.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e919207-c85b-4925-8c82-56dfaf1ee1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a375df6-83ca-4364-b2aa-32dd1a4b9420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad97bf6e-55e2-4774-898b-57a6b6db9508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.25.19.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b3deca-a701-451a-bd95-c779171b9d56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73f7f77-798b-47a8-b5c6-132cb52af8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93151b9e-0beb-468d-b164-ee1d55ff31a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770e50b1-4c2c-411c-a180-efca8ff554c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c9b862-9448-4528-8fb1-7341079ab851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.6.141.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d7a22f-e31d-4e59-9cc3-a29e5de777b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.128.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7023818f-6b4f-4ac2-8ba1-60ab13a6e984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d32f6c-b6e4-4f8c-b5ba-483171acfa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368ebe76-f97e-4ecd-a1d8-ead55107c3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77332965-8a0a-4afb-8b6b-b539fa685809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.171.20.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0efe41-2dbc-4a2e-8ae3-9e77b348939d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b1dcff-a518-4c45-bd00-d5aa8f09c563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb67ec7-7221-4bcf-9520-0a426441882d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3e5848-a702-4b9c-9ccc-7e71add290e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2792da51-aea1-45e7-8091-2d2e08637f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec501f94-7cba-4a61-b246-383be834ac48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821b15fa-7a9f-4171-92ad-b50099adcd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e61b9ea-7759-494a-b5d5-b27bf553357a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe517cf-6bbe-49ba-bdae-f4290a8b4ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3025386c-9970-428c-978d-28529f82352e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93283c4d-0df8-4e70-b066-47535f8268bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1103cc-0712-48b1-9220-91b8551261bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e2b0a8-cecd-4d13-be87-45c94aea097c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea24b63-d65e-4299-88a4-69eef26225d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f51bbbe-470e-47a2-8ae0-86b5b846f2bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f4cbd6-ba08-416e-b034-b245f095856f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b100f8-eb90-45cd-a0dd-7994578aa852", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305178c8-833b-4702-88fb-59f351daeb31", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ffc107-82a4-45f7-9e4f-b548208e00b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6df4a7-2960-4078-ba5d-76bc67d146a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94176eca-3eb3-4a11-853f-c900c4ed25e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96488fa8-b1ec-4f9f-bc8b-243072e7c036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ea4c21-f0a4-4e71-bdad-f84bcfd70633", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0352e95d-6e86-4705-938f-e4dc39bfece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f7045b-6cd3-49ae-98a8-b881e7d0296f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eecc41-04f7-42d1-85c0-047b33e89cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf67286-2aa8-42ce-a0f8-d482b4fcbe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723fb47b-3eb3-41d5-9b8e-04e1e06e2919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36019b7-a6ba-49df-bfbe-5235535d6aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e729499-c2e8-4274-aa35-1d47ba01b931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28967f52-72be-497f-8ed3-919853d51579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cb7fea-7ed3-4af9-99ae-78c3aa06b85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933c7cf2-2639-40f7-9d15-ba0bf1ccf733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5838332-d0bb-49f9-a243-b0c6da23b985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7389caf0-b8c2-4cba-a382-d675710ac644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2226aa0f-b999-4e1b-86d1-f4c21121a4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0bbbc9-f28b-4487-8c2e-d97a5f7194c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa379b36-e158-4a51-b365-a89a79026799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e89406-6056-4acf-8e22-d8b05cf81dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea567b8-257b-45ee-bfe3-0e1c69574cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a355e8-3d43-49d0-a119-c05c809854c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3ba100-2535-4d0e-9df7-550b08038563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c450ab-ff78-4ad2-b61d-e238b1c6b1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad8a00e-7684-4abe-88d4-69036626dded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef6fe67-08bc-4b5c-99b5-402477daa05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d82399-7141-438b-a2bd-967a92e37ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f662813-d0fa-4985-b080-f3a2e78b5da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb4322e-a0a4-4c20-9be1-fe58883d2571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5730067f-c64b-45ff-b02a-e2c978ef861a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27f5f20-bd9e-4992-99bd-4c92ca510951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06a0752-1547-4dd4-b781-0356d4e0aaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd75e085-39a9-40da-b0f9-d13e8e00357d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e402b80-76bf-45d4-952f-8f2f6159d0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c14c1a-fe86-4b82-aa1a-d7e6fb2e2c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4256127-1486-49b3-ad1e-d76184309513", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.91.208.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90c80ec-ecef-488e-aac6-ee9986c25f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.11.86.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6041c8-dded-4028-9b9c-4d39997c6b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.115.218.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3835d48a-47cd-41bf-b6f3-3767983766da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.172.66.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313649f0-e02b-40d4-8f29-502eac0c1ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.19.210.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d54396-c23f-4532-8540-acbd182d6f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.126.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b0092c-21eb-44c5-9558-c3c08b4e7e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb91421d-fcfa-4ddc-abad-6b1acb91e9b7", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.124.86.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b138f36f-6f5f-452c-8f56-1dcf6e56704d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.185.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6571c906-29c8-4246-b8fe-171cf323926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.207.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9a26d1-2cb8-426b-9580-696363a811dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.224.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3688310c-77e4-41d5-bf28-cd4461252213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.246.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd79577-4dd6-46ec-88c3-8bb9f36f549d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.250.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabae1dc-5822-4325-947a-66b6dc1ef333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4671a3c6-a1d5-4f20-803c-8b06a22bef75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.153.170.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d1c1f-5582-4e54-8e5e-6ac00a053aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dde1fb-09ed-4657-a5ff-5e9dfaae4ea5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bf6be5-9821-46c4-ba3a-a9dab546e654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b2d761-38f7-469b-ad8d-253ae5e3af07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d003c0-6842-44f6-a9c3-6470562d55a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3656460-ea05-48f7-b21b-0589f779377a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.18.200.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ff1283-008c-47ef-845c-076522dc940c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860290b5-8b15-4aaa-9c0e-84523eb8b8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b70d6d-7867-4735-8668-8ccb2a5811c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f80ee0e-bec2-4593-b1c6-2a45f14c77fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.11.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4fc233-d3df-40ba-8ac6-0784626a19ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.13.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d7a12f-d607-469d-adb3-5749050948d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4895fcb4-ebc5-4d0a-8043-d973d9d37511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.217.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4427bba0-7347-47b6-adca-840f26ba210a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.87.234.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b65c907-1568-4f75-9961-73b746cb2b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1c0682-7496-453e-ba45-0362292ce779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c33712-ba62-428c-9ff2-6f8150a60b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9443a943-90d7-4789-93b6-b932722f1700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad8c55d-57a3-4b71-97e5-d595447af7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b640337-ab4d-44f4-a85d-190eca44b0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34720f0e-748c-485a-ac3c-724fdaa9de8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.36.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da48e1f-e371-4f90-ae2e-ccb67fe56708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.37.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add62379-5036-428d-b42a-8e4c43119d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.38.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2002d7f0-c45f-40f1-93c4-cf5179040acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.39.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44caef4-fc98-43c7-9700-450bb991d946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.39.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf874a2-a7e2-4571-8b4a-d025da22e2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.95.39.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8682073-e752-4afa-bdad-cabf363e13bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.108.83.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126cb1c2-9cbc-4169-9532-af89ba3e981e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.131.162.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c2865f-bb08-48d4-bb3e-8111cebf48a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.46.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab891a3-242a-4291-8d4f-b9e5a90e458c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.213.0.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b69485-57df-4860-973b-549d6b4cd448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.38.136.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2121643e-7b88-4862-bb95-4cf2782cd1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f712fd34-c36b-4c96-914b-c581f257cf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85473fde-d714-4dfc-bec2-85b05be40653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba43ce9-70e1-400e-8ad2-e4768c5904bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.57.170.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57490c85-8a4a-4fe2-9914-91835df47f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed039208-dbbd-4419-ab8e-f142078abbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.117.115.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb48c21-cbb9-4f46-9e96-75d8ed1fb560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7117e9-fedb-45ae-9d4c-c8f1a58d6b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.40.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91df85bc-ca98-4743-b45d-06ac5cbb6f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03116766-cb01-47cd-af45-7f718d6482a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dc1cab-8154-4232-872f-dccf68ce4e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8cdd73-7452-4c3a-b509-1bed80fd43b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2830e4bb-8b04-4e5c-bd1c-cd83f8422094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.56.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b7ac87-c194-4bf3-a452-3b44131352e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d82057-5447-437b-b4ac-322e64f9e761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646f15b2-fd19-45a1-8b2d-3eeb6bea1612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.134.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdff270f-c422-4907-b7eb-1743a8d7cfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.180.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b0f225-5bef-4efe-bcac-9e38f1954a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.208.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6a362a-b7ca-456d-a3d6-c8e69e7e79d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.240.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fc7b58-35f0-4acb-89de-a109c9eee287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.249.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ad3da1-b8dd-4ea5-a4f2-ac001e78f4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb36e2b-d39d-462e-9caa-c18dca5dec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.193.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765ade75-c203-45a4-96af-ac923ef40f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.33.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0730a49-3ca3-4a0d-84b4-09667c61cc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.95.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c715283a-4a47-4d3b-8c57-60ecb357e5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.225.176.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fda85b-c1a1-4295-a36a-0abbae19ff80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.13.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f82a26-d446-4ee2-bbb9-a9aeae316be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.89.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f707b315-d612-4a32-b03b-443562533db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39987fe5-7691-4992-aeeb-1a71a462de6e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.138.194.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c822886-dd1e-42e4-939d-3b96845ebfdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.141.211.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6943e27d-4d33-454b-a5e3-9ac6e43badf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057c6095-e3c7-4b3e-91e3-658523450866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a064351-16ed-40e7-a690-a5b4b60a270c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.171.98.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a1f712-0cee-4251-b7c3-b8d01196e80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030e5dac-7807-4eb0-96b8-f359a13efb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9ab101-a83f-42c0-a563-413af281845a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.232.31.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580add64-4269-430f-9909-ef79e0500968", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd84f250-c549-4225-8403-4f6aca056ede", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.173.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64c9bef-0f59-4a5d-b190-5fc417eadf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050ce547-3038-4baa-9363-1b22e0b2c1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.233.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9318f4-a060-494b-9015-bcb52076bc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.243.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383947d6-8fa9-4297-980a-2dcff5ef6897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.0.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd2ed12-032c-4468-8bd3-8c8d9ef6a092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.231.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5345dde3-f0ba-4462-8ac4-31daeddd1cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.97.215.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a4614b-60cd-4c93-b3bd-c1bf8465b6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.97.221.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564832ad-609b-4552-aff3-8bdbec09dbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.206.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bb6277-de1e-4401-bb5a-26229423aaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.10.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de76734-299b-4fc1-8012-6d804f5f789f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.12.133.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5049fb5-8b76-4f09-9e3e-02d2ca939c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.169.186.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca1521d-c7d8-4d49-a662-07d0f5f47d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.176.62.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e48bceb-5cb4-4696-ad46-a34b9f8b76b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.221.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdf7fd5-c069-45af-ab84-ff8e0b869ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.182.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b1dca2-3037-4c75-93c9-9dc034c1a3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.226.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2630e1-9345-4828-ae42-d3fb74745bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.65.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fb9451-3b16-4c84-a0e9-9d0cb62dc87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.26.4.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95212981-e685-4b18-8f76-a1d9c1c8ae7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.45.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33ce461-4343-4f47-bd58-04e205f6daae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.121.84.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce522d72-6388-4ce4-bcd6-70f5c5c3d634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff1df6d-79d2-48b9-98ab-3888f731efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647d0b0a-9009-4a50-b90e-1764787ce156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faadf8fe-5ee1-44da-aaeb-fd231822c2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.148.115.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eef7ce4-9e4f-4276-b3e2-335b4ff1bbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6780ce8e-e621-47e3-aa26-08e38afdccd3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.176.129.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39590d76-6e14-4656-96fa-4f218b0a678d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.176.91.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b664b577-413f-47ab-9efe-2ab0a98bf888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.169.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3293ba2f-5830-417a-8cc2-ce67f3ce0ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.208.28.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5edcaad-ebec-42f5-8496-08c02ce0844d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3965fc8-0318-4a97-8b2a-953db6d465fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bf164d-0995-46cf-84c8-104669eb53fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72917e46-ae65-4a18-a99b-fe40afc5d206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c364cc-d080-49b6-b288-f1768c5dc274", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.211.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017ca285-29ac-48ba-9e9f-ceb06baa8302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.46.234.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5700c08-03f3-473d-b8c9-7e5192ada896", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.83.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a355394c-10f1-4dcc-b040-0a1c069e7846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79949f72-e57a-402b-9f2d-3ff275884509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1784df3b-a5dd-45c2-bae1-bc3c82ae07b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec716b45-c6af-4e9b-8686-475bff5638d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.77.3.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d25f78a-b739-4e41-8ff8-f3f569586633", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.83.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9707ee96-7524-4b53-ba2c-9156633a666a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.128.176.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf02a9a9-884e-4da5-aaf3-9fe2701a602a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.31.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e513ad3d-0877-4d3f-a6a8-737ce8fa7346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.0.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5593280d-6fc5-4b2b-9b70-ff8be497740a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948d767c-55c1-46bd-8f21-16cc05e5ef2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.222.230.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c545f5-2b0a-415f-bf6a-5b39ab1b84ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef2f3f4-2655-40e0-8d85-f410d28da57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.243.222.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b78225-adf3-4586-944b-ccfef16927d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709919c6-c20a-4b0e-920d-8784d6071372", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.219.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d99440-7a2b-4dc5-870b-ba6d29660ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.169.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4736b9b-775b-4662-a386-89098855fe2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b9911e-3a38-4d8c-9a87-cf8248179d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d19e56-8154-437c-bb32-a04494d47aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b142403f-70a4-4d45-b402-132cbd9ed0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.115.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89a23cc-369e-4b36-9abc-4bda40d75686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4347aefa-5fbe-43aa-9822-1298552c5b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b686ea42-85b8-41d6-9eb0-0a743952b674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effbe603-4337-4b36-a8ac-622893e9904e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf459a09-dd1f-4bbf-9487-448790eb4b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5525fe8-bf34-4508-8d60-22c697915a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4ece2e-2986-477c-b4f5-778c4ff4b4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c247bfce-56a2-468a-943b-32ea4476fd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf6c318-738d-4fcb-af1f-a4f6304e9c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3204b763-bfcb-47c2-95d5-597f2b5c92c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d4fa17-9497-4c46-92e4-f0f6e4f95f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6258884d-36fd-4dfd-b94e-f6e57fbbd78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a2830b-def6-4a38-8b3b-29454edf843a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce66c1c-6c15-4ea9-a9d1-7646df280b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8d0722-c765-4692-8551-c40be1834dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb3cc50-bdea-40d4-b9e1-6cd9394036dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1588dca-d8d8-49d7-bfa2-885fc169b65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8e74b1-03da-4418-a41d-d0dec2e44edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b770be5-0f1b-439d-8787-235e59119573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd6bee9-a689-4b31-a534-04b05c636925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc3f1c7-31ef-4942-9c05-8725cd371bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f597fb8a-f6db-40de-8be8-b955f5b965c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30af48a3-fded-459d-9dd8-fe50a6a6316e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214241c2-5e18-41f7-a645-6839d2afe8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a205a4-7ba3-4e64-a315-37887d21b845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af7241c-6bce-45f9-94b8-c00404c2b1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc89f337-c956-4e4e-ae03-916de747a551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf4cc39-0604-46b7-9350-784c1c25cbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d75ee8-7c7c-4a0d-81ee-81507c04f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f45d40f-720b-4513-85d0-ec2a979d8e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc481b53-424c-4b98-94f1-5ce9b19c51e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ab5cc4-4d7d-4ba3-8bf2-483d59ff8d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c464812-eb9d-4f6b-97ac-e7301de3f2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e79275-5613-45a5-b38d-4650e26b4fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5bb643-6687-48fc-b1a9-56671cadd41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a3f538-9d74-4e86-8f9a-092a526bbcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717f6e37-99a8-4ee1-b892-2f175d4d05d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4371915a-409f-4720-bd5d-eb83b4183480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb36acf-f50c-4221-b13c-fa80007636d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7eff3ba-c882-4151-bc40-2f89e1c57b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e3c202-2c0a-4566-a3bc-626de368bea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9cd35a-a417-4450-b91f-76935a5ba665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1833f5a-e645-4658-a5ae-607957361df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9e2d7c-efda-4522-8016-736a86bc7b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23e4a36-7159-4218-90ef-32755569c56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca9206b-21e1-4391-b9e9-661995177981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc58c4c-bf35-4c16-94ca-ee2a1d825489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c89aa91-1e9b-424a-aa5c-de004f4098b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67a6697-8beb-4bbf-92cf-05c182541cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760c67ce-743d-460c-99b2-d1f47df6c8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1196cdd6-7691-4a8f-a3bd-28ddb8ea426b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16210db3-1676-4598-b225-101f5018fe1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8fb211-a91e-4436-bf91-bbadaf722baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b336f087-68f3-4272-b703-8646f65e4522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2d7e2f-8b6c-4482-bacc-2acfddeb0309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e232899-a29d-4466-8aa2-81310daa737e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ae0571-e2e5-4ff4-8a0b-a4bc614d1f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84327d4a-6117-4d25-90e6-168d7c794870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b9939b-c277-469a-b320-e7b63e9eb1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce03e1fe-d9f7-4961-a030-6ea83d099874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ce3bdb-bebf-40da-9e56-89bd113b3a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d035fa6-ef5d-4bcc-9b1c-99b6937529f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a468436-d46b-4fd5-887e-6faafd841ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6c0ef1-987e-4c88-b7d5-352490b2c046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3608a23-d077-43db-bcf4-a125750a645e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.168.147.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c47392-56ec-4cea-b291-b1f3859e13e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.201.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c393f23d-bb65-4a2f-96ed-3b33ea1fcca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe69b85-410f-4c81-a170-b9c3120c65de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.101.33.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f141ec24-ffe4-4c43-8e96-1bacb5adf87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f39b6f-3f3f-45ea-b1ac-ae45705448ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.113.139.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59a1b8e-3e6f-47c5-99d7-8b7bdd0c77fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.214.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd41607f-8325-4cc2-b30d-e42a7207076a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be8184e-e0d7-44fc-bb74-a4291c97c8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7426854-a4a4-4435-8451-84aba4190973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.239.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce626d3-a023-4926-8722-7739c7eca336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.239.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40d958e-81f4-4f3d-bf12-3397c9316d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d370de68-6565-488c-b32d-9b18a5548f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38c98ad-9a80-4819-a2ed-c1a38bb38a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa67ea9-f8e9-4f93-af4b-23fc5201cb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa0813e-cce0-4c96-8c0a-27927b0a3d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.137.152.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b19c969-9d13-49d6-9d52-3a1ad09c8c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.2.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd910e3-c87c-47a2-8029-4d673422c099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.149.26.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9034c6f4-ea47-4cd7-9c6d-a29ceb1523cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.158.23.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24f69c4-097f-43cb-86fb-8df0bb8f9ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.16.30.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df83a22-983e-43f2-8490-9e2df26f04ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1fe544-d05c-4fb2-8129-517389b898bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d883153-b177-409a-a7b6-18ea428ede64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98680e7d-5b51-4f47-a9d5-3760a9c61e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cebcd5-72ab-4f3f-9ccd-3f089762f605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fd9815-34ff-4e46-b788-5b4835bb0de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c43760c-0be7-4e7c-8648-0855a975e466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45279236-26d6-4bfc-b7ac-dbcdd332792e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8164af04-4726-4b6c-b0cd-c0d291970f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48242adc-949b-4765-af26-ff8eb779f740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd1bd72-e2fe-4216-a7c7-c6b0287927d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85e29af-fb24-40e7-88a6-01e18f60288f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2c9a94-452e-4879-a39b-6eb8aa6b236f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e705f5d-803b-48de-b80d-3bd8a666d80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6a967a-9597-4799-8d7d-f715fc9170f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2919c449-19a6-4836-bc1a-8f02a78340ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e2688d-a111-424c-bb51-a953f79575b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d535b37-aa4e-4495-b805-fae602b3a92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502649e2-59eb-4209-aeb6-580436c26505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77f398b-e250-4ece-ab0c-21b143911188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d84d33-6143-4262-89d1-c4225bc7a767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06792fab-4464-4138-ac73-46aee5f56d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08598660-45b0-40ad-aaad-78a5e5e9b741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a2f9d0-bab7-450f-aa68-aac70d8a3920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae2c191-ef84-4885-bbb1-ce003e9392ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b762b6-0df8-4229-b3ba-3ea7cda770b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6807dbcf-b971-4bd5-97bc-93dbd13d626d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb9123a-51b4-43f5-ad7d-879050119e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9018e49-6fa2-43cc-b5e2-c9028bf35f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a43218-5e7b-47f7-b06c-77d656dee28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29676bf8-a044-46ab-9bf1-f0d3dc6df7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddb4f68-e342-4cd4-888e-a70919ac04af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf77c12-7a7a-4f0e-afaa-a56e98151c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f051d7b-eeea-4097-8fd7-6538792e36f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede2ca03-0571-4e3a-b54a-004659df81b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b89f632-f9eb-4a85-aa7a-68795f84b2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85abab68-fb8e-43a0-91b0-3ca30de0d556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd14fae-bebe-42bc-b95e-b6c8bd6aba88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7385b78-edb9-4df7-bf4b-9ade830937b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd55017-b87b-42be-87be-f311bdaf9946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e808591-9f51-4745-9e56-36e0d59d02e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f00e6cf-c075-4d3d-b719-8d2f24f66d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a328517-f01e-41e1-afd8-b5b598048f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b4f34e-b178-4840-b02c-3f243fb87513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e63752-c1f0-4cc2-b357-8061f7d3620e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dc620d-896b-4fc3-8f1f-ed7f1aa14bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47a5e05-f018-4b17-86d8-167fbe64c9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b48e4d-6582-4462-b14e-3e39c2c4809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75b17e4-3b10-47d3-9b27-c8b33ac0c2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc558d57-3b3a-4b92-a6dd-4d9d021e3c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871bd7ca-b1bc-4468-baff-5ce5af529c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff3edf4-8c8b-43eb-a88f-a142400bfb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edab0c4e-0171-4e67-84cb-4ae0c0dd8384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d99f7e4-1294-43d1-8901-947f9a1dc92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7129b5da-c4f8-4e29-ac2d-f4a1bfe9c653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b57cee-abec-494e-9302-4e3b382dafae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f59f8c-31fd-4f48-8739-7f1c60a6fd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527411fb-f835-4887-90ec-8482eadaa6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf793ed-b44a-443f-994d-782e8835a919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b811cfb3-59ec-4949-ae72-b59fb5502eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6af9a2d-898f-4391-a26d-6ed39fc5d339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ca86d6-5677-462d-9e18-3e4012da114b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782a4ff8-3146-4a18-aec7-3101f3b43f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bb87e0-ab91-4735-b9d2-d8afe8d4c397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62759c94-8ff3-48d8-b1ef-3ac748f6dcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862d8e11-2cca-4164-880d-a2fb3b80ecce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f33003e-638f-4b21-bbbe-973a8f6696ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064712da-6cb6-4127-b3a2-dd4d02ac2b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66571d1e-d2cc-4c42-9ec5-b50987638843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac34004-eeb0-4d7a-af59-993e2ed96b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5091e200-a929-47c3-b94c-f0e55a9af2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4743dc58-3e78-4ee4-862b-5f9fdfa45aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84802131-2ef6-4d2f-8210-27bc51a2e7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfe8182-4f37-4466-bd6c-1226f758194b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99372cb1-32cc-4cf3-98ab-635d21d153d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f26684-c44e-4ed3-836e-0c056ab7b3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa0446f-1ec5-48b5-a8ab-801d92aca575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33faab4a-6107-4e63-a210-ad218cdcec2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd6da3e-6d7a-405b-8043-6f9ef0104cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c422a0aa-ea97-4cc1-9dd7-f63586bde3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbdd912-a7e6-4302-956c-73e9525f8e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b8a940-ffcc-4b0f-a877-29fe3e07d8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ff30a7-90a1-4372-8744-052bee196530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f43c254-2aab-4b28-a95a-bedee2210c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb7222e-599e-4132-a1d3-b58d9ffb7ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caeaeff-d79a-4d28-beec-042ced5adec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b528dfa-00f3-4581-acd7-521cb15c00ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b6d3f5-b2ad-4b33-8396-ce66c5dd2c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f56fad-13c2-4a93-9a08-2b794b161fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14452abe-800c-4acd-b096-89dd88e45fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7744f707-e845-472f-9fc3-b6f64e041238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8927e5f-3c39-4869-8eb0-7ea5c59f7d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086ec2b1-1e8a-492f-a922-71030b5de0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b3b31f-7dcc-4c07-b022-056b0363148d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ef735d-0e77-4460-977f-7da5001b5950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb9d984-3e9e-4251-94b3-6df6a66e21ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbee2dc8-00bb-43a2-8ac2-e076ac213ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2d9ec0-a106-4a4d-bac4-21d5f7b3d9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e269e15-a81a-4464-9c2b-5ace881f46c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a947ac5b-e166-463b-a1d3-140dd22c32c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add7a8a3-171c-4ebf-a800-7c1aad9c0809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467359cd-cd13-4bf9-8fdb-aad0311a2e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b851f4-4eb1-4f92-b60c-53a4d0ed6281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7412c01c-72e8-421a-ac2c-64cff17bfd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfed361-be33-4213-b20a-47ccb05ace5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e9c985-d672-424f-93bc-44bebcbf4e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8495618-9879-4a69-bbdf-37417d723d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6969b3fe-3497-4835-b409-e28a19345a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cc1a53-01b1-448b-9a34-c4358fb7430e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44dd93e-186e-4cf8-82aa-7828596c93f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b84b040-69c2-412a-b62e-3b0121577b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e976b3-01ba-4449-b8b7-bf8da7cba84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616a3753-93b2-48ea-ba50-164fe7319c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f032e603-204a-494c-8284-b5b84eb3a457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f76dd7-99ea-4c28-a1b0-b808e0350dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a42c2a8-0c23-4bc0-8d66-12ed73cbb1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5398e32e-f66e-43e5-b0bb-f157763f6a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ce49e8-740d-4458-b3e0-121f92d35aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c7b722-6aec-4150-a4e7-1d9b0159c5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08f3083-004b-4c30-8581-448f52d5db76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee45ca7-73c5-4adc-8c40-4e0b27ed500e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da45c2c3-7a39-4449-97e7-64c73161f2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77821fbc-3c14-46ca-a865-e976f448431a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df535164-adf8-4b86-baed-9d35ae4d7201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea48637-2873-4649-8b45-0c8a690de71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4935e356-446c-4688-a1d7-32570031f0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e6dfe6-3806-4f7b-bcf6-fe7bd22f599f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a144810c-4439-419a-b4f9-cf4e93dee13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f643822-b58e-4e0b-8272-b6a5f1dc81f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d038f4dc-fdb4-42ff-b990-e5cbd85799ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a17f4f-da55-4ec7-8d1b-b06c5cb1ff90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae41700-c975-494d-b9e3-44e71e4a13c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6206454e-23ac-4226-9a51-a46c51218cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de99502-7f40-4669-8d1d-33dff6868c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e72e096-3fad-4632-bf92-6bd6e09a7f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338c5672-9e88-4fc7-97db-2de27a09446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f901c2e6-8129-45ca-a638-8258c6f3f22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86f4858-acf2-4a35-a90a-ee720c519877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f918dc14-a7b6-4a9f-9838-ecd732abc00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323d2f0d-6db3-4c3a-bc9e-6d1efc57cf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b0f24c-52ee-4a6f-a102-5f8913993cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4179bcf-78f6-42c4-af52-7322e62ede2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a378839-1051-49df-a5e6-2262791d0dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f55272d-18b1-481d-96a2-80d3142d6f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f5a999-9ce5-4ac7-af85-39e4ae9a74e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87981e42-ee0e-43bc-9e3f-fe19b9ea5e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178265dc-813d-4cb8-b206-e7df9c2fad14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72ef728-5381-4a13-95b1-72162565d864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e14fe0d-9ad1-405d-bdbc-99e60f4c1f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05091392-8f45-4eb7-be9f-df746ace8a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407f47ca-a76b-4e1a-9571-312ef84af679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4271a3d6-8c61-48c1-b51b-bbd6fda255f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e428e2b6-f355-42a0-b970-f4fab38c599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdfafb9-18fe-49cf-b970-5ea721add4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64146f2-9983-4f18-871d-071b8c65b31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9023e32f-7790-4223-a311-f8a1a0ea40ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebe7c72-f50b-4732-92b8-734433ab89b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b501ca27-07e8-4729-a070-6264c72120e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4197ca69-b808-479c-9ee3-d5ecfdb08831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1b6e86-102c-4a40-9748-5e7e27ae545f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54faa9c-4e09-4f5b-b7ae-e01a5c8dad05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac4ca20-d260-4930-a0ca-fac7a0bf960f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3726ccf-fc83-4b07-971b-103233ce2aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69354ae7-d397-4f96-9589-3221a3c3d6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d384b9ce-a00a-40d0-aadd-705440b93abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe7000-46a9-400d-9e87-fa88f0b9a2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b05da15-1cab-40e8-b29e-133d1ecf112d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d475fc5a-5e65-45fd-9437-28e5d6f23932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dcfe72-5603-4cc9-a914-641dc8854d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36de9741-4920-427c-b356-47b56fd0d12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d69ec8-7508-42ed-af6a-0b09f808a77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef4a94d-15c6-40f1-b293-93bd5296e165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da16b4cc-4b72-4b4a-af6c-6ad7544d2f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d425c2f-2cd5-493b-a603-9024982d0b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2fbe21-6cd2-4cfc-89fe-aab9ecca562d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dee544-e224-4fc5-b93f-0f008fb1d2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b49681f-3df9-4c87-9ce2-93c5447c0307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.128.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b0c9c6-025b-4677-b921-600a9b3ba6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.215.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93186aa-c4ab-4ae5-9186-7a1f3153b2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.174.20.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d821465c-9c19-471f-84a2-2ea432b4f8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.0.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb197c24-eb7f-48f6-a705-dec52c45dae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f825485-8a18-4574-afd6-6b34e6641e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fb79d7-1905-4aa6-b803-1ecf2f2b59d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4303f504-bc1d-436d-abe1-25611ac5568a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31076602-9b01-4135-9348-ffca75fe043d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fabd5cd-2c21-4a90-8df5-b8efac27c223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5266a2f1-af07-472a-a8d2-81fa963bfe68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57122eb-625a-41c5-894b-80e832e20bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102ce19f-cef4-47cb-8d1f-5ee11bf300b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bfb5ae-ee0e-4058-87cb-34d4f2d74e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce5a72f-0fe4-4f84-b16b-6d27499a0c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.8.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a594c2a-513c-4c3e-b563-037b0a835fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.183.101.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70f2222-d465-4763-a334-72c9db359dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c3d7d4-b70f-46b8-971e-c42f326b4a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7002864-509d-4a5d-9f85-feb193462d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4e51fb-4290-4f41-83f6-58a0b89c8495", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92392c8a-33cd-4444-a428-35ac7c04b54e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaec044-34fd-431a-9527-2093ed61d9b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8888db7-0b7d-49d5-9350-d71008e9ca93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fba5e1-7680-4286-866b-47199f90b07c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d73bfd-9ba2-48e6-94a5-d1ed226531a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86abfa80-0fb9-4568-98d6-53644eb8af7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced51e11-2c10-4201-94fa-bccc74830a7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f516647-c41f-45bb-9e5a-402eb5e80ba5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf57ac94-8eee-4479-8874-e15ec01bd3d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbf343c-4999-45fe-a182-ef6930f7d33e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3168362d-161a-4136-8508-b413bd6e958e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10164c3d-4b6a-4ae5-ab14-3744c655b081", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993a008f-d7bd-4c28-a5bf-29abfc183cac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88c7e01-3a54-4c55-98f2-2850dfcd92c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08ee64e-e3e9-4f78-9abd-928e595f44d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c570fbd-0809-4238-82d4-09861d7c699e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df8776d-2e0f-4efa-9aad-7f6a8f848423", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8ed2b4-9294-476b-9e7f-900ddf3c8203", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcb2174-425e-4681-94a3-775ab77ffd33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.194.178.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937c663f-abe8-493f-b579-afd4c050b580", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.194.178.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6dfc4b-2b22-4419-8198-20468b55fc82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.194.178.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69225764-65e7-4238-8170-5b368aa4bcf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.194.178.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd979012-6220-4542-ae61-366f9a915de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7721592-af44-43e7-83da-ec5e1d0f82b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64ce22c-a5c4-48d9-ad3a-de4fa3b72a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5593d6b0-b9f8-424a-b9a2-488603c357f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72033ad6-4bd1-4ab8-8ae3-ab9c75e88ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f3b484-ff0a-42d4-919a-31fc65d459c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328b514a-eb84-487b-99cb-b960ee87da86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.204.1.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0dd9ca-88d7-4387-952f-609943a3e020", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.94.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96319902-6f66-4626-9d36-b984ef0821f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.156.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d81cdf-95bf-4c9d-bfbd-b4c7ded4d157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11b5d7c-c8fc-4262-b20e-fd5144de8a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.244.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba517cd-7a9c-4b21-8b38-cd7d4d329d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182a9fbf-2e62-4abc-a913-48baa99a8402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7500dfd-b6a1-4c26-b2ac-f70f2addcbbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.220.101.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f383cbd-8f68-4983-9893-2c4264927907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21ee782-6f33-4603-8ae7-13efd4c3af4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781adf7b-ac28-4dc9-ae44-e2d12abc3362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4931d394-c652-4049-ad41-d8645691e8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe89e50-3dd9-4ca3-8d3d-8913565563f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf828d69-5307-4953-a9b1-f0d0139f60f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e5099c-0174-4a2f-b067-e5af317f2c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d97159-dd5e-4b4b-ade1-30abac5850d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5fdba5-d80c-44d0-bde5-71f7cef7920b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e87ff8-6f39-4fa2-9076-3a4e1324cbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089226ca-096f-450c-8ef7-3a3966bc0bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f2cf84-512a-40d4-a23f-e29117aeea49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18332ad-80ed-4f31-b4c0-b8d1d25de9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.228.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521708d4-29b2-4bfb-9b62-97f54f1dadce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c26a93f-c5b9-48f7-aea7-4a30e27b9506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b9cbf7-5b23-4c30-872f-cde5b6055a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ddba86-a889-4815-b1fa-16a0a2d63536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1611313-2d47-4955-85c2-82918d58b4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.234.69.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1e611d-742c-4843-80a0-e3fb097f1a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.234.69.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a19022-9331-41f6-92d2-5a4b152bb0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.135.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cb1a3f-1258-4f49-bb1c-d04029472a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276cbc3b-b63e-4daf-95f8-705412112350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce28a05-68f7-401e-9fbc-71547696dd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd64fcc8-17ad-4eb1-9a07-5a580764698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ebd792-29ac-4244-8a41-b75af72f1bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a940db-b7d2-4a25-8ea2-ad7de95d3664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2f9c15-21c6-4180-8083-480c68639238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c458db-6765-48db-8235-e8d1081f0a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6482473-097e-40d5-97c3-aa624a3d1cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd2ec89-1b14-477f-b921-b11e45d4ea9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37a407c-0017-4df9-9db7-208258fd9bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e959fa6-4c2a-4142-8524-360c1724477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823dbd53-356e-4b13-80df-3ddab2043b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0903e97e-693d-4f15-ac07-21885ebca8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bf25e8-66f0-4a75-a1f1-a75f3118f835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943319a8-7dcf-4955-a258-7c6082cecb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4ed265-9a81-469c-9d33-79b49961e31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae066f4-4472-4e38-9e6c-bb360bca4779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1fc856-8610-4694-95cd-fe10267f66fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655e0037-0c7b-41bc-9024-69c9e700741b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81e2d97-f0e2-4fde-b313-9ce2a1384b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceccde81-1f08-4ec2-bd1e-bae9b839787b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d056cb47-f26a-4336-9a15-987266e532de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f1ca47-960c-45ef-8b35-bc0ec6d604e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f97662-5720-4170-8e86-173886b4fff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc41c73-a082-4784-b483-532aee1806e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.233.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d836c2c-5138-46c9-b3d2-0e056cf5cb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d0cf1e-8764-43ec-896f-78b6fd72d664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c893174-e365-418c-b1a6-0dc7c08f63a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50283b36-0913-487a-8ecf-23de54956cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593d5b44-a625-4636-b98c-016d88c76609", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26b0567-e1d7-48ce-9a48-b5a190c50b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85575bbb-7206-4b26-b89a-f1ae7c7665eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.222.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e93260-f7dc-4f10-965b-02d1d3277336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf319ab-69d1-4eb9-99f4-fe34b5515311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b6dcaa-64b7-4fe6-aabf-8f31420339ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bc9eb8-40a6-407c-883f-98b141f3fc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e725dd0-2388-4692-879b-34760b920762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7fb391-8f0d-4b93-8db3-81ec079338d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.249.74.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35174833-681d-4942-975d-3c3be4783b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.28.155.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c1fe18-9dc0-4435-aaf1-481841dcdfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5601bd71-b821-4cd7-af7e-4ffd2ef4d33a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.39.118.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7149e7dc-2d21-42b1-addd-fb9d9517796b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.209.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72015397-2bf0-4158-a7df-4a46ccf33fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0020eaed-b8d5-462a-ae31-7b823fd50c11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.56.45.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3201ed6f-daa9-47a2-87fc-0ab09bebccfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.56.45.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a665662-c32f-4fc7-8be0-60958c464272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.56.66.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482af2a5-01f7-4e81-81ec-5f0a71e46169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabeba08-1062-4e19-ab7e-2a9d35133e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f3be9-c1dc-444b-b40c-081ea005f65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3f8d27-8a46-4684-ab24-91d33bcd956a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03740503-5783-44d6-a743-b9fcd96fa7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2ccfa5-4cbd-4271-a07f-fab6b72dd990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd7fc8e-cd14-4508-b0c0-d2f3900f940d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeac330-75a5-4a5f-8c66-ae0e6d627f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f2af2b-b8b5-4c21-a1d7-2eafef460744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec82bb8-3900-476d-93ec-840f3df9aab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2997f0de-c58a-40df-9f93-89c6bbdba7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f2969e-0f34-4801-8142-e0c52c3dbc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5799549-2c91-4cfc-806f-4f4dd77fa3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a7ad3c-207d-458b-b6a7-d2a2d1332095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430b8445-1671-44ad-84ac-ad545d97fef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0116e4-408e-4446-94d5-e3c359e0a7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f940cef-d8b5-45f6-9665-dbf608126d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1696a218-b324-412f-b14c-08991564bf47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443b9197-1205-4843-a16d-d35d6453ac5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0f920d-8b3a-418b-be08-6c1ce4e6963e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6fb3b0-8a6b-445d-ba1f-e1844b717180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54d23c6-c404-421d-bf07-70a9bd57338e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28d32b9-4e84-418b-8325-6befcf98cf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa37dce8-ed9a-4cd5-ac7d-7d2174b39940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d931b0e1-967e-4d5f-b031-b3a2bd799139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f4dd6f-3764-481d-9bdc-f62c5e4b5b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24198e6-63c0-430d-98ca-0bb8daa91b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8445db81-c8b4-4055-a5c3-c46b9f376b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d9dc0e-6ee2-4986-af87-1b5549e7557c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5589c03f-eaf7-4d36-8b27-48a5d8f4a21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c392305-40ee-4e17-899b-cec344d41c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b762f8-ce90-46ec-b820-b4a358b11512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb76135-9f14-49ec-b620-b17ffc30708a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e629b297-a2ef-4eba-8acd-eb6e86bbd743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4f08f8-d5ef-490f-bc77-ee54cb1d99a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7d1b2a-05f1-4851-99ef-e2b544520892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6388ded8-3a59-4460-9b79-d569181bce86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d15dd2e-5d8d-4590-9660-d7ef35fabf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7a06b9-2498-4447-a3f6-fad0bc642218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee431afc-00fb-47d6-865e-835cd26d089f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff29550c-0125-4636-9379-04ef648b796d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2e85aa-355c-4add-beb1-128790ae861e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec801bd5-5e9d-4b1c-9144-4357126ba522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0e1717-ba4e-40fa-9a1a-6dafded30beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b5e33b-3d49-44c6-9cf2-4e27189838b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a095d2-95f7-4686-b6c1-73f2e1eb3c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642908bc-4b4b-42f3-8306-b8c0a8171dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bd33e2-69bf-4ee6-ae00-30c5695a7372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89d195c-f269-4651-8889-ffc36a2239e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9b5d21-9987-4d7f-910f-a8b5104269ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6766e06-3e17-4972-843a-41413f05d302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4780c8-593a-4c99-99e7-55facbf72d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baff0cc-f977-4e9e-8514-b571bd5bac73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a576a1-aecb-40cf-b00f-9d96f61a12ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8caee63-710e-44f1-9ae3-9909d1297eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5d6af9-6451-47cd-8d10-db05095ccefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b54744-2b28-4ce7-83e0-3c44a19e6c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42213b13-4853-4445-83e6-a7ac86ac9fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb6dc99-9ea6-4f55-aa8c-2c647018d7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc173b1-4865-4f00-be6e-7463dc104aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b2f81b-2254-43b0-8369-8f18d457253f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde9076d-f732-4451-8ce5-aa60ba9720c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdac0a3-dd0a-4e2e-b8fe-c71d91f90168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e82749-a4b2-4692-8a7a-0c249c015c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c882e8b4-e8b7-4e9f-87b3-fcbec8a98da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04bc212-5101-400a-a50a-52221a48463e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb06e8f-e094-40a4-8711-e809e21d362d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad771bbd-bc2e-4998-8978-3d3ce296d4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef45247-4ed8-4fa8-b31f-57ff9450d144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20674d77-7059-49c7-81a6-b1df3f5fc754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5395735a-e2a6-4455-a540-220ce36aa789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fef9d5-fccd-4802-bd53-3f43767ec922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14e7803-1469-4d01-a821-dc9dcbff545c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812e2c58-4857-4310-aeab-cd2a21270a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89cf785-4dcf-4be5-aa0a-d00e2849eee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b4caad-9f31-4efb-85d3-c32b9a60f17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad67e47-7a09-476a-ad14-9d28e607574a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61efa95b-29e3-44e0-8e65-fe7cf25f8ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1fd732-d8b7-403e-a738-a6f71996a52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97680cf-f2b8-4b66-b02b-a82fb92cfd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7550df-e46d-4a3a-888e-ff008e4f6238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfb2539-97e7-46a5-b5b5-0eccf5161ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25723ca6-89c2-40ec-8b6c-2c620b228f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34e35c4-ce2a-41ba-a810-a686da20edfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ad86e5-2ab8-47cc-9086-c4609f73a8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d41944-471d-4bd8-81e3-312c7fa6c80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab43158-8934-4d46-9252-6593ecfba68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653040f7-d580-4a15-86a0-3618aee3eca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e515cc9-0a6c-4d35-8560-6b3edc9739a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a15141-483b-4379-8234-e0938d62edc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fca292-2ca2-413f-aa2d-0b304e5c3955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235d4ae0-9088-4334-8b39-4338a3d906a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c6892a-3230-415e-a35f-8e0dbcb04546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbdac91-d854-427b-8481-bd89c8e2f381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d206a188-5dd2-401f-8da6-6575c005f892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee07c3f1-4859-4f29-a76d-aa5f54b018e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d726f0-c3cf-4982-8f7c-7d5d613f7ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b5300a-579b-45c9-adf6-8a1d294ad2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa95082-e062-41a9-97c8-123fc1c5fd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7c9d69-ef65-4b86-80e7-140c20896a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb3a0fe-6fa3-42ca-93b2-032f5f1795b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bab98b2-cc04-408e-bdc1-dc11869b9b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdc9cf4-dd20-4a32-b315-4cef5f99a42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8c7b58-9818-4955-92e5-205639d002be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424107e1-48b1-498d-98d0-1626770de5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdad7e65-c07d-4957-a4fb-90a013ab3319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f1fd3c-722a-43ef-bb2b-ddb7a162975b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9413c3dc-d441-42e4-a41e-b4fc75d0a6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fefc660-65df-4ea4-aed3-f1c5a6794021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bec294-77e1-4bb7-814b-5ff577729609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be58ba9-ca2f-4d21-b389-20d455e42d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01722f47-d9a4-44c5-92fa-0094edac232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe305a97-3e55-4362-9e5d-998c8ec140d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a5bab1-1bfb-45cd-b928-c517e2ea1360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224a8a51-f51c-4de5-99e3-763a000580ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0081966a-64b9-4c62-a37f-802d81379741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f04513-5977-4fc5-b016-00389c0ed170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a00ebc-65e8-408f-8631-f620a5af3386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b959d9-617f-4fe7-89f1-69bef00e6672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9954013-081b-466e-9ad9-ae74110534a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd90f2a0-e48d-4af0-971a-8297e698ed10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187fa4bf-3b5d-4248-bcbf-394b030f1dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4cedf4-6abe-40ae-b9cb-0fc6190f1e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c948cce-af48-40ff-a065-511a7b8dc726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43f2a2e-26bd-4e53-aaa7-c6cdeb95f28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13354147-ce37-4d10-8f20-2c2cf2ea814b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cf522d-eed3-4a33-ba49-908a1245f897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41129e8-3a46-4b44-8a5a-84484dcf13b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdc9f36-7b1e-4b45-8970-4f6cf08a10dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f3a980-a679-4688-a501-9aad64173085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2711f7-75b9-41b2-a25a-c9d8140c867d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9c871a-3cf9-4827-bcee-e4c5bfb6032c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78de4c6c-e50a-41b1-978f-f89a487f7f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b316c7e6-6004-4d8c-8889-68bf9fd00fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c5fd43-6839-4395-a626-ffb0214ada19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8467a0be-a989-413d-8c41-841863a8d200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f33c06a-7787-4216-8683-f94857ffc9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6da260-88db-4a50-bcef-85606274d5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afff0aa-6618-46ee-9c7e-d3acd9ccb03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05891abf-5443-4e23-a969-ff929edd31a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6220f75-f545-4f44-98b7-c8de71d3b0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a567cf3-ec68-4081-8549-5f663cb6684d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a2e790-e803-4195-8a73-3b34da7bfce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8508eaad-82ec-4be7-8ae5-67441704c4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b59ea7-e1a9-4726-ba3e-0222da548ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234ada5f-1e1e-44b7-804d-86444f0c4a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bf9e9e-9e8d-4ae4-98f3-26bccc2ec8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4e5889-231a-456b-9c8c-e7379fc8d84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1988bd4-fd23-4d1f-8499-5951d38740f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7d384c-b188-4505-83d9-ba64124e9834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198d4705-ff03-4990-9fd1-9b1df76a55bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72bc091-4817-4a83-a632-bdb74f06928c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f25bdcf-d5c8-49c1-875c-590888de1ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03f4b88-99de-4e09-a693-bcbe6e9874f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136a6aea-35bb-4f77-875e-eea1f0e92a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f850d40-b857-434a-880e-8595abf20ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d8bb0e-07a5-42f4-92dc-9682132292c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.58.206.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b359270a-ce9f-4e82-90c4-092b3468fb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.62.57.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00f749f-a425-488f-b647-0a4bf54b18c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.134.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff96a20-32b1-4c9a-b2ec-ec58401ff3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.54.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564afd75-cc11-4ac6-91b1-47b76b7d4201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.82.139.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5915c958-a7ee-40ea-85f1-6595f952aaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eecfe8-df21-47eb-8d6f-82a9d415ed31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0dd564-864a-4c80-b8da-d2300eb6c611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00aca914-c03a-41c4-bc20-4e4c6edd713d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6abe909-9af4-43ff-b2fa-270c2e0adcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.138.1.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1e8a9b-8b1e-471c-a98f-7e9544683700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.149.199.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672eac4e-c3c4-4a0b-8b10-4c5759d66ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.155.41.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746898e6-b9ba-414a-b7ca-dc5d4ba49265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.17.122.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde75f32-9c4c-4e19-abfd-970548d30609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.232.82.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c3bfbd-0604-428b-a0bf-97550023e632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.3.189.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea79a57-e063-4159-85ac-9ecd6a839404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.49.242.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea3ba68-3d84-4608-93d4-d7c6dd910a42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4debe145-2f40-4d4d-95b0-5df310123353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee721df-1f6c-4971-91d2-4005e0638420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2c40c8-ec0b-48dc-b150-dd6e28c11e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.224.142.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af12ed56-53be-41fb-b837-c1435d4fc3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e1a37f-fe84-4f15-8f69-e3cd2eb859d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.86.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceb2b39-fdc6-4dca-8014-c4d095fa8d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.112.174.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bee9bd-4369-48d5-b03d-ac659babfe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.113.168.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e97402-5325-42ee-a037-aecfdf258cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.129.118.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2d77cf-f6fe-469c-8f15-ee8cc245267e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.246.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae6766f-c4ee-4739-8b54-a15eec91f908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dcd2da-9c9c-49f1-a835-b19a241da668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.212.103.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c7bd6e-6df7-4ab4-be90-13334e64c214", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.213.175.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b2c7a8-0a02-4845-9d3a-4a9edc09773a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.217.213.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467a2a47-6d62-4647-8426-64da6d80d39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.244.220.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45071446-a383-4fef-a350-6cfa7da34ab9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.64.139.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb616ce-25c6-40c3-9e39-61b2fd23cc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.90.19.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1171fa-1d7e-40d1-a2c9-ec597a3e4776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.13.254.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e243ed13-ea7f-4c63-972d-680905364b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.167.218.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db01175-93c5-4a7e-8c28-8b42b70b9666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.229.220.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c4b93c-143a-4935-91e8-4fdb6dff405e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.240.44.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac13607f-6be1-4fc1-9992-8878165c3d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.27.30.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06088276-33d1-42f8-87cb-ea2a517a7fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.50.140.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f075ce3-55bf-4544-ba6c-88d97e5186d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.51.43.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917a44b4-ed24-4e4c-9366-70bf422e67e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.90.39.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78ee722-edaf-4a39-81e9-2fd94da3d503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.226.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66efac2b-3b16-47ff-8780-bd38aa7ad3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.113.103.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e3c00d-a9dd-480f-a5b5-549a0914e695", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.114.246.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c761d2-ed89-4c91-b6d6-b2222ba7b132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb2fecd-1e05-4583-8d36-1c542009d332", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f021463-630f-4c20-b324-7f8e748dc254", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.186.28.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb27cea-c49a-43ad-a256-d1247626edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.2.135.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7046d38b-d1c6-407a-97eb-c5ab78c0ae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.223.60.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b780b406-7d3f-4ffd-af58-4d349c103e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a43aaf1-a45b-48ed-9a62-2169971086e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.223.40.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc499c0-3352-4ac8-a458-128cbcee4cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.242.213.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b4fed8-7fcc-4731-b3b7-ecd827714b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.25.251.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8eb4f3-8c10-4754-9033-997e2216e96c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.54.100.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caddf87e-cbcc-4d39-9f25-e105451bd7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2baab0-4aa9-4823-b7af-e990c8516ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bba3e8b-492f-4516-affd-d5ea16f1a44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ddaf24-9d41-48ec-82b1-e93d8545fbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccf3b07-ea29-4943-af29-ce66b178af48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09ee930-7751-4844-8758-3a9841e9c67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d34fa49-d7b1-40ed-9930-505e3676fd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.168.20.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee2c0a3-fc84-48a7-9446-56591833b88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e756f4-80cf-4af0-b13e-d209b8aca333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1203c4e2-e00a-4472-bb34-ecc137bf29a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10337f03-f733-41a4-8bef-1dbbb5bc52bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.144.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e315d5c3-2dc5-46b4-8063-a067cec82cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc11957-7e68-4f18-8506-320ea11934fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.221.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b646c85b-059f-40ba-bea1-479e36a13647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.240.99.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaab95c-69e0-490f-a82a-064a62876826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.177.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62db1f3e-14f2-4cec-9c1c-c47dc426ffde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a819558-b9b9-4b63-ac27-d116ab67d64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0a5516-bf71-4d4b-8e34-d73891dac74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44ab5f9-cc99-4df1-b325-7554a2d3244b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.210.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32228ec9-288f-40ac-913b-8b4f3849aa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.110.77.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a6b305-b720-44b0-b9b9-a150675b5e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d61a48-c86a-4a77-bebb-09dc7adaf5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc4eb29-d4e7-4a8a-8d03-a6f715526042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc14686-0c8e-4b89-9994-0339d39837f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97b6bd2-4f3f-4300-b788-9c6d9a30225b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317e42ac-d162-4f65-9ba1-6ebbadacc624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff67641-d4b4-4d40-b4d0-79bd7617d723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612d24fc-5223-4b6a-b4c6-aed4176a24f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709f0d4c-536d-43b6-b8fd-9081e22cf957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff15d45b-e3a3-4ac6-8733-0b11cd1656ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aace6c8b-1c3b-46d0-ad25-6c08ab739759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726bf84e-17ad-41ef-945c-eccdc91d970c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eceab145-ee31-4fee-a377-6249426762d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b62d55-5c6d-4c36-979c-abbcebc13022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab4df8b-75af-43ac-b5cb-c5495aca7e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43fcc82-f224-420c-87c1-0bf15cae679c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1420f09-55c7-4646-b509-2c516889a654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d672383-8a00-4861-846e-ff935aeb4259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c9e35b-cd9e-408a-8865-18a98816ee0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd739f0-bc5b-4831-b1b0-64f1e1c7a44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47934bec-1674-42a5-adc2-99d1f3c730bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d45184-ce64-45a5-b826-98c225fca4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13609647-9e99-4869-af2e-592c453ad467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60913465-0edd-4437-b591-5bbbea03085c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e146a97-017a-430c-8cce-2e4e1614dea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55b3337-f8c8-4a9f-8b62-8268346dfcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b0999d-5556-46b5-809a-5beb191ef84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d38a8c-9dd3-4538-9df8-d8369ab5e752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d87360a-b7a9-4448-b1c3-c8b5516b2e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e0e5fa-c15e-4950-a4ab-1051c2e0496c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1e7a1d-4f17-4f93-bacd-93df84db6de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9774b3-d448-4206-a182-8f4c3fabcb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4c9557-49f4-470c-8c70-029a4abd452c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4afb45-e254-4b4c-98e7-4fe8cd022be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac3c4f-d6b5-4b34-af91-0abfb2fc7d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e472c7-c51c-42cf-a781-60c9bafc887a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657aafd5-00d6-4e5a-970f-0d0181d208dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcacf61-edd1-44ed-b54f-ccec80bc8677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a3e4be-83ee-488d-9e28-330147160381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e96d2c-916a-42bb-b09b-bf2c92382e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8656bc1-d77b-46b3-9022-50aed40d7714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f03002-ac2f-461c-9b57-051950ecc58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bac658-c412-40a9-a881-871b20f19132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12473b4-f74b-40d7-882a-b8587d4127c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6230d349-35ef-4cea-8c27-ef537feae11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df67aee0-a138-417e-a805-97392c2f850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e1d461-e142-4fdf-a4dd-c18826c7e6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60785fca-10c3-4b44-8623-2aceb273a4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845ca1a6-6489-4b94-887d-e6469f0cefa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d2306c-e3b2-45d6-99fc-1e4f1a4a1534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0608399b-8812-4927-9d92-b04f839871de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af14e9c-4601-4b7a-ab4e-3d79fe5bc378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168c1042-f8e0-4a32-a518-7a820c8b9923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6969fd-f6ec-48cf-babf-7045e58b86e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54855a3c-53c4-4b7a-b5c9-0191b2c86e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dd2488-c18e-4ef3-ab1d-757d69683075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1457579f-bcb1-49b7-889f-8bd3205e2564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f585b34-7407-48d4-ad4a-b5ffe09eb8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ec8ba5-77a4-4fbe-b039-be6798573e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f359b8c9-1918-434b-99c7-be13ec72d1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90bd7ad-fb4d-4e61-bb38-04a439751853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bb2967-a3f9-4cc3-a03b-258cb4e6395d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac267747-1d53-4532-ab61-a53dde73afcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b6dab2-0246-4140-bf17-4c8d79c6099f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c40fdb9-031a-45f3-9b40-55f5a92fa507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45917cde-abd4-462b-8623-1d0832024823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d328708a-39b7-4104-b03f-eca80df9ae7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3896638c-0e7f-4ba5-a392-0a7ee3aed889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4405a85d-a517-4783-a374-9f61dd26af18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefc8267-1331-4df7-8477-5c186362e75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e489b6ea-f51d-41c5-a952-f75d70f3268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e50dc21-1a49-4052-a97f-9cdba1af0114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb4ae3c-5dfe-4b8a-9141-db1697a48d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1dee16-5ed9-4dcd-b38a-902a36c02969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44295b82-3fa0-495a-9687-50273d1e43da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef62eaa9-1313-47ce-9b10-bfe1b4c943b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.174.89.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1105c2-f66e-4b58-a68e-52f971ca0666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466e2b83-325c-45dd-9446-8f20a1e84f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7917f3b6-8846-4862-a2f2-c41cfe4747d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8d67ad-f674-47f0-a481-30b7e61413e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e8b475-3a6f-4d90-8100-801407af5ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0560e92f-2a9f-4f32-bafe-271314d2419d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3aedf6-6a16-45ab-b2db-84de790cb7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c07bac-e10b-4b82-92bc-2f3e102eeaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b237e2d7-8b4b-48cc-8b16-d6f624a58425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b587a6-9316-47a5-8544-50fef964d27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7e643c-cb23-4fd5-b6a9-7c537624bbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93c4967-f8d2-4f1b-b718-e2fe442df3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7662457-b3f3-4ea8-b689-1614f4da60b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ddda21-e773-4ae4-8a8c-bcc89145018c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7c9f29-a4d9-46ca-86a2-6461b6772041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b9a734-1ac8-4620-a5aa-8ae66ea32a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316ddd0b-f4e7-43a0-af41-703bbaa13d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865fe791-83ef-4f7d-a1fe-34f73c968a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce832c3-be16-417c-ae6e-945108bc1d25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037e0ff8-e0da-4859-a5bd-aa27ac3aa36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5a315a-af79-4aa3-ba03-1a9b29d71ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed206720-84de-4abc-96c3-8bad99a0acfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f87dee0-b360-4211-80b8-ac02e771c225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830f2172-81fc-4ee2-b91a-ff7657660f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025b8b48-3e29-4fd4-ac66-dc9ea5dcb8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32444498-4cfd-426d-a1c9-20f065cb5749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bdd468-a025-4219-b85a-f95ad2d3a066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30b00d7-36e8-47bd-a4bb-69ff7eac9de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe19f87-be74-444c-8911-9858e03f18db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a9f53-b189-49e5-b256-69adb78cc82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff81ec6-9219-418a-9c74-75cdeaf65693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c906ee1-d192-48e9-a71c-6f5bee9fa7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656fb476-e49a-44e9-ba87-9c00916ebad7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.70.40.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab8f28b-d7ae-410b-82c4-e3825c33c3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.95.22.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ee4a5c-91ac-4c0b-896d-7f461b18de0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5e75c0-129f-4350-ab2d-ae047f27b511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972c0df1-91a5-4227-a9d3-7095d97a87c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d83b77-5bf1-4226-b4b1-718887190e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.180.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749cde35-517e-4204-9cd7-030275641fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.188.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2b48ac-6443-4521-b2e3-234caa94076a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a64b97-67b3-4000-a87d-2e242602ff10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8dcbee-b521-4294-8714-47929339db94", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010b5c9a-59e6-49df-ba00-d961f087f953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59aed7b-f9a0-4b63-8125-0fba4f20df7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abbc9bb-e1fb-4bc9-b262-8df56232e9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db06edf0-03cd-4dc1-9d37-02173c2a8cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de08c5cc-c580-4a7d-9a8e-a9daf48c917b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdedbd1-da14-4f2d-8f60-602917b37852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f5f1dd-05d5-4791-b5fc-fdfc5c52db4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.176.108.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17329460-fb70-4155-9694-bd99e8611341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e138e0-167b-4021-b262-3e95c079c1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81cad8d-0ff9-4053-8b5b-e156c685fbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea8b893-49f2-4769-b4b3-69ffdb6a12f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb07e46b-1281-44ae-a981-9e72b55cc048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1727d5f0-7b60-4b8e-83b9-ddb24e4d27a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34828664-fa91-449e-a597-2d3c163cf9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afa1aa0-0619-4791-bd8b-03b6b32fd33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4cfd6e-8dbb-40d4-8e8d-32792b5ebb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f54c1d3-ccde-4372-b04e-aa3a1c7e1d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6256b287-7633-4445-8e19-1ca23f0536f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8247a348-b9df-4fc8-abdb-3cfffc87ba4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e32380b-d39c-4493-958d-12d17537e2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9489b4-cfe5-44d0-a08e-76f961f6ae45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cebab0-b6b3-497b-a6d9-9a7565ba43b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9bee4b-679a-4074-aa4e-f701be6e15dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.179.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9bc5ca-03a8-457b-86ea-3f173841b232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.179.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7857609d-078b-4d40-a45f-84be0dc7021e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.179.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f601cd-a523-4dd9-8577-0f3cff0a7bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651b87d0-7c0b-492f-88a8-7980e2dd3af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.81.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713468b5-7fb1-4379-8e72-ca99ccaf1160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef3bcf9-c8f7-40ab-bee9-cc76d805f748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.251.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e9e8ca-e6fe-47bf-99e3-4f88e12481f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.237.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fce0b0-c99b-44a3-b474-da8ae04d01b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d11b021-b353-4af9-a66d-f82cf314ced9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.60.201.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e34a874-d0da-403b-bd58-e0f0e30314a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.107.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29aa4996-a515-48d5-a780-6be78926dda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.163.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca3e8b8-d5e6-46db-8e67-726caa51ee12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.170.172.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8229ce-a30f-448d-8dc8-6196e49f8ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.170.172.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd346973-4914-4f6d-a167-7e36098f0567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.170.172.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff5ca2b-4bc7-4479-9693-35d37f27f243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597c13ca-2662-489d-99e7-041149375768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84646c6a-689e-42cb-aee0-64d3630c30f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ece072-39f0-4682-a411-b97c3a6f37cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0013ad28-bbee-4387-af93-f5ade709324c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f185d862-9d6c-4069-b674-fe955f191092", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b48a34b-54ff-4567-a9e4-bcace766c0d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56af4c1-43d4-48a3-8bf1-789e1a0881bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa927b9-b2f0-4526-87b1-c7d0a7c171dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca4f96e-6201-4a26-be25-57a5493d1749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e1214b-1bcc-45e2-958f-44089da980a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611cec38-4815-44d7-8141-bdcd3f399e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0167aacf-db27-46e5-af83-c7fdf07cc26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcf6ada-daf0-4f5b-bb1a-326da2a4a8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00baadfe-2866-4041-9bb7-7ce565c40215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8a0d85-0577-4e8f-a23c-1883d866d829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9078fb51-e270-4362-94f5-6fff10ee47e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b11593-06c1-4d5a-9a47-e86b69c25eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0499ad6f-64d2-4560-ac95-d822bd396623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9c9dcb-6a3a-4851-a480-b53da0836466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c276ca31-bcce-49ad-96f8-cb88b7d2e35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed8e710-4c77-45f3-bdac-7d9194dce7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84235e1-c3ac-4fcf-bd5b-57035e92e5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1261f37-74e5-4cc5-b127-242ab98931cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5463a5e-f619-4a52-b66f-0cda04e641a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6987cb-d075-4143-81a5-5e597e62f69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9c31ce-f440-4e70-9fbb-0cf461f1a928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e6ab05-6485-4cba-b9ea-574a7c37a7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b65bc1-b652-46da-90bc-bd2160fcbdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729ddc2a-0355-422d-987e-c0b7544239c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03fdc84-4b80-4b19-a7d6-6dcfeb05f95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700c527c-9ef7-4dd3-9fae-85e44bdab8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422f89e4-5d64-4640-9d7d-538b498f7fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22eb9c13-9d49-404a-afbe-1560d979041c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f1b26d-ae68-4c01-8017-7d87bb6c55ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db885e13-a86f-4c34-ad94-9d2869144b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0095a0-fe3f-4927-9d38-ac1076bb3f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c40934-0e1c-47b6-aad4-0de4f5fe5f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7697870-6b6e-4020-a629-7dd3446e610a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621a4b95-288a-4a94-a684-6d3143520fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57082eb-18b7-43ee-96ef-07abb936a7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbffd7a1-1428-407f-8ea8-f3c306276d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f585d9-1267-4dc4-a603-f3f7a60e984c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f5d0c7-3108-4a7b-b202-2751eb30b069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e2044-8e87-4e28-8285-02e6b60cc0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b890d00-f7fe-44e2-8872-1e0daf766cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ad69c3-5597-4df2-8a35-8b50b6629746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8640f902-e4ee-41f8-8943-267af1cc4e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc42c73-adce-4e7d-adc3-75811a32a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03d15eb-ef80-4289-9f28-ff395bce1ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6067192f-78f1-415e-8451-2eba08e8cb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210fee6c-6b0a-42e5-ad90-093596743bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e4c214-0417-4a93-8aef-c22a1b45aeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27accf8-25be-4792-a441-59ae3dd2ce2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff26f1bb-05c5-4c23-96b5-a9446dd34c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a159347e-6d3d-4c75-8e43-af074a333ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f69364-2bd5-4cf6-a18f-a2a2252f438c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e79f07c-45f0-45f3-ba48-173071d14813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a52d0c5-545e-4bad-8c65-498f6771b0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf43735d-c02d-4693-a1ed-f157b8bc7e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c2d296-9dbf-488c-9a00-b38520bb5f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459ec7bd-7834-4444-821c-580ded2f5e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74618980-eca5-4273-bf80-fce75f3a8f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3b242a-2305-49b6-8610-d0de2d0ee00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e5b553-a69b-48dd-a27c-2dc091d75a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436ac200-5f2b-42c4-b3c8-8463e45214f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9e7bb9-8c89-4c39-aa7b-aa4d8a1ea9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d59d9f-6336-47cd-9df6-bd2d395085c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02c8162-6132-4bc8-9e6f-a61ab7d5bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84501d8a-f6bc-4d57-bbd5-207ab863130e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fda1d62-2a9e-4c96-8bd2-4ceb114d9f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a632444-7589-4522-8470-15798efc2542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3ad597-63eb-49f4-8932-37604e4819c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f75c03-a228-4ce6-ada0-3de9108d32f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61af298d-30ba-4fd2-874a-dba6d48bacb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8357cb0a-20f5-4a4a-bac6-ba60d6f62c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8254746a-b4ab-43c3-9c6e-9c61095e5107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7216c0d9-59cb-4597-8c12-af2cba504cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2328a600-334b-4d95-a1bd-52ac26452cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c82cb99-6487-4e6e-9d94-630d095dd72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dd70e6-8471-4bcc-bb5f-3bfb596e0366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b7f743-5ccc-44f2-bc0c-295f576d5148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745bd8cc-54f3-48be-b214-ec90990739c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58b8a7d-0452-4251-95ee-ab9fdde99699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c846019-9e87-4345-ab9c-265e91826427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41b78c0-9b1a-470b-93f9-7797c97049fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8162ccf-0e59-48bc-8d71-149d7684eede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3eef43-00ea-445a-b473-c74775a173d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3648222d-a357-487b-9a3f-b2c2f8b6f33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f40604e-4f7f-473e-9848-177921837eda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.2.81.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebe8a21-a596-43ad-90c8-71d3f78c1612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.41.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512473b2-5382-4a22-998b-5465f9948dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c19fac7-9c23-4392-9d2e-a6e0bdd82735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1eadc9a-5235-49d9-9d8f-387171e33759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4cb383-0127-4e4b-bdb2-6729c8b8e2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d224fc81-b085-4350-851f-1574cd037919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5f5c0f-c7bc-45af-8f0f-954c4b0ca1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c907ff-684a-42c6-9937-9aac5cbfcd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d5a3a9-bc0a-45a5-845a-473e4d77d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2085716-f624-44d7-ae19-5e0a040e2832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca00667c-4540-4ae2-9288-cc176ecdf988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743c3ffd-7051-49f9-a228-4c4752436a85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4a0738-55e4-4671-adb4-dbd2a0f99e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.33.236.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e32f38-894c-4510-b7a4-39a3ea0c0ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bed75f9-6fba-4c4c-84e6-ae981bcbeb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60595d5c-485f-4ea5-9ce7-4e2e3b01cb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4efd89-cc61-4810-be62-7f2ddfbbffe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee90560-af84-4f77-9069-811179565a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d57ba9-2eb1-4bf1-8e7d-4812ef0a7c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.130.116.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c85726-f14d-47c6-adc4-cdecfd84c6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.236.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd6b126-ce25-47f1-ba9a-f3ec4d244f17", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.237.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0b53b9-1fb2-41e1-b0bd-b03f2a865d23", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.219.130.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc46589-3fe0-41df-8815-9090f880cbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9ca3a9-c132-498c-a9df-efb6b9015914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934540e4-de07-47f9-8bd2-f951b748e2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aafc6d7-1a56-4bbb-9144-3e143704636b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.207.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddf70ce-b4ed-4896-beb4-361237bef6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.178.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689fc2ed-55de-41a7-9d00-f323066a4d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1131df-1af4-41d4-8616-f03a3de4b3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22d132a-0639-4720-a82b-21e69d198577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.181.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53fa464-7726-4aa4-9f86-b78f314c905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.135.49.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5995af-1116-4d99-8ce7-a7c3bbe6b344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ac4c93-b8e7-45dd-8402-93585e9d970b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.67.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7a70d9-ebca-4b1e-90ab-38e27a00f5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.99.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf02a708-4270-426e-b348-24fbb9dc6c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.209.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe961b3-ee57-4142-b08f-f197b7af97d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.233.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98ac766-a734-485e-b908-a3fc5ba90aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b791a9d-e2ff-4b9a-85fe-5abd0043feca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d8e4b-84c0-4adf-bf12-0537ce85251f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22edfb1-053b-49ba-9c98-e6477b0d5eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad7ef10-e9f7-480d-98e6-3b4b609d1612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b139a0e-3b35-433b-841a-3e8ba8db946a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efc9f81-3c2e-42ef-86c3-5a2489374d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af728bd2-4a57-4e2c-957a-4a308b9e95e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395d357d-4280-4739-94e8-052b00f29afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58367f8-c84d-45c4-8e93-4de49bb4b72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77184692-1dc6-467a-a4a8-b561fc937e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4401e9-bbd1-4f09-814f-24ee70a2d1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03c4563-f259-40e8-bf80-55d69259e131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f67d89b-48a9-4859-9024-776cb52b8b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3072025f-173d-48e8-865a-6a8e25667cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e5a944-dfc4-4df3-9704-c9b9491139c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00bed1b-35d1-474b-8339-342b657ae952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69bfd64-490d-4a6d-9787-0c6d50369ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b26a1e6-f150-4307-98b4-08e5088ac38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcfe9b3-1bea-461c-b783-d77ab6721809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f55e5ee-533c-41eb-aeef-d673e963e5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d54fc3-5872-4d6a-ab9b-793a43d16d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5b8b14-0727-41e5-8e52-37dc0476e737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e88692d-4c32-4dc7-8a06-1dda78b27470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5131a1-be4b-4025-a599-9d90d9e338be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63f287c-173c-47ca-aadc-8353862a5450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ef169e-77ef-49a4-bb92-c7d0f42d42ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa442020-fe6f-41ae-b442-5805ebbd3588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e2b259-f08e-4a9d-a21d-b0d5ce9b7a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcbd133-df14-45fe-b890-ffce290525fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913b2b6d-bf52-4068-ade4-9433e563d194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da135a8-0b71-4648-869c-9a6b6fd293e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7a47b8-9b7c-4b0a-9a37-66441a013fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9577355-1151-4b80-8c49-93ba11568c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4bed08-ac2f-4154-81ad-2c6c9ad1878f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5417574e-826d-468c-88f7-31cc5d8e6056", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf9fc20-296e-45e5-8ff4-8641bade1b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af847fe-9985-4628-819f-bd6a15fc6958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07e8e12-714c-43a2-9096-c271732c7d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d780bc5f-6979-4729-be63-1d2cd3ea6946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada957a4-dc42-4dfe-8c69-e26f044d911b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095f9c7d-b558-4d40-8b2d-08ec9729d789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f631c13-8374-416e-ade2-c14560c57c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a696eb60-f8d9-42d4-8e91-b417639b9ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4ed0f9-8203-492b-bec8-c433fd82faee", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad877c0-4ce7-47df-8f88-8471b2e2d8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11b2339-f821-4c26-b9f9-ac00c7c6637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b034e1-4e14-4415-9cda-2755b57618bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f528e4-e498-47d4-8842-6137086004eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eca8805-4ae3-4e86-957d-5764fe356c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fc3628-ac4e-44d2-86d7-73ad6b4578d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c511bb5c-104e-43cc-829c-d1b41383d4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc77ce9-a7b2-407f-8c55-bc8be45a53df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989c5dd6-5f1b-433d-b9af-59cb6b10c27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2696ec-61b2-4ce6-b0bd-bbbb4daf3fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e23b7e-b649-4cab-b7e0-1d2e5680a8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ff1dcf-f841-4357-8ca2-ebe26b3a1d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1bcc12-a878-40f8-aba3-8cf2c4812738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4067386-a6fa-4914-863f-ffab9e4cd03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311b11b3-7769-4b6a-8962-3fe071cc518d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6368abac-f397-47a7-9953-469d4dc040ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112d5e50-3676-4ef8-8071-ad4c76165c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6565eac3-b2ca-46d1-a563-78e1e22b86dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaa3654-e653-4a9c-8875-b880c71aeb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a53ff2-b71d-43af-8a34-1a2ec6b1ccd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab609dd5-5015-478a-bebc-951ead71ff07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c30d2a-fee0-4197-b2a6-dde0bb82d6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72551f7c-3786-443b-ae3b-31e25f45d346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefc0b48-5b29-4311-883c-9346ff1f5d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91001cf-cded-44c0-ab58-ad36c5618e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67023ff0-e6f8-4d9d-905b-88a5386ad91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c0a05b-1510-4d04-b892-a5b26bb785a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a25065-fff1-492b-af98-cf300eeba334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e83ef4f-2e29-4a66-9d40-f114fa29f8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b422dd6-2d10-48c0-961e-0f4f8ff91ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d9ad70-c7ab-4aa6-9175-c9dce6483dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b09c53f-4b4d-4238-a567-1bb87320a4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6faea7b1-de30-4d58-9710-9ad88652500f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4e987d-5604-430e-8192-daec0d64a04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c7698e-1f13-46bb-8543-01255c7d09e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8a4b09-fcec-4532-99a4-4f17daa6b88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7416cdb1-c67f-4300-bab9-837ec490c07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83582772-7942-486a-83eb-2259c30c2f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db68339d-da8b-4949-9034-a87121ca516f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff56c9e0-eeb5-4bf8-99aa-075f77c2d540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fa9bae-a0ef-4d02-9547-7ce114764523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32210c3-8ad6-4c36-9899-002803408448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6fc86e-d6e3-4ec9-96d7-6711869c9e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27875c58-e75a-436f-bfc7-eb4b5f659a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e457c1c2-64fb-40c4-845b-dbe8397e285c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de97229c-d31e-4bb3-a029-1d6aae095543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a504ee1e-eac1-475f-a521-f6f0e9ee803d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ef94c2-02f4-4c0b-b8e6-e535bfd26655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9ff483-9871-4868-94e6-2b5c2497e4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f407258-78cd-4302-817d-c38ce0e816fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaad2f1-1f2e-4893-842e-0559bc6e87c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04239ea-3959-41c2-9143-238fe5a6f890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e898e99f-76ef-471f-9912-41553a0b426b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a6e24a-4ee6-4fa9-ac72-c3206fb581c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0979a83b-2998-4dec-aed1-47f21f46e4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc20bc5-0d2c-4355-8ea9-2956890e5cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28853aaa-d6ea-453a-905d-99b3a2f8dd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4daa7-3954-4747-a8e9-25a97f0c7019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ee8c96-08c7-41ec-b80c-e8cc88d986e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427383d7-1a00-4a37-8adc-e8adc7b9f80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0f8e95-2ed0-48aa-aaa2-2b820c431f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340f3c24-c5ae-4f3f-b61c-dbc3670878c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a46f44-907d-45f0-999e-85f1b9ca4db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71803566-829f-4cbe-9bca-f5981bd0c78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2611521c-235b-4d57-99f7-d85e44228992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a71f3ec-e0a7-40ca-9615-0753d863c023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f06354-fca4-4e99-8f04-f6db65841514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad94776-4844-40a5-ae36-bd91b34c123f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e02b5f-7ab0-41b7-bd3c-d7ff17a08c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987c6b72-e197-42e4-a7e7-0ac107af60ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91743400-f5fc-4e50-a5dd-8a80f10fc717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77dfac2-20d3-4cf2-aae4-3aacb89d3164", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02978be3-3a2a-444b-970a-057f928897c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1637923-1d1a-44fc-96ec-ac0be70d1859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e29aa-23a4-44bb-a75e-30f59a4a765f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3581a954-0373-4004-90fd-92fabed6c199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9480bf2f-a724-4bab-90d3-67a1cce43ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cab1fe5-e3d0-4d7b-9d3b-bc326362b479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b728dcf7-3bac-4fa3-acad-cbec31cb5981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13c359b-7c1a-4943-b8a5-135adfa33206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32f56d8-22c1-4d0e-9aca-33fc5ef66c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0a27a2-b6b1-4b2e-afcd-8786e75c30d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb121f2e-6ee3-40e8-9981-9ab4366c5f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402da224-57ce-4098-ba8f-41fca920d205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca70345-0d05-4d67-9e3a-d32fd282dadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9270ca-424a-401b-b168-4005de73e086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef74483-e2dd-4c60-bf70-22e4dc0216c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af16406-2643-4099-8d94-fca4b9dffad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5156eb57-f553-41df-9d65-0de8b355a413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87611628-98ea-471a-897e-1c47bf9a3d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2a760c-4a27-46b4-ad21-4bc0dd9b5d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4e823b-6dde-4b6a-8c65-aea126799233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a440ed54-2a87-4c53-a2fd-620c00493dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f181634b-5928-4d0d-9963-5cbc01d1d517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84285a23-28ab-4bc2-a5ce-c85cff3a2dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ea5a1f-214f-4124-97ab-5d2b99323302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f2c72c-6daa-47b4-bf18-3d311b01431e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12acb7d1-fae1-46c8-a3cb-fb7ef4313a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f0dd07-27cc-4010-ae25-aa00e9dc0d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b94cf79-ccfd-4146-86e0-48e877696492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32489de-e1e8-4a5b-af56-a99496db39ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d51b21-1748-4cbb-abb8-13edba102577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abbeeea-9bae-43a7-8919-2f2613a4a7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087c2216-290e-46a8-a10a-2af62cb98f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c958147a-4cee-4af4-adbb-0887470e705c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf595099-b3ae-4cee-b3b7-e510b6961fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a3c286-9ba0-4dea-af24-340584c4e026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e592da74-4451-490a-83d4-483eedce5798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2b7cdb-2710-41c5-98e3-f1400dcf3af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1311d3f8-8007-4b7e-a6f4-33e011829688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b405af-8092-4a2b-ba2b-af1f026dc3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30219ae2-082f-44e9-b1e4-320b95b6d1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd89026-b336-4f57-95f7-9981d0204b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60669b2a-5d98-48d1-b8db-f9383b3bb949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae685a0f-ee1c-4973-8d82-8215901e4639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89007f9a-4da4-4030-a68c-afe5e77eb42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a8cc38-fcc2-4a12-9f8c-dec95cf9b640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb36862a-9c81-4964-9c64-3dc1572827b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b41ca6-d1d1-441f-8a75-b4d893588d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f2015d-3108-4aba-b93b-ae0bb9b9531e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128152c8-9929-4965-86aa-0a4cdf4541f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3596c055-0654-4e4b-9863-bdb62f941f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07effc9c-0c22-46f8-95b6-85ad4dfd09f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e576527e-ab99-491c-91d4-ad29815b8737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3238a9a7-835f-4771-b6b0-36a2698fc2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adc838f-e5a2-423f-b566-9686f757ce1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aee1283-ad30-49b2-a485-90e54c132c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75670367-b9f2-4a02-b9d8-98c961828a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a583880-8bca-4c57-8b62-fe2fea381d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3cb853-72fa-4ce7-ac76-41b825fcbd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec2056b-0763-4c15-8e47-0ca2ac7084e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2f7dc4-8250-4d92-bcec-88a6d9550092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeae43e-0dd3-43ca-9045-2c26ae9dcf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831af49e-cccc-44e1-9d7a-16bf387d1cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2474cb8-c8f0-47ae-8d83-80a8cb6b9dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5090169f-5ddb-4474-a683-1ae55d1504ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c43302-5a99-4039-984a-063ff53260d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b313aa1-b8ff-4122-b421-b903751180fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714a61ca-1ba0-456f-aaf0-85930365fae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e5441c-88e7-4d84-a19c-0ad5b8d86022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a6f722-596b-4da8-947a-83cce9085bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60de3cf-d007-4564-a804-8dc37f6ab762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3346f4-84e8-4549-8c3a-7de0a680bdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce3779c-13d1-4d9a-82cf-4d35d9b78e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d26e93a-f46a-4e4e-a7c2-528959b22d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e975bdc-8d2d-4fec-9b9a-61e388369a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cd2ef9-64b0-4f60-8bb6-99daec450f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f848e68c-c200-4c36-89c5-714d95378f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7904b0bd-69f5-4356-be69-328005ef032e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d299e7-0128-4b05-9b8a-e1f83ae6ce9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b374e57f-097e-428a-aaf4-beccf16d69ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de67f38-93f4-4580-b277-54fd8889e0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171e6d0d-f9ef-4b22-89ec-f2b959c6a404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398cf05f-df09-453e-ba49-d37adada5a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4263b8e-d41c-4714-aed7-a9212126087f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c95a8f-f412-4b99-82db-3dc1d06f29cb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.86.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf83e63-7efc-4b07-b357-d64f4cd718fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.200.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1831f15-b08f-4f87-80b6-3367567dd408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.202.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f16d18-34cb-4214-b8cc-128292823c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e54506a-8e8b-4a7e-ae28-b302e2880dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc42342-2d4b-43d4-8159-a81027aee59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf76a909-518f-4695-b734-cbd450f264d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d93abaa-b97c-412e-9802-15166824bfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dbf436-1de2-463f-9163-401cfd27da65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a83813-7fb8-4b85-9ada-1a38636d0947", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.119.200.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6307f29f-ef8c-4605-afef-9726276a887d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.204.135.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a603cea-7f68-4c87-a41e-23ae94469ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.245.176.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a890ca1-8d2d-45c9-929e-aa5da2883fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.26.150.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fff0a1b-1929-45d2-b020-425e5346fad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1874e4-a343-4c36-a1d0-f04e6c280247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43049254-41b7-45b7-9dbf-c0140208a53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc6f3b-8316-47c1-8e01-707dd33a6366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bdc5d9-b953-42c3-8269-b627fa9bc920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef3e31f-84f4-4359-b8ae-e6d953049f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06976b01-ddaf-46c0-9bef-c661b747aff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6d603b-014e-4ba3-8f72-f33837bb3715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda3d521-cf7c-4c48-b190-5f6fc28fa3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea166dc-4509-4bfa-b019-be033dca4325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d73e71-ebbc-4ae1-a96e-da868ecd7929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03612bde-7127-4aa5-b90a-b4b94431bed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bb4e01-6bc5-48e8-924c-8c7f02e4d30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fe36ec-1577-4241-b255-85bfcc534225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10993f45-b9ca-4a34-ad74-00df5eedb515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33766a21-99ee-4bb3-b1de-d91bc9e9d4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb1d3da-6002-449e-b0b1-b6b7a594f356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06b6c6b-1434-46ab-bbc8-447ccff9b963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3394e97-0df1-48ed-8f53-f0ed5da37e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b0d2b9-e3f1-4274-87da-7647b6381cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66b6108-68a9-4ab5-bf15-ded8418abd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9884e8bc-e683-4a7e-af87-07fd1228d2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab41df56-1916-44fd-9ce1-088c7821361c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771aa79e-c7c6-4262-b152-1b9dc9db5df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed10edea-047b-47a0-9fcd-2b86c5cf3048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50dce4ed-d658-49de-b0f2-67bb1a1ccb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b10e64a-a61b-468d-a363-16ea6cfcdba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e24e24c-61a6-4f15-851e-6d9c8f708fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f43246f-1e6f-4213-853d-c7999a4fcbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdf239a-6437-4de5-980c-6bbd2ca45ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56de8879-dd88-4260-9948-ab25d8eb90e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8b1427-2b63-41ca-801d-598f968f4ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4056c9cd-eae8-483b-9baf-62cf651baf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ee1b4d-e7b9-4d49-a991-f7a3071d1dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5209ea8-f522-4e27-8e8d-6c5c5d41448b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786f81bd-41b2-409c-80c7-802aa1ce3c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73ea670-6141-4d96-9211-1fa25b39301c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6166d933-c998-4e4b-8c52-321f7d0a3177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f5dc92-d5e3-4777-954e-3010ca003056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfbdf28-7fa8-42d6-a5e1-d282d86f654e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d13ea7a-4fb2-490f-8447-8ab14d8f6fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d972685-8a00-4ed3-a57b-7ebfec83fd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07df7ad-89e2-495c-937b-9591ffd86cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a299f679-148c-4182-afd8-7591b3f26a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b744f474-b37b-4598-ae13-5bb0396f32d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b77641a-84ee-4825-9736-ee71197b2d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74061785-f0fa-42f4-9b07-7dc0f7b48f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e3c8b-16a3-485c-be1c-492e0e17e119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04113260-addd-4739-900d-3acc6e9deae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5b7668-3790-4b4a-b004-be30491f4205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500d5068-4381-4fcf-ac22-04fb940224b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.102.252.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a509713c-2dd1-4ab6-a419-04dd9356c3ab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.134.15.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db8599b-4e61-47ab-b6e7-9d8303eddab7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.167.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803a1fc6-33d7-4d0b-9706-ddfebdee5c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.173.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51982383-789f-4247-8e6e-0c340eaf87ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6fd4e8-5912-4b75-84d7-9d6896d8fdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d942232b-9a7a-442d-b6aa-8b9fc3211c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5cdfdc-8ce8-4f17-b83b-3dac23697166", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5faacf1-8364-4b23-9cc0-37d5ea0c45d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51c2dab-5323-4e08-a457-b53d3beddb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.21.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717f1e15-d31b-471b-bf24-21fd46cce57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921a4163-c406-4185-aa1e-a2dae67349d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7fea0b-b3fb-4b0c-9a45-f2f9249741a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.223.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97292e0-3564-4be3-a572-da5044a521a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16120050-2650-4ea9-be57-c0ac4ef31030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4f59eb-f683-4f33-82c9-5322ccb3f711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531b985e-c647-4a9e-bcc0-1285ecb6dab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516aebb5-5afb-4737-8e8f-07adeb452314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.182.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57da1b33-f86c-482b-8f38-68847caf42f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6b04d2-e76e-4fdf-963b-b3ff697f2531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be1650f-5704-42d0-aa23-82f3771d3e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1bc053-9cb3-468b-b9ed-e8e8a523736d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986b5a8f-a4cb-4380-b93d-f569012ab979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.197.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3e6afb-9767-4d00-b1be-bdda0cb3c95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9496bcdc-f169-4a84-a6c1-7b3fd342a2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c8d2fe-af81-42b1-b065-c937c64f8097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcf07b4-2935-471d-a64b-d9b64007e3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcbd320-6e59-499c-9cc8-54e3e703e209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a66df3-991a-4ad9-946b-26f625786f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84c2ba0-db4f-431c-bc81-207eef2d29de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdcb289-ef44-4d8f-8849-b877a953b597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20f3970-5a63-428a-9e86-2234f8b7db11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b446a66-7a8d-4a54-9d6e-0eaf6eb1a53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab8e16f-c9fa-40c5-92e4-cb962ee1a0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92464225-a239-4f20-926b-003a0e1c1ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.109.16.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab71345d-dd28-4669-a1b8-dc59b91d05d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.83.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a736d595-510b-4e12-b408-1c2bc927a3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36b3bf0-e59f-41b3-acf3-0127de7378db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72da3331-7f81-4355-b070-523a6020b2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d634485-849f-4445-9178-0e128d20ec54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9685df86-7e21-4d8f-a553-ced64bdd5cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce579a74-03ca-4945-8e12-1defa647d636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c21b35-4950-4b9c-9dc8-73289fcc2c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2ab2ce-197f-4821-b03c-9acbf7249891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c497474-7924-4d52-8b42-687dcbcd134e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8457f7-a1d4-4643-900b-d7528ffa8992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ae4208-8a72-4b53-9d6c-bf452bef51d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c279b85a-0448-44d1-8e6f-0efe12e67e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1abbd8-d663-4150-b502-6c0e67371f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2751ca2-8eea-4cff-a182-c2fbe63664b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f68726-39d5-40d8-93e7-6e3f75ef8fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1c0496-14a9-49db-9dd4-1aa405b35733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805e43e3-ed39-4779-b823-59be4d81ea27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6b2cec-47bf-4d08-9749-20e950492937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bef02c3-011d-414e-8476-fa9e11b198ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67a02b7-30ea-4d9f-9ee1-8ac8ba1b7ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074c8bc0-012d-4d64-950c-ccd4229f1618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35446d36-41e4-4dab-bb34-a9343417cd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.45.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deba548-a0d6-4daa-a02c-fefe70d0bbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f5e56b-04dc-4db3-a664-5e26149f8b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0707166-0676-4826-bb48-cb6565950d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.91.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50f350c-f0e4-46fa-aa04-87b333ed3b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c247bbb0-6246-4362-b5b5-33439aee2cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdfc20c-62a5-4e00-80f6-94f523bb6a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d906f40d-d01a-49f2-b66d-e3b4a02bfdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e84a736-55bd-4fec-a945-b666b8c82a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccb11cc-18df-4fe3-b115-5c90cf65106d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989706fd-5506-454c-ad4a-7727dccf7e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.200.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b245bf05-4ddf-42fa-88a5-e62ec36b3d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93d21cd-4a57-4b9c-864c-b25913221cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c829b-12b7-4b56-94e2-e12880b91528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcf247e-7553-493c-a290-4db6d3459b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998eac62-a513-4f1f-870d-c1bf86073b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e425134d-0770-4174-af5c-3ed947793df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbaee3c-36e5-4690-a047-ace298c69012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d38469-3a42-4c6d-912a-a1750987ad26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9174aba9-96fd-4392-b377-f0e91a184a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d2cfbb-99f4-4db8-9de6-266dab8039ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fca11c9-2e07-4f06-b360-7e42b3921cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a46fa2e-058c-4388-bd18-9725e56a3bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a2ff70-ba61-4caf-bf9c-2a418e9fb4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7587035-ed80-4a32-a9b4-904cbe7284d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a950b0a-82a2-4f2a-96db-db918937b5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.82.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec0545f-2377-404e-9423-1eaf46eaef04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de666ec2-ac33-46fe-816d-710204d54b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ec9dca-e4ed-4f99-9844-423b777b5cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3066ade-2a5f-4bce-8563-ec9486a2eec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc575d-9e26-448b-b24a-7b24f632d5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e38b59-9429-4a8d-bd08-aeee08fdb84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e1a35a-8c01-4b60-8ad4-4558ff4e3603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e140825-6bad-470a-b326-edacf6a9ca7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838d0208-4385-4e0f-ab9a-e720fd889f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce9095f-45ca-45a0-98fb-74f28019fc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6aa837-986f-4c0f-b77c-f093c87e958e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd52fea5-27e7-4879-8296-a1af2d82553e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e9eb78-309a-4f0a-9a26-9b9319e68e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1859c0c-7abe-4c21-b22a-dbcd8c37bdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b431c4-b34f-4249-9661-5205f787b89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.71.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a150965-af02-448a-afaa-7263b8cb22a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104a073a-0d32-43cb-8ae5-7ee4f3d5b599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2761eb81-19ac-492f-aaff-d1071759583e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6fee50-7055-4be1-87d5-b3cdf0ec9824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7173e41-a058-4423-aab3-ce56375bfdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e62bce-84c4-4ae4-a3cf-d84c53d424d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5540ae52-fe74-49d8-b7f4-925d1d55591d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f2ca97-b4c9-4cd6-939a-837980a7bfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bc079d-bc18-4618-8fed-6dec219cf92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b846f23-5c05-4a85-a0e9-7c90ad38d0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea157b82-572e-48d0-8209-ff597f4da3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abf68cd-8bda-4de9-9efb-a851a2f9a97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997104ba-81b7-419e-bd11-aaccdb89a4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c2eb4e-fc32-4648-b52a-ab0d7a7387e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e42fb83-aad1-434a-be0e-922051ba0879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bf37ae-69ae-42d9-86e8-31d80dda5f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899b6fbb-8586-443b-b7ac-94e1c59ee262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710ef674-99ac-458e-ae1d-10968d825d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c65ffdb-a193-4d15-9bde-9a8bd85e9dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec292d77-95c1-4603-88a5-0313db352d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4f4c76-e94d-4337-99f2-0404bd19f8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bedcd9f-bf51-4823-acf4-78ed69579e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc2f36-030c-4d97-bfdb-94ee160d2452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e4d15d-4813-4281-9040-f7c8b5897aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbae563-4754-4c12-9a72-49692317b221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2679b5ff-1a71-49d9-8a5b-d92428b54290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88e4875-b490-4acd-bcd1-ea7bd78b8ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ab47f2-4a09-4849-9532-98ab5d6e6ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f16d80-eebb-41d2-bcb9-fc4b72efcb54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caea7d86-f2e4-4c3d-8d2d-e63e91ca8b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7427c326-5af5-45d1-9f60-9635f7dfb597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622fb048-307a-4464-82aa-ed0ab80a7c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee82e8f-0739-4460-951b-61306efc7a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3c5788-584a-4acd-8c30-ffe3544f5a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e01098b-4beb-431e-8333-4899c095018b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb02aae-5584-4a93-8ce5-d255bbf8f692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1817ca2-f694-43c6-ba26-84d90da4e50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fc47a1-68a6-44ec-acd7-d7a32ed5b532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d853b7-7682-4d27-8167-5b8845f48583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be85497-2753-48af-951a-972240947447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1482c1a-fc3f-4549-97d3-0d782ea53b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.63.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521852f4-bc3c-470e-b19e-02d21fce3e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a12dbc5-d8fd-4a0c-9536-bce64d8b680f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d396962b-371e-4707-babc-225016e08310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48918f05-6afe-41be-b590-1ba5d121451e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.109.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d509a4-02f4-49d5-a0dd-ef6633831457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71be447-117c-4fad-9b16-53217c46930c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8010b8-ee0e-4c5c-80fc-f46a3458d9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9561e82a-3dbf-4a4b-b333-7024e6a5a38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf80955-321d-4e39-a88b-0a2aa0d1d904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c188a0-6f27-4cc1-8472-93b1a6d92c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51881649-91c6-469a-8562-3082c6aa4535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24111dd5-c239-462b-82e5-77a8965c3a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375052fc-d5bd-40d0-a4a8-36cca3b6c7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9ee43e-c19c-4608-a0ed-f3a23354b6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbda079-c138-43c3-8540-bbc61e32d775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ffb3e9-6f2c-49fc-81c0-4416d9db476a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d653d441-e1c5-4d41-9682-d94f7609f4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c12e811-7bed-40f4-b8c7-c86d1cbfc40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455a2563-8c21-4875-a9b6-a9db6a400327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b29754-371a-4739-92f2-662234097f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca37e7e1-8df4-4e44-86b0-83cd8e015f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eebce23-5656-4f92-80ae-b792f4397cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee83f61e-ea07-42e2-93f7-be20ede578ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd32b9df-64ba-45f9-91c4-73d4ab2a0ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fe75ba-aa0e-4f3a-a68f-8a851ad6535e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9cbcb6-3ce6-46ff-91b3-8f60bf16fd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e64044-ecc6-4ff0-9119-ef6a4f571f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe85e8d-3839-4210-9102-6031d33cc190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0617c179-2229-4f52-a58b-7959860d188f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.14.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea64dff2-2e89-4f54-a044-7aaa28ce7337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5ed46f-5042-4128-a41e-5f22c8b98901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e35841-2380-443d-92f0-e1afc864545b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6f87a5-8ae8-46aa-ba92-00b5b5b80ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc34cb6-9d15-4175-8280-268878781f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f680fe1b-108c-4714-83d1-528187e245f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3bb384-1d71-40eb-a4e3-f2df864fdc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a0b06d-ebb1-4863-932b-1628f8e2b116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234b64a0-8a63-413b-b2dd-79f7c4a5a542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ca72e9-b445-4454-8ba7-9f49909d2a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ab7e18-2b66-484a-af5b-aba1222fbd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6bb2c0-1e9b-47bb-aace-bfe1eca44897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb7442b-d10e-4b23-ab3b-9a7b16ad44ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2877ad39-316d-4881-a347-a62016436de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5702f3ff-aa65-48db-8720-f656c8ac9856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a194850-37c0-47cb-8826-a53b16a0eb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211620c9-41cc-468d-898d-521b8d750b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03365dd-b8b7-4b7b-a85e-9bf78af332d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e38359-64b0-4ed4-8d32-66443bffc3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95252a2f-72bb-48d7-bf9b-54d469879c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab453b0-e0a7-4b47-a684-ca2313f89154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faee172b-2d68-4634-a411-b2fc38c74040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806e8d01-cb0f-4328-bba4-3e5353e1c6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63007125-f2bf-4124-bca4-f06d0102a48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15a0bbe-a096-4de4-82af-408428eb3649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a526b6-2d04-49d1-8a4b-96cd7f1c4b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da16e98-5e19-4a8a-9b9b-8f97938aa925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0dd2b3-cef9-4cb0-a30b-abe9d9c6a54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ca60be-780b-4570-a11b-e85f23d8515f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f18fd08-10ef-4416-bab8-0bb82e80d7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e4ad2c-f3b3-4efb-bc90-d32196afc2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d8cd6-7f79-489f-8f57-91598bf9f735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45ffe14-cd4a-40d0-a8ea-9d30f63b6c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241578d2-85bf-40fb-a0ee-aaea1d732a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa038561-a243-4827-ad22-b81018b8bc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52435d0-9ca9-4e1d-9a31-302e1116dff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1319da-a051-4816-8485-cfe76b4cc396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1aeddf-1649-4f55-a3a6-6a9536577ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1b3d4a-0656-4f56-999e-60c84a7e8399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b23158d-2c16-4fdf-9d76-8a967a39ece9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c1ae33-596e-4a8b-a4ee-24d88e4f753b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04362c8-f0bc-4c68-80cf-92d0eb39c7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05372e73-a646-4629-a882-3186ee2457e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623f8f6e-cd86-42ae-95f3-260c92d37231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec0a43c-2b0e-478f-babb-b9b3ba6933c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6f0491-c571-4815-a186-cd25781c7acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ac1e3d-8003-460a-b8c7-cab964a6a6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a5fe62-9972-4542-92e7-b270d27886f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4012b281-bc2d-41a4-b802-dfaf49422649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f152a83a-a62e-45cb-8b83-904d138299f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9509c2e-ddc4-4053-912d-09d3007729f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71cadbc-d4c9-42c8-8c79-de4f6987fe25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eeffab-5bbd-487f-af54-a64b1427a595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca286853-e323-482a-993a-e1eb0d9fcf5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13c306b-e33e-4cce-a1a3-b74593fb0b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33b0169-fedf-4868-aba1-fd695aad9783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d270a4e5-f8cd-45dd-8b20-608000b7890f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d7d38b-cac1-4226-b7d1-19e84001db86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf323de-515f-4d24-9089-b743bff9d706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b154c0-f4e9-410f-9274-1fd15f1c0c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145dd3c9-b529-4bbb-a192-357ddd114938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f52beb-2d1a-4a72-8183-3720ab2d5027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f9395a-d2c7-47a1-876b-08e8bb88929c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02d7854-0f94-4e0e-9478-f43c3258811b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23af2bd-98e9-45c5-92da-de7011b01c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f9817c-2e65-4d4b-805c-f95f907c22e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f05ec4-dcbe-4492-8351-59299a6d4f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb3b885-fa7d-416e-8a48-48e3eb25604d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caa8661-cd7d-4bb8-858f-2596f8fe596b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f60989-981f-4938-9850-db5b3f85e670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32d80f5-a80f-4d50-a93d-b0e72ee523c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f88a557-8d8b-40c7-a017-3a524ce3aea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e5402-1624-40e8-b808-8d9517b45745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532755a0-1f92-406d-b939-40c327934008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c878b21f-fa8d-4253-bc41-845fb57808bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def1da1a-5596-48bc-817e-c0b95b1bec75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f51cb50-87be-4339-80e5-fab487cc5ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc68a6f4-ad9e-4c40-939b-46a951cd5ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd34d288-c31e-4868-9808-c6aecb74e620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.71.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d11ea62-287d-49c4-8301-d98b04903443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.191.189.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad370da-1b4e-41df-967a-fb788979b60b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.141.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6681fe21-b242-4def-b99d-3c9de6835c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.2.152.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7b826e-866e-4fd8-a114-02d2b13c162c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.238.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1a8607-37ed-4036-b07b-c0497414c7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f0de4c-dd4d-4489-97dd-16bff6fbc153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccab6c42-bfcc-4d06-9ab4-8d16729c8dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca1255c-1ce2-4963-8bcf-1a9aeef45a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47e633e-5f5d-46f8-8038-5a5fe1433f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.71.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a596fe6-00a0-4075-a7e9-7add98fabf8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02743d2f-80e4-4c8d-b1d1-28a48556825d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397ffd48-0565-42ad-962b-ceedc0eee07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee4240b-22ed-413a-b311-f4ce223c488e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.220.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5036860-882a-411c-82f8-ca8f51a62aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.237.209.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd981c-ceea-4426-9f8f-24c86f366b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612bcf1f-841b-4011-bdaa-34621880ce68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa973602-4e9b-44a6-9c32-c36acb1a67b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbad39b-3a4e-4934-9eff-406e4c249562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ab5570-6716-43a1-a248-2b621a344622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeb5629-2b04-4fe1-9e1f-854625302293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e798ff13-f4bc-40d8-9410-f07a6eb97e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510714f4-e32b-4169-be59-c4c506ffacf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.47.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902d1381-5e4a-4052-be21-dcfb6da4d713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ee52f7-8586-4506-9207-c0ca2464aa2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6792bf38-704a-437b-a6c4-f5ca901aec6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f342a2f0-1afc-40ef-ad7a-58ae02aa1e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d85b5b-bfff-4ca4-b35b-f31ca67e4698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.32.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7016301-32f1-4c56-a1b9-95efc8b7438c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f85c75e-91e4-4e18-922f-3e5f0a81414b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43a610a-34b7-4474-bb9f-be53a297dc83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177c86bb-51a7-4be8-9aff-7862b8e79eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01021f54-f40b-4283-a984-f948f12109cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.45.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a90b3bd-e5dc-410f-bdb7-beffa142e672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84260f12-2bd4-4610-b09d-6731d8e7eb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835a5bba-d3c4-4024-8b25-55ad43de1f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09c22aa-ae98-4b72-9cd4-37199243a8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3e2085-90a7-424c-bdd0-94a8fb4a6750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e74ad4-2dc7-49ee-b528-1db72c576711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81661b31-e4e1-46a7-88bf-d0bbd3b1be4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8ed981-a9a7-46fb-bfe5-1044b27ec19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.108.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c21589d-ee46-460c-9f2d-c525c197cb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.115.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d01ba2-621f-4a34-9332-fcfcbce69376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54aecf1f-7909-4940-a79c-86cf4cdaf5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1b3baa-f7ba-45ea-bc09-8020bc3972d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a479694a-058c-41a9-add2-f14e7ab77383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.244.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fccaeef-840f-4117-b805-721f93a9adc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.245.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddfdf58-93e9-437e-ab7d-df9ffa6eb65d", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceanlondon, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.176.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99bb752-0fa2-42c6-92d5-1de651842376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab46fc3-a070-4e3f-9f4c-ce21a00d63f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.53.91.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4dba8a-0d74-412c-83dc-e1baf71bf880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.117.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f53a0b-c738-4bc7-b17c-3ee39f0d79b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d2f8b7-a553-46ee-8e65-e9549a429989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.210.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2227bbcd-8ffc-4dc2-ae2b-a99c4b2945ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f830b25c-b5c9-457b-ad21-cf3138bc70a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e78af7-7111-4249-a071-2c783ac086ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7395459-b590-4ffb-98ce-8360601dc72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901471c7-42fb-487d-82d2-d84c63f09b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50322c49-98f4-4e50-bfb3-35538ed4793b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.90.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8d5c81-371d-470c-995b-5b678c2ab4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4e6380-ab92-4eb2-9ec5-ddf6d424b41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b063e5ee-03bb-4b83-8952-8ff539300e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50723827-c421-499e-aa2d-a422f706ea46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e4e9c9-395b-466e-90d2-a8c456adf9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e88ee0-2ab1-44d8-87c9-581e91b668b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b4f420-69c7-40b5-9134-89d8b8a1dca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4384d44e-a050-4277-8c68-78448e0c22f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474e8329-062a-4a2e-a1e3-10f467b1da7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf36467f-2532-4f11-b301-281d7edad16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca0916d-3143-4bb8-ad79-3bcc5aaabd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361fee4f-9505-4b0f-a825-ee4a3dffc263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4af871-dc6d-4192-9639-502bc5416136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc6ee2f-a119-4358-8867-a0d054691f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043f7266-b922-4d04-84c4-d1ca08b338ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595a2306-9169-445e-b3c5-a86606a4a51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e6d3a7-6121-4d77-b4c8-3436417131cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95e5735-b2fc-46ab-9e3f-3df51aa97a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987e57ce-0202-4bd8-8b42-17bd04509fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e0173e-3e7d-4c47-b614-697fbfeea53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4ff049-fb29-45f2-89b8-c4d265c0cee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6320a7-14ef-4407-baee-67a1bd6c26fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040a89ce-7941-4789-828f-257d03c48918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efe93cb-b583-4cac-94b2-d7e8a408192a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81557197-c45e-4c0b-ba03-3b7d6a3c9fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a64ae9-0aba-4aed-8657-f3b11667fe0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c20a43e-7757-49f2-97a9-8c05a3ac2f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c8e800-e80a-45c1-933d-b99a0bda87e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a293bcd6-10a7-4f7e-835b-6c682590252b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18b0050-2a87-4ba4-b12a-e34b1d7d458f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b6f7ec-230b-4004-8aa9-57c0b12e3dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f784754-c2ef-4a6a-9c90-c85cdae09b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d87454a-b6a4-45c3-8e0a-146b771a6934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f8a496-2dcd-4cf0-9bc4-616f9fbed7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48efa0b6-418f-4caf-b510-acdbf7ec8d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b220ceb-c0d1-418e-9b76-4436b2396c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b9d2dd-3fd2-45d8-ace7-93825a14fc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf2a34a-3ce8-491d-a802-c306c6805364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d591df-8f06-4a9a-a783-ab0471fc663b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.153.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3faed7be-7b0a-4c7d-88bf-2e3faf72f942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d4f4a1-f109-4c54-97e8-f1c6ab83abc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676c2a2c-cd33-4b27-8411-c2e97845de51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ea67fc-5d01-443d-b286-bdda6fa6b546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78983c21-cc3b-4b84-a7c5-135d6abbaf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8864ba2d-0947-4add-b968-d0ae9ee84c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c7d041-79ff-4720-b2e5-2d3600fab61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c62ff1-f116-42f4-bf8b-32ebf62a687a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4177733c-371f-411e-8a80-7636ff4b5950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987804c9-4998-416f-8368-e3cf39294395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb81c121-fe21-4a83-a429-4df86addb93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e2bec5-78e0-426c-8a85-abeee3302b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bedb520-42cc-481c-9867-8a86abdb30ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7856d518-d872-45da-9feb-36cc1708405d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572c5413-acfa-42f4-a064-0b53fff2518c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4994445d-15f1-4a7e-9233-3f7119784e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2cc98a-eb63-4ac2-8b50-b00951001dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79582f86-da95-410b-9c85-27d3492dc9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5eeb4d-b801-4608-a129-e5273bb2b05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641fad38-d989-4062-a711-115109e86aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dda1108-5363-4433-bd2f-66ef39af8075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5d5400-7cd5-442f-b4de-9fc5d98df156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24d0361-5327-470f-a8eb-2995733c9b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909c83d8-edd0-4b48-a6f3-9ad337965dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9978a495-1daf-473c-8bb8-da8edc4a1c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b35839b-febf-4cb9-8929-68e00812e576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d82600-37b1-451e-afa6-628ce52f7443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82146deb-2c59-463b-b21c-c9429192f928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838bc8eb-e0b8-46b2-981c-a0c86a3f487a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4037f5ef-c96b-4580-ab62-3177a5808dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb567cb7-a291-4a6a-953e-d1d5c84789d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787c9a37-cf9d-4fb2-ab89-87a5f38d1c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c7d883-1e79-4b0f-8810-f32a1a317531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb29d46f-8031-4066-b1cd-232cae841bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7122fe5-06b3-4a3e-9314-30e500aa6f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffb9028-ae03-4ffe-b205-2d5c30e11427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcebf566-6493-439f-8e09-657ab04c308d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1351b13-3e0d-4960-9bee-2a84416c89c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be79c57-4d41-499c-9ecd-ff4d4e2a27b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a451f0-577a-460a-b55e-cd6ad1623143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77616621-b4dc-4936-bb5f-46f186eab070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae0edb4-0812-46b1-b3ed-042c2590d78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b9e424-bcc5-44fd-abda-73b5c2a2beea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e151233a-d8c7-476e-b0d4-9c56f74807cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0440b4e5-b7a8-4741-ae66-819f46a00775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1545b42b-4338-470b-ba37-1c7d19e0a41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b375519-a34b-436e-8bf8-5f383fae3897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7743a3-7c99-47d7-87df-d468f56fe209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95531f91-b120-47ee-9a55-14bd9ca1a2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9677723d-671b-4e5b-8efe-63c05b0231dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50dd296-34b0-4ea8-8cfe-37536975e3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb72ce0-6ab3-4b37-bdf3-6dcae2a44b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9415d267-d8dc-45f9-8efb-4ccce558361a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ebec88-d9dd-4494-930a-a9ff8071d753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4929fc01-dcf7-4784-97c4-67fc83b6bacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e86378a-1bca-4282-b4f4-860930739f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3ef19b-dddf-458b-8dd3-2172956ccea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4db673f-bb01-400a-aea9-760fc9f8e245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a84eb2-ce12-4829-8993-a8259e56d9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67fd955-ab6b-454c-93fa-890d6c8716f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5108103f-c6b1-4f39-a9d4-e2ef15183722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324dc7b8-8feb-4d6e-a210-194416e7bc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7400ba50-9e2e-4d89-890b-1ee6aa9a2ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93764c6-3240-4219-9c5a-3cbb79e2f4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aab2080-3b7b-4395-a09e-523bc6e98ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae986c8-8258-478b-9660-b3d2142bba20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a9e918-c8eb-4957-a96f-1b0e9acfebf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76948c76-8150-4997-872a-eadd8288264d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb49c79-5910-44ba-94e8-156e52f86377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0eaa81-bbef-4417-9023-8245ccced0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ab33f5-1ef3-4e7c-8c69-9c679b8f4db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e6f42c-4321-459c-95f0-2bc523e76f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d795b6a-8bb0-494e-b4a1-453b0033fccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a305424-f907-4e92-adec-7008982ceda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70351704-446c-4598-babf-e2fdd03124e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2c8e33-f88a-4abe-a847-8201d1ca8036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bb0fca-7f84-4444-8fd9-663968be5f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d65d77-984e-46b9-98ec-8544eed0bf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13ba253-3a86-45a6-949b-a0d2df27504f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa6ff82-2218-4b4d-91eb-f6b0656888e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f664179-408f-407b-a1fa-ccd0e91c20c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f859cb98-b131-4dda-bca8-bf6dfae202f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeaf9a7-7d37-461b-a9c3-1b3fb6d139f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0f16af-315f-41a1-9455-2d698569120d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.69.227.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3ac7ce-4e77-49f8-80b9-8bf36506aecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.75.51.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803142a4-df9a-49d7-9aa3-e661a85da978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.75.72.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0014ec16-9e54-408a-9d72-ba25e50bf13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.104.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5cb928-7871-443c-96c2-5393bc90cc15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cae3d5-6db5-4925-a517-4914da0c6d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5696e2f-1e57-4993-8c84-846d26111d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4435118a-1ab3-4d78-896e-58ca4d1ce133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214e1fa0-371c-4e20-87e6-4230608f790c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a125edc3-5f11-4967-8302-fd25e5f96f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9e29c6-f2ae-43dc-a726-74cdf2039ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4a6632-0ca6-4b32-af48-2cc1736cb4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd733de-50b6-4598-8861-868b16a873db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05b40b5-64ad-4619-99b9-f7201f4bd49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee208ba-0439-4a32-99a5-3a722f0ca76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b035f95-e849-48b7-afc6-634875901756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebc3536-2faa-4b3f-8fdd-8afed029a32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e30c25-6134-4fb0-8dc5-2e4c2d270943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713297fb-382b-43b1-b6a6-e6d95b59bfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.40.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0abbd0d-c002-4895-bd1b-f75dce884cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29542a04-aa09-4743-b90c-b7088f393777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52b0a86-ea12-4660-8fff-7cdcb8769cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f761995-1ccb-4dbd-952e-21e56c7adba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a4e7ab-867b-4170-a895-b6d7755fdb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22461e57-a320-4cb0-b322-c7728d118c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c771e84-b0ad-4847-a021-56dffe2433d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f813d8-7c71-4052-9e76-7472e744c68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008d35af-038f-42ea-8663-f9bee939ae5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.60.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1df4a3-ee84-4031-bb28-54061a866d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f20bab-d085-4589-b50a-0beaf3c5283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adb6d2d-2980-42e9-b159-78a7f5096ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33c9742-9eba-4419-ab1d-5ee5fd0c1216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f69c13d-4317-4fe3-9a7d-5092abf6857d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba651d35-b04c-418f-92d5-638261217aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096d1cb6-612b-44f1-b67e-b66c99d492a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abb9d55-1010-4407-9b03-7541b9c9098a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f1c4da-a25a-4ff8-93a9-65119009a37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.129.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2393a2c9-264d-45c3-ba3f-98a006a41b8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.18.122.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3ef951-fa75-49a0-81a1-90902605c6a8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.157.199.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2994d81e-ed54-4679-a2f9-eee4bb07c422", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.17.133.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd008f95-c445-48ff-b843-308b45e1992c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.76.8.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36b5f1d-cf90-45cc-b562-b880bdaac717", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.105.189.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d75f94-28bf-44dc-968b-a7b1d94ccca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b6a9fd-7879-4505-a13f-0e7b3794f5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfda5a4-c988-4fae-abe8-92c3d76bd4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9cd77e-7ebe-48a3-8601-850b834ca4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.126.120.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66af02c-32a7-466c-8081-3c668fc1c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.142.151.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07390320-5d6f-4b29-a4f4-61878f8431ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.164.134.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b98e8-6b62-4a56-97fd-80fbf8cafd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.166.164.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cb8e5a-14e8-40e2-a7d8-cbde8f2216c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.4.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328cb60f-3733-4e81-bf07-0d2f649f301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.52.252.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d03c163-0473-41f7-ac3e-c47c9e6847eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.60.229.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd80d3b4-4123-48f6-a699-c282bd6be32c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.69.61.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f49ee9-d125-40b7-bf4a-a30f4e628664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e63cd9-f2ea-4d1b-a1f6-01965ecac72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.86.174.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fd7b3f-b11e-43d6-9ea5-5270eb43499c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.95.18.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27236a7-d9a4-4701-b989-592388b61f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.122.7.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a7bd22-f048-4f32-8f1c-4402b442ba47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.163.247.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e62298-c1d6-4cb0-aa41-451960b14c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.224.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77632308-4d16-4ab4-a50b-cd43b6176d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.194.110.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030bd7e7-c099-4adb-8f7a-2f888e366f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fce571-bbab-4095-9eb0-d147f1cf0a49", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.32.69.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d420776-c31f-402d-9cec-ebdb145924b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e60a11-a1ae-43e5-b0ad-0df1056842b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3350756-20d1-42b6-9c6b-5074077f093a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dfa450-4366-41ae-aec8-b3ed37ce324a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8d1860-1051-4156-9de3-4f99b62efd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc6defc-4206-4c6c-99de-03e45318b372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.77.10.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062e93ac-65f0-49b3-939c-412f13806e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.118.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e33496-d10c-4494-9f5d-12d88916bd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.127.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15b84e8-577a-4d57-873e-88d93a3023c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d3c228-f080-4e0a-8ed8-7d2855eee6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41464527-af18-413c-8444-256e7f0ff6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7b839b-6953-4585-b3d4-2b66e6d2f8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3b98c6-693b-4209-8ea6-022f552106ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a59b6f7-a0bc-4503-8d9f-c83062c715a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09a25c4-3dbb-47a4-8610-30f74514704b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aca4cff-2448-4896-8807-620736c6c6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15159569-3ada-4239-8517-f41af5ea0201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e8f82d-fe9f-4d1c-bcb0-ac8fa3f4e5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a47152-1f27-40ca-b3d9-f78249418309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b987f72-727b-4b5b-a213-39b1483e5c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9e72e1-c3e1-4844-8168-e5bd60d013d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44b203f-0b40-4028-8e3d-a899f30fc56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d94667-d8ae-45f1-b49e-20d3bab3e6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46321ce6-38c6-499d-ba1c-adcaaf08d9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c782a14-6693-4596-a22b-b656a898c2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63eeff57-0ebc-4e39-a05e-c10ba7977b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333564c7-fe49-4bff-8515-79763b39e59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de17dbec-f5ac-41f4-9d84-1d50424bfdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a3acfb-da0c-499d-a12c-7de24a1af15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7434a50-3c7d-44a2-a2bc-9dcfbec9d2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409c9065-cfb8-4478-8185-766ed61d4ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2516e383-284c-4a5f-afce-516c53f6e3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce11a6bb-c60f-4772-a640-35df5aba05eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc89e05f-2309-43d0-9425-d3a440bc69b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf6020f-94d3-4c09-85a1-cd5a3451229a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d0dd4c-864a-4ce1-b9e7-ec358b307a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fd8227-dde7-48e3-bf70-4dc9fce30ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608f0044-99d7-4bd7-92dd-c8ba3d5cd090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cc869e-067e-4593-932f-9ed5945d5de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb05bbb-fbc6-4d0f-a6bb-2d0846450ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66070ed-862f-4209-b3a9-637106c1cb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d742c901-4831-4414-bba8-f9c65ac12695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8a4659-8c17-4a93-80a8-6e29309b12ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62da8546-24b4-4d24-aed4-d15fbeb2701d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff4fce1-c360-4f74-9a4b-a76c91e80aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c6a598-9acd-48ae-8b97-1bf8c905718d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecf0e86-7305-49c8-8348-7c3426de90af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11d461f-11b1-4a5e-88d9-06f4f5197421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5c5f22-7dca-49fa-9ca6-d9db2531f695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46dd4f0-230f-4d8d-bd04-e9433394f896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320dcda5-5167-4309-b1f5-402c8e67839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f0214f-2f37-4777-870f-1d315f64e806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ca45d7-b96b-42db-8d97-009040395afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f22fac-c9fa-4448-8dfc-31216bbc5f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e114c9f-b4b1-4ae1-af75-8ff8ee6fb87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e238b7-6e52-4d3a-a2d9-d121fdd51e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24cdce4-9cce-4fa2-a463-0be6cfe41234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f12995-d2be-4a97-a31b-09481c348159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b3ec39-b51a-4cde-9e7e-2b5778876d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae0f9d8-e55b-455b-a4aa-04402ec76b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64088b28-2996-47a2-a01a-1eab8fbf5587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8e650d-7d6a-495c-a076-5f9525b99df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1cd0ad-f489-4fb1-8c40-1b851cd49535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07944021-8856-4c85-b2e1-68dc75fd247e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d7b845-ac50-4103-9342-22f08d8ce987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722b5e67-91be-43c1-931f-8298b6bef022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ffdafb-dd77-4ca3-a987-cd703200ccab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7150adc8-4995-4eb8-9407-24b8b861a764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8922bb5-a34d-4860-964d-f4e2355b2496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efcfe2b-b97b-4481-9e27-ddd5e9621a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d071732-9fe4-4cf6-a44a-2f7db78091b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71268105-efc5-4b9c-a790-922cbe778435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c6b22b-c1ae-410a-ba22-a33b2b03bd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbeb9ea-2e5c-4b2b-ab04-ce189275ccaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b63ac7f-fd53-4c24-9f51-a5c6e1c31278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d10fda-54a4-4690-a089-4d876fd7fe58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075c9fcc-da29-471b-a2f2-20ce21eb6b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502ff8ff-b7bf-48e8-b95f-c9496aa5bd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74133ea7-dd44-4df7-84e1-1767c51a05d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cc7cf0-dd77-4229-8b92-1ae8dc8a0a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a480eefc-96bb-4f07-9a11-29d929325bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98587a8a-e06e-4b92-b38d-fc97e7c1b475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88ef6f8-158c-4166-91b1-eb7182abc1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de6fa96-6087-46af-a9c4-30a7a9e12d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23835c4b-1293-4028-bbc5-98959b563010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca111823-d006-465a-8ae7-92516b952863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31642124-27df-47d3-bc3a-483ace4e8b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d3fe17-4cea-40df-959a-d27720ea5b92", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36ee661-8a0d-4c27-82df-7a790a4240da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec33d8d-01dd-48f7-b862-8ddd17a49bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d03363-360a-4d9d-819f-21d9d5e31b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94f409a-de67-4474-adb2-5a5000ca68c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf284502-d924-4056-b60a-66a66ddd3f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48daf5cb-cd1d-4ea4-9cba-e2df97480479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4530739-54a5-47ad-9fbb-5eb558e5b0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d6c962-8300-484f-84f6-a2e43f7d4713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527bee71-6e7d-4c59-b43b-8c51b2cfe133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e243d12b-deb3-4a83-a6ce-7b8f4dadc843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d40a53c-48b2-4372-8a8e-a66b60259b63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7228634e-d21d-4003-869d-85dc27a7c729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5339f0-be94-45d2-adb5-388488aca550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e8ec42-41a7-431f-91db-a6787c9e4254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab20ebd-7eb3-42be-9070-737f913acddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2108c4b-70c4-4dd7-8499-09d8ea8a0498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661e6f49-ea5d-4ff9-a1db-70e3e8f0c6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f092a0-e02f-47b5-9952-07a041ecab4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a077102-d47f-4cad-9a15-f36f2ff3ff07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363112ff-955b-4e51-9a4a-2bc69ec23614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7de3fc-e23d-4335-9826-0b3d2bc2d726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3feb1a7-f6bc-47bd-9b6c-dac8f7b7dc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0646ef52-f1fc-453f-bc32-7f7b84588073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bb7d17-8a62-4d7a-84e9-d3f48784c395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157ff39f-a14b-43c2-936f-08c540600880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e64e93-a0b1-404a-8883-946094ab5af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c311a4-f973-4e25-905b-fd56ca82f977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd70bf5-bed3-407d-adb0-9537ddb8ae04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2e2e52-d558-4d52-82cd-13b5e9462ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d33beb6-cbee-4cf8-9254-09dbf022682d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28988bd9-23b3-4f2d-b6f1-d989e2432bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb61356-a048-452d-96e1-6f351a1c63f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5b3fc7-1817-4291-a057-b5a1ad90bb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e814ca-c734-48da-bf00-d3670210de5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c623e3fc-5a3f-4da2-a76b-69fa436a6ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893a3032-f84f-4b81-868c-c6955c118db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dadda7-f2e0-4dd6-8c99-b62f3552f76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac908a11-2339-4c78-ad8f-7d61709f122c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbe319a-7828-4c8b-998e-f3f961ea4626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c06ac2-9d6f-418b-99f3-495a97b2c4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd9eea0-45bf-49c8-b299-d15d1444125d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f78c57-74a9-4d2a-84cc-95451f9e0eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4172991-0801-4b03-adc9-a93cd4b5c24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb12180-ce17-4fd7-aa58-fac5893c7309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaa1efd-9aef-4206-9f4d-c114d02adc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e3098a-9de2-49db-baff-4b704e32248e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c1fc47-b483-43e6-a0d5-f83aa250bd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10945570-1016-429f-a105-0b602191a2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578c7118-36f3-4496-9c9e-64e99a34e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d860af0b-772c-494a-a780-ef6f08d43f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa207c3f-c79d-44f6-886f-54c8df8e3be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deac50e5-eee6-4457-bad9-8fd318c9a9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00c69f1-a3a3-424c-a9d9-9416f97b280c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acd1591-dc7a-4424-932f-9b9c163d073e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289d0186-b908-4c46-ae6f-892ad5485ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbd52ce-2c90-4092-b057-832e0f6bbc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a790d0-d9b9-42e4-96e3-3e6e7f9509a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a44b34b-455c-49aa-b36f-e8ebfe97bc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d93793-b9a6-43a2-b4f6-dd189c9651d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01799173-308f-412f-8b06-825016d4e377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f441cbc-3218-4388-9c85-0ef6bab7ffaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6f0b1a-2ec1-4a6c-9c3f-26b0954ac1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efa841f-8446-4a48-9795-11bd9207d3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a552e108-6f9a-41bc-8105-9e9c54734e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6fc22b-9c70-4f91-bfd0-db9403493086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d49e8c-d2f5-4bbc-9a20-5a7e73478740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4ade3c-c2d1-4a25-8020-64829fe694e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f0342c-39a9-45d4-a016-cea82381d9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042c83cf-d456-47cd-9038-58632272a940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d93fe93-3fc5-465c-a76f-427afbf9d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbf9346-bfde-4c81-bbb8-0df7c9c341e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52653a4-2ec9-4cfb-bf02-5c4a37146c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb55941-2963-4c4b-8cec-84dfd1963ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77a2c4a-a202-4ad0-b795-a80be0736b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10009afe-bf47-438a-82ab-5cf707af0f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c05838-b291-4427-b1f9-f9560b340424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b692eafa-de76-4288-b632-ba789831c8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390c3f4a-6f25-40be-86a2-4b3e3ab6c8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f586688-0bcf-4ba3-a3a6-ec5f6d5f9d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d5ef30-bda5-4071-82f9-0427e2111b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e60b43b-3026-424c-9c80-08c791ffbe1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f81e047-d94c-448d-8821-aa0d26f55f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65f1264-439b-4e7c-89f5-3016023e02a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4639e8a-9889-471d-bf37-d78d2eab7cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2cbd57-4c74-42d3-a0fc-9d5fc918e9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbcf5ce-8c44-4440-a39e-17beec71e8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7b7868-3beb-4373-9094-1f02e0e62d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbc39a6-8792-4d84-88e9-df2cd39842e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da08dfc-bf04-48ae-beb5-bbab6ad125c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51af7ca-a556-4a6f-a86d-18f0cdedd187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc67255-6954-4464-bced-5cd4cedd62d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc437903-2665-48c5-8fb4-3f32e69a347a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992d7425-f6d7-4eb9-96e2-d2c0ff1fa4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4ff00e-9b0c-4d7c-befb-a9066582c3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20cc13b-2cad-49cc-ae7b-5c679e7ee935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f35ed96-f886-4574-88d4-15ff8c6f3d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.0.168.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0034f89-669c-4294-93e5-f3e94d959414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.128.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3754e11-70a3-499b-86bd-60dfeca5875f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.156.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d18c85-e89e-4b57-b258-1746bfd14820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.199.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bababe-a003-4137-949c-0168d16229c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.204.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc568a56-a68a-4f19-91d2-99267d787047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.204.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44ce27b-af24-4eab-bc27-7c68c4803700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.210.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69ffb55-a14c-4d4a-877e-04c3c9ef0382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.218.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d5282d-40a5-4d8a-a051-79fb7cca808a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff717f97-8e5e-4360-8d7d-e0b447a7a19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13840651-4660-4d5a-bdcb-ba3632c748b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8826f98-c501-4088-809e-a8116472b3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dcc58d-aa03-44fd-a29b-2b6bbc996e94", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.42.55.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2930ff55-b2b7-4b3e-bc38-4d969fc13f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.23.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff6f614-7171-4617-bf7b-c588864e1725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.24.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd718a1-f231-42bc-932a-1745321b3a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.200.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5a118b-0930-4caa-b5d0-a8f9d5c5277b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.250.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b60d629-b51b-4aa5-91e0-0c61d44dd7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.0.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3550353f-b113-449f-ae22-202a7face650", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.25.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e65c80-0d08-42c2-9d9f-39fc5dda565d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.4.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4226f00d-940c-4e36-b5f7-33039e191574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.74.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b4734c-1452-40d5-bba0-e5eb785401bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.178.209.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8543fb-98e6-4f2d-82b3-0280570bbdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.188.181.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a327d824-9c5b-427b-a6c4-05e9394a9c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.204.228.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cba954-e022-4dc4-b928-5061d3c84a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.241.173.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c15559-ec94-4bdd-94e3-8b9d592ffb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.224.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2fbc54-d275-4b04-a731-7f631195ee2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.229.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a942d0-5a3f-4eba-bf7e-e46a398332d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1d0551-4237-4189-a1e0-1c54602f0564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22091295-9878-45ba-91a5-8156f3774300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43de4300-712d-4117-af3d-cc07abf3336d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff72137b-cf4b-4d58-a739-d5919f318f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c93aa4-9cbc-4833-a4df-8a0c7dde1454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2618a3cd-0425-41c0-834a-2d35bae70cbc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.64.33.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2688f0db-9d91-4896-9dbb-cd9a09f4eea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.83.232.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac73ea68-3865-4fdf-8661-3574959f1de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.80.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b126f1-96b2-4bbd-9282-b77cec131e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.45.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e86533-788d-4065-8825-d80f9e486d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecc46ce-c2c3-453f-955d-ef9292cb055e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7727c3ed-65dd-4a53-a964-48ffc0d0f939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.221.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d90630-9439-4e44-aa84-da0018eb29c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.226.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987938c3-3968-4fc8-8ccb-c51188cb8797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.243.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36632150-c8db-4f4f-89ba-0010fe82fa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.33.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc33e19-8936-493b-9811-8ea5d174ea17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.96.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5514c77d-5011-4331-b0db-e57b76a621d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec509cd-c669-404a-b182-eb6083f37284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368e119f-c428-4538-b1b1-a5eff1fe80ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99609bca-bc0f-46a4-b027-f266cef5f722", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c25c2d-59ae-4c95-9390-d408259c5b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.191.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411d4ccf-bb84-4dba-9f45-e71284ceed89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.172.173.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb969910-c919-4095-af0e-35aceda87162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.18.176.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2f6418-5a36-4724-80a5-af73e06de9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c768cb67-e0a0-4629-9568-d0a3c77c9ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.207.104.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff75173a-fe5e-44e0-855e-e45f49544bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302e3129-20cb-44fe-b2cf-7597eebf8cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a0b347-cf6f-4468-a559-0889bb594961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86731bd-ab33-442a-9be0-83379d17b490", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.240.117.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f64c142-2346-4a0e-9031-eacc1afa7677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3562284-af68-4d74-8cdf-d61702a9ce94", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.46.188.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4feffda-1f15-438c-b42f-1425d146984e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.72.55.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee9669a-cc08-4377-95ea-c7a0ebe75d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba986888-9d25-4c5e-b6ad-410c6d20b8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9e37bd-ae2c-457b-abca-983eac540aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.119.42.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e55cb2-c06a-4293-b18a-c1c99ae8f5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f7a05e-1b7e-43b8-82f8-a46b31058e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0644b3-eca2-4d1b-a43f-eae9a4bda0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.247.156.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7051157-88b6-4e23-a029-8ec3cacb1bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45b819f-b80f-46ab-898f-7517abed39ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.54.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddea3a7b-3010-4fbc-8bf4-ae9a5c7b1040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.54.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bbae30-ff01-4451-aadf-71f623112f9c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.176.16.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f0cf84-ffa6-4515-b394-01043ea01949", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ad166f-3316-4b23-aff3-076295f5efff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9fcc90-8b29-4ae1-b3c5-0bc09556a3de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a740ad2f-7e0d-4662-972e-fffa7db0b0ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1a78d9-f442-49ca-9708-3b5fd5ccbd27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e1a524-f2ed-42dc-a1eb-21f516cc9492", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754b7d8c-2d42-487c-971a-480401acd5e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6033bd-13b3-4e53-b1bb-a4b9216f938b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d2f431-7df3-49c9-8fcf-3f2206fa3b93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1b8eff-0e0f-400f-b294-486dd92d2f2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39866365-a031-425e-a2ef-ee52a9c6cfd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649c7639-b621-449c-a5b0-ce1b4659765a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972c5d0e-55ca-40eb-a7f6-fe38349612dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672940b4-90a1-431e-accc-a220eb4c11ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae546e00-9094-4e4f-9c1a-4919516f9711", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcec6a2-ee80-4754-9564-3862777482bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63035f1-f36c-40f7-94be-338aa8e97255", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043a0e14-2129-4535-9d80-89f0a5b6c157", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14882a9-dda9-4623-add4-dba6118602c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c42368-0b1b-444b-8bc1-64476a7583cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2261c78-d443-4b5f-92ec-bd8a0b84af8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eedbf4-2302-4147-9d95-7391eb7f2868", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee4153e-c3a1-4351-9fbd-8b86efe0b36c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6d4345-a8af-4c42-be12-f2c0301bb81d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe258437-50da-47f3-993c-066d2761e6cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8d7321-8aca-4ad1-b3ee-d0cd426b1b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.35.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1d718e-e3c1-4ad6-b803-c6e593efc573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.54.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ec78d5-7533-45b4-a98e-aa8376f1e942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d7f7cc-c165-455e-90a4-63add0993a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e094a4a2-5737-4194-b590-ac1f0d994d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaab3e5-2142-4461-bd30-83fce5db733b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d9b23e-be56-4ddf-9689-71f0e0d3adc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822b3501-4180-42ed-83cc-408cfd399550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299c258d-a7c5-4f57-9961-8927e98fa001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c91c750-9400-4261-b4a0-aadb11253ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374eed78-f801-48cd-8ecb-efabf1876583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f562488d-2a86-42c3-8e21-c4394a286e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec9ceed-0cda-4a6b-b165-f0460da40f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a371af4-2fe8-4383-af1f-3a9b27a60a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ebb83c-cbab-4c5b-9ab8-227368385e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd631c8b-2408-4419-8a2d-74880ea4b015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0e6d1d-0ce1-4bb7-807b-343aa9271e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25116d2e-da33-447d-a72f-30bf9631e699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbfaabe-3271-451a-b13e-e16a78c32aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9ef763-8375-42c1-b4e2-b73ed146b84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b56c68-285b-4246-ad37-9b0909966691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a56189-633e-491e-836f-f96206c47859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1565cea5-bd53-4b41-a0c6-a65053d04d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f890ac10-1265-4fb8-9027-fdec443e0ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16f1fce-8db4-4868-9342-1f664a074e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ab19dd-d893-4b69-be75-5005bebece55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc2810b-efdb-4aab-bff5-d590fbcc8aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cd471d-7851-4114-9d46-8be5d459f504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4edbccc-d0a0-4aea-82a9-fe85fd5a30d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97276cda-2035-44df-b13b-01a035316b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bfa155-bbac-490e-aae6-80fa2aac47f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39d2877-62bd-4c3e-bcd8-c4d633c3dd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5c687b-7da4-4bbc-aacb-7da777c78206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7516bbfa-5216-4525-a50b-bd73c64dd6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303c8dc7-6a93-461e-96d9-348ce926cd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db5d74c-052b-4a41-a45a-b82c19b400d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c623c4b1-7474-423b-9933-c0a9502041f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8233e64f-75c8-4681-92b5-fdaaab3d2f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f18ef9b-2c15-4729-9ed2-f7e8b6f2b89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68588bc8-a4e7-4c11-8b06-58a54be52716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5a8cf6-7f4f-4d44-960f-8e8fd8cb7631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b5faf-a553-4e56-b472-6e0fecc641bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9a79e4-62df-4a00-8af7-bc41ee600b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ca8081-e477-4b78-b06f-9016e8bee1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47acf0eb-17da-4c00-87b8-be54a5bce00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb88be3c-b760-4345-b9aa-5677881546f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5941505-855e-47e6-a181-81220903a605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01cfbd0-429d-4173-a010-365ed6c838d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b356bda-1d03-4e28-8685-16add6ecba53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.21.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94949e2b-cce4-45f5-b07f-e3cac27a5f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f20c013-1659-4b78-a150-b9e411661404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf56184-213e-446d-a534-e99270c492dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981b6cc4-5792-4ecc-8570-9230aadecd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2078237-d4d5-4135-95ce-ad4ae6ff7bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda76424-d7da-45b3-a9bd-ed1a426113d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2ae292-2bbd-4ffe-af0c-48e006b39443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4033a669-f592-4919-8249-8f907ead08dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19017187-e632-4ede-b5d6-b63e04d2d99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b0161e-01a3-45a2-9bf7-29596c844a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56aebfca-b1a5-4d4b-b847-aa49a6a0f848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4b29f9-ed19-4b17-85ed-1121d9d90dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e52a1c-75d7-4f97-8127-3342b67f6941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bf9b87-ad0b-4398-ad28-0bed113a4447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79515316-4f24-48d5-8dbe-3d008bdff942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040bec9e-ed5a-419c-a821-73f0f0727547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be70df81-70d7-4dd1-815a-ce7867640121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfecdbc-3380-40c2-82a1-8b78b4661ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2afec4e-da16-400f-be1c-80a017b0c26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314b7cae-3ff4-457d-b6a9-10239cd9915d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c75baf-3ad2-4094-a033-6cd7456b1c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0760ba-ee22-42e8-8089-da77cc933530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd2a815-869e-4fff-91d7-22f5eb078fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b94c263-ca1b-4a7c-be2c-e5c718120635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b11261-da22-466d-ac4d-3aced99bf0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7795cc4-5659-4afa-8639-790a57d1a5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379d2215-a384-401a-97a3-058f41d0143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ced253-6446-4d96-b8d8-9caeee74ff8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b330fc5-72da-453f-98bf-50e433598d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93608522-2f58-47de-a9e2-ea2949f067af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da95945-3b96-4c25-9da9-6e90ed810253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94d5924-b802-41b4-bbff-a0cbde2f181c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517022a5-dba7-40bb-974b-a3d573a8937d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb7605d-0f8f-4fbc-b89c-33792bb8aee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c1bb2a-1218-4243-9cf9-0ed29a7313fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95ec99f-7496-4b9f-86eb-73a81b16a9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b8a8f7-1988-471a-be8a-65416a59ff42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fd160a-5f15-4414-ade5-b46627accd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2be48fb-80d4-4a43-9343-0685d025b219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49aa7dc-9d76-474c-99ec-39933d13e0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c3f1cd-41ad-4f10-ad13-27676503d3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8bac6b-29bc-4c74-ac4f-0cf3ba3125a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc3f58d-de2f-479a-8b8b-898aa9f55300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3df88b3-95f0-4b7a-a1e1-42f86bc3f8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd96a9ab-9fcd-4ba0-b799-5f5aa90aa63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9953e47e-153e-49ab-9995-2193ebb23381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd8ea04-7918-4e38-b45d-f7ce94716dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da42162b-b522-4d45-b356-8b0abbd928bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b3d8bf-8a88-4db8-a83e-99d5130657f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30609a63-3b69-4d40-ac85-d3c8a7edb6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c4da6e-c5c4-4867-bf3b-5575a2ef12a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad763668-c090-4eb6-b782-015d9a061bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.38.48.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac8323-5a99-47c4-ad63-31df53601238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.57.110.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c42d64-6cac-4659-aaf5-ef7e60a14841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.162.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ec162b-b114-47e2-a016-1445029a1b90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421f2582-09a0-40f8-9b93-28a203fd2c4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490e0bb5-0611-4689-93db-a45543d8a363", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b256cfc7-3eec-41ab-9e70-5f00d87c21d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.173.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9566716f-4f78-44f0-8bdf-fb7f74076964", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.35.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec70576-565d-4e33-a317-8d4ff5adc3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.110.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26db65cd-38e2-4d37-8ed6-498382b33f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.33.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738c5079-0411-4f86-aa47-b36c8a17c0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea7c783-522a-4adf-a8fa-3b565ff39c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.84.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de836d18-b5fa-4bca-a4e3-ca779be5b7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e568634e-2af1-4433-8563-aad0a4b6ef79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff339f0d-4f5f-4678-8626-705390f80ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd0e1c7-90ac-4c3c-940f-9b39c4d527f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c89cb99-d275-4ec7-bb9f-b65c763a8334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.66.22.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f782c5f8-df0f-4be0-8437-5a3a2b74cb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.82.127.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6697acc8-c354-4d1b-b741-2c12d771bb64", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.0.56.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1902b6-182b-4b42-a7f7-4ba3825660ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.155.84.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b744da65-2348-4620-b667-b458a538bbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93b8fb3-98f1-4461-b1bf-d96f5eb971a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.173.3.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bbc496-a5c5-477b-a3ca-c708781a2287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.205.95.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52a201d-26ab-4484-9a34-94a6a038dd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.36.4.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889817d5-a199-4431-b2d0-4ea9c38ed1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.42.61.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ff8424-7584-4257-b1c1-9552a2c7b4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35464d94-fd92-4802-b6f0-94d31631446f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.76.106.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f74f5-705e-4e52-bec8-f1c01fc5bd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.79.229.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5920279-f23e-45cf-b817-a7879f3d62bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.102.104.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08839cf4-0277-4991-9544-14abba776faa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.139.30.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39600432-8e27-4c76-9981-8c13f7477984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.143.197.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f1fc87-6c65-417b-9e19-c569675c2275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.147.17.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68968f49-645b-4394-90be-420c4de8e396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c5a2c6-ff73-4227-932c-b9b0e5edac32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.112.207.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196321cd-3c31-4f7f-ad9c-23afc0acf8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecb871b-442b-4b09-b7b1-47b8bc6a9eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.130.28.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40113ac5-0673-445b-81b1-435e44ccdf23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.49.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78ec1fd-f09b-4928-b7c4-e520a86594aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.15.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ab4f40-23dd-4c86-9418-73401e092929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.232.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80093019-fdbb-48a2-bcaf-f4ca89f71784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1caf38-830e-47c0-a3ad-f83fc2504fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d97b3a4-1ce4-45a5-83b9-683a161f83df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.177.133.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b949e0f-05b7-4843-90a5-b56a769114a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b545a02-373d-49ed-99a3-3d39a7996c0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a5c93a-df48-486e-a2f0-341faddf9483", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06fa7e4-8fef-4a3d-b648-54c757eee8af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae6b554-9b6b-4dac-9a6f-0faf65f1fa8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b369994-8ac9-4ea8-9ff4-ac922198a1be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16377d34-f4f5-4e1d-abdd-9a13e5bd4c1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fea4d6e-7c7e-4df3-83e9-c333fd8e8c1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96687bf3-098c-41bf-9b21-512a54860aa1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee5293e-16d6-43dd-80e5-49c58e2edf7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4085c0-76d2-4617-b832-3ac2183fe97f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1652a41-1d1c-402d-a8d1-294e4aac30a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e94886c-4be0-4c51-80c7-a12bd2d132f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d973600c-8e04-4637-94b4-d232b5faf0a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16d6cac-71fe-4665-a756-2ef7a9fffc3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94e742f-849e-4f20-9e6e-1b4026232538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7013c6d-2d0b-41bd-aaac-e0bf43c545d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c75899-cbbc-44e4-8980-6d5a6f68a901", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce64eb55-9eb3-425b-a254-f68c408655c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf64efc-4208-4ebb-adf8-839db4451891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.198.207.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1456a4-24a0-4e6a-baae-e5a20737501f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23037f69-0c18-4cc3-aea1-3593dd0ac138", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.210.132.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5fb57f-1235-46e1-8307-91425031740d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.240.139.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff114dd8-4d57-47b9-bca5-929a0b1bdf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.224.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dd5edb-3251-4de7-8e96-6c2cbd750cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc148b3f-3454-47b1-b0de-99d433f1c8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77ca211-3760-4947-8c1d-e76a239f29ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5a50c4-2fd1-4bec-91eb-835da2c2fdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37374050-c206-44f9-b890-4bdebf4d673b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.205.136.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f03b35a-40bb-4698-b7fe-e53603db53f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5784f8-bd13-44bc-ba65-4cf4c93f73ba", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.229.201.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81873506-8e10-4bf3-8601-79a152272e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.132.26.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0799f3d9-7b45-4ca2-91ae-ac252712a135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.135.178.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84b0d31-e105-49c7-acde-b9dcbd4ed881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538a821c-5a1a-41d0-88cf-1d2ef26368a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83271a3-c98b-4988-8b78-6e9820ce46de", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.222.142.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1480865a-49ca-436f-ab4a-1755adf09de2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.232.176.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a687dc5-202b-463b-a06f-d269669133f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.21.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66758f4-6e4c-47b3-a6f3-b1d1186bff74", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.86.49.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a0446a-5e9d-40d2-beec-482771d43cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.88.163.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1811251-8ad9-48f3-b247-cff22a368885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.108.176.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054ce0aa-7ea7-4b62-9f92-e41171241f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d1a051-d6e8-4f9e-a4d1-a9e20625a469", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f00382-c32a-40fe-813d-d6f10b32d3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.41.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bd5bb0-3e3e-49fd-a494-cfa4920cfe64", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.44.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1e517b-c8e3-4264-9cbb-37c699a394cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa2b736-6051-481e-a98e-82d9764ae338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.151.74.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5866a4-e2c9-4850-bdc2-aa55666aa540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880d743d-e4b1-4228-a6e0-d11e01fbc1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028cf5b8-a271-4647-87da-da483dec885f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.163.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24521c56-d628-49c8-acb6-5e222c2bfa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.204.227.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff0ee79-4f7e-4402-b0ac-878392c43ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.247.153.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c354ff25-3bb7-4eae-b99f-4da62118ccbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.26.63.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcb25a5-81ae-431c-8045-811f71d1b9c0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.29.206.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feddb58-e6ac-4568-803f-62f3cd9a7989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db50b451-375c-4614-aa01-fe35670ed85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.51.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c00efb2-d33f-4047-9530-cb69f1142217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.189.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bea2af-9fe8-4510-93af-59a518b12a1b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.75.193.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3ed462-a402-4773-9bef-ba809bf2753d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.76.108.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359fb03d-9ab1-402c-b166-da90a584ea69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d687f38-4d2e-428a-a944-c03903bde233", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.105.3.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46383ed0-e482-427e-a26c-50a8223260db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.140.244.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03185da-1c43-477d-b015-11b519a18ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.43.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960f3e25-d41c-4825-940a-f4c3872382a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc1518a-fea7-44c4-8c0e-24e9c4dedddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.247.168.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bae6ee8-73d0-4760-8554-7d8b3b53f523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.251.135.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7017742b-9c3c-4e5d-b76c-28dfe15d8fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67068066-0678-4043-bc19-0ddf23285bd3", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.145.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c17d6b-c4fe-49be-beb7-b0888ff4e927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d97b01-dc17-4553-92af-e8fd98b39de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118b5f93-df17-4bcd-9e81-9429bb6cdad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e349ffb4-9da5-4b81-adc6-27696f22e607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c266b7-b40d-44e7-94eb-47df46eca99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b40267-ed4e-44cc-9f38-1ec50f280af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b2620d-04cf-4e78-8a87-571ce5be54c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.186.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894abefb-9b5e-4f8c-9d5f-289a4a02a335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0274ded7-018b-4662-8b81-6804fca982d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.97.62.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8a0d82-d49b-46cf-bc80-64f0e692e291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f579e3e-2dcb-40f3-aca2-87d8a470af27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.125.206.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff723e2-a881-45f3-b2d7-d8a591a1ed05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.223.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae02c0b-5611-4d45-981c-56ae0fd3d229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.13.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67df876-ec4b-4a87-9299-eaa8dda0d59d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.13.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8437ebb9-c80c-4d2e-af54-6634457a80fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.197.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9993d98d-28c1-4329-aac1-fbdcb4feaaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.81.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6640f025-3892-425b-9169-2ba3d2fc4d73", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.27.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb865b4-82ed-47c7-9f65-938d74b12ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.218.148.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ce9c80-f95c-4493-a1d0-00196cdb91dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.221.13.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c101f2a3-9197-4a7d-97d5-87181cd31631", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.107.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565eef76-abd4-45a0-b3a4-64ccaedc88c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.90.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc1f366-4b43-4f05-84d0-39597c62ceee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.25.65.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e327003e-6a6d-4079-941d-782a2837e87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.255.172.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b6213b-be7e-4508-843b-d76001850263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.255.175.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0564ff-e880-4896-a12c-d9a114e14ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.43.207.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b404a55-9241-4b7d-bdcf-d055ed604e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.47.39.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590a5823-b584-4a1b-bfc2-6b626b087445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.43.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54b25b5-2ea0-465d-9b5e-a01dd02d0f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.45.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d7123c-787f-44e0-aa13-8cf8e1fe4eab", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a02:4780:41:9648::1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9930c230-e2c1-44a2-8c25-1f332df87282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.108.232.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fa82d7-a588-4734-a845-99e9ed872345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.122.144.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95e7181-4980-48a9-8834-6c23e5936577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cf61c3-ddaa-42a7-8504-ec0e4d404df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.96.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc4678f-a70a-444b-9cc6-d1f87c5046fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.108.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff971ce0-9cda-4249-a7f3-d84a81d8f0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.137.149.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5619d1b2-7941-45a9-a7cf-c017a046faaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.140.245.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce535fb1-24cf-41bf-a1e5-cf4726979139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.141.167.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fedcfca-5a91-4359-a2a1-bde6dd40aed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18da73af-0de2-4022-b4f8-4bede7ada095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.167.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac13990-a71a-4a8f-b343-8df58ae31ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.37.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7a4177-d500-4c64-9563-d96e6a96fa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.66.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382ceee5-4a6e-4dba-a74a-02b486fe4232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95cf03c-4ca7-4943-ad89-a7a0acb3fca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ea0837-74f0-4ab7-9a6b-ac86b3178353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.23.63.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e252cc-b2be-4c10-9f52-471c6dd81c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.239.136.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d353f9-8bc5-4d64-be43-65b928f6a3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365571e9-d61b-4897-b833-d4faa5dcf641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.217.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16673043-c6a0-4fd0-b6ef-f49ad8866efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.72.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d94a133-6c11-46ad-b993-0e050397c1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.182.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fee917f-b87b-48a7-8a63-8c4911fc40a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.152.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7562cc-0521-448b-8b57-d0cfcd6bacb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.201.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704fccca-8aa9-4e2f-9e46-83142ed89993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868056e4-1bce-44fc-88b3-607bf6c7ff3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.112.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b76a44-4c89-4c16-b708-421fc20680e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.112.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8041d40-fdf2-4cb9-90d2-33f1ef75346d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.215.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb0fbd8-f05c-4528-8ba3-08328135b4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.130.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7cc57e-bfd1-42ea-b1e2-7f253a636b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.36.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe45076f-6f86-42b7-a255-66dd338acf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.204.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5ee78f-d611-47b4-ad3d-f5594bab8bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.220.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984b62f6-5195-4a3c-b552-93d20020cd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98b9bd3-6cc0-4dcf-a81c-3c1ae29434df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123b47e3-0dd3-472a-be66-f30127954d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e39fc3-4fb7-4db0-939c-db14fb22de21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6609f072-17b1-46a7-bf57-b23a7fb713db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2332c2-f859-4f24-81f3-5120050bc0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e42342-7c7f-4d28-bf95-5b57053d986c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.179.197.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08924f4-2199-4b60-bea9-b4426ce145c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.184.215.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1056bf13-5dff-4ffb-8229-0ea68a3e3843", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.216.62.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa55f1fb-9716-44ae-9a30-43aaf4e67733", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.23.253.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06a4936-e215-408a-908c-2f74bc9171ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfb3542-611f-4e72-90ea-0b49d6b0da39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7e79fd-c2f8-48d3-9da4-51cbb5662238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd77689-c003-4522-98d0-29757db284c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fd44fb-af5d-4ec9-8efc-ff020c7cbcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52508fe0-e536-4d58-98a8-444dd76406b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ff088c-0bb6-430c-837f-c4b390adc0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.38.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f719c60-c428-47c6-8b93-d11ce61ecca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c68769b-6e38-457a-b8a3-ad403b0d8bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bd97af-0988-4356-9231-720691b958e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a8e04c-681b-49a7-90e5-b125be3165ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fa5613-0262-4e32-875e-204372dc2bb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.40.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201ace46-ba6f-45ce-a7dd-3686c563203e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.82.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243b14cd-ced8-4970-8569-0fc8ae92566c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.10.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cd0936-377c-4ddd-84d3-8b31b2f6a20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.27.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06ce51c-0959-42a5-b420-a395dba3301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.27.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5d634c-c5b2-44fb-9d2d-6b039d1ea90f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.131.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d25b40-2e8b-4cd9-ba03-779f08f5281e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.156.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbb7aba-e659-41b5-84f1-76495bee2231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.94.36.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707a0dee-c99c-4b6e-8f5a-dae90021095e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.104.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51b9dec-57d7-4f94-a14d-a46917a2f229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.104.246.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c864d58-9a2f-4be4-9cb8-4ef328922c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.58.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aef95df-35dd-412c-aff3-e97d5af4417b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.107.107.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818824a2-f297-489e-9248-19de9a06c97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.123.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6fdfbb-7aa1-49e1-8055-4dace65c6b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.38.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cd18e7-942f-4ad6-b40c-83b100ef5098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.134.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a0649b-a000-46c8-9816-e49cb716c0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.157.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb37842c-538e-4097-a417-aef165b81889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.165.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbc49de-0434-4795-984b-d91e139231c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.170.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4b90e0-e825-4ecb-9d79-7647d104e4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.71.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e6369e-3593-4dd0-941b-5838efff0432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.96.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf126a5-90c1-414e-8a53-121e22738546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.132.133.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a16618-b968-489a-a869-06146b76e05a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.133.156.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6283e9-4d41-4a7f-9be0-5ee07d7ed58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.134.183.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8dd368-76e6-4e88-bf30-e0c7205b1e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.7.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df2ada0-ae56-4ecc-9a33-ba9f6e4dbc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.125.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16225648-5d1c-4fa3-a67c-a7a0da6321aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.33.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6305dd0c-1513-4251-96cc-0abe088c45ac", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.175.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4713f319-c6ed-43d2-b05b-9a02e1a17f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.227.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3567c505-4e5e-4d37-983d-09ff4c92c84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.5.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddb017a-d799-4042-a444-23806f2ba220", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.142.238.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65c5575-5812-484d-88b0-a4f380262e7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.144.185.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70af74e-5c2c-4e6f-8008-4db0d066f7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.3.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c7fc87-ce79-40ba-8d6d-38e0f3e0b006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.75.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae8405c-e587-4a15-990e-7162d05496a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.83.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813bfb5c-fb7c-45da-be4e-3fb7c171622a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.168.101.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91371ed3-e2b5-4695-bf2b-e591ce5773b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.171.120.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68f32ca-31b2-4426-a541-6a976913bfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.148.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363c244f-0228-4695-b449-a30be128ef13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d81373a-e4ab-4dd1-98cc-75e7d2fccfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.52.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b65120-2ced-4eb8-9ab8-66b75c95ac65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.203.220.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ef3b15-88b2-4e15-865b-779a027518a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.71.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd07073-9e96-4e12-95b7-71bf2ae46a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.208.194.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb3c1ad-6d88-4ebc-bf37-4c8fd5eea102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.23.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e343708-9f77-4ca6-87f7-aeb028f330fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126f47ba-25c8-4fcc-87fd-abf5308e3a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.1.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46690dbb-d208-43e3-b76a-62c19f2d91a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.176.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f052db1-a829-49c8-9869-52eca3159508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.234.73.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce5619b-70f3-45db-a01f-c09c083dda89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.176.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bdba51-a22b-4f64-9d8f-274a00b30ae7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.67.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ad67df-6a18-4478-b065-5c4e0c7930cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.18.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7612b896-8700-4d9f-83af-2243f243f5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.223.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a22852-0a5c-4653-b4d7-7d6c80f11916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.226.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a60e7-c22b-4058-9505-f4018088e048", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.42.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81acd9e3-db02-4f8f-8a42-a86cd4522e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.60.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af871911-ae9e-4d21-880e-d4cf764a1248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.164.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70913f3-42ff-405e-9a7f-f340933c9dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.46.49.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32db5ea-d82a-4ebd-b585-42d4b8f111e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.137.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31071c4-660f-4d3d-95d7-6e3ca5a823e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.187.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd69e3a-dd62-47b3-970b-ce142b0f64b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.190.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008d2b44-7aaa-4d9d-b8e9-83b07cec5f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.130.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c74f4dc-edf6-4aa2-baab-64fa64e5a9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.162.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a6fb49-da5c-42a9-83ab-f66484a41756", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.57.168.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d4a007-8f3b-4220-b32c-1722b5a234bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.57.33.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3140bad8-6a84-4410-b4e4-7cf5a6e2042e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.156.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0364ae9-7406-4f4d-9dfb-95b630f80bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.238.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681dfcb8-4fe3-48de-9c5e-ef0553b55542", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea05977d-6aa9-4020-ae92-fda2db30da06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.8.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd18f83-de1e-484f-9dc0-7f64f66fb8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.112.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15334acc-5e31-4977-ab17-41179be48fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.139.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ce9041-cecc-4921-bd09-803295ffaa09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.58.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab33c2f-3540-4cb8-ad75-400c6f4f3618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.6.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efc440a-bb70-46d4-9e1c-b04cb6a6603a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.20.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30161ad5-84a2-4137-990e-3da5b98b0bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.219.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c17db-9512-43c8-90ea-e7da14705c69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.255.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b9ddaf-5327-4c9b-a794-76870069a410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.112.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63878617-a7c4-40ea-b91c-705ff1776e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.174.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77b4d38-b8d2-4082-8b48-b19417ce1eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.202.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8171eb1a-0a57-453a-8325-1080262d9900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.135.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc56b3a-d66e-43b3-815b-68561ac2cc64", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.215.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4daf3176-84d6-45ea-9804-bd681493b40b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.226.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bac86f-474d-44a6-ae5a-c0a766ecdb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.210.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5f474a-9da7-49ca-85ee-920a7a0c80d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.83.48.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35bfd41-67c7-4295-953c-4ab197b3353c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.82.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a405b2a-dd5a-475c-8ed0-a6c168e3095f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.123.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd87af29-bc02-4872-b8d1-0eb4d6340ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.167.108.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f680585d-2559-4c7c-8654-0b5f26cb68d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3696cfeb-6eee-4c9a-bce0-1a08484bde42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.174.106.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc969591-13ec-440c-813f-e00f11c520ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.174.172.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15c6d72-dd39-48d8-b247-f28a5e4b1253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.107.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b0fb89-2a67-4b55-b512-31b589fd8263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.16.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9d50dd-4834-466a-a358-276671cee3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.8.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cef37a0-b4d6-44bc-87d1-2397ff41a3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.193.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989e11e6-ed1c-4792-ad12-5de438698f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.193.16.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c113b6d-a758-4d97-9547-3b1dd03930e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.0.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f054f327-cf92-40d3-9d4c-23275ce43e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.196.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8559b77-7f9b-4c10-9d04-e03028b10335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.251.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4386c9-b487-4ecf-b604-aa99dc46e4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.81.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27048840-326d-482f-be90-de2e1df24855", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.84.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e47d89c-135d-4b1f-b87a-9dd685a77b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e3b641-5f7e-4b0f-8d16-d9851bec35b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce040b0-9307-4c4c-9b62-b3c7beae183c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883ffd6f-f369-4f0b-90d7-6a1ded2064a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77503e78-95ea-4c3d-9e15-a6776202ce3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2789ac76-0576-420e-86ce-efdf0a21fdc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542de637-3821-4269-a413-5c3ed8ea7fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1dfbc3-a6ca-444c-8d1d-a7e36a5be773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d8ff7d-4f03-4d49-9055-1c5da2711007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01314e04-6d0f-4deb-b8ef-5ea9d48492a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d891703-5f2c-473b-b5a0-153afc0ffb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27edb68a-8916-466e-9a35-abf9898a17cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d4e6c8-08ed-41e7-945c-6ced19667653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cd3bba-46a4-4fc6-a2ad-bbf28e573d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89af85cd-d878-4b5e-ac5c-02639348884d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe58a00-b0db-4d1b-b19f-13191a6d28b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39560db6-2ac9-4234-a9fb-f7c567df9d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7253c685-6ece-44ca-8599-499fe8292422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9987f076-02e6-4ce3-9c94-6c5a5222c53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929882bf-200f-4912-9c66-6b0638d55627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90834b8-6618-4dab-af3f-520429a621f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf53860a-50cf-453b-9367-c247546ff1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a56754-bece-4ed6-b948-35be570fff5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf399dbe-bd52-45bf-a943-5b647ab02728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9befff1c-2b6d-4397-9680-ace27420f337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e409fc39-c336-4b6d-bf56-086b6d1a95bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c1f684-7704-44fd-af91-8b8909aa2419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0b0f18-9a18-406b-8d64-3dac3a75a33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1093ff6-c601-4413-bcbc-b771e89ce92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056286e4-fc90-4321-96af-1cd3d6b14d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de67f16-33c0-4c3b-b4ee-349c70d35ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1316f8-99ea-4bce-9297-5b929034baaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08fa70a-5cb9-468e-8385-6c42bbbd007d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4454a062-0a82-474a-baeb-7ffaa584a746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0a4ab4-64fe-468e-a5b9-515306430d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5050d4-c236-408e-9144-bbfa08c932b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2733bb1-d0af-4706-9adf-200b66dbfaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea848770-8745-4d37-a560-e1a188d7590a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887f6ad6-6b8c-4515-8faa-d250290ca186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa4fe04-e6f3-4562-9915-6fc1de527301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23bef7e-2d87-47a7-a5f4-9e4a8c8bb0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69514775-46ba-4ed9-aa27-a40413a3b0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fe4604-386e-479b-8085-5e77d7ae732f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a181ab7-935c-4595-82f1-c6c194e99c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3174533d-2ac1-4d41-b948-493bae981008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12656ae7-eab8-43e4-975f-077afa600e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a4d69e-871b-492c-87e5-a370dde75d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022bda89-2d6e-4997-993a-2b4023bce568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d5cba5-d0ef-4532-9364-9b38e5c86427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4a1598-27f7-4c61-a3aa-a21588b66f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff94a13-6da3-4b59-872e-572a8956b2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f36dfa-454a-412c-8688-6ecaaed70a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf2d418-e0b7-4ec0-827b-f76209f5fa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a30b4-6d35-4afc-b162-ed93e2414f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6be0b9-6ec1-41d2-a41d-91ec0748e3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c81708-4c4f-4be0-90a7-f91aaa6a25f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbfb4c8-ac4d-42c7-9590-3762950e119a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e81286-6cdb-4db6-9313-3b698515a280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0442dd1c-5c6d-4a6c-a113-a3924db7eeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6cdb08-2ace-43e7-b37c-e879cae4c551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28da1404-46b9-4fef-9e21-234b2cbccf15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bbc465-9435-424e-b0c6-d0e2174de39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731266b4-02be-4495-9dd6-033a0a6071b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3802c25f-b3ac-452c-b012-68e631bd7bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5570ac-463f-408b-b8ee-85a343ae5a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d2374e-927d-4347-ab8c-f4e1f6b84bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f779e95-cfcc-4fcf-b86e-93dbc8411b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c340299a-75da-4554-a7e2-6e3027d35349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60c17db-32de-4c62-ab1c-e04accaab7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d62ea25-f59a-4ee4-a7ed-9af55d807a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858c0129-cd64-4d94-9652-f3c5ce872d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b452b3-39da-4a9e-8d65-e1e099a31c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc3edb4-f052-4e48-a539-d258db1539a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed502f64-5758-4823-9d9f-cdd242c22f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f465148a-449c-4dcb-b67e-2c76176b049f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749516c8-9251-49c1-87aa-296e3f881ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4f5bb7-1ffd-4eaf-bb66-5bbedd95e339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87a696b-0cde-451d-9e2e-c9003508357e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ef08c9-d485-45f9-89d7-dcb7c383542f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcb1698-893a-48c4-acd4-2e178c0039b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602a21e9-cec9-4a06-ab63-55edf32461fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2a4282-1b81-4d0c-a33f-d6e4cfd64f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084edd09-9d26-4e78-b8de-57a2aa9e1eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b187e4-423a-416e-83ed-16af6f0d3737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773e4572-333a-41d4-a9f8-45bca371e4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9274907-aac0-4bd9-bbd9-5b3a97b63e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ace19e5-efd4-4abc-9aa2-e484c937710b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4d261b-d579-40eb-b3da-ea0d3f8c1d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d870494-1005-48ec-8be3-c832fe4f71e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68675eb0-7eca-4799-9a39-b0a424b06931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3d135f-126c-457c-a8ac-8d91ca00a2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa446bc6-bda9-4f79-b9ff-9fdd594680b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf418052-53f0-4f75-9ee8-05b93389177c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16850b98-28e3-481d-b422-9cc5cdb5b8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25407b08-381b-453b-856b-ce1de14f1965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c3e289-8b9f-411c-8303-a13c35217127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71788eaa-0744-4adc-9d6b-681a6470832b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed80b33-f126-45be-8565-eaf20c2e8dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d322fecd-f220-4a35-8a2b-8d2d7bb70339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f50231-6623-4a47-be13-615d92b4cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766328a5-b3cd-4bd4-a00d-df249c4585d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d472baa-7eae-4ec7-8078-81a100d7baf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a903777-eddc-452a-9622-3b51f5eba257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51febf9-d4c9-4168-bbd1-39b2f3c995e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65491e17-e58d-4e32-962d-b9e38a2f773d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749c4a87-6fc6-43bf-9ce8-c4bd26a16141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e16906d-c47a-4a63-857f-8749656e5b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dfed5e-34fb-4038-b24a-0cfabe942f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abfa4ae-d58b-4308-863b-f5397d86cbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7431b8cc-8392-45e3-a5ba-9ed55feb65a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bb379f-5a8e-45f7-9fcf-fc45dd6e91e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c71011b-9b87-4892-9eda-175c7227a56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ebd8f4-1efb-46b8-bd73-140cec380152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145e0ef2-e196-4bbf-bd27-705eed4212ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2fe83e-6a9b-4fda-b76c-b893139b94b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e4dfa0-65e0-4862-9f99-4407ef1bbe48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabe35b2-3647-4b13-aad3-af62874be7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beeaa2b3-52ef-49b7-9c24-3ac88517550f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3e6152-7058-40cb-812e-333590c1ee19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74076a6e-7ffc-4c47-818f-3a8c470c7e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45da1d5-101d-4055-a3b4-245937bd0353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6996e710-0ec5-4eb8-8032-e0552031ef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a3a5a6-e94d-4068-b83e-0ad75c608826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23baf62-25ae-45f0-a5bd-9754c7d994ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1b5b59-93cd-446b-8768-9b2e315d484c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678fe282-d83e-44fe-b87d-6f46fe5b002e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f292aa-f7fa-4c03-96ea-0086e3debc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51d8a08-a268-45ac-8e06-a67380ad7dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0172788-f2ce-452d-b568-6094e0e31f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea6ac00-d44c-4e73-baed-d0ef1beccd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a124cb5-dc8a-4271-9c6b-5a61dc90563c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949f743c-47d4-4eed-b672-a5cb51ed9fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fefc1e8-29d1-44d9-8882-52df4c3d71fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94460b10-1a7e-496d-96b8-5848ecf75cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2617cd2-adbf-460f-9993-27719c262110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e864b365-eeb6-48e1-9106-f56513689e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036ab9ff-840d-4a6b-825f-299109e3ffad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ac7f93-7c56-4f7e-82ef-3f6a578432cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b82a367-30d9-4801-8be8-da8d5d1c0298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e71408-57a5-40f4-b434-972fbaef4a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1edcfe-ba4f-4b3b-8ee3-bc7cc92fa1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6916eb74-0f16-421f-a68b-0fe5b2a9f621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b69470-c09f-43a1-9887-9d1a7c61d7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df25591d-604e-45f7-a8c3-4038a50a5190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c71ab66-6a6a-4b47-8c51-f99467298d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee15f46c-eea7-4615-b9de-e5ada94106bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa56b4d-a1fb-4993-a759-f1de8e669f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f0bffa-503c-4469-8b48-5ae9fc07dd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc39d28c-1d41-470c-9425-418856dd36db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5675713-d6e4-4b00-93ed-c1b28afc74bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ae32d7-22e1-4ffc-ad00-e2ca76dae95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f9ca1a-b4b6-4423-ba25-d7d929d9a082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b905a5be-280c-4757-8b8d-6822b700d017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a211a62a-9a18-46e9-a4d9-fe4995a9e2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92680ef-7128-49b6-8dfd-0306434790df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56f856c-bc23-409b-b0c6-92c2f93a9509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456cbb48-399a-4235-b994-0805710d429f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ca7684-809b-4e5f-8944-45d419e4af35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74fb3db-0170-4407-90ee-0ba2df15bc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478e68c1-bc78-40af-8418-f3ed7f90021b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69508988-2022-4c70-bcb0-e36198cbd45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d327ca93-94d7-4d65-bee7-4fde3ba55a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8977c812-2da3-4f52-a052-54e4adc6c26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2e37a1-fb3b-43df-bd26-caa8d7bd519d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214b644e-38fd-42e9-a847-ca18d556c27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46563a5d-9c94-4b9a-9155-ccde73725fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa02b003-1dc5-4b66-8b92-7abf4c629466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9147ca1a-467f-40e9-a402-974a63dc2163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d846f9-c6f2-4a39-a51e-9059daffe00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c467b2-593d-4c85-8df6-5bc2d67acd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8094b576-4053-48da-b871-869d66f7de1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6914cd-b7a4-40dc-b448-8557fbfdecb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a556d56a-f0f5-4a7a-b5cd-cc5f762ccac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4eb715-4ba4-4e83-9ce0-296a0eff1d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37ab392-e271-4c46-b303-62321467ae36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e2c1bc-bcbf-46fe-8b79-7350b011c363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bea213d-b6d9-4b77-b0da-576b956bc796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d7816b-38e2-4879-bd76-98d7183155c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225a7500-f3a3-43aa-b834-d05e77123c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fdafdc-eb59-48e4-bd12-424b1f049119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3054f55-1c1f-4138-86bc-05f401171ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c614bf1-6db3-4c6e-9a4d-fb6d083279b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a10384-e6b4-40d7-a194-4503e6d698a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db30b41-404e-4335-a2cd-cb8662b41c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d070c0-59a3-44a4-9844-353b638753e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9259ea-0255-431a-a239-2fc0a7bc6605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bcc771-138f-4418-a764-913f1a95d0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad04a567-cf08-4fb9-a794-4d92c3d31d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0554b5fb-3edc-48cb-876c-a7a1cadc7ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d121346e-5b3b-4294-ba71-3c6955c27555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c202a0b-9881-45ff-9756-fbcf99b9ed54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b66840-1b3f-4e8c-98cd-1afea83c6413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10ede10-5594-4ac7-aa1f-a43d0ab0715f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2de383-c489-443d-9e03-52af5839ba05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e9c68a-dcb8-47d3-8139-90871c3410ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47551c2-3c3b-491c-8735-dd29b997c912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77891c0-5a5b-4207-a3ab-25707c66b4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c27850c-69ce-4785-b4dc-baf17d85548c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efb134b-4139-40fa-b0f6-5a2903d96418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.111.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45da8b93-764e-47ef-bf04-311bd3d087e6", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.114.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f72ee47-6f90-4308-bc27-c3d41b48bb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.145.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79feb076-d28e-463a-90e5-193f8a645b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.183.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1718197-ce61-46b7-ac19-27703b40429c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.237.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0393da-3a41-45e9-a7b5-acea80a2563b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.248.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae44399-d54a-4e43-b4c7-ac259926e1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.48.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0c3ab5-6071-4a6e-adb2-86456529a0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.55.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb936ee-7a85-4468-aeed-259554735fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.204.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea1a347-c7c7-458d-8936-6870795f38a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3340b1-4ba2-4206-9a0f-aec03636c63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.144.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f66ad66-5dda-4abe-bd27-d7801110a20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.148.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25d25e2-062b-4750-9440-7b3e531de61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.111.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bd5c74-d4ec-421a-be05-cdd07d3cfee4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.90.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b524f62-bf18-4384-850d-e878e80cd2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.17.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af81fdf-736e-4107-989d-7f4bf2516f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27ceccf-92fd-49c8-a6e5-4e94600e030e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.130.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a16cbe-3364-404c-84d2-fd922c28ea54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.65.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acb1e28-712a-4cec-930e-0601eabb4405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.253.106.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12deddcf-68e0-4d18-acb8-2722712d9d11", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.84.143.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f63db0-00e0-4b7c-9cd8-a0c05f62679b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.222.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb74ae8-cde7-4712-8235-f6e7bc383d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a01f253-b0ec-4d69-bba9-41362767c501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.108.171.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c4203f-df19-47b4-a21d-edf538b299a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.209.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29328ecb-0c96-4b37-a0c3-d1c7e054020c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.27.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a5b2bb-2712-4395-bfe1-dd5475751745", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.173.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2effdd1-a8bc-48f7-9b31-1db26f660201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.151.144.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6145f9b8-7cda-4ec4-9438-49e125725f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.156.154.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba45152-4f65-42c4-866b-8edd1f733560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.20.34.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d40fb1-62d5-45c2-b1b1-caed1278da61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.226.108.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0636b4db-8650-4504-a786-ca3e9a531873", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.232.140.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4db18e-a806-4d52-b37d-04035e67bdac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.251.148.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03814162-d51b-4d97-8c7c-0300ab2a001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.71.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf0f9ac-36d4-42cb-8c47-804af2aa8efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.37.211.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c59262c-ef07-4fc6-bfc0-f3872a88c9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.41.186.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a747a0c1-72cb-44ef-b738-55fe4bdc901b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.62.33.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3aec95e-7b24-4c81-aa27-50188e826c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.79.211.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29fb63a-a365-440e-a386-3f41be448482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.81.68.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aec2f37-39cc-4dbb-8591-85763202dc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.88.136.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f45bcc-83f9-49ce-afbb-756915e6633c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.16.74.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21c34f5-cf3b-49af-bad0-5dc46701910d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.228.64.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e61a92-fb74-4d84-8c32-7b08d0505fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af0bd75-57bd-487d-9f7e-56e2013733fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.255.128.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88cdb6f-cb79-4a2a-9688-1fa820e37fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.6.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d92ed1-dcc0-4316-aaf1-f6225a78655e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.38.175.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37a7426-6e38-4f27-906f-a804703e659c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa64066-853f-4907-a081-7cb38ae1e045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.245.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8499062-4f4e-459e-bf7a-b017cb0fac99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.71.112.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6446631-20e4-4edf-bd24-3f8b7d22803a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.100.222.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6186b9a-49c6-4d34-9a62-ca312ceccc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd27a153-de31-4410-97f3-7b9b3b59b132", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.188.183.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c111f4-fe21-48ff-a057-f45a4faa1216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edb72ba-e94e-4212-9962-216b99e3e672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.39.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c176fe27-11c4-4fa8-960f-2923dc4f8e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.95.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc1d756-5779-4e0e-9936-5f1a6bdfa7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.255.25.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8facca9-25b4-4e79-9bb3-c65362c7d51d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.255.25.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c26fd6-d2ba-47e2-982a-f94e109c5e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.43.93.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ab32c0-ab22-4c4a-a48f-39c529491748", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.52.135.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d0638b-eb7e-49f0-b833-6dd95584041d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.163.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1756c39c-31a4-49dc-a846-66004140a662", "relationship_type": "indicates", "source_ref": "indicator--f3d0638b-eb7e-49f0-b833-6dd95584041d", "target_ref": "vulnerability--62a7a717-4d3b-4237-b884-1f1053f65275", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--871e6d8b-f634-4d7c-b8a2-2a73aefb6993", "relationship_type": "indicates", "source_ref": "indicator--f3d0638b-eb7e-49f0-b833-6dd95584041d", "target_ref": "vulnerability--c5a5ae54-1fb8-46f1-81f4-1262e773c2d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76078fd1-35f5-41fe-858a-82633a43432a", "relationship_type": "indicates", "source_ref": "indicator--f3d0638b-eb7e-49f0-b833-6dd95584041d", "target_ref": "vulnerability--65c7d527-eaf2-451e-bf2a-2dbe9cca3f63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2417844e-f723-469e-ab5a-df7ed29b05c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.202.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964d57c-2117-4856-9587-28abc6d86e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44faf073-f5a8-4b69-a97c-745ab0b7eb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.104.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2def8846-fc53-45fe-9e28-7819ec3158d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da20eca-bfdd-4ea5-a7f3-9d5476ea2f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.76.210.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ae8ec4-83cf-41f3-9f3a-b5078d292589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.81.156.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a316ceb-62a1-46b4-a422-ae3cf7905cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7646f842-a0ff-46df-8968-3cbf133ed439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d63a5e-2c03-42a9-94d4-536fc39bebf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.249.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b45a4a0-5027-48bf-b03a-8dd29ce92efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.98.197.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45ae855-1cae-4375-928e-78e1539895a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.98.52.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b845a97-e972-4194-8d9b-0b0421c856c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.98.93.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b855dafa-f55e-4dfa-b146-485290a7523c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f973ed-7fe8-4cb4-a543-f76ef90c52e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.198.24.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cdd589-8573-4752-884e-dbd01096c792", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.41.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017840e2-9f6e-4514-8176-3bc31803f876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae83ef44-59f9-4b6b-8474-43da6a30c108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36b5db7-811a-4b26-b8e6-e68b9f53da3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.241.228.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b7a282-db6f-4a18-87ef-4b03fdf5a9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b59052e-45cd-4511-881c-08e15cc0628b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d20bb0-05cb-4194-935f-a81573f82e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad7dcb2-1996-45fe-aa46-da78e061494b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e47747f-d89e-44f1-91ae-54e3a651e35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7991bd-3832-4fd4-923c-1b6fe2a229bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479f887e-9bbf-4e61-b86d-072d23a6c777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaee264-cc75-40ef-9409-3800713cdf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55d1353-ac8e-42aa-8562-19ac80b3a353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.119.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baa151c-59a6-4147-b467-27f72e6fa2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d25b05-a34c-428f-a06f-83fb62e75456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f7d6e4-b428-4216-b7f0-15aec36eb737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4aff37-97c7-46cb-a712-2cf058934d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb447249-2189-4f9a-9d83-91c8ff868227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c1b1d8-ca5a-47f5-9960-697a4698bd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78d7b79-53b0-4deb-b68b-0c82fe8c4a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1dff8-e0d7-43cf-84e6-237e3b58c61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58748277-1fa9-4e69-b4a0-89503f41285e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683d3b61-6dd5-4da8-9d30-ec3b9caf3c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7921c4-55b3-43ce-a404-daf8a1288a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4445be3b-db96-4a9c-9a84-a53cadfb8121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1754be7-e559-42bf-be02-a5a9bca6bfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b14964d-ab8c-40f5-8a81-e43fe666cf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7002b882-b1e4-4c47-a9ab-88224990d6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdf551a-90f3-4ef9-9c37-da2f5215c846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3cbca6-1300-46b8-ac15-b918b182b1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af7fc70-dee8-4410-86ec-d19e2d6d17f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bd2219-98ae-4345-a236-95dbede1db55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a10b943-5e4f-42c5-93bf-306f9e17f3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbf4105-c04e-4ae7-94e1-5184f84dae8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a108df15-9a61-49c4-9398-d238002e01ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64c228f-eb40-4280-a510-ac0938a7bbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e86305-bda9-4b7c-9dfa-3991335c5a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ae29ef-a08b-4998-81e2-3e8d3ea2db47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c24845-d4fe-49b5-a31f-e361d29bd91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92954292-defe-4533-bf1b-2a29f5c8b583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956abe5d-9f9a-4d32-871f-d12d123203dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0188c69-25a0-4e96-a230-da03e6c7cb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accec11a-0d21-4062-86be-3bb46bb083e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c80e0d5-9418-43c2-8b7a-5d8118a19048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8be2ce-4908-42ac-9f85-5f5aa211fab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7aadd7c-344e-47c5-9f5b-558c1e12e223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c5d21d-b4bd-43c3-b614-7f06b75939fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a7f4a3-35ea-475c-8420-16003c22405e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94536fb-11dc-4494-9a65-2fa821f2805c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b0ca52-b2d1-4a76-9069-6e68572d323e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26293e8c-29df-4629-9324-5cfdff319a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb67acb-9a49-4ee2-9d77-563d1de5573e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96872f2-c58d-4bf2-a78a-b83ca2d89f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107808b6-aa4d-4241-abf3-640a6c05a090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c3e975-1d15-4b7c-85ee-fb79d61005ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331322e3-6897-41e0-8695-1a1dae1d9918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.238.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8418cd2-fe68-4e95-9de6-f97110690eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7f8005-e6bc-4816-bc09-8749c723bec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa6e7c3-fae6-4ce4-b51f-9a3de8279b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba80295-bff1-4821-b7f1-8e54084abc1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3aed03-3fa0-4245-bc12-745e0e5c0e82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63e4258-d1f0-4c7d-ab9d-222187d45673", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0997596d-a2d8-401e-b6e1-5a7e51fa4350", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0b4e95-4d29-4801-aba3-d3348178eda6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd33aef-a248-4483-b2d7-ebfaef034dda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f5681c-2790-482e-9aa2-3f9395973704", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08774937-7be1-40ce-8429-707f9d1d5505", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25118bd6-e677-4795-9e67-d431e2f53d6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab93c89e-b066-4370-b50e-71936b1e5cd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a5b35f-b687-4b0f-ab93-2d825186f4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fcde37-d058-4100-bb69-88abc23a9890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c0bd75-da7d-43c3-a188-2344dfbff696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f205b25-1c3e-4f03-8a26-9ea56400aa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a1ba47-016d-4879-8222-83f05b31274d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c41b1c-2927-46d9-b9eb-6ba96d335e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea1abd0-5dd5-497a-a693-f80cec373f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072998fb-1088-445b-b72e-d4f7e184418d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.215.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adefd3e-3f4e-496e-af5a-fdd8aefaf7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.193.154.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3229b0-b57d-44e3-ae80-4dad2b11f3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.203.193.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc999b3-867c-4238-9cc0-06d62d3cccda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.220.147.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651cf60d-bd5f-467e-8524-50f98d154ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.221.244.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b7fc0b-c76b-4fa1-8d70-b2ee31c452b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.225.17.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf208a6-767e-4759-b6c9-aabb24e27745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.232.145.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea43a22-75a7-49aa-bfc3-a7d33efa31c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.190.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33410a70-237e-4342-82c0-bbee81289b77", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.91.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcbaa9d-c048-4dba-ac05-62f4bd405ae5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.31.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246fc43e-18c8-4fc8-b0b4-160bdd5d4755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.121.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1828c1ae-caf6-49ae-a4eb-f95a1ec7fc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.26.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0060a841-689b-460c-901c-3c781fbe6ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.233.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad48938e-2f4d-4e43-9b7b-441827e38453", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.239.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e281b6dc-69b3-46f4-a668-4bb2dfbfd50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.0.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c0becd-73c0-4a59-9e92-ca933fd7b4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618329a4-351a-47ca-ac32-9ef62decb11c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.26.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d14502-06df-45da-af4d-002e4d4f4df4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.200.78.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ea534c-b203-415c-b689-32a73a8081fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.20.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c879b389-fe8e-4b58-9a2d-8fb76ed83248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.108.39.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e98568-0ced-48b4-9276-0eb621e6f0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.38.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a938d8a4-37f7-4505-8382-d03cc6cc63f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.122.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7250e3af-cb7e-49cd-a7c8-e40fe497c710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.88.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8da1620-f236-47ff-ad1a-7244b7d0e202", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.228.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a261d19-bee3-424c-96c0-a16c77deb580", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.220.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffbbbf2-e55e-4f45-9aa9-fb9b822ae5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b38421-a083-4111-8c15-c6d23f037434", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.167.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3278be4d-40a2-4df5-9dea-ba3b68108922", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.26.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b65a98e-23df-4f1f-b754-614e95e721ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.51.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8b2e38-d1a1-488e-ac7d-c02f3ce60fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.179.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c06f116-56d2-422d-a7a2-a848a427c70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.32.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a84bf81-f3c4-4714-995c-fc802e3128d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.88.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bfab22-2958-410b-9135-dd3341f1e6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.149.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be169abd-327e-4bcd-9a04-274d4d8edb5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.104.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cff134-6684-4b27-854e-8e13c8a7fdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.12.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeca444-2196-4c48-877f-5d125312f5c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.208.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400626f1-86f8-4f11-bed7-7ff1940a2d3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.27.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae75f753-fdbe-4de2-bc20-15f7ced79d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.54.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f08166-3f1e-4e38-8924-d6e488a93524", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.74.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4284dee2-0372-40a9-9c4c-a7c7d4b56be6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.250.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662ec107-53fa-4edd-9885-4b8f655d7e54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.129.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cbb76c-79e3-4f1b-b197-288296b7183f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.166.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61b8f93-8c1c-4d14-a00d-0b081d450989", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.27.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a3539e-4cd3-4554-bce0-ea75eeb59ea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.130.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826f40dd-6ab8-4f13-bebe-59f40d2299ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.135.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3198847d-ac4c-4d5b-adf3-e19eb148b72e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.229.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad0927c-d87b-475a-85e6-44cfdd1b466f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.29.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9016c250-cebf-4647-a199-85a8ce90a1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa4e3f5-aec1-475d-9458-d53dd1dde5a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.38.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d176a472-532b-45ab-9e26-788e5f9a71dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.82.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2c3878-051b-433d-9400-b111803dfdca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.141.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52d7794-ae8f-488b-935c-f414472bdd1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.48.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529acb29-d870-448f-84fd-da58696498ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.63.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34590f06-065e-4433-a4b6-6a603dbbbf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d65ef06-0e4e-4297-9a41-01384b62c127", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.214.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e8f3ef-a184-40d2-8017-3fa52066f02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.233.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e30185d-729d-4c2f-ad6d-603cb7ec20ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4db17da-db69-4de6-90c9-c3018d435881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3975c072-0854-4887-b918-98bd4f5f92d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.238.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8039c4-b17d-438e-88f6-6ab25d131954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.5.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a846fc-9ed4-4ae4-9e77-06c4d2f34389", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.90.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca85dcf-94b0-4cf7-99e8-8d41aefc0064", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96a7258-73e7-4e87-9ef2-3ebb6deae7da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200983b7-2793-4fdf-ac93-53d3deae271b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.191.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f58a03c-db7d-4b0d-b241-a20ef0a34923", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.185.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40629577-a551-4303-ad6b-9b968d6ef053", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.136.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9141abf-b446-48dc-86d3-7d3a03dc9265", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66341079-6299-44d5-b878-395da8dfb591", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55a5f24-1f7e-4898-8647-12a2f676192c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7bfa5e-b82e-4e23-9608-e95cbe425827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.125.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff53aba-c802-48c1-8116-4311aa6ddc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0cc14f-2269-406b-8082-ca1f4dbb864c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fae6142-d7ae-47a0-aab6-53fc99b50d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58346d69-685e-40d6-bc49-acd9f783240b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cfe46a-ae54-4fab-a0ef-ef53430095e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ba5bc8-1aa8-41a2-987a-8581832400b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.200.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac08269-8ba2-43e4-91e6-573c05dbe8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e00792-59c5-4bf0-ac0e-de0d3703f0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.255.118.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c11563-4be3-4ff4-be08-50d26a16319e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.99.104.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbed7d5-021d-48da-8bab-c39996c3bfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.99.45.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85371240-be68-47e7-87df-c5ca751d3df3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.195.188.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8f77ab-86be-4c65-9408-63faf225306f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.153.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f283abba-50f0-43e2-b2c8-809a79e9c7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.161.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c3e104-1319-451a-9a89-7881007d59ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.175.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92f3dce-1128-4e54-97c0-8835a3c112fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.154.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a47b737-bb75-440e-8317-5b7b901ff668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.47.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593910c7-fa8c-482d-9692-a1951bbf3b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.208.35.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2e2475-7617-458c-8b2b-5a05b0a43272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92e6e24-f2a4-4dff-8340-a0b0f2dbea4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438dc732-cd61-409e-a39e-c4db23a8cf53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c587452f-d1ac-4ab5-9bf5-3f54a0db3989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.229.15.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3db6cec-46f0-4051-a14e-dfd6519a95ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.247.181.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5c6905-d69d-41f4-87e0-83213b4830c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac66ce49-a51d-40d3-b7b5-95bdb39c497a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c598172c-89ec-4c34-a309-0ca43a0e80a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.114.124.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeefcb2b-ac11-4571-9efa-11782cfe24b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.146.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f17b93c-d13a-40a2-be08-f2e16bc9cac1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.28.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef97e7f1-1a35-4a71-9f7a-27c41284325c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad3c586-420c-4ba0-a0b5-16027ff7e47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.98.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ec31f2-1aec-4478-abed-1f928ad7c581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076a6f53-fb4d-46bd-8433-420d31e778d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.83.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c28ca7-22f2-4452-9a06-563f87eaf5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.181.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516c1ca0-92fb-4f17-8dc4-28a19ae8ab95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebfa237-3a1b-45eb-a155-608d305b8c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20cc093-1a93-4029-bef2-0c309f7f7920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccfeb27-2324-4705-b874-c1a6d236b117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a106c1-609f-4cd8-b015-d2fce387c0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.104.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f6edfd-43e1-4eee-895c-138f48bfedad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aeab028-a01e-4577-8a99-64cf4c4476a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46ac2cb-284e-48bb-8399-812ee974043c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9664ced-bab3-4992-b02f-e29d109aa25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3c57bd-d678-4d6a-aa80-f6a4dafc765e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba12d1f8-6e38-4151-aaa5-7a4253086423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85f66d7-8999-4280-9e30-524120589559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84537e1-e729-482d-8b9d-f160a3f71e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62e30a4-b6bd-4088-a109-8d25c13ec406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52d54f6-5a34-4a10-9385-10ce69ff6cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca5f948-11cb-4c67-9980-26da908224a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79cfdd1-c758-4085-bf44-f8c8f4b37884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89d7a6a-c1c1-46d7-bf3d-7e0efd87345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55b60ff-c31a-4324-91aa-60e590c8b8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc5346e-ed92-4d11-8d97-654cf8a9b0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066e1047-48f7-48fe-8511-0f8b6935ee44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aab5e56-677f-4520-a855-c152bd632e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde55056-3370-44cb-ab6e-4e5eb985c7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede2c707-b4ed-41c7-be97-3f27ebb39ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efed1f3-b2e3-47da-ab63-6b7d66534b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.198.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9f4c29-d23a-4d1a-9c65-ae42c11d4ebf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.54.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e967271a-cc95-4ba9-949a-83588da9985c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2e206a-ff07-4f60-ac6a-be3b503a9014", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910c7034-507b-431c-b8c2-ab7ced057caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cd94ce-4326-4ad7-afda-0d2d35e9648d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5b1271-ef00-4fb9-af84-9d56a98b6638", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9e3521-9117-44c1-831d-f7c49a3756ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7d070d-763d-4850-8673-3dbc472273ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767b68de-4479-4c57-8188-16d14d208e19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7eb304d-893d-4813-8859-47d00263d122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38800637-4edd-4994-bfb8-7cd229c360d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7be442-8bbb-4059-ba36-f5049e45cc60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25a2a6b-b4cb-43d0-9047-0272b94746e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c38d02-213d-47b9-845d-bef0aedc5c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4628331f-4441-4e8f-8045-dbab4678b057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a968fc-dbcc-4c39-8f8c-ce7673d79044", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2002-1149. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c06e592-8756-445a-8d0d-845913544f3f", "relationship_type": "indicates", "source_ref": "indicator--37a968fc-dbcc-4c39-8f8c-ce7673d79044", "target_ref": "vulnerability--6a3988e2-ec90-482a-9f11-83517d34c093", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6713250-da14-4ecf-96ba-865069bf3894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28815ab-ef24-4f2a-b064-b1baccf44a03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7380dc7-3cb2-4fe5-a5a6-351f7384796b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ef5f33-7e80-441d-add3-83e234eed694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900e470a-ea32-4ef0-b041-9f02a4d23293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d962fa-de90-4838-b7db-403fa677ce94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0f9f1e-49c6-4d73-817f-e57b3ad65363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca58cf14-e6dd-4874-9bcd-465345404a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9a3cc9-3174-4579-9567-b2be0605a9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796ffc67-90d0-4f8f-aab5-81f5fb089ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047fc85b-7e63-4ecc-b7cf-96f78112659f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc482f3-c861-4ab5-93c4-5d7afbeee218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cef285-862a-449d-845d-7fe897ff38b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf10b2a-235a-4957-b4aa-bee0b4b63041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9cefb6-5963-4f8b-ac0f-87b07fe279ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f876a927-4d7d-497d-b175-5bedc295f2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8699ec-be10-498e-bbc0-3107898beb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e3aa27-dcc2-4afd-ac5d-024c1b54548a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717e54d2-c2c0-49ac-935f-fa5d81894a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bab961c-0f0f-4883-a020-2e09ff556371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b663dc5a-9aa5-4444-b5bf-e1044f0699a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c193838c-9f38-4956-9846-96c13e59fb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba68ed24-4cd2-4ae1-a339-9c1ea393485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7b28d6-3551-4323-a010-284ab86caf1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5637748b-0788-4902-b213-13b0f5c106a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a1e4bf-cc89-463b-bc32-f5432ca2fad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1d0d03-7f7c-4575-b01f-ebf18a0d548c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6169cdf8-446f-47de-b47c-f95800b0ec56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2587156-58f4-49e7-9b0d-5448b2fbb9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecce0d0-a3c9-4292-89bd-ebd25769ab34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30196508-d27d-470c-b9c2-bb30d6b49d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf0005a-73c3-4ec6-9588-ccc489a3f7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b092aa9-9b85-49cb-9e55-49777094652e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6151344-c96c-4230-924a-d8c5cebfa86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670bb525-8bba-49e2-a6ec-63ecec1e763c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b53c538-bfc1-4d1c-8b26-22af022df6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d257b2c-d89d-4624-bea7-7c8e7deb2afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43789d1-3e8a-472a-8ff8-de0367e16325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6ec43d-1730-4033-b21c-3a561124a2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f6abc0-52a0-4e04-a2e9-5f55de6b9bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851c632c-06e1-45f1-b6cf-cff16440f5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.214.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee779a33-bf7c-4342-94b4-3c884328ea2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac701e7-54cd-4db4-8b0b-9ff4496b6999", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.152.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7004a21-8567-474f-9096-8517c87e533d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.46.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925b1f92-bb6f-4a6e-9040-3a27ad3b4c61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.184.184.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90925cae-53d9-46e9-b22d-15d631fc6a94", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.209.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f16c332-0e49-4ed3-90ef-0922d19544b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.59.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3923174f-cfc6-4b7e-b663-a8a39fc92edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.97.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fd6b4b-e4a7-491e-9040-d14af70217b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c29e66f-e11b-4f29-9ad8-bc97d1ea10d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57327cf4-0c12-4720-8a28-71c8c4e4c5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77974f4a-1afc-424d-a6ba-91af04e5619a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a137678-5caf-4bc6-ab74-b8ea3f4d96b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f4bb52-429c-4feb-9aa8-35d590686fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638e395b-b5c5-4699-8bb0-e6b8fe42120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac4e98f-eb97-48cf-8ea0-9455da4b06eb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336e918a-0611-4f27-9df8-9a224e7e8915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1d5970-7d35-4f8e-a792-6a9b7e8bcf0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ea5b2e-ee71-4506-9c8b-efb00d493a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce4fe5d-46bc-4da2-bb02-762cded3ee13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953af4a4-0ba0-465e-bfc0-701a6b223da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2350b707-0d63-4960-856c-2fe9ee89d3db", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472c7375-0806-47f7-868c-81491f22d311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4ef6a5-454c-4f31-a2f9-ef062350da26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ac2bac-23df-408d-ac13-d77870f8fb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b556dee4-01cb-4667-9313-78783e397517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b86bde-41d9-46da-a5b8-a643457ebd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8c8e0b-e5be-44cf-94af-20c554781235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe312329-74d6-454c-a6f8-8d883a68f17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac4f2fd-50e1-4c4e-81af-e5a40c4c9f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf9e48c-cb7a-465a-b44d-472c549f3abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5badb0-db13-4d8c-aa21-2f2718cff533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691d26b8-2e27-48fd-85ba-6b39f1402874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.221.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe7ae77-266e-411d-8123-8e230a0e8956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.118.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa572c8-f03d-459c-8c06-7566ed320b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5804e321-31ba-47dc-b972-485f16ac9a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237e5e23-aed6-4a8f-94bc-47c700f5ebde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3714a272-95de-4f7f-805c-003b58aee991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dffae69-50ab-42ec-a160-cc7dd2d0a6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967b47b3-73a6-4d5f-afc8-b8f6eee1f719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5242ce2-2922-4741-9c30-794de0b7de8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dff096-5976-4cab-abc8-6b002ae9bd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd3e799-f7bb-48a5-bbb2-39fe15187b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf83e5d-af07-4edc-ad1a-5a1b6355d5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa85306-0632-4a6c-812e-95e4c6c6fc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d61ae17-86dd-4517-9d3d-a5a2f8c365ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765a5ccd-adc9-4564-a919-6a83db2ee369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.32.45.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03421b8-6002-41c8-b966-40e00f120579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5302631-709e-4e95-a2e9-1d41d46da395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02996b40-a46b-4377-b5fc-7434921aaa37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7786c6a-a76e-4be1-91ca-aa5266ae0729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de7c493-8b81-4772-a77a-52f477178cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3687b2-2b16-4591-b740-66ef9ddc3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bd546a-fadf-40a5-9499-b8b88ea5ad59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399f737a-0967-4990-aa0f-868d52f7b784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d071200-00e9-401a-824c-ffee15bb86a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931d5045-8672-4330-8076-9300f8236987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3453ac-5262-4794-b975-51ec1440a703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2029e2-ad3b-43e1-8c20-4242086544bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896cc8e2-f9ac-4384-a3f5-236853c479dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2acceb-7b0a-46c1-82cb-2279be9f9949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c615fa-9c9a-485c-be9f-8418c3ffda0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a69de37-2173-45de-828d-5759a510a9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce766c23-7cac-41f6-9f80-add7c079c4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abe9f36-8fc0-4f27-a9b2-68e65163889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0fc02f-da6e-4b08-a6db-453dfd7beed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40aee8f0-b983-463f-a661-8d145f4d98d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7f3ed3-c24c-454f-92d4-e74146f9a87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4147abb6-1212-4653-83b7-caa89315ef8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c83e16-331e-42b1-9259-13d1118700e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2572dbc9-2263-4cc3-837c-509daece09c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.190.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5f044e-7e74-4d77-a780-8f50ff001507", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.39.60.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daae5f61-8caf-4417-b285-8a19e7714cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b75720c-7f66-455e-b7af-3659cf04902c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de358bb-49ab-4a78-8cd8-64a798c0e3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.214.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1d2b8c-7ced-4782-814d-c7bddf698166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c91375-3be0-4e0a-8755-45cdc00fef21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead3a228-30fb-457b-990b-757b301d4256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d680e4-9524-4ea9-9d3d-4a32a71b126c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d95cb4-fe27-412f-a415-93062c04ed47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ccf41f-9bf4-481d-b235-a0c570554617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3eb82a-c944-4346-9934-1a56be7049d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157719d3-c466-49ca-9dbe-7d5eef1e43f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08728229-432f-410d-b26c-9a6dbbccb242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0ec63b-03a3-49bc-8fb6-ae0e4b1b0718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6084549-b13c-4ac9-9dcc-70fdd878ee76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69835e05-7a28-4413-ae46-bbb6cd3f479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7f1460-f52c-47b8-8137-f2f35588bc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf44b236-a2ac-4a1c-bffb-a8432486fbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.158.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327e9a58-dead-4929-b3b2-5bbf88ffc991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.186.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acf407d-83f2-4676-ad63-ab29f0a74875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.33.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd10c49b-dc89-4a63-8879-fe34ef3062b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a35b8cf-40b5-4e2b-9331-9c69012b1717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651e5ee6-9007-474f-99b4-fa14409f4a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbae2673-9932-4cbb-9da5-ef0250910b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06d65bd-b3e3-4820-a5dc-477e96bcfcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31b5e3e-4789-4443-8d96-e475cc0c1355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d622bdd7-96cf-4a07-905a-65c7acb0b52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f0ada3-8913-465f-ac77-08fb5b7054b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca1fe2c-c8ca-4ba0-afb7-a6f32e270811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a312bead-6c18-4dff-8c54-2b9e11a88f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d156cd87-7f8a-4606-ac8f-f2013faf5beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e3af5e-af7a-4c10-88ee-474da904fdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ef0169-0ac5-477a-b3da-7af4d6d89cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2b2c30-f426-4ebb-ba05-7ab1bb9279bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0ebdc9-7a4e-4f9d-9c84-cda432fa3cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.156.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f75121-2c3e-4c7f-b802-6b55fbb1c720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.217.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2c0b59-07ac-4644-b3ac-bc861199e86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.254.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba5026-e97e-4f33-bc33-90d15e6ca285", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.235.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f6c0d4-258b-429b-b6dd-f588eb2c8489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47aad0bf-9a54-4d83-bc06-4241775ca649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8eb3de-ccb1-46c0-861d-a415cf311e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f052a224-e56c-420f-9271-f91e262744bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3c48a5-bcd2-476b-9c44-739722858f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9be4115-dc95-42d3-a3d0-08689115879f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f13d26-ca21-417c-8f25-c56babb7557e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fceb17db-5b3d-4a59-96de-285d0db9c8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3dd1f6-a245-4b67-8670-56a5f46bd22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1852c2-cbc9-4650-869b-ea5b20f8d588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f511ad-e0a8-48a6-8e2e-fa6994a863fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e10ee35-0417-4c8f-bea2-eff3085111f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56f646e-8960-43cb-b8b0-1aac26abeee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a71ac8e-8987-497e-a191-2578c4b1ee42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c365234b-310c-4e4d-a07a-22f955c15ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93c5d5b-06f1-45a8-8b66-bea9d2d3f425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661b7356-8d0a-481c-b15a-ae2bda44f3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cf938e-a2be-458b-a338-92e241a8e167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ee5092-2547-4a48-bf0a-4e6795eb27c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1e762d-5c82-44c6-98de-489b8bbcc0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397d8376-31ac-453a-97a8-f4a06cef8e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837d425d-7b75-47f0-afa3-af40273ee55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aef47f7-8c1d-4bc6-a661-4ced714494a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c585e5-4aa9-44ac-8af9-c9d8582205d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b691a6-d66e-401a-8d9d-62cc747dde20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a078e777-ec0a-43c1-957f-ddba94f79b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e44162-52ba-40d2-bc9e-e20a3332a31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f8fadc-2e17-48d6-9f85-f316f5db7b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f023be70-9e67-444c-88b6-3d78a164c947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023ca6b9-b050-4748-9aea-dbebb4171616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11298def-8e7f-4983-a5b0-b3c8a92f4ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7439c0bb-0e9b-4c63-92b9-c22209e2ca72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8a6f6c-c4d2-41d5-a2af-254b43e632e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e155e4b1-9b93-4256-988a-2d5ca568ada9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df8a298-8455-4461-b3d1-b374cbd135f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5272e33f-f435-454d-97ae-1112f0c62639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3da3ea9-9981-4c8d-8a62-fbe409d0185d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af171af6-28b2-4aa2-8606-4aa908f14f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154699ed-23bb-443c-b1c1-fe55da244fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0364e96-b59e-4398-9d93-31a0e8b6c1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac9e26d-4e89-439a-8f2f-5c3513ddfc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54120873-2045-478b-9cc6-527095788042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5994044d-9790-4caa-b082-fec28c7c7e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41a2369-55ec-4589-9409-2b08e3de0585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae5c21d-14b7-4e4b-8f61-6e43ea933dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161c1913-486d-4a3b-85e9-093a97aa4104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90850897-504f-420b-91b2-cd659be19aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d745b820-2aa5-46b5-93b5-9beec8fccc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756e10af-7830-40cb-a693-8799b4bb1a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb486315-cc3c-4ff5-8f37-039a91ebb8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cd8be5-0c9c-424c-8a33-d95a8ebfb1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a41bb4-0afe-4939-8d4e-c24cbcdb855c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d65db8-5c87-40fe-8696-942946a3ce3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3789ca14-e1f8-4149-9a28-7d235c650224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617e2202-6322-479d-94d0-8d906c77b5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f731c8-9f7b-4cc4-b684-21c551667083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a610b407-aa56-4801-9bce-cc9eba2b8ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de64053a-a97e-4044-ada8-f80684a2c42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2042b810-badc-429a-9095-ce39353dcb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e837bf30-91cf-43c0-9a3b-ad42d9a9eaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0b81f0-35b6-463c-b7a5-91ef7193827b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec7ab79-a31b-4d55-ade4-196ece930e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37f3ec2-7f02-4c0a-92ac-005560b99d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.42.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d9d08b-903a-4edb-96b6-0f1e38de13a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e069724-da9b-44a5-b660-bcc92940a66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af2d43d-de37-40ee-8343-784d3ac62038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a5186f-e1bf-451a-8d53-40f69eebe133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80401436-7a66-46fc-810f-bb5c6e345b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851f31b8-8876-4538-8063-260f54786e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac474cf8-64bd-49c4-a887-7c4d9f4e16c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545905b8-5d1c-48f7-ac92-7aa436484331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e75a2a-c900-413e-9feb-a1525aa37cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c461fca9-50f3-42d1-b887-8e417ec9d5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42d73cd-da3f-49f2-83be-ca06cfa6a014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a55f3a4-964b-43b4-a59d-85acd03f6c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea93ce86-15e8-4a67-9871-5b128a98ab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0897f61e-4df6-4fa6-a899-02c6811bf13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae1984-dafa-4a21-9fed-2c13b0712411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e180cf-8b72-4ab7-a0f8-140a148a72fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fc1f6a-171c-418a-8faa-10bfccd62781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c49800-72c8-4681-8dc4-23fffaf9c104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd31f9ab-5988-4ece-963f-032fa8207f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4229a094-52ea-4232-9e19-082de9550530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d3c7f8-ff38-412f-a401-6565c09b2499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86330a2-640b-4f94-a803-af93f48f77d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cf0782-1d0c-4df4-b634-99b091d83faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b69b96-86af-4b76-be0c-08270cf36a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d851aa1d-e93e-4f1e-80ee-72403316b911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c926e4-6c98-411e-81ed-95de7628ceac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01df18ba-95c5-4b1e-829f-480477cfe930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b67b5e3-845a-49d3-8993-767d58cfa338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9111a985-2cd8-4d50-a652-75ecec9ab6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44c5cb8-18d0-495f-8f85-b4ff10dd303d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56db1b80-8bde-4ba8-a5fb-1fe74abc5574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f96f504-5ed3-40ed-8963-ff205d1980b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d28a048-4202-4f38-b5b4-99b18ffd4a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874620b5-a00d-4605-a1fb-8f8f9b103434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523575c5-4042-4585-ba91-f87c53dd38fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72da078-9167-4b6a-9f98-1f005122d1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b559d984-02e9-41a6-a4f3-e35945427cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc94211a-33cd-4886-a41f-e62427587725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eaa0bb-1fd1-476a-acb8-e7c3e5ae0ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656b4739-8ed4-42c4-b64f-c3cd840f2e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9242f8a-7ae2-40c8-95ac-0aec34a9db8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93800650-8453-42d3-b70f-60357b713adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0af190-9037-45b9-94e8-4e3341faa825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e829c41b-a8d7-4512-9f0e-f44a81ce8545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99faa288-4459-45f3-a765-3840345404f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94d85b3-b7cc-47ad-8677-537d48dd40f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fac105-00f7-4948-a587-47b2672b25f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a131e4a1-9e7d-4ccb-8019-1b9594d34c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf973b2-77d0-4801-9170-17779eddce6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bb9cdd-a9cb-49ff-87c0-3387f81d1a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.229.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101254cd-5d0b-4ef4-b69c-a5bc29bbd63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.142.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f888ae0-b647-4cd5-bae8-2159aca3314b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.146.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce331a9c-368b-4fb0-94d3-3f75b537e5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb92371f-fd2f-47b9-95d5-f39b86b443b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.184.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6095c4c-09c9-4631-868b-a59475ad8e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.102.249.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2b2d1f-f896-4b79-bdb6-9725dd8adfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e528bcbb-bf52-43a1-99de-89f16dde8892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.137.25.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1d3a46-9b7b-4cfd-b02b-b8bd5f165a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c346b6ae-9ca9-4c99-9762-0b669f636df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.67.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be7f2b9-3610-471f-b342-5a09cb329477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbfd2b2-f887-407c-8146-e8d3fb7ad0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d168a2af-275f-4743-b1e0-9834cf712461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8202b241-d6c4-4941-9e33-c5e68d35a228", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.223.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb817fa3-d420-49a0-a1ef-a5f0d82bd4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4150d4a5-7733-4404-994c-53b0faa07d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab68422-ba5b-4e5b-a987-f2e8d7c5755a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.116.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f684c4-5020-4300-bc1d-689486fea0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.117.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e83c6b-fe38-4a97-8d00-3c13d30e2c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.117.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8eb413-5c00-4ba6-bdae-62e8d3c36f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.117.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302b5c77-f609-40c5-80e6-c19b5ff11305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.118.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccea0a7-7edc-44ca-b83d-4556f7fbb388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.118.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea290cba-1bbd-4110-a738-2e791320d79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.118.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c435640a-bdb6-49a9-9e11-eb6f343b08b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.118.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f411d563-6608-4480-9ecd-3614a1289285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.119.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f797c751-00b8-4da4-9349-e18d5b4e287a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.202.119.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734288fd-aca1-4cb6-8e17-7c39010e4b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbbcc37-6b40-4e57-bec9-6503def46f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.236.108.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b81bf67-e655-4662-8820-db065ac7e84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.244.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8183ae-eefb-41c5-a280-8e8b852dea6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.37.71.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100e7404-9988-4f25-b785-ed9bdcde3f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.31.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5e5096-b9b5-4042-aaf6-66f5564cd826", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.68.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf15a9e-b5e0-4ba0-8b16-e3e216f1e0c7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.100.12.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9451f80e-71cf-43cd-9881-4946957712ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.102.128.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4670f18-4638-4130-878f-b61b7c7ceccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.123.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e766dfc4-3609-4988-9e2f-72e2357a5ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.106.212.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dec433-3a11-47d1-986c-2a101f564167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.107.112.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f377e43-f7a8-4471-b522-6fe0303eb470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.107.166.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66448f31-0961-49a4-af8c-29dc9024cadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.108.152.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd09ad5-fab8-403b-b82c-236cda40eab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.208.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5831fbbf-9603-461d-881d-3a186ddf918e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8903911-223f-412d-a647-a03481704cb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f570a7-2587-41f1-8cd5-00dff03c2d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.134.152.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b46d946-1667-40ea-a6cb-e68c3a60efaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.121.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fc1d6a-92d7-498c-8ab7-b77a4c430f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.156.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695bcea9-9ff1-43dc-ab4a-c4b632543eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.162.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b578de1c-2782-433b-bb96-c7a469014ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.165.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b36e385-3881-40f7-a777-89d0db5dcd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.184.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb16ca9-3587-4903-a16c-9ab53e6fdf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.194.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cf38b4-130b-4c98-b716-4d9a076f14fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e6b661-8718-4ee3-bdb8-cd5512a6144c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55675fe-e55e-49f1-b577-cfd2f04a7059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.252.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6273789a-c2d9-448a-8343-6e7dafb6944b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.55.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b5b579-7786-4456-9fcc-951541646fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.112.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277d5f39-35a5-4c6e-bda4-4324efb23ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.187.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbe279c-4358-4b1d-bd33-e69d85457f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.214.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945dcc14-5086-4df9-bde8-60ec8bf73f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.131.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7507288-1c21-4b5b-ba9f-41e1fbecf274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.135.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6485b4f2-da8a-4597-b238-26f0a7b2ca66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.144.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e3376a-6a0a-493b-8a89-1e83d2492211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.116.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5bc412-e93a-4758-bbe9-55d9f7b53997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.208.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cffba6-91cc-43b2-937e-17d21360f51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.224.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9d8759-8d99-47a7-9310-4bc4560bcbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.64.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027f72a7-cea8-4dbf-a9f6-043a2acc2541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.244.61.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb099208-4fc2-4272-9744-6d1f92176889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.113.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07232d79-d91d-4f00-81c5-df5eb00b8983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b637e382-f76d-4d69-a885-c9e19c0d2de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd3a998-9b6c-445a-9df4-864576687966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5a8643-f03c-44ce-a70d-8b5df81173af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d26e5d9-de04-4e55-981a-7892a73351ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbc4b85-21a6-4672-bba3-80fe2860ca7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b771169-62e5-4f21-86e3-fcdaff61f405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e3d1b0-2548-4265-86e1-e54268fea07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7077f0be-165a-4e7d-b494-ee7c4a838dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1742cc4e-d8fc-49ce-8361-932a3363e1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a4984c-d772-4177-a59c-3c57200683c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f6bd9d-befe-406c-94f0-9539cfe519de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a39f820-de5e-43dd-950c-2f8ddda8d91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38453f7-2a6b-4c91-ad55-07bed13eaeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5d7f6c-860a-439c-b778-c3200bdfd8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9a9108-395f-4eb6-8876-65be9da4bf15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8f0983-045c-4200-9be6-adc997fe08fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced9bbc9-477c-43dc-955b-fc5780b9776b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8def4fa1-8af8-45ce-952d-b7e81f141306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5010a714-0fc0-45b6-be88-63c9bfba462d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a742b856-89f8-44b1-99d3-f06f8df64e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbddea0-6f7c-4f25-ba9e-320d04ff1237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4277bf-2a8a-4e9b-878c-f12c1490da80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855d7cf3-f815-458d-a171-2c79c92eefdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3037015e-ccaf-4497-af89-bbbd0fdbd319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f167d4-1bec-462f-8f50-5912a53ae957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90ddf9d-49dd-485f-a3b5-fb57ae4ec8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d97c805-c206-4bcc-be6c-86be27d93a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006ab97c-43f8-43ea-9759-ff0e1e30a219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56911052-9112-481d-8854-f0b223033c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0354bd64-14a9-4fc8-a0e9-abff0daf4898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd15384-0f5c-42cb-9f39-c14395de7c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334bc5ba-99fa-413d-bfd4-93f4f801bd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01680210-4171-4f82-a3e1-d78397fc81b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94fd334-28e0-4ab5-bab1-b36d5545ddd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab790c8e-a79e-48d7-9d47-b91735e8e2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d3cf4b-bebd-49eb-a544-819701754632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944deb2f-396c-498f-99b8-0ad43d3bb13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4714bde1-fa75-4371-b45c-399e5f52e769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814a20b0-d257-4c02-bba7-ecfe679d26a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6338dc9-2b86-40bb-a934-6e7023ad53b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a410271c-9f85-40c7-b9a5-924e5cd06449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba599de2-7218-4438-88b7-6e94c575e937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43518d3-c4e9-4ea6-9479-3559ae85d4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec84e3e-4c6b-4971-b418-cd742d5a7cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816c6a83-a6b0-4fc5-bd37-51e77c5e4435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bb6d36-8517-4035-86c7-7f997b28327c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edf7308-5210-42b1-993f-accbcc4322b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d0a117-e75c-4627-a407-133270796465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d36118-6b84-4676-8604-f6f896ad29c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.137.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf897ed-7fdb-46ff-a4e1-0c37abb1d35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f39df9d-565a-4827-b58e-6198f6e70fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc51d13-a4e7-4416-8b25-b35b2a3834dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2d5eeb-c987-46dc-969c-d87989edb5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b083a6ec-c0e0-4a73-a3c9-56010e99935f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fb54ff-62c2-4593-ac69-8be20403743c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac557e5-a6c1-4ccb-b77e-1466f7e6a2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a623c488-5bbf-41f1-9500-0ec12f4e0b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.148.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7db95f-25ef-4f85-9517-1be7737e5653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcbe2b0-1076-49f3-ba6d-f44d02654ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdee360-5a3f-423f-99c8-89abd6756de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b8e461-f3ce-44e4-b6be-6a01ef80b859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fa559b-94ab-4f7e-b572-d52730c590b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.164.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fdeb27-56cf-4db6-83ba-42f1ec28463a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c28516-5301-433f-8373-029555c14aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19953847-52f3-4be0-a829-6dc0a1ec8fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f606a06-42a4-4846-af52-1a1e169b4422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.180.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9a2c9f-8cdf-4292-bfda-837f66884631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fd749b-3da3-4e33-9442-f5668314fb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36690255-6460-4607-947f-9ce2c91a9bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29370e44-2e50-4b46-86b5-37aa79974e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9293ff0a-6586-4577-80e3-462fc0114ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73c6f5a-2e4e-42bb-9c41-57f85e233099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6b95da-221c-4f99-9895-cc0f6d2d9147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa5993d-ead6-4657-8fa1-ac8b440750a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.40.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7deee1-a256-4f82-9f95-cdbdccbf36a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e682eb-8f1c-4a14-a5a2-7d7d24cb01c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e23816-a1c8-48be-9964-c88ecfcb9647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72014b4f-cde0-4716-a9af-111993ef176e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.50.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baced00-56f0-4624-b069-72c3da16ad74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f521580-21fc-4fdd-8010-73955c1374fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafa2d88-a33d-4cec-8688-0d6b8a326056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a94b6f-fd9f-418e-8728-92c401cf7bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.58.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca4993a-5268-4935-968b-4cb8b18070f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5628ee77-fe30-4d15-82b0-2fc77b51e843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6423de68-babb-45e2-9148-6dda138bde75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec53c4a8-0653-4ff3-b89f-e768a526e14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bac4ae-a5ef-47b2-ab02-5a0f86de2023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26760ee-4dc6-49b0-ad9a-0fcfda62e083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647059f6-e717-4bdc-85c9-ec236194aac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d10682-88dc-4c22-8129-27f34b4ed0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd30abae-5368-4bc7-b985-8106e5dc3402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298c1a96-e7c2-44d3-af19-31805711ce06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4426adac-155e-4914-bd1e-1f6f0c698a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22aae9af-5bcf-47ab-ad79-36ddb616437c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd4b003-36b2-45df-b962-52ca95636e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f299017e-8cb2-45d5-8f6b-fcf20c863353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b6a7c5-5f16-489e-9900-7aa47ec4c4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e414f9c-eb9e-4710-9123-512799b42ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b70d19f-2c76-408a-9672-2e7e476c1a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cc5d37-f8ef-475c-bae6-060706c92502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf88c42-c0fd-49f6-ad4e-3c28424157a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24169a0-1554-428b-8c3a-c091886d281d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee22ffc-7e15-441d-876d-4e4509872d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dd677b-2fcd-4707-9b2a-fa8c8c043aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c39b82-ae62-4c3c-8013-2e283802c741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba02cb2f-ffe3-44f6-8af1-dd4268d630e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83e882f-27be-4b64-9357-d35d4ee95d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e903b712-b4b8-4ebb-96cc-940ff1ed4eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.112.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14893755-2c7c-47ff-91bf-bb7e9ea371bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d80ea8-114a-4627-be92-034651e49cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0329525-6514-4ca9-995a-a54526f4cf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a17fe52-acdd-4491-b859-e9fb7950fb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7b6c75-6b93-4d5e-9f27-9f70501cf854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2586a38c-8756-403f-86ee-fa9b00197697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03dcf49-4271-44f9-ab7d-64bdb13a9a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc95a15c-68cf-474a-918a-86550d3a31e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a2520c-a7a1-47ba-885c-6722c83d3d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.14.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99adfec1-2643-41f0-8692-db97cb8352d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34250479-33f3-437e-b932-5c72c65b778d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e63db43-b5ad-488f-a8d2-990b481020a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f6933b-f11e-4fe2-aa08-31c819047b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff850ec1-f130-4d07-bbf3-c2b1ff29f7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2454a83a-ad23-48d4-af4f-273ef2baf24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba9e511-9df5-42cb-9bcd-462ff49fef59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a9bdb3-119b-42e3-9811-38660485ddd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57296cd-2c23-4118-ad33-206043bfeeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.173.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f85eda9-008d-4648-9743-20d67177bc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd16eea6-6120-43cb-95f0-35ceb8fa6e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820b37a7-432a-4063-abfb-2525628338d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.177.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35bc141-42ce-4bdf-8b47-9592eba1378e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.178.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef2d977-92e5-4c6d-9f2e-5b33308e5a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4734af09-969e-4f52-8cb3-f2fe90df142e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65df40e5-6171-441b-a7a7-6ea5e38fd196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0931cb-cc59-4d1c-add8-6798c3c2aabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a547adbd-b1b7-4310-9329-21ee7fe6983b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3118270d-f5fc-4caf-9bfb-02aa00a56716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe058b2-557c-41a2-ae56-2d5ddb700484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600a585b-03c3-463b-af0a-8abb19a0e08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e977e6-55f5-421c-b5a4-00401dde24a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d06fe40-a019-44cf-ba19-62f209301d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac08c81-552b-4a77-a036-cb50716c6baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3528352-bc37-4140-a720-74ee10234507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f733be69-b112-422c-9695-ca50bf911d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b6501d-b20b-42d4-8a1f-b051658838e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847fea8e-8333-4b60-ada0-6aa8827a4ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fd0b79-d3aa-4066-b4f8-2a65d2c2228c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f632e6-4f18-49d5-9d90-62ccfb38a3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0feb5d-090a-4921-b87f-b0c9899e24d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab200e55-8e31-4ce9-af1b-a6af172b00f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f730c0ba-8e10-45bd-8611-f80b4efbf145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e1d229-584d-4317-9856-22f33815932b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fe7a71-3030-4bfa-b52e-ec2007aed4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec36fb6-f607-46d2-8bfb-1b1e9314b00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cdc824-7a40-4cf9-ac2e-8c66634ac6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5568f8-3e59-4ee1-98d0-013b9cd6e56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264b030f-8cc2-495e-8433-231533efb8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5118f8a6-f513-4ed6-a127-8b1dfb801d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9b162a-0d43-471b-94fd-a7fcfb806959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc622db3-a6d4-4616-9f45-d91bc2e50242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd82456-e3a8-4851-85d1-6a9ba6d7cf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090b3d1c-c53d-40d9-ba1d-eaad3ca707f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.35.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dace645-0ea9-4a7e-88c5-ac4262733461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.35.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6de653-bf30-40f6-95d1-48c42ded17a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d8b497-df18-48d2-845e-4fbb1520aa21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b7e85b-675e-4350-919a-31a7911c20a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.5.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb95823-aff3-47b0-a31b-2fbe36c866d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10db85b8-27b6-478a-ad78-3ad8b10010e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adf3835-f75e-4f96-9599-6226c42ed3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0ae1e8-e963-4f69-9d9f-e628850739fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.63.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca07866-1735-40a3-9c8a-d2c31baba56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abfa51a-ff6a-4990-859a-df4d0f7b79f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87547c90-6f52-4a81-82c4-b17a5ec789b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f6a357-50ec-46b3-b842-7c47151502e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.7.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21c6f9a-318f-45d4-92c2-697632d779c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d505ce13-38ea-4be6-abca-d5fe0c464292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92f4f9d-47cd-48f4-955f-76d712eaa7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad5a31-9b95-4404-8e1d-d6a6c12de06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cef408-85e1-4644-ac4d-3c35cf150a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a753fa9-a22f-4357-a4ab-ec34ec364d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd872799-09a7-4dd3-b8f3-ee5c1617aa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4a6b94-a50f-4226-9489-f539f65d6c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea958bb4-b505-49d4-9f75-17f541e2c7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdbf71e-5e72-4641-9ca1-deb150e01321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1095fee5-4ba2-4d75-a3ca-520271d81523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c3a841-c572-4491-ac31-1aeb6080d44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5530298d-5b2a-47a9-9399-adee28ffed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9da4dad-e299-4f7d-9e9b-b49a859965d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef2c739-37fd-426d-aae2-9c8843ba6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1fd826-4a4d-4c01-8257-35760ab3a40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daf84c5-1c8b-416b-81f9-2273245c2c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cc1007-0c3a-4dc3-a2de-83cee13375cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8960db21-2591-4773-905f-7c7f2ba52c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c095a00-d419-46cd-af59-64977d5e5540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0145bd9e-b5a0-4880-a20d-6f496d5644d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115feda9-0927-4b30-bb80-c5f65e78b43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74205d5-f8ab-4814-b9b1-3cc58e2153db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbc5980-06ca-4a52-b548-771840175e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a291a59-3ae6-4d28-acb8-9594d5d123a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc425343-ad57-412c-8197-1d4b568a6dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a12425c-4e50-4298-b7c5-d981b81dad24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.130.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a8f6f-2a76-43c5-be44-a225141759e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242e9188-ad90-4a75-964b-20532ad3a750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c19c80a-ffe5-4354-aec1-351fa9f2ba3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f615c3-1512-4f45-a2e9-893026d3e7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.141.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19943faf-661c-427a-9802-07a616768a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb60d6ff-0c90-46f2-980c-1c83c5b56509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3e0862-79b9-4ed0-807a-5c107167f601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5faa6a-a467-4e0e-adae-bba6758417ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6171861b-b6db-40f4-86f1-9f134c5b9602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.152.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493cc193-7924-4a3c-91b2-56580f7a23c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.153.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65da87e-88c5-4c09-9d8e-08993335dfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee809e67-f0d9-4bb1-bd0a-fb1131048e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bc5ca9-e144-4fc4-8f0c-587747d49157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19fdbe6-e824-4690-9621-8d91850cee35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cfbb76-1650-4f92-9b02-ca99759ae1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007f51f1-d003-4173-b171-f12f4d956615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7797f2f6-811c-4e6e-bcc7-49d894dcf561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3dbdd3-7262-40da-9bd9-31d5ed7090b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e093ed-604a-450e-a6b7-3905fd9c5dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d128a1c-18ca-46f7-be2f-0f63cc732173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d759420-9a39-456b-9ab1-1759a6294bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c62b402-2663-4008-8deb-ddf421cb53d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea615c89-0555-4c27-a046-5423a5043d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04162e39-e38b-4b3a-ad8e-9cefb27d99c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fff5ba-e16e-416c-b78e-80dddaf9a518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.181.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30f83b6-66cf-48e3-81d0-43ea619c62ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a094394-802c-4347-94c3-552e419f9a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5d897a-718d-4eb2-ae29-fe5fbe611db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ca05e0-7457-4fa4-bef7-0097cda21b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5416852a-6821-4db2-9621-8aa0b4043a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a4d9b5-6122-435f-9898-3bcdd791dd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10bcc5b-07c5-43de-9b9e-abb997205960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c47c6a9-a6b5-4d4c-8bd8-243baeb2ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.21.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2186fe7b-5640-4798-b826-e13149d9ce1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.216.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562a73dd-ccfd-48f3-8f33-73a52ab4bafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.229.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a806b9-eff2-4c67-8b0b-bee5c69dd149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b58445-502b-42dd-a2c7-29d78668e94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bbd4d6-b124-422f-ac89-7633af0e9fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019b1ed0-6b55-462f-bc95-6324aa4124e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32e879e-feb8-41b4-b935-28fd6b45477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65e549f-9b1e-456c-a3f5-2a22d4cc13f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1a5fa8-72df-4e93-8761-81ff27aea4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b07948-5814-41c4-9bff-ceadaa4ec48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d45c1d-156d-4d04-bcab-d4f4796dc26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a273fb7-39c3-482e-807c-dbd896f5e75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308819e4-b017-4984-b943-40c51298753c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7969aee2-5729-43e5-b282-e218f5eafac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0c870a-e37c-4d95-9663-b2c8d28ac03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d90210-92b2-491b-a233-3413ff4df6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde0c3f6-f756-4320-a96e-d6b45c88b8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.25.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86a8c0c-82de-41f3-be3b-eac5e2212e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e992331-9802-4e96-aed5-926607326674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01df9dfd-d553-4835-9f31-7b0388eba9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36d3506-91ac-41f2-a33f-247e8c45cc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45eb723f-037f-4e32-9baa-98b3ff40b604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6590e1-ac75-440a-9dd1-a26993478ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5d88b4-9f41-4805-81a9-5ec8c87fec48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2eb50a3-5b05-43b6-86eb-4819613226d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8bf1ec-70a8-4f59-8b35-12f39260a385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ca9014-a4be-46d3-a219-f2f0be08182d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.52.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23ee479-541f-4c1d-ac01-f7d1bbd7c45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.53.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fd4604-77ed-4da9-bbca-d5b9e9177e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.56.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3459f6-503a-4128-98de-e5a16691b1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.66.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89725a1c-6b44-4938-a683-484dcd060d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d421b7-4a28-472c-bb94-4c478b025e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b0c909-cee4-4f00-b26d-7ca2c90b01bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.80.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cc29f9-3e84-42fe-9be2-6c288561d47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.86.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd134224-a536-4350-852d-f04c6cd98eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d7d184-4c18-4e5b-b7a7-a0bd8cf58ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.95.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392581de-1c77-4f40-ada3-74de3b88ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0287b90b-7e8b-4a6a-afe2-cdfef5ba2aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dec825e-984f-44dc-bd90-b4b9b17ae7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b3177d-589a-48ac-adf0-b17149324059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.26.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34f0245-9def-41a7-93da-dd07411ddf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.27.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b609c87-aa81-4e49-81c4-447dd9f841bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47529e45-6d56-407d-90e9-092d889809e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.47.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5665727b-38ae-40b6-a541-3b556c2d69e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.71.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdaaa445-6f72-49de-9f7d-cebadd9b1f68", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4100db09-c114-485f-85ec-658ab32e43d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.195.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfa5383-be16-4cb4-9c3c-3b522d8ca785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.212.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fa24ae-758d-4d15-be46-f37d891366e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cc4910-25f7-4eec-9a46-587862cffd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3926f1c-f2c8-4e47-b6e4-73543acdd713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897f2f78-c6ad-4810-aea0-3ef6a56c9647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b751cf4-25e9-40c1-9fc6-deefd219abaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c97c4f-fddf-4512-896c-cfa0bdd62686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8c51b4-35d0-4b9b-a9f8-9ca862c487f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc3a231-62f0-4955-ba23-db8fc0840a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c3bcf5-a10c-493f-a71b-d00c6b8dd39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1aaa0c-aaba-48ff-9e84-620c73431d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e02e7a-6bb8-4eff-9d40-651182a01aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9686a27-8aa3-441f-a50e-428c80b598ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11f0de9-5da8-45ea-b4f2-099c41091928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cf1e35-3613-4acc-85c0-215134bf30ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d22ed1f-4913-4cea-a8aa-0f7f06a1e1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e1a3f4-6db1-4357-bda0-6cfe3eeab923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29511463-adf7-42e8-8c7b-b7f8b61861c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ea71f7-fcfa-4709-94c4-c38f2d6f66f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c374a67-f7bc-4f6e-8e4d-1f0d5f8da28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.138.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cd7a7d-2bcc-4429-a788-c41f8fad2840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.80.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992613c4-6047-47ec-96ad-76faf148e57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.169.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a683946-fb3b-41fd-8f5e-1aebf2bd6794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.227.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b518fb9-7287-458b-90c3-b02ce669b7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e000e82f-369d-4913-8bbc-e7fd08603ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f22686-a8dd-44c2-885b-cf7bd4de985e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3d3dc5-f16e-4326-b46e-609da5331d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b98baa-0ed5-425b-bebf-bb1e4d09b7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f279cb0-d364-47dc-8280-d2a3940946fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4764e2bb-c37f-4dd1-8dc8-bc600b58064c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d7c76d-3705-4cca-b92c-5c1729cf9e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2274e6e-6d81-495e-8f6f-2538594a6b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a6da96-8bab-4cbe-be8c-10cc3d4201d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce688b-f3ad-46b1-bade-0aaefd8920dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085a08f4-e165-4e21-872e-0b47550ef086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ed5008-eaaa-443b-80bf-e4da3aed42c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bb7cf9-6579-4c48-896e-b7bf057aad02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fece1531-b500-44d2-b9bf-3e26e5c915b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7299d9b4-a858-4f0e-b809-eb452fbfb36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fac093-765c-4463-a1af-f00ed6ecfc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9512fb56-5736-495f-957b-91ecca0c8ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7c2a26-3f53-4697-8271-42b8b8efd4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2673dff-ae07-4ffb-b8e1-c76b87f2e171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3609b875-7e5d-4a19-a0d0-47f21a0dc36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7c32de-50ad-4f81-a6d6-4b539c12297e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1218f6-fcac-46ae-a69f-a0c7f481a8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6598e1-9c8e-47b7-bd89-0cd8afc8f4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b433016-2030-4925-91c8-1c9c423ebd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5a4e5e-b1b5-4bb1-aa97-07acb566edcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c403e7c-78a8-48e2-89ab-46c3df0e87c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24442c76-bc06-43d9-9961-640f4876dee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cdb8a7-1aca-41c0-9fe1-5078d91306fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99749a7-7e2d-41d9-8dd6-5b3178d92be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f24a2e-d4f6-4850-967f-35297096f229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef15f2b-b5eb-4c8d-934c-ecc8704e40bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d24845-ad5c-4a71-8b08-20b97b633961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91748ec5-a7f8-4a1e-b011-cc4e95aec679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebb1293-011e-4154-9a2f-a6454d8f9fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eed52ed-725f-4101-b753-3dfe0d9bab14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915e6103-18e5-4440-8812-45a76c491b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f098ae-0a09-4745-bf76-54d0d921ae39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91f51a8-d763-40bd-b9f5-b804e1218055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b339e55c-2213-487c-b538-0ab64f84f667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166bd9f1-5d96-4f44-8ae8-ca860b6b082f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91975c2c-4481-4d29-a566-56cc5bdb715c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346c3057-53a4-4716-bed7-270e00740a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e24d10-275c-4ae6-80ec-44b85acbfd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6975e8ad-9cc9-4aa2-a739-14a5224a737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2858cd0-dd0c-48b4-8bc0-1abea689a726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096b31c8-5d7f-4583-8b53-a96fece02a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28377605-3517-41cf-ae9f-1108bc9ac52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff543301-f602-4550-84e5-1565dc6aa3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5356d99a-9651-4d7f-8fdd-e39ada86a688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000f8c2c-5c2c-42f7-8151-a43176870c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c3e1d7-36f4-4066-9695-beba66796936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48be459-d2b3-4fcf-aae8-df1541b3316d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c80a64-5226-4538-b827-d4d43b605f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ac7a7f-e885-4bda-9772-f5e20ff8ba5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8d074f-e974-43ff-b866-1ab9ede7ed6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941a7857-4293-48c4-a503-c6e8b5c3b006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27463416-3948-4c67-911c-936916febc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876e50b8-d182-4081-80b2-7ae6ba9a75bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467126b5-ea39-4089-9ec6-703a19671631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637934ae-b99b-4113-b16f-b75d90988ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08554609-5080-4579-ae8c-846140fc59ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115879cc-4e63-4c97-9d1c-29900d3d5825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed07f81-3686-430b-874c-ef5ae6f76eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b09c00-9ec8-454b-8fdd-582a97b37a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9aabc8-5671-4e7f-a3e1-7419330c07b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db80ae0e-8349-4689-a533-d95a53e09c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaea51e-30d5-40ad-8b43-088192c9e16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1cd6ec-b8f0-449f-900c-539712921960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba49e0df-76fc-4e6a-a9aa-05a3e24e4e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943c7762-8a97-4abd-94cd-d5c194a3e180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a545d226-5b36-48fd-a651-f593bfe4b925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cd7cfc-0707-4971-8f15-620be67124cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d9ac25-2ab9-4265-98d3-78e2767536d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1870d596-83b5-47ac-a389-4697c2b41718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be19773-b203-432b-9c0a-cecdc21e3826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb811291-afd6-4c43-8949-93429d48bbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d1f957-9eb2-43e0-bb1a-098b774ec1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.181.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f523e05-d572-4fdf-b56e-2aae3b074381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5da0a4-03c1-4679-b221-88eaac854639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bbb216-5a74-4e3f-8bef-a4234ee73e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1ac7dd-9a80-40fc-b4fc-2bf05ca1bda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee98fb7-e149-4e12-89f0-22edb2a01115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa282b9-cb53-42f2-b347-903c6b65d0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8925ba-8efe-4e3c-8fc1-6214c8c7c769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9231c991-53aa-46f2-95d7-f724ba381389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a94042a-b15d-455b-a64d-2a004ec44b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f6f45e-12e1-44b7-be11-0a3ee6960599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c9b14b-e598-484a-850f-0a85120598bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.202.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5f42fc-d7ee-4b5f-9916-727c000397cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.202.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaff957-e6d0-4572-9514-fc9b2a847bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f9ba6d-b816-46ea-b196-b4d834189590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13c482f-c864-4fab-a3d5-a17b00443b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd40f3a6-c92f-4504-a6ca-b059f7902100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d818d7d1-7858-42cb-a64c-ebb7e733e5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad442cd8-72aa-4726-84ad-b53ca674f1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.225.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b21c68b-24fb-4cde-a3d7-a56f4fbae298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d299291-c62c-414c-9298-0df93e7a3973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.51.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847a6e10-041e-4d40-8f45-d770cdd906a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ab9d34-8f4f-4b6a-811d-5341233af033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87935c43-b12f-41b0-8d95-ef247f60463a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.100.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dd2b16-5921-415b-95f3-13be11e42c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.2.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dea19e5-eb41-4020-8f51-92c33c867306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079d852c-5dcb-48b0-84f4-390e1f55af5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.31.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6812438-9875-4881-a369-3bc8b77a2b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d391a4f-31ac-4352-afa5-7274be46504a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.66.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389b917d-6b07-448b-9bbd-83c655e89df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.7.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af097c1-c972-4b9f-9be5-e86e0e60c8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.90.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb594238-4fc3-4bf0-a666-0dc5275a6b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.91.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487e9212-296b-48f2-a661-837ba993a94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.94.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004fcdf1-d0da-4607-b7d5-b0897378193d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdd886b-c477-4a24-8963-ad10f23f5625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95eab6f8-eea2-46d3-a28a-32a45a5aa963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc5d39f-698e-45fa-81c2-f573ea47d7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c62cc20-22a5-4a43-ade3-957b7ee0f33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.228.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ace87b-83b8-4744-b9f9-17480fe4880e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ca24a6-312d-4de5-a1d0-5cca810e7abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed925b0c-a6d4-430e-9edf-794d7d86cdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.231.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3f7d8b-37bc-46e4-977f-6ace7fd96201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.234.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab9e3eb-1145-44d8-b4b3-e1aa8471317a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a49432b-bcdb-4b75-b3bc-515788dbf469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.125.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d83148c-c17f-489d-b11b-44183d49a126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.18.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266f2be1-3f64-4ad9-bc83-bc6a342e30d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e40a8d-ca13-4c56-a9f5-e470b5d52ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6557fa8-9f49-46c1-ac61-be5148b774cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3898494-1607-4615-850a-25feaa529d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.86.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48d3672-87dd-4f3d-aec8-7a6ec02a5fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.87.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48db5ab-214c-4516-98b8-b183929cef21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b194f1-32b1-464a-b925-43ebc8242eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be809ee-4836-4d93-b38b-5abf00a2bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.166.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493cb018-5e7d-4d85-b6ac-4d6d5911ca8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.96.228.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02aa7113-ea5e-47d5-9019-161f2b1b386b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.97.159.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51136ce4-7116-427f-9416-5af860b9e449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cb3fee-0de5-4ef6-9b91-2acb0f0386eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0b33b7-e628-4085-9635-a6113b549aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866bd892-2f09-42fe-9e98-e81ba4e43beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.54.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf4e83b-d11f-4341-9d24-0144dbf82e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.208.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b45dec3-88e5-4667-82df-01b386dfe617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b235dee1-033e-4c69-b3d4-19a87e45dc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a767b76-0aa4-4555-a852-f6ce238c8b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f847e19-8ca8-4bac-9e09-e91c97444b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.64.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cd614a-e5fc-47e5-bda2-77ee2c994595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.82.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f59180-9c05-4de1-a4c5-846092dbdae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.83.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e451520c-526c-4a09-9f40-6edc2618de3c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.24.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfeb6f8-01cf-4681-8ed6-8df40b297217", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.205.149.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac83621a-a655-49bf-b897-b52b13ff6f02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.231.192.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343e9a47-18af-4bf3-aec2-d189cbfc95fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39261fa3-c9f6-4428-a5ae-c9354eb93627", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.204.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a42480-d790-4534-9c45-36233b9a26cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.73.235.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f750009-0af9-4d2b-a4da-3e829fbf8543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b69e71-7486-4a9c-a1c6-b26b0a23f666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.104.85.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa263cbd-f8ae-4861-919d-39075141bf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.134.246.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05d99c2-c6fa-4346-9377-a6c67dec46c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.147.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a701ee4a-19b4-44f4-bd76-558a56a51119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.167.9.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12519b18-633d-4a88-89f7-fb5fbd779c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816b33e2-39b0-4616-81c8-bc9b10534706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1076d315-9327-487a-9517-e887371bdb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfebe6d-bdad-4190-973d-04178972105c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be862988-8401-4ad9-a81a-72328f9c566e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae2d315-da9d-48c1-9d28-9b062725e705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd1e493-503b-4cd2-bcaa-cc47fc8fdb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.132.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe05750-5c26-401f-a8b6-500e113acfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.176.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189b3c6b-a8e9-4136-81fd-631da161a89f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.196.106.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4364a9-a769-42fe-9700-d1a7778820ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.70.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ec8423-1fe5-4dcc-98e0-559b6f90769e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.102.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5821020e-4a16-4919-8396-ee7ab28dcac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.112.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d11759-a662-4b3a-b646-446c3d27bc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.112.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e49af2-e7df-463f-a9e1-a1247fe5fd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.85.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8fb557-2b6f-4084-9534-a0dbede0231b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.91.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76faec61-fa3e-4912-b462-511050ccae39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.238.59.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090bfc87-a1bb-4730-8d1a-fe0f74376d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.103.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f0acb8-9ff2-492a-aba2-c788d55a77c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0638e391-7717-4fa9-841b-fed5c649cffc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b4b161-6e21-4e7b-bd63-18e280d344b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a5b814-d721-449d-9a97-13076bfe8c2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8baa83-60ab-4c6a-8c88-2f5681e07f5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be471553-2970-4d3d-84a1-eb3717ed0a2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1df08f-e75b-415c-bec5-ae47108232cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c751fcc-99f1-478f-9581-8350aa62f734", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b71ca1a-36be-4fbd-ad8d-17afb585ac4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf7f3aa-8870-40ec-97df-6e6ee1eef05c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a07e7de-dff0-4d90-a7f2-8e3b3f4acff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e0b0b8-940a-4405-9f70-c0117828f66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b8c02f7-c811-4812-b6d1-19fd87d876d5", "relationship_type": "indicates", "source_ref": "indicator--88e0b0b8-940a-4405-9f70-c0117828f66d", "target_ref": "vulnerability--97843c72-fe8a-4ebc-a62a-e2024f91a438", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1105e524-6326-488b-a950-a1a3a72a0891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56f8fc5-5de0-4a83-af86-4067639c3f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6e4bcf-326c-444c-bdc2-0dfe8bb065c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b08e1fa-f190-43b0-bb04-80136a2683c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.89.112.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5761a529-e3e1-4779-a333-2232b65e0dd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.172.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1502be-3fef-4393-9791-11dba872fa74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31c76a9-1d28-4a2d-ad9e-bfb9a45e1d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997106e3-2ee7-4831-98ec-445d5868c8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.24.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb453aec-5372-462e-ad14-3447d4fc0bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.25.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb31c910-44d1-453c-8b76-19ecb6876c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dd4625-229f-4780-8615-ee70f04caa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb3b3fa-d844-42df-9c14-033166d77ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acae12d-5b5d-4216-afb0-a307a1578527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b688106-61ff-40c5-825d-444aaf79b0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c912c80-5208-4d80-81e8-61149710c9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24540111-0f39-41bd-baff-0a184ecf30a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.145.58.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0189cbbf-e3d6-41f6-b872-02bc9777b409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dd5c0b-5114-4a28-88ba-f85199a73045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4aee4ad-4419-4477-8522-bb2ed4e079af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1530892-0f8a-4f26-aba8-4e397197f57a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.228.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b7a4c9-442d-4e90-bed7-f69c95e04b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.106.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f907a7bd-4b08-4904-af10-4b15f17a2649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.121.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34949990-db42-4cff-ae73-29047701c62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bd76f5-73c6-44bd-bf42-a2aeb9f9633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521147de-21c2-42cf-a2e8-d2f1c6250fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0586ffd6-46f2-4d7a-96ef-f6b748bf23bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459ce06f-257b-4617-85be-9b6dec4d8c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.164.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d8650a-a7f7-409b-8fb7-9e756d927fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.166.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78b5f1d-c9c2-46ea-8c04-9778b2d34cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f449464-56bb-4b75-8165-ab0ad1920678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.251.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff76a632-0b12-4d6f-8dc5-fd1bf2ecd50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.40.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0731f45-6913-4501-847b-d3076120da64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483c49c1-72f9-456d-9dfa-902e3d6d86a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.59.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f1b12e-53ab-496a-8a4b-94a0518ec34b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.195.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14ba0bb-319c-46a6-b102-669ab232a9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.50.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349452f4-0968-4d00-aa85-2ec1c0083838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4373d277-a77d-4771-b1b0-796bfc7dacba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a18977-5087-467c-84cc-0590979d50a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99dc3d7-870b-4f3a-8f2a-77708654dc9b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af0f3bd-20a1-465b-871d-fa2e26fc2553", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.232.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c24f84-c960-4fa3-a468-f811ab34b0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3019650b-1a9a-4455-a714-ad871dfea579", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25cbcad-2984-4a12-bfb8-e3291a9b7cc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b350ff2-eabe-4679-ba0c-b5339bbd59b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e329c3-8e5c-4712-9f3e-9af5ece41d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.53.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7f966b-dbbe-4c14-b0d5-72f9352d027f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.110.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd2a2fc-f754-4d33-aa25-07910227383c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.129.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7e3147-bdb6-4264-85ab-5d6a160a5d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.25.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc7c2f9-1d49-48ba-9b89-7be56b543669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.88.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9e3b20-af55-405a-99b3-9b7274b6686a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.9.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da40d94f-8637-4e12-b1c0-50eec9c242b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a00791-81dd-42d3-840e-b6d891b6d573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ab152a-cf53-402e-8094-605b853ba43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.154.20.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcba4adb-34c2-4557-9abd-117ce028a4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.159.244.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee81e719-2113-4608-bcbb-2e207f533bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.161.177.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c7c507-da88-46b4-ba7f-ff4749c5ad5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87119b9e-0c4a-4112-8731-ccb3a13802ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b12e04-916a-40f2-a7ff-c142cb2ee50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fb6fa1-bc67-488a-b137-2c250f2cf75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a85b3b2-d5d4-4993-b8da-21d0b15f3fad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b464e97b-f941-4f2f-b6e1-e592a3ae2276", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b94e2f-9e64-44ab-929c-c4e58e464d05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa455bf-a549-43d9-aaa4-bf1b254fbf4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82de1e2a-27de-4b2a-a42f-cee5d22c9005", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e004c7-825a-448f-ad3d-fc0f9dbf4f6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30d7f8e-ad84-4834-a5db-137a5b7cff9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536f4227-c122-49b6-8e5e-544aa7b2ea8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42517f7b-e1a4-42cb-87f5-a209410f2174", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e013209-5718-48f4-b6ad-543a3c41f555", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a12ee8-6174-4713-ad9b-3514dce54d94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3856196c-ae2a-4a0d-acad-d63b5621f143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.169.144.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfde107-3ef8-40a2-8025-72274561f3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.172.252.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e560fa-df4e-49fd-8ad2-d7745ef3500e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c7dd4f-e006-40c3-a9cd-956aec04da0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207ba79a-37e7-4b2f-9d4b-db75447c3b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6677a35a-1afe-40d1-ad10-fb62fb552ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d2425f-f686-4e6a-bf69-3d4b1753c0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.159.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902e304d-ed65-4e06-a56d-e2c686166d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c24cc51-a91e-4576-aaf0-4da2d2abb59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef51187-cc9c-4464-ad64-bd110c85da85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76c55a8-eb18-4301-878f-796214f28d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4304251a-2c46-4e9d-b299-945060eb8de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47174c00-95c1-4368-a42b-9301ad129805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.203.216.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d700a054-7459-467e-893e-9f9b9ebdaef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.109.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55d9929-3b0b-402b-9634-52c73b36f47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.240.168.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fca430-62b4-4b47-831b-dd5bd9d2b7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e007b2-02e4-43d5-86a8-da2660cf988a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda3965e-3a76-4692-9bcd-d4d4897a051c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.6.59.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f15e44f-504b-4bc7-893a-f7ea993811c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.71.253.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701cc31a-2363-4803-9f12-0264cf10535a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.237.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f42d373-eca6-4d34-b2e3-722746b7be10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.175.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39124915-2486-4e89-9b50-2044d11bb6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.88.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd70234e-576d-4afa-ab6f-39ca6fe9c619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.145.62.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff9645c-550d-454a-8081-11cc6efa9455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.54.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e92643-e984-4330-97f3-9290ebfac7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.152.211.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0ddeae-7ebd-4721-9ce1-30bd19e1630a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.122.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ad460d-d546-47a8-95be-69deb08cf556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.177.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f22dc9-d79d-41fa-a367-fda0caebb742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.217.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8371c514-527b-47c2-9ad3-14bb5b2f2787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.189.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64335b8c-6f67-4303-b0b2-212d4cc5573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.188.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ecf6ce-f43b-4014-8355-b360a04705ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.104.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0203c77-325c-4b3b-b9c8-cd71a44b3f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.19.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a630a1c9-e722-428a-b317-76d2416ba479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.124.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b8e149-2857-48c8-a6c1-5c99aaac35cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.57.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0706f3d-e160-4794-9e1d-dcd9a501cd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.5.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a574fe99-daa6-45d7-892b-070abf2919b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.246.233.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d460a69b-96a4-4d18-8c01-fba4bf0abad0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.37.118.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2ae5ca-5495-4b71-a4aa-7a1b7c5f5d06", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.37.74.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc76634-8a82-43c4-9159-9df2402358ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.241.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae8e225-62e2-4e97-9754-96cfc8e6bff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.129.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09ad00f-d156-4940-afd7-43035af76fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.83.120.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83bb77a-c083-4678-a5af-ff9d84ed57b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.84.179.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fb051d-2c82-4ef8-a2c4-564b6b741a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.136.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418d6ad0-b4eb-4eba-af61-964406e70ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.180.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5eadbf-0929-4770-8c11-349c21b27742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.90.143.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9614ad-550c-4afa-bde4-9f5dec53700d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e9109a-8f36-4cdb-843b-fd4c27571df6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6672bfb-4560-402d-9d34-95992940d663", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3028ce10-4332-4dfa-a1b6-6bb97f28e756", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfaad11e-af30-4d47-ac1f-a6462b692b9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f923ed15-11cc-453d-993f-65ea8a6b299b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15619a55-2207-45eb-8292-c2a3d334cfda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.20.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25dda1e8-5844-4a7a-a8c3-86ec4f359c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a792f550-e60b-42a4-9893-6b3d73e9f125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.97.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390a5c90-601c-4730-8c0c-0c1b27fb1a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.33.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5f350d-688f-413b-87ef-627e3fe56fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.211.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a47fa2-a826-4754-9c18-2d9ff791ff34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.152.42.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9f7a6d-b90b-4f16-a069-4a2c84d382b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.177.78.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17aea85a-6689-41a8-a602-9d86982865b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.142.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0844c466-bd54-45a0-bafb-fe4287fa2f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.78.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b071e028-1dac-4d3b-8be6-d5dc5ad6fc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.214.29.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c77658a-79d9-4a76-b2b5-ba2c74ff2bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.165.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e840446d-4711-4a8a-9ff4-8d7ddca7f464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.60.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305b004a-cca9-4e5a-8430-dabbd3bcc7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.27.232.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a1790b-017a-4580-a2df-4bc7cdb762b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.120.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9475c56e-ef3f-4494-a5c0-9726ab59cd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.52.109.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69e5457-7223-45bb-8368-bd21020939de", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.63.60.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f37b52-43de-4441-a206-e7c7c8385a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.65.216.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6233c9-521c-403a-9874-350025a233d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.79.49.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7ce598-7ee2-4c00-a60d-8dd5555c8257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.239.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70484c8c-a9ce-426f-b29f-10ca5b8dbc25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.177.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7edb92e-3755-460f-810a-c574bae74950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.128.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e9a648-9567-483e-bc19-e141a76fd0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.79.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99add0ff-f198-4b66-a0e5-bbbb13ac5e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.20.44.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcaf1ce-2cd7-442e-8cd9-1f31bef4dd86", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.26.132.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df09dcf0-d95c-4d2a-8c0d-1fe20dc6e270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.37.42.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ebbac0-99e2-40c6-ab9f-162656ad5215", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.44.133.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e05896-1551-4ebd-8e43-034dda6348a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.53.166.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd49732-f062-49e7-a3e5-9baaa11519fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.95.97.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333d7b24-1144-49fb-9b99-1a34c74b0ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b88d944-be22-45e1-a538-2673e25f8c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449da0e1-b9e0-40d9-b2d9-1a8d24302c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9073421f-d8f6-4aee-b2cb-ef8acc24d207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.220.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7086e9-2420-41fd-adb4-2cc52e53026e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.179.156.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca11cd8d-167b-494a-aec9-0568de73399b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd44fa1-fe2f-4d7b-9459-cde4180af54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.179.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38000f1-3225-4cb0-9c71-bb932c7c9f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.225.159.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3896f2-1769-41c4-a744-b28da15f08d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.25.70.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917abd7b-c0f1-487b-a3cb-d59bf73b65c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.147.209.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8fb800-f3d5-4149-ae21-29414cc63fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.156.101.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54542fc4-152b-4fd0-ad79-e03a6b79be37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.178.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd49c17-0a6a-4abe-8627-146510c012e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.245.11.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf65c9c-8e00-4359-8ef0-1e11b761de6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.6.34.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cafc7c3-4d35-413b-a04e-a0546124e935", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.72.55.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc8fece-cb92-4732-9447-7fa4ab6a2884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.136.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97c7bdd-f9c5-4994-984a-2f3b999236f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.132.18.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280c0b68-9b3a-4d4d-8d74-7ffe2f75e3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8717c67b-49cb-41cd-9ef6-1b390983f346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.63.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5f42e9-e2a1-407e-9981-1c1d8f25c7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c1d431-18b0-4633-94d9-6e1b3685bca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.146.169.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ccfd09-966a-4830-953f-d9fbd7305a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0e4ad2-7284-4b1e-b579-b5bc12ce50ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e868c98-1824-4626-b1fe-1b32c673792f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb86b8e-06e2-48ff-8ac6-3366b9f4436b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.135.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a57e83-c4b9-4140-9f1d-db1e17b9eace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.135.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb5ee10-16c5-4888-86ba-2505c0be232c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4b46b4-7433-463f-b55c-069cfbdc675f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e2f73c-bb87-42df-af98-85ae70704994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7826ca-3166-42b6-a37d-d89d5f2e3542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e3a4f5-d386-4ac3-8e15-d1e34346081b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625b9ee8-2f87-4e08-bda8-a95c319808e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540a7c4d-8564-44eb-8b92-4a814d4f147a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.212.70.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2393c87-0568-41ae-b4db-e1abe0b02ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.238.27.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13eb3f78-7f11-4189-88b4-4a4e934ac364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.137.188.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17aab756-57d8-4f22-88eb-d86304523b43", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.83.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8003da03-9b30-470b-bd90-43d7e5bf33b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.28.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96c33b5-9d05-49ea-ae37-a2354243a315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.65.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b86930-0642-4671-ba32-d3170f3d3a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.67.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a93f119-b551-4a06-8fb6-00041371f353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.98.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c09d44-fe34-4126-bf54-aa27f09142bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.106.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1deb86-f2b4-4d08-9e8e-2d76e01c9b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.108.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b1b857-e809-4c1c-b71e-1787ebf9cf62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b876ba-f337-4ca2-ab97-c5ddb28f750b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.141.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c530d6da-f82d-4cb6-9bf5-86b396558c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e07efb9-99ee-4caa-a0af-86d1d8b5e3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.53.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cab28e2-d7d6-4c94-ad98-57989d6f88eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.82.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25922ecf-1073-47b1-bf9c-1f6e1accc0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.99.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5077f1-d482-42b8-9e5c-0f564ad9fdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.129.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ff982e-a516-4f6d-9d60-fd693b95760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.136.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29b3b0a-a0ce-43b4-b557-8565bd4f7dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.142.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482a5b85-5e43-4511-a566-ab088796177f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.34.81.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7835f6f3-63b1-4e48-a4b2-0634fc432ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0582941-f4dc-4275-a6ab-522285ddc378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5386fe49-2763-41a4-854a-7e2476d16941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a837a62-27a3-4a7c-bfc0-a09aadbdb907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8741862d-1537-4113-90d1-41b26d33bf8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f955174-3c9e-4cf9-b937-d08938edb6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8369991a-beca-44e7-abdb-6c2c188f142b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa73352-a618-428b-9e15-d57a989f18bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4d8109-8f46-4998-adf0-3f29881558f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e499c06-739a-455f-9bad-12b4322cb066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f72d3d-8a2e-4902-aa00-f052817b1d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d63b715-ffa9-4ad9-96ab-790a420357d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36276d1-f84a-427f-9a79-2666da398c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513b090e-d28a-45b0-a330-56fe58520687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220d65b3-73a1-4b37-bda9-803ea19b2239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a9d4a3-ee22-4d51-b777-fa73e53ca730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f15ca5-3c15-4c20-b64b-c2a424dc542a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4d2deb-0968-4c25-8bb6-c3128b8622c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abab4a2e-e77c-45f2-bd86-2f39b62e4b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47ca686-1a7b-4794-99d4-368871de5035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf5295d-510b-4bed-a328-b35de60c1638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2356c05-8899-47c4-841b-3edb40c28a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f9a9b6-b9f6-4eeb-91f4-97cab80bdf4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b902188-a4a2-4aa6-be59-7fe3dab5961d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8635f14b-7c85-447b-a807-28c05803e443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb2c7b3-c217-43bc-9c79-26a51216e28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53eb36e7-c637-4410-b118-126129499ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd2fe20-add9-46e6-a377-5dda20fc4a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a07c52d-f0c2-405f-88ad-cdc8dc4a3219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de629029-7fa4-4079-b5bd-2218f68a8c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fb13a7-46be-4ae0-97af-5b848246ef9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b96965-dde1-42f6-8d41-85946e3593df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c93532-977d-43be-b701-04d88cbabb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e480c62-07b4-4000-8950-8c37083c1bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d394b23-fefe-41f1-8580-27999cd71242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25072600-ce53-4222-b1f5-3ba0c618ece2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c0165d-bdc7-48c7-85e0-522c52c269af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d142e4-b21f-4d7b-b339-5a128417bff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d700f3a8-c30a-4bbf-a0a9-e8122720d7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e7a160-f7ba-4de7-83b4-0772b5b3f678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b135555-bcd4-4acf-b208-36e8cbcbce25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734a3536-230c-4e32-b6e3-555b3be99c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad929492-2c2a-43ea-b123-f2cf8c7cbce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f81393-22ab-406d-a1ee-aef49a2638c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716299c7-08ad-465b-8a13-e47facc5b83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b419e992-b274-4889-b5e6-a11d69fa3c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3f298b-b7cf-4ca1-9f28-2d787ae9a851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddafc39-37fb-4387-b02b-597c5326a708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92fd1e2-f353-4b3a-90ed-fae1bc7b558d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5dc57c-42df-49b2-acfc-19577421df12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bd001a-6da3-4107-a847-0501a96152ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4311864-8475-491f-bc86-f46fff99519f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21e0b3c-cdef-46a7-958b-5d3d5d2cfd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e18d751-e94a-4407-ac7d-00c13d374581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac68013d-b0c9-418d-aab0-36e8062d2603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e57c4d4-cd55-492a-b5b7-975c1f308791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91e55e9-ef01-4ae3-8ee3-1a635eb0a9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24954c21-17e9-4266-be07-c6b187b5fd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5150283f-17cf-4e5e-a834-ef24a3a38a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403ace91-0b60-4021-9feb-e102ca5c95be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a314ca5c-7235-40e8-8b1e-29a6e49d2c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f1f39f-5477-4f3d-b6b0-1e090d38abd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982abc8c-a1a1-4096-893c-8276011d8ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7164c53-3cf4-4cdd-8019-ab25a1cc1425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8784c267-a04e-4a5a-9224-7accb888bdc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04505fdf-5af0-4529-a6f8-012a245f8e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f900fb8-388c-425a-ba45-a8eae591fc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005eda6b-2e57-443c-ac63-f68c60d03431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4e6d44-14be-4843-b78a-1aa256b0a20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c36c54-b4ae-49eb-955e-98647594c4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47766e6-0192-4fbb-8388-606749a19248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b99cf2-c409-4fa7-85e0-b42c37ee6785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1ccc37-8c76-46de-a7ef-840ead5dd82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b17deb9-470e-4166-ac45-c69bd9900c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d2a6ab-0f1c-41e7-a396-30c57397220c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f73d0f-1571-48ea-afdd-cd8f7e79f38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb01c051-878b-4b09-8c06-c8a748b31e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfed305f-02bd-46d1-a973-555ef0ac48b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f5572-3c59-41b0-9c67-57e7a84c4e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5a4240-de69-413f-9a2d-275015322955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c5d703-46a3-493d-b5d7-fcad3a6fded6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b891663a-4aa7-44cd-8c36-031078be6e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b95bd-f9c2-4b8b-800e-827b8eb2aaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8744fb7d-0f12-43f2-98e5-3705a8622269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062595d8-e043-430c-a582-b4536770d89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ab360d-8c05-49d3-a51a-b6c0791ff39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6399d041-0c13-4c9b-b1db-68c7505ad1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d65a1ea-9973-40da-b2bf-d8e32fa68487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63e2709-c79c-4516-8909-0632566317b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922db5e2-ebd7-4200-a6a5-25256a0ddc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc6bded-d679-466a-8fc5-8054085412cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7611d23c-2a58-4950-8d1e-1a3a0a064ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a893597-1a4e-4245-99b9-b5b59ce38656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0fb628-2e22-497b-a2f5-bb1637d368a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a57fa4d-b3ff-4286-8413-cf7e7845539a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3f9e3c-2b75-422a-a721-043df45addbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24639494-4ac7-4632-af6c-cec55db20412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9539b171-b8e1-4820-a4b3-10125d0b48e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646b3b73-67ac-41c4-803a-50891d32d427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfa15cf-bbd7-4cb4-aac9-fac472f7a31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f903443a-949d-4a0b-827f-e8c4d56d8384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c039c073-ce44-4fd9-bb66-c31e3dda1d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af458b1-e47b-4a93-9826-a8186e694f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e59c66-8c4b-4528-921a-cc11cb234610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1e4c2f-b709-4f63-837c-f651c3966076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106c01a7-0836-42fc-bfa9-e53bb99128e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33aabf5-e3b5-43d4-997f-59f1a3be13ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda5872e-fdc3-4d7e-bc2d-0d391c0793c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b39cf7-e7ae-4067-8804-bcbdcf64d0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1113ade9-3af8-4de1-9d5b-b9febc16f85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da0c423-e9fe-4615-9baa-f2a268346406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02057009-3811-47f9-bd83-1969074abb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964a1663-e3e4-4461-af14-45200c953f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92b6cee-8688-475f-a8e4-a7e09cbe24cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc8cd75-be15-4735-8675-d68800c78ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c756925e-dcca-4ec1-88b2-5f8a6acf4611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edd8083-8549-4d8c-817b-abc7b60a7db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ed83ae-1e0d-4416-9261-8c8f8ecfe640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ee8cd1-96e5-4f60-b1f1-8524afc3b00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d27cef-1048-4dee-a879-8618d628ebcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f658e2-b8ab-4d49-8d80-558edeb14c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6671583f-c0cf-4bca-b546-27bf906b5a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3bdcfc-f0f5-48fe-a7c8-1520d5851f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acb3540-d489-473c-809c-6320b506a471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63331faf-9123-49bc-a39f-7066c8922e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cee6e71-cfa3-43cf-b7d4-94666acd42ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94198f51-0b47-49fa-99ab-96fde73e78c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb42338a-fbfc-49c1-a7b5-667d94f1dc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ca9280-7310-41c7-ab34-371eabf9c343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be9d5c0-b90a-4a8e-b7f3-0149ea39cb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc88505-cffd-405c-ac74-4975df3e8fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d20b12-d168-479d-9e55-657aeeae7543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64925969-4611-4bd6-9218-023a680ae591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e19f64d-41a2-4b39-989d-349f2b9e15ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9323d68-6f30-4c2a-8eef-50f54914ad1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6c2930-2bc5-48c8-89f4-101329877dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae40c381-e94a-42d6-a6b1-1f83c46e3055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7a09cd-6623-4701-84b8-3a087aa7b1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b5d7d-2bc5-4053-b873-21710c84140a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370768c4-b892-4cea-9c02-893c51d5f61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781a6cbb-a828-4e1f-a683-30c109a37deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dc31c2-81d0-4227-8e71-846a13f81e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c151cb0-0125-44e0-9374-222e783ff4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e295a31-08eb-4480-9040-5500998d501b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19e5892-edce-46f1-ae4d-66cbd548d6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efd091b-b619-4003-836f-e8fe59d38212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bff954a-45ef-4a1b-919d-c0ea87ff001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fd7f8d-9c79-4580-9625-040f5254c1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5e3e4c-75c7-432b-8ee0-a6bdf41ac7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69ab220-4777-43ab-9f87-c52bd61718fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb31125-5697-4ef8-9ab8-4926d3f2cc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28ab077-e725-4ada-9a49-390f5055a7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c58ea7e-fa88-454d-a710-5f7ef6a51f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2860136b-a889-4fb1-870a-07b5a156795d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f7ff25-ec6b-49d5-9f44-9a820714d57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da155c92-5dfe-4c4d-9621-2895656e59d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89a9580-c0b3-4e34-ac0c-a8ae430fad7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6582e9-7b2e-434f-8c12-8d4b9afd49ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77eedd47-86d6-41ff-95a3-cdc18b5af06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3233af2-a1bc-41d6-a967-d88383cd172e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f34cc1-e453-45d7-b386-35fcca7a9552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0cad1a-09ee-40f2-9c82-44edfa69438f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61021056-ebf7-4974-9772-e44a47e588c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53795e83-844d-43d7-b637-e8cfbf3f6e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeec5b7-2a50-4821-8ce0-aaf428cd705a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9821c950-6c91-4dfb-bc10-637d57de8aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21dacb-ec4b-473a-975c-02d6a5e4720b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c18922-ecce-448f-b398-63372e27d398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ceca26-95bf-4366-bba8-5a6154bf3147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbddaca0-7a9f-4e81-9738-c58a8b29b877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d425f658-1da8-4c4d-93d2-70dfe87ba206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0497d3-c490-40f1-91ec-9a400a92381c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f2ff6a-f496-42b1-9bb7-9ecf2845db5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5223a4a-fd83-440d-8603-495839c4edf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a55dbe9-c9ef-4821-bbf7-6bd1c869965e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ae40c7-6275-4975-a75f-51db3f2ec395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72172e99-cc49-4420-8fd2-91dfbd1495a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3563b691-e3e3-4767-b4e8-17511c542e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a736b879-b282-4bba-b677-891b4055e4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55aa67cc-7834-4ec0-a3ff-fad06d4fbdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfffe8f-7b09-48c1-8cd5-371fd1eb30eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c631934-f737-4a2c-8382-e27c650584ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ce4769-85ec-4fbd-9ae7-52e1ab614724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf065dc4-91c6-4ca3-912b-712e4dc3dade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d687b17e-53d6-4116-be42-cae18a9bf82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa1893f-2658-43ba-9824-43221d3ccca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0172b44e-558d-4697-8659-cef253e8de1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fa5d55-0b3b-4e17-a87b-890e137e6a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2732af55-053e-414b-9ef0-c22681667b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f82b0f-bb52-4cdc-8577-0966beab6081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44d0760-d822-4e9c-8c11-e96b16135099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6ab2be-2a77-4fa8-9a1d-05d32d1612e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75388f3-ba71-42b3-b811-258e1fd406e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791b41a2-79bc-494b-84eb-474275b3416c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d827237f-f552-4b0d-be88-9e035964b699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d002f798-3659-4155-aff4-7ca687fa3847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e092b26-54a2-4d4f-be81-4c17bbb7426e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7f3f1e-f66e-41f3-bb09-ccacf7d8190d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1510e9-6d98-4aa9-a488-80d0914ccc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed499df-37f4-4fd1-8313-eee65724129c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130596ee-e995-4760-90f6-6f70659d9ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429fda61-dbf5-4df5-8777-5d9e5d8315e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ac7240-7d25-4739-bfd6-6093e0c9746e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72bd232-8017-474e-9aec-ba0ea72bc6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d726db-de08-487d-a4e4-d4c48006a232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676bf678-afdf-4398-be3c-38e221408b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2663beed-5ea0-4494-a889-a30b2dd7f607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3686710-fc4b-4e14-8fc0-75137fd2eadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca3fadc-8c16-48e7-97ba-d7077e3ce76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c82bc2e-df65-4904-bab5-050ac66a708a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3926f9b9-7264-4d5d-87b6-58b1eed4cef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984d99ee-9f25-4da7-b460-73b539105317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acf9ec4-786f-4c21-a472-4aca2592212c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef85b2c-253d-431e-91fe-3235ba3022d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2b5eca-94c6-415d-84e2-2354f2e63967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a272e10-2fc9-443f-ae85-100c4985025d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360e8285-c933-4603-96fa-f8e88384da02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc81938-5989-4b4c-997a-245fdedfbd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa392e99-a02f-4b50-88d8-14c129f6b892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94fed39-9569-4882-a8a6-70fb9734f9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590e6179-7f8a-4559-9a1a-72dd85f005f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291b7206-42fb-4e90-b449-0addf4aaac59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edf93f3-db96-4a92-b05e-b08b64ad5fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aa3a47-71f7-48da-8a57-0ed3dfa4fa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c83cde-770d-48b6-852b-551fb0044c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cca2b0-4ec3-4fbf-ad6a-5a98af2e8e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17801bc1-bb2d-44e2-8da5-4b73fb32efc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b37358c-4c21-4449-aa3e-54413e6ee103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195bb90a-c727-4cdc-bbef-996b006ba7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e04524-5d21-4863-9c42-3b3fbfb7fded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6adf6a4-0bb6-41af-9eec-844cd593629d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fef014-4ea5-4142-bdec-cd7e91bc00ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b41db6e-e9a2-48af-a797-642dfc0ff50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967be9b2-5e88-4de8-afb6-53321daefe47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0031c16-f4a5-4b3a-aa92-5416e511a147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2386af7b-5d17-42de-9d01-9f4d93f1e911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ae34d6-d9ef-47dd-9b43-e29ce8f06a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffb7023-aa92-4e24-a82c-53a2d4657280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb48cf97-5aa6-46e9-8886-7791600e8e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ecd1d3-80b5-4c13-8153-6a559c4a86f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b6f9e5-1535-47f8-9211-9c8537da1101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee973669-f142-49dc-94f9-487706e70ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc28eba-2ebf-4bf6-a0d9-fb7cc7f14bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca06b684-17fc-488d-9782-8b02d2dc55e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6ff616-e966-47d8-a4f5-efc3c51a8f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc6830b-4990-457b-9686-ba6b5d3552d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d856b3c0-2fb2-4737-92b6-d747641e08c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a0b090-5e3f-4faf-af17-2c41100b51fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fd15fc-f3f2-4166-87da-b6ac6e8eb44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c652cdf0-26c9-4cac-be76-0111fa9d728a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3286b28-52d8-4f7c-bb12-05d31706d6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83540dbf-b7ed-4e40-a7ca-90bedab6f55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c09f26c-8cb9-414b-ad0f-cb602058d832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca6d04c-1950-4f99-a4a2-2311f62ee036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2526a15b-7301-40c4-95c5-05495ab7a142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d9b3cb-d95a-4576-8be4-0436bdf70e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5c5ca0-528d-4e1b-a5c9-aa2ade213a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513c9d63-56ff-41f3-8512-d14ce8cbc696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ac7889-9d40-4080-a226-7d6c1b5d750b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d467e046-18f2-4374-852c-b04d93e27fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7696040-8a6f-4082-9364-b4310dd54b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ebdb45-c661-46b3-84d6-9a81d757b396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b590b6d8-73a1-4450-97ce-07295d965848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7565103b-be39-4664-b7c9-51eb2d81891f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dab2d0e-64c5-4586-a903-d872ef767c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9637a3-fe26-44c2-9b67-3171a4a7aff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd980cb4-acc7-4fe7-8040-2b3f47d000f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16f3583-f6ba-4bf1-9bbf-c7b9776e4f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db986644-263a-48c4-83b0-9d3c47ecad4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c58c01-072d-4148-86c5-4bab16bba421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16960135-1dc2-4742-8525-5406b15b3015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0c7743-9d49-49b4-9989-0481d30911ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8722167a-7379-4f2d-bf0d-f708e20012f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fde0e5-829c-4400-8407-148fe387cd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12c0f15-59e5-4804-be9f-994dd774478b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b39ec4-78f3-4c83-93ae-27b6e4c69ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2c2eee-9fd7-4e89-9102-52990cda4561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1bb66a-d108-4e59-9214-13963aef63f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793b2461-3625-44d5-851d-95659330383a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121fa2d3-3635-40a9-a5a5-31797a80d4a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49556619-127a-4ed5-b0b9-5315f5a5209c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71445b0e-8c2a-4f08-81e3-ee4d32c084c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2e0af8-86ac-4359-891b-d5007f8eca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9155890c-6f3f-4337-b8cd-8a0932af32f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed858186-1878-4a3d-96e6-81a1467959a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80a11c2-b20f-4674-b3f2-5d5d980b7d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5767730f-6a1d-4f62-926b-2ad234b7508d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621b6c7d-6e95-45cf-99d9-f459861a679d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2286776-df2e-4eb4-a828-16d8c8d44db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa272b9-712b-49fe-851e-4ebc83a77772", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a5f9aa-1974-4280-9c75-70e927c2dbe7", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0a76f7-07cb-4e56-a303-f67107793f2a", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdeca8c-a2c7-406b-a483-9d7b14069a62", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3861f4b5-2967-456c-b828-b407bba80a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8c0816-4ea8-4d7e-b577-5c7b8b11148a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcaf25a-6c3a-4fa1-ad7c-a91c4231cc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0d3e4c-51c4-4fe4-be67-46eeee42f341", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94b97f3-2661-48cf-bc1b-e2f1e401ab8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ad7571-d11c-46d5-9357-a275207844cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2f5ef0-134b-4acc-b851-bc2ca7514f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23978307-6774-4956-ac58-a53d9ea659f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d326d857-79f0-4d8f-9643-2afd3e4ee714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0857a40-9194-4f04-ae26-c99310d15fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3e1494-d58f-416a-935a-b15c174b8314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272d795c-31e2-4b37-9f95-f7c0a0ae2a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6bb94d-28c4-4760-9b3d-6fe55c2c252d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d14569-a6f9-472b-8066-3f300105fcf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5744647-4556-48f0-8bfb-1e76f3bcb199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945f73e2-bf55-4cb3-a89e-87feac25f6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cf3992-e4cb-42a9-95df-12ff4c51fc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd1c2ee-9506-4582-a993-b8fc051c4dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5d4274-74dd-474a-bc1a-2bb1d7732fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1c5d47-6b51-449a-9239-04b8a720c1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59f809c-3188-4f86-b5d9-650269dfcbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f420466-b0e3-41ab-bb46-f3d4bb700393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7fad66-5f4f-46e6-9d7f-0de3107e46b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a163b0-85c3-4816-8bde-c4796534699f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eab834b-917f-45d6-bb3e-183207e2cb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2119e2d-816e-404a-a592-0646fdbfc6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2e0fab-22d4-43a9-a76d-63663d7286c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8479a0d5-0fbf-4759-a2f7-e8e29804d9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9007b54c-4388-4b66-95cc-ce3ca98ed397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa0fbda-bbfb-4aa4-a154-72fd2568ef36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b95275e-504e-4b40-94e2-d55e6bd303ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20e88a8-34d9-49bd-8d7e-3d319df00acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e406e722-ea75-4f90-88aa-d33518495001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8d1665-6703-4fca-864d-cea91d0b2c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0bbafa-7ed8-45d0-b849-606ae4554cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de566091-9839-4a3f-87a6-58e3f645100b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3e2de6-f632-4a17-a8b6-2227320c4ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a466a30-17dd-485e-95a1-8ef860ec1110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e20f5d-91d9-4beb-8e02-3ece1e3d9d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116b35e5-e327-489c-9d31-1ad7c37fb88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d491862-c6b2-4366-9b6f-9f199f6c03d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c8e998-cf03-4e5d-a224-d28c671eee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6ecd58-bde2-48c2-806f-21756845297b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029d9c6a-0085-4f1e-bda7-0f3da874a245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f90631-ee66-4320-afe2-b9b44aab7221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da8671a-4fa4-48c6-a68b-8f61bf062764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75932051-0db6-486d-9d00-8c4dee5d591c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2162cb-9a57-4959-9189-a10308556874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc204a6f-9402-4cf8-9839-e495b95bd890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae9c489-6786-4599-8d59-acf3bee1b7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa535a98-5d10-4bad-9752-4fd85d454f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7007715-2745-4849-92b6-e8a98e116621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb28c41-fd22-40db-86af-0dd7672404c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d86634-ef05-43ef-86d3-d401c20e506c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a38abf5-5e4d-4e60-b306-0a20832e91ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf87d46-a4c8-41f6-adff-f1157f7dd2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff08788-4d9d-42b6-be12-4ca1f6661f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab406b4-0a4a-4df2-8b01-1606b45cde67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0ee21a-5bda-4ceb-bbb9-d2395ec9b22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9e3a0f-c065-483e-919a-02d91556c9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af13af05-76f2-47f0-b067-ab7aaca5eb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18372171-3821-4f31-800c-c278f0de8add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b82801-4f5a-4d9f-8df0-7024755e134e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885cb943-b76e-4a0e-8b8a-1637a692a01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a2638d-1942-416a-b454-927f912b0a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bda0f6e-43ed-4383-9cf5-043711a9ec8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee8a8d1-da76-47bd-b726-2fe575bc147e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed59aee0-943e-4f8a-8912-1996c0441dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9eaa6aa-72c8-4c9d-b1ba-4fd52365237d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af91407-5c78-4d64-b1a9-559ca3ed458f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949d7132-dd88-4f45-90ab-a842c918cb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d59243-cc13-490b-98da-0c2f70dfbf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a6f56b-75c1-4e16-b8c5-821f2f2debc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c267bc1-a345-47c5-aa9b-5f8f0e6fe198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0ac838-62e8-4bea-b70e-d679942c6965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f373d22d-b792-4749-8619-fa885b08b3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16a0996-c213-45d1-a32e-6feea57f31a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3709fc0-3bab-47f7-b82c-b2e3498e2d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af669f39-f900-4ffa-b32c-b2555a47a9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06d61d2-fbca-4329-8232-579d981b1d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e3abc9-cc33-4b62-83e5-ac188cbffa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da554b0-28dd-412c-bccb-996147f9ce3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf37286d-06fe-4388-a8ed-cf100d13aae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e438588-75f9-4701-bb1d-17a22ea01327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73dcc84-3ab6-4eb5-a6f8-5ead8ccf5994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b14aa68-888d-4a6a-95ee-00a7a18e2c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5400059f-9e22-45cf-aa50-15cfb8a2c7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf09e7-4bb3-4e4c-8c96-8f33416329bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b715ecb-1f32-4daf-80b1-6f81229e9ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197dd034-2629-4bed-94e6-bb22b7429e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d078f9b9-fa0f-4ec4-8cef-e20c10e2bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2248682-1943-46ba-bee3-19a5220fb0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fff430e-c650-4dc8-a5f3-fc94adf476c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4bd60c-1a2c-45e7-9c9b-58ba65093382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f8a688-0e6e-46eb-98ed-f382985e2f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc26b84-4c94-47b5-8fc4-35241c5c2b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3336f5f8-be29-44f6-acc0-eddfb3fae9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127dccbb-156e-4352-a3e7-931688d2a15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e03231-bca1-4c74-9d80-05080e9b7fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d3b803-b1f8-47a8-8491-e47d82a980f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77020d5-002e-4a77-adfd-8433ff214215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593404be-fc41-48fd-81a7-41be796f8565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dc35db-2ef9-481d-b4d3-d58b0fa8a503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1635da98-1f77-4fb3-8976-725bd2e37c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e769200-971c-4c29-83e8-1e0676e703c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2d76dc-15cd-48c2-95d4-e3b87324292c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466595ed-b948-4ce5-b5b3-7adbff7e2aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d05a804-7b99-4800-b20a-d3d395d6b73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf34db1-3894-4ab5-8f85-d44784966d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0d90ab-b8aa-48bc-a219-f30b8e8df1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72255cfe-b6b7-424a-99c5-bb5670987bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bdd042-77f6-4efb-b63e-5b86966b8270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977d86fe-5150-46e0-80e1-3a2cb5cf4d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476d5c8f-469b-4282-b9b8-8ccedf8a5035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903a33b4-8fd2-4422-aed1-2055ddae132d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5928f47-fb31-4635-a7af-eb03b19a8ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f38c0d-097b-47b8-aeba-e86566d71e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98185379-351b-4047-8be7-fb4002c58d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98a7e09-7a88-4288-89d7-754b1b77f1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6b7280-2bf0-4ea0-9cf0-83e77fcb997e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcdb8de-fc4b-42a5-ab78-f94408ab05f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6f9cb0-3361-4c74-a240-495ea992de6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b4e5bd-e5fe-4c61-93d0-68ea913fbed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff0f1e8-8749-481a-97f0-a1799f6d581d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34af0233-2031-4456-8c53-be484bde51c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fce9c3-1df0-450f-b7ec-c4a26ccd6d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759c8cdd-f660-41b4-b3cc-b0adee0e1074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c637523f-3c66-4e7f-a92b-37a5c6938914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74360b6-e28a-4bc9-856f-1aa4fffa88bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4b6d48-1448-44fa-84b2-5d6c61d3b5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236a0fd2-eddc-495b-bee4-e59ce904c8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1370ac99-4ec3-466e-9239-aca0757a7a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d63771a-3d74-4ae4-8211-93221246af54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216f0bd7-4f4b-4f26-a9dc-5f249f93c77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7532c7b2-483e-43c5-963e-70bd61ad8c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f488599c-2133-464d-9fd6-b0873d53b2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9a9de1-c079-4554-925f-3884ef59b12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40da9562-6a98-4d3a-a3d3-ac4fa7974303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7084b39a-4bac-445d-bfd7-1840b58ecbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec502928-c5db-42be-948a-a300eb559eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5333bdf-a107-4f91-8dfb-c242253b9ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17bab9a-85b2-4577-a60b-4a1a132154aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7512f62-c291-478a-88a9-4858e1f59716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2fe780-6c1d-4679-9014-10b79d456c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fa3c6b-1eb2-4f65-9956-cf23b81b2a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc74cd1-5f9c-4592-807f-d6a3c74dcfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1687bc18-49cb-4a8d-a797-7308bbf310f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571fb642-c157-4af9-8548-956f585ad148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f602ecf9-097a-46a4-be3c-497bda545826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a874952e-0d08-489c-bcfe-718769ffef34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827e877e-76fb-44e5-8439-76cac46b7668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fad5324-bb64-4344-ac18-4513336aa5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e728757-68c2-4112-bcb8-188797493263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036b95d0-153e-4339-860d-9952dfae85a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b20fab-cbbf-43d2-b553-49067b2f9ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed5b769-8c5e-4e42-9b15-7ac552fbfdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4903375-66ba-4fdd-b5fa-c1f8b0e7e9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3098cd-81e8-466d-910e-9b82e84eedfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7634c8-5bdc-4971-b2c0-70ec16e7854a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a020a5b4-b6e5-4f63-a0f2-75192b766b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7f3fa9-051d-4b84-8b64-e40463f68744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e9ed71-e307-4a9d-9e43-a6f95ec6dfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef52d6d-1126-4f73-8429-64d2db178b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682752b3-d269-40df-b8a4-9563e29e6ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c76934-272b-4bed-8cf2-31d79f63fb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23d89ed-e533-4b6f-a3c4-42f9c505506e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab51cb6-fcde-4838-a618-f94f3039b97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff46d64d-b7d3-469d-9b80-1920b80aeebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61aa82a2-7785-4d7f-9fe6-fcedb1bd6665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1ca207-a82f-4c56-a993-7e80551d0f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abd526d-2fbd-46c7-b512-bf90212ce35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464e9e30-05ac-4024-8a3c-5f88e8a9fc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44dc23eb-1e28-468b-9c59-8048076ca151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49950b72-89a2-4835-919b-e5b90438c241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bfbd31-829c-413f-9066-89733b811022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78e6567-7185-477c-8164-b7932a1f79d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85607b1d-36b4-4c7e-ae75-8e29fddf5c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0572646-216b-4181-9e01-25fca6957a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c2a36c-9981-460e-bda4-31246cc9a793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84cdcf0-eaa9-420d-9240-bfe227e5dd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abbbcb6-9e81-4a58-a7b6-4f6183f646f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed7dd3e-8942-4f2d-95f1-f91b154cee5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd205882-a56b-4c15-8267-34706e78bd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad476b22-7085-4dc5-921f-0c45aa979c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c582db76-227b-42d3-97da-4fe82507d743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc94cc71-3a8a-4882-9266-837b0597ae32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d251b10-800c-462e-a70b-8b5d61c8d83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf419dea-b6c7-4081-bdd8-bb0bff821c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88d2b44-e76c-4ad3-9661-4bc12ca5bb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b833600e-4b94-407a-9170-04d52349e17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d01763-37b5-422f-976d-d93ccd99f0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1d60b0-1ba8-408c-9269-3aa391775e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0aba17e-b623-4253-9012-e65ad3160228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138ec4d0-fd8c-4d42-a767-47a168f77aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c26f1f4-a28c-4142-8a35-488b423d5c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e564862-513b-4dcc-a273-bee4cdd6bfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d9c30a-b21a-4a1d-9a4e-a67c2cada95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6b97cf-168f-4745-96b5-b1378e4180a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f110db86-9fb1-49a4-91c0-f43488aedad3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f232ef69-fdff-441c-9429-d7864d5cbc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d109f8-dcaf-4859-9651-a0543469535b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efa1187-8961-4526-8922-5049d99a6ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4722b733-3f3c-4cf0-85c3-c6ea5d1a07ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1122fdb-59e8-4fac-891d-a713cbab8de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1ecb80-7c32-48df-a1d8-78f7fa9795c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77501969-56cd-4dc3-841b-db9bd8aff3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604a1a32-96b1-4104-bba0-70794d0b4399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ffd410-15ae-4325-b305-0a7aff641214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4958ce3-412e-455b-86aa-f1a3e33f5b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233260ef-f53c-44df-8bd2-cf645aee0738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6ab65b-6401-4ea0-8b75-fd8dabf0638f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4df753-2e1e-4e83-b4f6-a1f728fe2a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a62e3d-3348-4d02-bf09-5c63a5dd940b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640dff9e-9846-4219-804d-825b75e0383f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b51ce0-60bd-4d09-abbd-efd8901c040f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7d0749-5fa1-4cd6-8bb4-e9e4854f63ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75e73c0-af96-43e9-bdec-c30fef02f20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaad1f8-a81a-4936-8328-0b79c73005b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3b3ef3-1ad4-4e9d-92fe-5517e8a179ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537586b9-1e40-4fed-b25a-4d187905d7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd22434-8c79-4f18-a6bf-64f5e5d2ec83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6468dde2-4c83-4510-9a6d-1bc28ae1e509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c251812c-5ba7-4d3d-8ca0-cebab85ca766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d85edf-51e4-47fd-8204-3dde7b1648ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f845624a-36fe-4298-b3b4-e9c176f32b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d82753e-c8be-4471-854a-362652badeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894d3895-2731-41c2-ab82-805a19e441de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e07fc74-30e3-4cae-8240-9bdbfc242ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b204bca-9110-4ec8-80e9-9563b63ebf9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cea319c-392d-43a4-8c1d-0ada80f463cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5b5047-bd17-48cb-98ef-58f83442f782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3c99de-32cc-42ad-9fec-70e5fbfffdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0711b49-3531-4ecc-85d7-c8efd90ea76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c788c76c-f07e-4065-9b35-e1333c7a02d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7ebc30-4fe0-4566-bb13-2bc563e6af6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ed3fe5-f797-43e4-a35e-42894984f048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a807aec4-238b-4b17-8326-d317502c8563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558651f5-3d09-464d-8602-d34f15307152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cece64-1124-4851-85b1-d9e5bf7edd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f48195-0e8b-480b-8deb-7455b31dc4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083fc53a-7ac4-4b8a-81c0-e8bf1044fb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5a94aa-5cab-45ac-abca-a4c95eb49465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7585a98-33c2-4756-acdc-d1415915afba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486be9c7-c786-4be2-9395-41a433550a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d724422-e0d2-482e-a940-3613e9984aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc97a2f4-1f20-4f8a-bcbf-0ee2d7604d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24be00c4-40fd-4b0a-a7f5-3a26926262c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0371db-1c4c-438d-a120-24b35cb0bff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b05f4c9-4702-44af-9449-60800a311bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cee64c5-079c-4e20-9be8-5fdbcafc04c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e65f39-eb35-4c7b-82a9-2b0724fe85b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911bce2a-f051-4e7e-bd38-2f55abb80e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e358b204-54a9-4788-a79c-b943fbcd78bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b66f0c-a49f-4f1d-906f-5ddde60a6d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d351985-166f-405c-b8f8-df4f454f6b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fcd0a8-352e-462a-bfa3-1664f19b4994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01525eb-732d-4d5c-b69d-9c3c61580c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b85b169-a3fd-403d-b470-e120af2a021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b930e57-8854-4415-8674-f148057dfb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c32d67e-05c0-4b80-8387-a388f1428f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74186e2-25b7-4b6f-9041-3f2da5abb31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5015e8-30de-484b-93eb-3e6a67619fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19a7495-0b32-485b-84dd-76c7010df7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feb95a4-eac0-44d0-b0c5-0cdc0d27d4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafcb8dc-f0d7-4f6a-b175-8a1a39d577ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceedbaee-941e-425f-9fbd-d4f5f249368a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fda8de-3a0d-4902-a6a2-55123a128218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106c8f6a-1ddc-4e52-81a6-9f9bca83826a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb2abc7-86cb-4cf7-9f4f-e97bef3b3f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acde38f-cd4d-4573-ba6c-e30af893d7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa1945d-4935-4c65-96d4-f87fcb900c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddcbeed-6355-43b1-aa93-03cff37148df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326f7991-2c98-43d8-95f9-8d882d353536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ff41e2-62bd-415b-8e91-0aaeda3d60a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b6b70e-418f-4c63-b6a6-c5f1552663df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3eaca8-3b1b-4f13-9b36-1c6f77c21112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bb2c33-ca55-4e65-962d-1ebaba6bb5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ab6fb6-b6c6-4c2a-aec5-829b0af75e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09da4a77-0380-48b0-88ac-b65400a1d950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0c8b8d-4e12-44a4-9d71-ccd5d75f6ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e59527b-c560-4491-94b9-1b021f1d1c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7836f39-7536-46d1-b91c-1680c03eed82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e811b24c-17eb-4197-ae1d-a6da8097dd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fb689e-678d-4556-9052-b481957a9536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f9a865-674a-47d6-8a9a-18ed64816909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c06741-b480-43e8-8b5e-df5aa7f86b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ce515c-33ce-4ecb-a204-866e566b6d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e9eb17-8dd5-48b3-b4ee-74cbf3373656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b53846-5655-4091-b2ef-8903ebfdcd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8c64ce-0b47-49bb-8f01-44448f898172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ef4eb9-92aa-44ea-818e-4b134440a9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9609565b-caa9-43d3-92e6-64d8ea42353b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e33684-280b-4940-bebb-96b4e4ae51b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e104725-416a-4efb-a92b-e8b423622ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae6ba55-2c9f-44e8-a89a-184c73b3a47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae7e6d1-72b9-4429-9998-8eeceed08fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67ddc67-8ea4-4df8-8a8c-a3d102b4e324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a31f92-8ab0-41fd-99c3-3b275a42663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941ee4ea-4bca-4665-9946-c189cbe215f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c728a9b-7963-46d7-a9a3-9b15650a7efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056a9aa6-7f90-4a0f-bee3-58c3eb150c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc1c7f5-4c67-4390-a59f-5160af6cb7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f984b95-c8e9-494d-bbe5-5c6426b43220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbd2266-d8a7-49d8-8f3d-55bc2d87b129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e27c751-f1aa-4c1e-8316-a0a2ad107cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dafcdb-0693-46d8-ac43-9c4cc29afb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9df6e5-4400-4444-af3f-d7da2c21e4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b926d1af-e4b9-4b51-80c1-7a7d724d5d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134c4a16-06aa-4895-b84b-703463a911a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0a89c4-8662-4f15-806a-ebfa5ca9fc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba44c63-3b96-44f6-9b80-b37cf4711955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7e1db2-29de-4aef-8f96-c860986423d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf5c442-b8be-4aad-9049-c94bcb3d150e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd905d1-695c-4b2e-bd50-39727726170c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d532f04d-cea8-4a79-b792-d9f5c1561a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bf9ba2-b27f-48fe-b19c-19ea3960f416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabe3730-0dc0-4711-8a49-3b8d0bdbd1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a73e67-9d62-4387-89c2-f2dc3c60be53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffa1d2c-6332-40bc-9c76-0cf17359d30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109f327c-ce8e-4822-8ebc-4ba436210ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed314329-e22b-4b19-b24a-146048b26458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d2133b-c770-4329-aeb6-4b3c7c123d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11513bff-f473-4497-81c3-3e0c7111f6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd9e62a-ced2-4b80-93c6-15fd6e5a033d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a765311f-6fc8-48c7-897e-2c2c561e5745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5144bf15-96b4-4646-bea0-06e1c5e072ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d83a64-6c14-4eaa-aea7-1532739d7cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d30ca12-ff26-4b9b-a519-be8aec6da4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f96de5-3ced-4cb5-8207-6c9e15464f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de01b13-13d9-464b-b593-3f9e270f69fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da62cfde-8dc8-4229-9275-4f1d8b0b0f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fae8ffd-317b-47e2-9671-799dab16f021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521d018c-74b4-4b0b-a121-23d3f7f6f2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c9a53a-330f-404c-91f3-931c4c553973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93190c4b-7c52-4b8b-a648-614353c7c71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c218021f-4ea8-4eba-a54a-bbdf6a425e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deff11d3-3897-4dc4-8667-cf40b6ba5070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069ce723-0491-427e-8e3d-ef6138e21870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c3c307-f215-4d0d-b551-c7e46e9e8db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ff1ba9-44e4-47e9-a26f-5fda6c8a3a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5bd771-6616-4443-86ea-bd9d1d540756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22bba8f-92f5-499b-aff3-dc16cf8dda30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e942fe-1c81-4185-805b-137b043bcaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c3e22a-0e7a-40c5-8c8a-e9cbd0147fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9712ca69-1190-4856-850a-e68f01da56c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6f70c3-3fd5-4d5e-9038-12d07a874059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71071cd0-43a0-4a54-be4b-434da06ecc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b44ea1f-b154-4cd6-9953-f2ae54712ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febe2e9d-540f-4932-babe-212664edb631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c4e268-e5ac-417e-9acb-a36857701304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7477a1c0-1c86-482e-9e69-62338c2bb4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac74847-8d5e-40d3-bff5-92ae776b9ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddc7103-d42d-4931-8d4d-20e14b318f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3b7a24-48c2-4dc0-88af-86fc3a26987f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8782012b-1431-4729-8672-b1b0d66cb711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cd870e-8171-44f6-85fe-e8cff12e2791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc17903-367b-42fe-aaad-0e92685944b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1036bb-8c70-4c45-bf34-df234301270a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d7ea2f-3745-436f-abb7-3ff6513bdd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56640d0a-64f6-4bf6-8975-edc2ad44a74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc28ca8c-8f43-44bf-8b2f-9264282e9f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e4000b-196b-4c02-b3d8-fd97db649c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3042a303-025e-4ab4-b572-6e6cfb641d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5cc4a2-3949-4c39-94f6-e39d1aa1f770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30d55e8-1d53-44b6-a21e-ce4a4a75516d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6175fe0-5d6c-47f8-89e5-b5883bbd66dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0e63a6-3b7f-482d-a3ec-e99323ba2263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1f389a-ff76-4506-83dc-ce00afb293c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdc2dd9-34c9-431d-b741-d71d5f184874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2ef4d9-4cd3-4a03-b149-9ab0b882cb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266e9ce7-7e2f-4a3b-b82e-52083ae85f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba72b54-5132-4c35-936d-d39b15bb52cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017d1146-07e0-4d00-8a4c-a5c77665ad98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3decca-c3e1-49e1-811a-f426f8bb1881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c739687-0527-48bc-a199-a0e3f9cfde4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dbe088-1cb9-42b0-bf7f-07853519819a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47715fb-23d5-4e9e-8aad-a3e4b59395f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f71082-18e2-4792-a655-08bf15719d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95e235e-21a4-4bd6-a79f-49d838969bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26057d7-157e-4752-a437-126abb790d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0022022-ccf8-4bcc-9a19-68fe1611537d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9e3492-e56c-4331-8b14-af49f480b3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce9a753-13e4-4f0d-a878-78c137d666ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9807621-fe9d-4ce4-91c1-6ff62f24073d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20b0015-5fa5-4f87-a209-8218df459142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17096e1f-5d80-4780-958f-6b475b98303e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2270a107-9952-40be-87f3-477cd8c309fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed1da43-6053-40e2-9b93-48a895f710ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089bc4be-007c-41a9-87c8-f561cd675ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a1aee7-9291-447c-8e58-0c49a0eb99b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901f6957-8381-448a-aa3d-a2df2b5ee36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa6ab38-47d7-4fda-863e-0e3599bf875f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99710212-bf51-443f-aa37-2daa49ba70db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb094e6-9bd5-473a-8c7d-88210fbe90ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b36e53f-19d0-405d-a387-b0f3bb1df8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2707c4-7994-4100-a6f1-a41e7bb82ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e17813-923e-4024-9829-49e1ded94045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2352cc3-8be7-41f1-a185-869514e12f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe8f0ee-5b42-45e4-bc61-20fa3b69426f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e0789b-ea70-4d0f-a456-7daaf911853f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c92b3d-0037-4bfe-a7b8-118cfabaf29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7225cb21-ea35-4c3f-81d7-c154b41b09dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87984829-789b-420c-af20-4e9c189c4b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba6dd85-52ec-42c2-92af-415d100321f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf7c019-6ed1-4a91-bf0c-7d9ccf997fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db42bf9-f0ea-46a5-a8bf-d010a60d137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae539011-6b6f-4a94-ab89-ae8645b97014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2c52c0-237a-4208-aa95-475817608e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a87034-d76e-4a0c-b7f1-b4dbf4442ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b62360b-ec81-46e0-b8d2-9da2d77a7733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e0a8db-c5bd-4936-8106-1797eec6aa99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9083abc-eb7f-428e-995c-9e9eeee6641a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2675a78e-4ace-43a8-be69-f662943142f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6569267-5da1-4241-b350-291dafcebe62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d3ee26-9ff9-461b-b20d-0b069724fa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4ef325-3b95-43fa-8245-714059c14504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aec74ff-bec7-431c-ad67-7fb5b9d1f614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d73e4e-06f8-4ecb-9739-a4483c477b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd0fa1d-244c-464b-8afa-fb1cd620e8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70625730-48bf-448c-a30d-30335d5ceae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d78994b-624f-475b-b9ef-fccf8e833d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e901f7-8b5e-418d-9d8d-e9a06127a398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f639c4-52d6-4971-bf40-5aa8feda2d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9325ff8f-036f-48d6-8212-df2a3710c55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d06a606-c55d-4ace-a361-27e87aebc4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937bd598-2c5e-42ee-874f-9d8d87726100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f5744a-584c-4430-bf6d-eda6b4d7713b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac553f1-0666-4b03-9cd3-2dbaf1238e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae3f61c-a9b2-46fa-9f24-be46328b5d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c2f03f-1e07-41a6-a634-f709b0b39df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08639a45-4718-40e6-8861-e10400da3518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdea9999-20f9-4e50-b5ed-32c1d8c010de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa360ed3-a795-4146-8345-ff39cd236901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcd1be5-2596-4354-a326-4ecf498ede6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733b2225-2b68-4a8d-816f-8e3c6b624ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b23a51d-8a33-44ad-bf26-c95ed8da89e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb386cc-c05b-4f5f-8a25-848c54b86b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b99c3c-50ff-48d1-bd22-f3d7f15ccca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cac4ed-2442-447b-ae44-5918365e3a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6858c07-3bb0-409f-8bbc-1c3ad0b5bc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5951ef-baf0-418b-bebb-87e5ce6d0b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b2be6b-6919-44de-80dc-39b0eaf37e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14be1a99-6a3c-49cf-aaea-faf735f2c83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d45e1e-3f9c-4e33-8afd-ea032d0790f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483977b6-d69e-4699-8eea-96d2a23020cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38257fbb-1a89-44eb-9db9-a2dc0419b112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffc8601-d3b4-49d8-9b87-b38c925a90c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be0a8b4-19dd-49f6-ad4b-53dfd0170725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598942fb-a330-4213-a24e-447f999af228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef72264-1a7d-47a9-933d-6ff2188d645d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97362db9-6a52-4fc5-b62e-3b780cd1441f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca93e05-9543-4f67-95d4-8d6148146b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc6835b-4174-4a1c-a069-d6a7f7ebe6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ba7f7e-5d83-44ea-ba4f-a96ee679d3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45f2c72-2e89-4121-a54d-6f396694b6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82595f3d-0dde-4c94-b8a5-3f7dad67ee61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666dee7e-d2b2-4a17-a643-14e26de5bcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c30d84d-1acf-49f0-81f2-931656291a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5e9163-bd75-438a-929a-dc701a63732d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3526a62a-9e16-4cf6-b0ce-88c0f4614e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eb635a-4001-4ef4-9ca5-41a5f0c38d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c5f96a-823b-4bb4-bee0-fc35c1565f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53d7389-fa89-4f10-b881-1ca04673c3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b0341f-96fa-469f-918a-351b557f0805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b4cc29-48e8-455c-90fb-1132400275f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad57f4bd-f00b-4222-b81c-e3043134e725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e1d8bf-823e-44f0-bf51-a0a1e6a10c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725754e9-b549-42fb-b0d6-7cf72a6544cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fedc187-f886-497a-b98e-8b099b3b72f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70febf5d-c520-4b7d-a27d-4013f69af800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6050d706-8d94-4861-9227-ac24679c056c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e515569-485c-4365-9288-380dca69bd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000ec3cd-b963-4dbb-90fc-7bdebc7ce0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9f7767-8bed-4644-a40d-fe391dc577ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f837bb-b2d6-455a-b50e-34c9447ca8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2752516-5488-47a0-83c1-99b3fa6c8c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc208300-8489-4298-afb0-513eb1192b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a413e6-66bf-4986-baad-020fb84b4770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e14dbe-d09e-467f-b7f6-a0c281ef4b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2fe4d3-4cb1-41d6-b4f6-869779416985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95d2b6f-3225-4ac8-9410-95f4ee9b3d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3209e1c-fc02-4322-8814-7cfb21bc01c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61585536-5e17-492c-ad18-2cc7fcfbf374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f58c37a-7e51-40ae-8904-accab697e466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf55f854-17fd-486f-bc14-a02ae96747e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1056a097-7e05-4583-a53b-6c17b2513b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be8bd0d-5b7b-4153-8edc-23bdbb6116a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af874b0-1e2c-4b8a-9aff-d2adb5cd4710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b39eade-6807-4b8b-9149-5cf65a49ee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85a0734-d943-45d5-b6ba-5d8b2622e407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d173a8-2cb3-4512-a2c3-9b8a9859c003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd73712f-33f2-44fe-aea2-f90f6f9fb4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4563a1f-eae6-45a9-8ab2-542ecc42b5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.168.239.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f57b7e6-9df6-4c3a-80f2-70deb44c0582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d4f819-003c-4f5b-bb37-905e43465662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327474ef-7619-438f-a87a-42021739a7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17416388-6379-45bb-99b7-aa5c44f18e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab74adf8-d5bc-4af3-a497-42461c352722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f05027c-e975-4043-9482-7dcabe4e6f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ba268d-1abe-4566-b176-6a17ae733c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3031da-84df-4d4f-894f-182d39879200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3027b322-2a36-43bd-80c3-82550cb6a3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f0eea0-e136-4fd3-84e4-0b6b32f39306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2a8a9a-349e-4ef9-83c7-6e55b6a296bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9204d3f3-c10f-4a81-af7d-24e8f6c670b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a0bbd2-bd2c-4012-b7a4-e874bf88cd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d09593-29a7-4ade-942c-c5e94ed11aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526e8d59-d483-45a3-9cdc-ec7b55917591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82657cf5-1bf8-4fc1-b66c-c3f7862f8312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4226264-9d24-422b-91ce-012acbe02982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e641dc-bddb-4d2f-9c37-d4c33174089b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4aba1bb-64d2-4d20-b670-b5be1f166a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4d56bd-42fd-4452-93eb-592cbdb0fb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5116e0-2768-40b3-965f-134198a87e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb8ca5e-4ddb-499f-bc02-46fe04f4609e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f69c20-b7d5-486e-8982-169e842097e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3b0b7f-f852-4128-8f6d-f160d10b8ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a100e0-4dd1-43c9-90e4-3e0d24b4edba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a859bd16-8bd1-4424-b5ad-09582666a489", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4b3427-ac5a-4a3a-8a0b-93662277a856", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.56.85.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0684b8b-ccf5-4b0f-adf7-859d0b93bad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.60.125.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f48801b-22fc-48b1-928e-a66a548708a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.198.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92dadfa-bd1b-4b25-b915-b77aeaae6a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.96.254.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86b6e66-fabf-49e3-9692-52f0d45076aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.129.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40fdd92-2f50-44b5-91fe-e04d5da15c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.181.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926eeadb-01b9-4c66-89e1-d5f95950cd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.95.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8c8bd3-c641-4e50-b6f0-fbce6bccecd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.127.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47851059-757f-44bc-afb0-0dff688a7c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.160.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbbbd67-ed89-466a-8526-fb9f47d7982a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.123.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3abaa1-3698-4e45-9f02-d1b13740b796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.129.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491c794b-1897-4fb1-83a7-7e0177a87fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.147.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b2b0a2-969f-4339-923e-c50d2803738f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.169.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eda79e1-d0af-413c-acd8-dfa653166060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49aef95-d3de-4537-bb2b-c87f3158d1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.195.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3f7960-fa02-4076-95a8-02b408152429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f581e8f-2ff6-44ef-909a-7014d8331781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.84.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305264b5-ef74-4406-883a-6c45fce37fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905ea8fd-0512-46df-a9ab-921b62f87a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1755af52-b553-4871-8060-55b892e6810f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbde1d5c-5a42-4320-a32a-838e6fb97011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd86e537-2534-4aed-9e1f-928bc8c69ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cbc41e-d74b-4f5a-a121-05c3adb779a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6041fa-8f91-4f2a-893b-17b0b75ebca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e2bda3-efa9-44a1-9bb2-bb64bc9cc217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a92563-1c1d-4302-9d7a-f8dc90535e58", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738d1eeb-1ee6-4032-a92f-dc3b96ad465b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.171.119.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced4a798-a6f1-4878-bdb9-da8e701e409b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60485b8-c8c8-42e3-a52f-259d15724960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a53fa0-c248-44ad-9e87-fe2f1ee0572c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b727677c-07dc-45ad-af60-00ee25b29848", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.120.203.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56615d7-6cd0-49e6-9cac-57bbebfa83cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.34.253.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b82a01-6b31-4d05-80bf-11b1491573ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.178.110.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe495cb6-e6bf-45b9-b0fd-816fca7fb3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.19.150.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197cd414-4d62-446c-b5c8-dc3912bfc40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64c11d7-b334-4381-8370-506ba5686647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527c6a02-e935-4465-93b4-0ee13eb91da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fffa48-0142-43ce-b7ce-b9af79d876f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef0ea7c-82c6-487a-ad5f-ad86e3226c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2c43df-b617-4221-acd5-d003d5d08581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bedabb-ef9c-420e-8df8-9bd56916f28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb3d53a-87b7-4f49-b503-cbfb82a4c9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3d7468-c029-4b01-afba-59d00c43adfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b49717-22a6-4488-8d9d-fee1d819b232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852eff39-cd34-4609-8bec-e46104848016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ae01b4-2944-4e8c-981d-d76f52185ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41b45a9-44b9-4530-a1b1-a2cf374a82cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24e270a-3546-44cc-a178-b9648f6c5cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaf07b2-bbc9-4c54-87d4-db799fb874de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0780b1-2311-4857-9192-0eb34bcaebdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97b6577-f6d2-4b3c-8ee4-cf2eac041ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c85fff-e537-44f6-b8f9-0d27c922e973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2364150-f133-495a-b8a9-08cc2e8a3808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a46b262-599d-48ea-a12a-a50fdf270ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba70f68-9d75-4fe3-8448-5aa10df4ff30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.90.30.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2d7d3e-c784-4c2e-8c8c-a4c8a98aa7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.176.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd26921a-f43e-4bc6-91e7-9bc5829c02a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c737ed6c-3d73-4030-9407-3f794e2ea815", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.151.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d82efba-0136-4da9-9522-ab1d9707447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.38.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c629bee-a21f-4b03-845a-8d3ba3ec6761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.51.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989b1876-a680-49dc-a50f-b10659ac2df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.179.72.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1941523-68ae-4036-83de-8cba26b50a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.250.177.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbec103c-5c5b-4675-a038-7fccae473d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.59.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbdcb1b-1de9-430f-bd08-3a211dda48fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.61.58.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f36891-864c-4125-b960-a9367b8fd6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.84.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39403dd-9f8b-44ad-b2a1-444e494886f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.116.186.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d60575e-baeb-4fb5-bce5-da1184dd151b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.131.148.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c704e2bc-9616-4ca3-8259-f1581f2fc4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9098acca-72eb-4f2f-8069-a4a0f9730559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13631bf-b4f9-4671-8702-a759d9b77d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa613b86-d636-47a0-8bbb-55d52df4bcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.107.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d658d9cd-3d87-469c-909f-e45117fb8faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1eda95-b0d8-4b47-bfce-dca370872413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a116d8e-5831-4583-843d-c48e713cbe7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ec74db-b73c-40a6-a772-422fd4ab21a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74b7a86-b062-4ccf-9901-6f61fb6bb8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7b7e5f-82a5-47bf-889f-0cde21ff0f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3687cae4-86fc-4db5-8212-f990d5eee2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1dfb58-39f2-4c01-9fa5-e36eb607c9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5994a7-0496-4c02-b984-db2c738c8001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ded15a-eaaf-480a-bf4d-a82ce869e481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ddf8a5-6439-4b99-b4b3-75bb12468b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ba0fdf-c472-44d8-bdd5-a523e1a99e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232ac706-80a1-4501-8bac-8e54beacb8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3bdf63-458f-45d8-be31-002f178e394e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c170b3de-ad86-41c4-9522-86c3b89faf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c10a383-1008-4926-b3ce-1e8006d06ef0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968180a0-767f-4fe0-a607-419f9b9e268f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b24d4a-a67e-431c-8b11-a4359f437391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc065b7e-80d1-4f6a-ac74-e5a73efb457a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fde65a-5f3b-489e-b078-69331fa0f87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c0ff8c-d701-4c3a-bbe4-0ca35b5dbda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17037ed3-5353-404b-9136-ab7324e1600c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df60d6fa-9954-4d2d-9a42-ac562adf2a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400d20e3-76ba-440d-8808-0582ffa4449b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0216ad0-681c-4cfb-a180-0e5bbe2857a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2200c933-6e1d-472c-b5f4-0225533e085e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8c0803-fc95-4f24-99ad-59cc9e38a727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12306086-a8ea-4928-8424-f3d83b05080e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7173465-00dc-465b-9e4a-81c088e23a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecba699e-0c6f-4c71-865a-cc59f2c89067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fb65c9-f20a-4753-b2ae-a5cf54f5c94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333166a5-420c-4447-bc3d-f3654723be16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ce03bd-ab7f-4376-b334-32d7edbe230f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0543df7-d370-464f-9a3d-4a154607bc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d43f4c-811b-4cae-8ee8-93e9d05b769c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c43d73f-fc40-476b-93e3-86de5adfcee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab916b7-c150-4a92-bcc3-ffb5a6fa621a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abe040b-dace-4c89-a89e-58ce76b35ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988419a7-f1e0-4c4f-a7de-599a01be1059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675aba7e-16e3-4b2c-80f3-22ba62c0fc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6a71bd-7c74-46a2-ace2-3aac300aad6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1abce8e-9b7f-4b84-9a44-b4bf9284df14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7c0820-ba6b-49a3-a435-0349a8a8e7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dfe955-8f93-4bcc-a437-aac3835600fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdb6e58-c882-4c3d-bf7d-64ea075652ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5f5a2d-87b6-4c07-8d65-523ed3535e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8109f95-edce-474b-954b-00ee1b854afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a43cae-a41a-4627-9923-5796387b4aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.35.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a023c6aa-2322-4409-95d0-238965c9a92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.42.67.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6f451f-1248-4f36-9ad3-b61207ad7621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f21e01-620e-465f-bc6f-23e70d78bf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26b12ca-8f22-4709-bfad-fa01c6817454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ddc248-6719-4211-9c6f-1d6cd9e88bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebd5699-776b-4b39-89ee-58c15b577191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41859f16-8156-4155-a481-a738dba1cf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4134532-deea-4983-adbb-5138c20364d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1c397-96a6-4595-a8e6-933555e05046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3efa04-cfe7-4e00-9493-147172f30e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2896189-4163-462d-9e23-cdb596ad7791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a87844-64f0-41f3-9237-5031e2e5c975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc7a849-fe77-4783-9add-8cbd53e2138b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454c5137-864e-4ed5-b115-c3b640880076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd488747-66b5-4728-9c9a-79d76a9fb870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc18917-86b3-4069-9055-54af9539abc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd28a748-3982-49c8-8966-81e1faa137a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cae0a2-99f9-4fd5-ad48-fec65ad1c175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.108.218.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ee2c83-e035-4215-abb1-208a5ecc2d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8715342-d7b9-4bd2-89ec-98d0b4142edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841d7636-8851-4f8f-bc22-8df4544c8dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dad8d1-ba49-45d8-92a2-ff6e921fee70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bc08c9-74c1-49b0-9fad-73c8d1bfaf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee33caa2-4ef3-4b18-b309-02e865190655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b27bc5-b0cb-4761-b5a1-bf8687bf7199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3285b4-e777-490a-b891-389580bb0eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ca86ac-ba81-4b06-bc9d-c91e4bb84ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23e3a44-d195-42eb-bce1-eabb8d16c73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e8ca2c-6a04-48cf-af4e-af25f3d498a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5365e04-5f1e-4f76-aa17-252697513275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713a5fb3-d76b-4708-911c-b21d4c8c44f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ff7f7c-97f5-40b7-ae77-1fb9e9083f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fac227-0693-489d-bbe0-e24aeed27e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5274a41-6268-4b73-b295-43be26703b70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.130.225.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370a9a42-76c1-476e-ae12-55b4eaaebd34", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.139.58.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bec79c6-5d11-40fb-bbe5-dd6295315ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536b9f2f-33ef-4fc8-9842-266de56dec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d418a1-98ed-4273-9d93-99cb5818b256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106f28d4-0daf-40a1-8a9d-5e77d2c217f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca4da9b-9794-4229-b1cb-a4350e8c9331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.122.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299a171c-f3a2-4b71-9129-65fc89b99fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.38.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20740811-d82e-472e-a358-924fcefbc7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.240.107.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70398b8-590b-4e48-894e-4f47491436a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.240.220.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bbaeed-cddc-4727-97f2-578c05bb4d4b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.39.48.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a98968f-3653-4f8d-bddd-a987c81d6d14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.46.211.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd17e5a-53b9-433f-b697-2325e77e31db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377a8888-4e6c-4229-bdfc-45568b878b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba17105d-6250-41d9-b8b7-29e325bbcd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05fcfa4-afca-4830-abec-143d35b76af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da44ff27-e6ad-4931-9994-687b2dd36e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd79a8f-9038-458d-b89f-ffa0ebd5175e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163abf36-35c2-4a62-bdcb-c3d64fb005de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f09bf40-5db5-4aa3-896e-5a29291c31cf", "relationship_type": "indicates", "source_ref": "indicator--163abf36-35c2-4a62-bdcb-c3d64fb005de", "target_ref": "vulnerability--710d1cd9-33d6-4cc2-af13-80da47bcbcb2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35552cd3-746a-4493-b5dd-71b43581c616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86ea29f-69e3-45a0-b198-418b5569b800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f27851-cb5b-462f-85ec-7ceb91948239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09db26e7-9ab5-457c-b0c2-e4f15f262734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc08d896-5c21-4af5-9450-bdacfbf2dab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904478fc-a658-429f-8adb-cbb6f61b5457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b698447a-1dc8-4c13-aa38-20df272e5d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6593b3-0842-4e4e-87f1-2e80d35a3fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5027e082-06e8-4bea-a888-47efe321683e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795f2826-c0b7-4282-bd90-9297f969d0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f807e02-958f-4189-960f-4f1d3a4476aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a6ec3b-b537-4f3f-b383-60bc042abc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4519c3a-79cd-4d6d-ae42-8b12cbb1734a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bcdeb5-c678-4200-9ef2-e23bba302476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d537dcab-dad2-408e-94d3-4ecbd656d04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9185a30-8e5f-4fea-adcc-e2b5f3cb24e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.181.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45307ea-deea-4797-8386-e2d28457fb5f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.137.34.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d2c216-02bc-4dbd-be0d-9c3ed266d1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.151.181.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0864c1bd-f35b-425e-abfc-442596c14b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.16.81.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2efa63-af72-42e3-8043-f1e850f15951", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.164.93.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7445e3cd-f220-49f1-a823-8a506c3e7a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.58.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88353d9a-855f-4806-9dc8-8083cccc717e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.56.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c6cf11-1dfd-487b-b49a-7336757f27f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.207.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423e7dd8-bc53-4fbf-87aa-f35bdce613d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.225.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f3482f-d2fd-49f6-a9db-6348bc0853f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.145.56.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83226483-11c3-4d8a-b042-caf529f8fbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce69b80-f8c2-4562-97f3-28bf7ac74cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.103.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e04dde-b942-4b4e-ae00-eb636ef1eeb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d236c0e2-96cd-47ff-b128-407abda3503d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed52ccb-7c65-4f4b-bc06-79665827ce26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b41037c-52bc-4559-aa92-7cc36bd8c710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f87faaa-e7cd-402a-8564-5a7ef50a9ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfbcc64-09eb-46b6-b861-01c2f4631725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.111.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5567c892-8645-4faa-920a-455c632d7b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.113.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d3a32d-97e9-4fb6-b9e1-cca2ea888293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fbb455-58f6-40f8-a6f1-0d4b7e39e4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79af37b-143a-441a-8e73-2e54858091fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3790b3-e06c-49e6-ac27-8b47ebf89a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27b6484-346a-4236-96b4-23e350f0211e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca945f3-68c0-4d60-904c-b828fad78614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.197.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003a06b4-b559-4688-bbbb-ea4838ed58ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8584fc51-7c0c-4c4e-91e8-e3d963aa6c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.210.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de23b5c0-be9c-4aa8-a3d7-68035b3058eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f4cbe1-eeee-4952-ae11-caa38cb39e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f885828-d57c-4d3d-8af6-4064934b477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.212.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0142696-8d4f-44a6-82de-d0d9c7f46107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.215.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d13192-9c8f-4c6a-bbd5-3441d13c178e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6045f8-ee39-4057-bcbb-3055d5092707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d04dd9-b6fe-4c1e-9ec1-5996eba322c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8c0e2c-5c0c-4af8-8794-befca1caa9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7c1b46-c984-4147-845d-e48ab19dced5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fa40ae-ec95-489c-b88c-7f7a32aa9cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b804a8f6-fc0a-45b0-806f-47bd2efca19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.239.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05901750-2f82-4653-b588-136890bbd442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.65.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126318a7-aca7-4f12-8ddb-ef577a45941e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306c8210-3e72-4c70-8486-2d520d4d58e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc133cd3-a379-4e69-abaa-fd30a862da65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea1145b-0356-45f2-9fc2-4804e8d8dfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68c3818-e85d-48f8-bc42-66363a3c2f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f764f7a6-ac16-4c18-96da-cdd8148533b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7705d9-ed10-4390-aec4-4e01719300dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bfa38d-b6a9-4c71-89b1-e63f4adb3193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1512db46-d4f1-40aa-a259-0902718be7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bb8de9-8c64-4efa-8465-bd50fdb2a23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.97.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707775ee-8c17-4f6b-8156-11fcba69fd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3910b9-49ae-4ca8-bbee-219484c22e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.4.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef1ebf3-2b55-4c4f-a941-594f8ac0f90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c3c848-a895-4750-8b72-f7062845d3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f90d9a4-eb4e-4014-a40e-6573dca28d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.138.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcadf6c-ed57-4bb9-a41c-cda3ec3b69bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c004d1d6-6858-4e57-a7ff-fca9f4eef6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a32d23a-31b1-4354-a159-b6085939eb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee05a76e-8d81-41e6-b703-cdf870cbfd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d822cc7-81b1-4781-ab60-e709e1c0996c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dd0ba0-87c0-4dda-9c04-b69d0fad3a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.150.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0b487c-08b6-40ad-a5e2-7fe8f90ae6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.154.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144133cc-123a-4bef-9c38-52287e90f29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e484a06f-9f48-46c0-baa5-c01c22ed643a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.166.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2073cf-6bdc-48a8-93e3-a2b481d93eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9610723a-0810-4197-93de-a482f76709af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.19.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb887b3-2cb2-4fa0-b32b-401b602914b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b0c62d-7813-4a25-b63f-b24b0e170003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.20.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09447bdb-ac7a-4165-9de1-759d07b9b422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f8c8f7-6916-4729-a81f-cda071dfe036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.22.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd240f6-44d4-432e-8063-7c031586233c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3779b4-2bea-4779-bf11-274816daf571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7b0a8f-5aae-4edc-81be-f415637dc9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fadb422-598f-47e5-b793-d9b4f385d508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf5e5a9-8e07-4c7a-be55-ea2ad618c8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.3.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f757fd-fb48-4f0b-83ed-30ea3e3a52af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bd476a-8e64-4ed6-b90b-30e48ba0b9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c01040-e2cd-42d6-b09d-c4c6b5393496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832799a7-9dfc-47ac-9e68-281cc3cf4f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.35.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e1b4fc-d5a8-49b4-adc2-a7201bac475b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.36.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba663fee-47c3-44fd-9832-0f0fd8d140f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70d6b49-b057-40fb-98ce-075b646810e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b54107-0c27-467b-9303-83586bc6dd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0134f7-4593-440d-ab4e-7b4e5a19bbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.4.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776c5d83-fef8-42e5-8892-266e1b92a025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597ec30b-40cd-440d-9dcf-7da93a804055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2595aa01-6ac2-418a-af86-c0f3bcb7b758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915b9566-77d1-4c56-89dd-4c9e1508be86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c2c8d2-2303-478c-a218-a884c80aa6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124e26b1-2e63-49e9-a736-eca10afb4a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2357efb-f1a6-45b6-b7da-0bda26a441a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2979a73a-7f18-4414-8d59-37c84f22f9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1c1f11-8078-4468-844b-9f0fb1646cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9733f2c-8e02-4d59-83dc-e2c55823ce49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f8393e-b2b8-4d32-ad2b-c49569d9e295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.224.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb0d93a-9eb1-4bd6-b562-47a965b7223b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aab5cf-e40b-4448-bbfb-d0d7ed7c4808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21837e37-01d3-4ca5-9a31-1f540c08276a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f496ab-f288-454b-8c52-6d9f703cbb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d77e1a-bc2d-4f85-8ef1-764571cb2e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd899fc4-d82e-4571-af72-e6facb8a5ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1a13ba-f192-46c8-b2e7-73de8b92155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf081a8-ae05-4921-8baa-a64969957036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bb28c6-a52d-44b9-901c-18a4b0924f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8724b139-0450-4dcd-b51f-47e5a3878338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b99e9c-b3ef-42ca-8e81-8dccefb4afee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3344eb4e-e1ce-40d3-9146-da27869c682c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e52b6a-0a1c-4a5c-b9a5-266c204f4472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97ae12b-fba7-4760-8952-d5d77c52d7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f3a7d8-cb83-4186-bffd-826ea70ce617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8deca09-087f-4b2e-b7a2-00b0f6ee4e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a452e977-dbb3-4a92-83dd-e993b355bd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7e24ec-9ff6-460c-9c75-8797395bfb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad4fd70-4737-4da4-8eeb-76b1186bd2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c08684-ceef-4b45-82ce-7d136acd1ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8c6e35-276f-4944-a581-16e823a7ff95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed02690f-f3ac-4e6e-831f-8241b2ef1c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a36b673-da25-48d8-8dcc-6a4fd4251976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db65df9-5984-41c8-9981-fa4394eee210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b30e3f-290b-44c6-bbb9-e80b48892dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c07e7a-1c9e-416f-aeda-e8324065a45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c18481c-ed33-441f-b131-ab5a3621e026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79cf85b-24fa-4706-80f7-26d0eab08e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aadc203-ad48-4e6c-95c7-9401be770098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b952a0c5-8aec-4084-8282-82eaa530e2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6389e9e-7802-4ea3-baa8-34ce6ffb27b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc59efce-2d87-4443-96fb-e9c92df3dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ab2cae-ac2e-497b-882b-683f4c0193c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b1ec2d-d5bf-4b96-b633-a19401704b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e1c69a-fd63-4578-8fa2-1229916d8158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06a2116-f47a-4d10-bc67-a6925c7bd9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd20d22f-1df6-4f1d-ac7c-b6a0d0ba91c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b57f2c-4a36-4514-b6df-9d97cd5e4773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62279b4c-eaff-48ba-8cc8-f5941fd3fe4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7b4b72-66bc-4990-889a-8cf0bca89974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e6699f-423a-48dc-bf28-9b5774996483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104da567-8e77-4ac9-ab9f-5b7a847ec914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a8c9e1-68d5-4169-967a-625c3143ed9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4daf531-379c-4b10-b35a-101ce7ccd427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779c5a6c-c555-420b-a1c2-cc95d96ad4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e53e76d-e77d-4897-b133-9cb8b249663b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb8c687-5a47-49aa-adae-a0acf56ac817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d9153d-45d5-4385-8eea-7d358ea6a72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe37cf9c-7de3-43f6-ad43-c99b2cc1da41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63d3381-95e8-4ef4-a89f-5803d3dfd04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5757d4ed-a14d-43dd-83ee-3ad1caf96d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.62.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43819825-ddea-4384-967b-13cce2d74cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9075141b-8899-4a9e-a21b-fffad7562cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4117dec3-5e81-4432-b4e7-d1dfbc7c3f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b780c65b-bc44-485e-ab1a-05e7efc9af05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551cab26-ad56-4680-87e3-f72e19f85667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965a4171-66c3-4a20-aa9a-dc780cd02944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945eb8e3-416b-4ff7-ad45-e704f1d8556f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52b4a0e-5dc7-45ec-87dc-d83cc43cda36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bd357a-f174-4647-a3b9-a6e2db72d0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc09084-9032-4fb2-98d5-2a349d793741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f8015e-c3f0-4b7f-be69-c9f6d7f06f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a089b8-53da-4990-a4fc-7b4969ff6140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9992e0f-5e52-4ffd-82bd-3aef632652a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a828ce3-3278-4fa3-99aa-a46a63c187f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9b89c6-60d8-424c-8e3e-43eda657975d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942f9603-990b-4ce5-aa9d-eae3c462cf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726e2f78-1a18-4673-95c2-e23b6a1655ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc1c953-2ff4-406f-8ca4-e35f9d7155fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72c6142-74c4-40a4-bed6-0b35c08000b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89affb4-2782-4bf1-b8f1-757d5505dba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5bfe58-fffa-4169-87e4-4cea4a050702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f115fd6e-d1ee-4c2c-8c9e-4dafae7b26c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7049d8a3-8546-4c40-91f0-e19049e87809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196acd6e-ec91-48a1-be24-1c32dd3f564e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e851976-216f-4da6-9767-5a684f07c2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af5bd22-0a8b-4f2f-8e00-11492de3f661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e618a7e2-35b6-4df2-ac48-5a636d18e5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7debcf5-0f00-47bc-892b-114265204851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a148e80b-97cc-41d9-a218-b275758631d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.78.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f089d8db-cf0f-442e-bf68-6239cac0829d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.207.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a718d9-9ae4-4a0e-a44a-2422de8f43c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629d223b-af70-47ed-973f-082f016f22c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f7c1d4-4ebd-4743-9478-ccc67525a0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.15.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22196c87-ee70-4c95-a302-2347970b15bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.2.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f045689f-2df1-4c02-9345-4975c979c074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.219.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d2d664-7f39-4b64-85ed-aa0d0ff44ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b5ed47-606e-433b-9a32-d54658be53ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.255.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ab20fa-ddee-47f5-ab3d-557313b64e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.51.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18873e7-5a56-4d35-88e9-0d8def070f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bbe760-79c8-4127-a177-a53816747562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6b361a-4535-4d31-8e54-7cbd29030a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.96.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2ce78e-68f6-4323-be4e-377679251129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.138.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7e1fe2-f41d-404c-8353-d931e09c4380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.140.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdf4551-e05e-483a-b85f-d4bd7e763fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb55bdc-a4f7-495f-aa9f-c255b29450e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.212.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8341ccc6-7014-4bc1-b3fb-240fe498470e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.230.102.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdabec67-f41f-4875-994c-5e271956a872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.122.196.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3635818-75ad-4cf1-8f98-844f26e812e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.192.237.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb98cdd4-768a-4d6d-9878-d8fee3782c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.249.180.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10c5357-31c7-40f7-ab08-7f0dbb06fac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1d9e81-8113-49ec-99ff-bf4068666082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3ed635-958a-411e-add8-a0e6e12a60e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60289143-d2dc-4107-b1db-ce85e4f69059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af76af4-f0c6-403c-bd78-243539dd2c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.55.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8446ab4-8e14-404c-b973-840c956f0047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fe2e4b-1bc0-4a9a-bc60-dccde1ac0410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aceee62-2f2b-4a2e-8d2a-a8913d7e130f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09a71b6-e434-4e06-a57e-2b6ff8c0f4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5debc0e9-9f87-4ccb-973e-52d1938ac6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80508e6-174f-4654-ba47-587283c56186", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfc8cb1-9b3f-4c0c-84ea-faf0d27ef73c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc88f34-72be-4b5c-9fa6-7cf197a5556f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36330938-c54d-4896-a169-2c0d592598ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae99f1e2-6639-436a-b2db-97a4b7be33b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bceaa5-7320-4d19-86b9-020bf4ecedaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6658d67f-f6d4-4521-8392-4acdd30390e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceeb43fb-a5f0-4d91-88dd-3a7bab309d63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee2dc7a-9388-4bf1-8305-bf65e9b33cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4783d7-4a5f-4cb6-8772-d95a6d94110e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f90c5cb-5f5d-4ccc-b018-d47d674a0d25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa6a0f0-3679-44ab-b562-128a09bf242e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673655bf-56a9-4c2a-935e-c147887fc898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b66ea8-8a3a-457d-b83f-01a16c962c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93cccd0-0743-4037-8437-08dbe80d9827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b528e1-15e1-4ee1-9690-8a37dd58419f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a436341-a19e-4570-931d-2ba297e2149b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926a0f38-a5f1-4512-b637-2128fb65ac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e0b0e8-a846-4e0a-a3d6-a6099eb4d936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c2066c-310a-4cda-943a-aaf4a97d85b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353ec232-8967-42d8-b233-d13bcb5ad266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb6da5e-c4e4-4cf0-bd71-74edf4699b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.199.26.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38819ebf-de9c-48e7-85ef-981c25a63cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.199.26.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5980af3c-ae98-4dc6-b619-30aa3f8d1b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.199.26.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36cc4d2-384f-444d-9154-06dfd2ed5001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.199.26.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8219c3ba-826e-494d-8b60-67c2e3c6bdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.30.196.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5369819b-1546-436f-9cd1-7b0f9d36c417", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.137.219.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa55354-6caa-4229-8284-59683a79e6ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.34.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61ca343-8c1f-4ee5-8641-e18d683f48ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.157.185.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72332e1a-7bae-43f9-8755-eda2bc03fc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.179.157.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f4f922-f56f-4ecb-9def-63ede6de79f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.39.212.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a95802d-5f9c-4ee5-8387-43e534fbe73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb120106-9f11-447c-8b58-04926926e3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b48822-53f2-406f-83fc-8ceaf39a8856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e345fc27-23d7-4e35-9d1c-ed8b73e2ed13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.110.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa109f0-2f39-4cf1-ba0b-169cc6829d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.209.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e7f331-8841-4e4e-bab6-16381469c792", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.16.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4a252c-7fff-445f-923b-b6bc1ab805c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.239.158.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5dde2c-fb17-4ad8-bc78-7e36b794c413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.180.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fc184d-977a-4ad6-9f60-ccd53f22bf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.164.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b8d99a-c474-4b43-a167-52e09ef5065b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.169.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c6af87-e77a-489d-b372-b310753ab4bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.222.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0f3933-8608-4123-9bac-0cf04b11cb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.39.225.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a78fd42-63ce-4760-9095-ac7a855baf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48186a9-8142-4703-bb61-1847202c86eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd75d7e-ce8d-41e7-9d72-e94d6b20ea3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d63ba4-638b-4a94-bfd4-729aacea26ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf7c99f-d97a-4edb-90d8-8e84a84286a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab7a35b-887f-443d-93cb-0f2ee36e1623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47d5360-da75-4d9d-b318-0c48dccd7a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.239.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec5dadc-fff4-409d-bfdc-94bf1a1dbce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.202.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fb3364-5231-4b5a-b3c2-450bbfa4d9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.247.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a0c9fd-3783-4b9a-b06a-0024ee4de7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7005130-89f9-4483-bec3-ae3fd9c77afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e55403b-349c-43b8-b718-439e4a1d4c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f2f4bf-e7ef-4624-a319-c1768f64a777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e2514b-e447-4937-a0d4-934b7479c672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ddbc59-10bb-4efd-af74-3e644cd64959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6773d2-0f2e-4a82-9acf-bb20eb026246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23a2816-d4b5-4af0-946b-f7b7aa7c1593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcceee8-0740-4d86-8f96-38af7480e593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3aee9a-1e74-45b1-a53c-7f2d5cf85cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaa4db2-4896-4816-b9a6-238980d369b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296a4735-5c92-493d-8057-b3b1c70d38cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0418d9b-3a64-42eb-9579-57b08278fad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2f3d44-756f-4f54-931c-0144de67a834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0183bccf-84ec-492b-adb2-bb8744016434", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75ec4cc-3934-40a0-b4b1-18e9810896b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12d5915-3cc6-4967-b52e-28f5676f643a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4bf307-8988-4813-85a2-5218d8973712", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f02c242-7963-4934-a409-32e317ad900c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fd9daf-ae5b-4891-ba95-467f3a29e2c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d687ce7b-7237-42e6-8ee8-3b4b101f40a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b329dfff-fb41-4641-a7e3-e604f0a3485e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c294d984-4e66-49da-9e42-71e21ddb9ad6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f25c823-d836-4d90-9ecb-68993486570c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a87206-83a7-4dbf-ad4a-a9e74c3fc1c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d263adb-865f-4798-8c0e-3df722b731e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea15503a-2b62-49b0-b039-3877a42c3300", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8079e306-0160-437b-9462-15eeec8fe508", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029cdf28-e947-4c69-a79e-483231804d23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f7a74e-2e1c-45af-b046-c47a3bdef239", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2508d1-3b47-424a-b859-517555def67a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ef2fe7-1449-4506-8c67-e37bc351a7a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ead690b-f98c-4cd4-817f-ba57c1f3c871", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae6b257-4381-46bf-8dfc-c8219637b70a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6742885-11be-4c01-9473-fcf094b5b570", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ef0256-ff9c-4482-9dca-11a5dbfedb20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87135a00-8d1a-44ee-a7d6-d24e3a3969d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ac6a7f-b5ad-4142-bf66-1670e92fdf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72146d05-f24e-4106-bd47-0ff31cf35d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf00caaf-393f-4886-b5c7-44f162ee1225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cbec95-70f5-4c1f-9fe4-374c3484128c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fbe4ca-589b-4e4d-8134-0049f2a65356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b08b0d-90aa-4a13-9f16-d108c19f3e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb811b9-37ce-4c15-8c5e-afa0229c21dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11351ef-3904-4fef-aca6-1af7e1b90b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2582dc-3f12-4bd5-bb30-8893733d55b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebb7431-94c3-4c77-a160-19129bedab4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35028a4a-c955-4b4a-a6d4-b3795389bac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8d7c3e-36eb-4e84-93c6-57ff3af3debe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9013d15f-b4b5-4d5a-804f-a45bc91199fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d94d5b4-5a2a-4a2d-9817-9bee35b619f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1dc8e4-606b-46c4-85fe-564875239c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20602e7-15f0-474e-9aea-2e03c93fe99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a1abc2-3f07-4032-bdef-d863eb423838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb14953f-2f65-4710-b511-2bb4446cbe72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dd4e57-8e7f-421c-aa72-1091f92efac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cff54fe-af8d-41f2-a59b-d63aaa22825f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7743a94c-1a82-48cb-ade8-a6e1ce2ffc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01f6513-6391-4dcc-88f2-8bc1ee0bf832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb36fc61-9885-4299-a496-b0e1a5a1d780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c60189-e1a5-4f0d-bf33-94331e271a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c27104-d21f-4c0d-ac30-3a9c42f9c141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ede669-b8db-4c6e-8e69-f1bea4cc06e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe43646d-5186-470e-89a4-b76f6ef44845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3664cbd-6179-4ace-bbe1-89013fcc1874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1332ca1a-4659-4054-b700-f40e8bcb9b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70abe91d-42ae-4b03-bb8d-54adc6077232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1608fd3b-5c81-4066-a10d-6f25cef4d3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ad7e6d-00ae-4bd1-ab04-74520bf3e1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca941f2e-10ec-43c7-a2de-a632ac30ba86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d43b30-6278-401d-af48-4519baa26299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbfa9ee-59e7-4192-8043-71b14cb8be7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29840a97-ad26-4da1-b807-a3b3a2ae8753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c11c1e8-a634-4e5b-8858-b14ba2d41230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde32c88-a26a-4fa0-95ed-d318e531e2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a71694d-3444-4069-8d6e-2868702149ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc9c1e0-5162-4973-82fb-c55931972ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe94a28-934d-4eb7-b438-ecf35532d2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d92e8c-11ab-466f-b9d4-cf6a399bf4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d114366-c32b-4651-9167-12fc564386c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ffb3c2-385e-4b92-ab5c-ca4e859ccb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68c4393-20a4-4e27-9f20-5151c5a5caa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679e6583-379b-4fc9-8e45-2316ea908852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfcc0bd-40e2-45c2-923e-a799ac9f9d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae06e310-be50-4663-a85b-17f4ac9ea088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2263cfce-1d89-4e5c-ac0e-d0480f96640c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901ee420-d665-43cf-bf9f-172e48c3e406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3e64b6-2087-4565-913b-85c5f8f097ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a7e778-bbc6-41f8-8373-1190a7d0a3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558a49e8-384c-401b-b8c0-dd1bbcbf42fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e13612-bf15-418c-bf99-cbf7d9a3c0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0d78bc-c50a-42b1-92bc-bf604a4c9dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2094b12b-fafe-44bf-a0e0-f975d11fff5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa49a03-4e07-4c73-8258-1d16326c3f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefb754c-bc74-40db-84b6-c5b80d94be4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ce3c49-85b9-4014-b929-02d2017d6d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8416f1-a072-4ebe-ac7b-a547e0b5fb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16689b5f-e13c-4fe1-8b61-3f27dea03eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdab582-070b-4f0b-9a48-e21b0b607ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6f52f8-f3ae-408f-87cb-2a95b9122404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d639e111-6883-4148-90a7-e378813c6776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed7acd3-1814-436b-91d1-d82e5d6bde50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2353b2-1424-4137-851d-c38c8401b7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d53200-07d5-4b45-bce2-0228229ff723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d8675f-456e-48cc-8f96-c2341af7f7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c23a39-ce2b-4d2b-9145-6d1e0b81c102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4511d0c8-3125-476d-b8aa-3bed3ebf3955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d3a762-ce45-430b-8a4a-856ea2cf7b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5032d38f-27fe-4863-a8f7-5f3f0376c4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f4df74-8383-45e0-ab06-dcfa4594e443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db47f70-81dd-46d2-b277-2f5f8faea54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13aeeb69-93e5-44c7-960d-54385f11bf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb5cad3-106e-4be8-8961-34004bf2ff0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c5d470-d0f2-48ad-a422-f007389f3817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e371290-c247-4ec6-a2c5-b53d12f807eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dd4c97-1373-45b0-9bcf-c455c44af464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef725b3-9b57-4f79-ad91-2df1c4add262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24225f97-4bcb-4986-b951-cc5d6e416ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6cd378-533b-412a-b85a-edd1a01b558f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a36add-f9d2-45ef-905b-00bf4119a7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2412fc-a27f-47fe-88bf-f0544e899678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d436bb69-2b28-495e-8304-b7d91556db09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdc9388-811e-4ce1-a2d8-1dab0dfe57b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e446e6-79c7-43de-b63b-b632063e7ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2909fd07-07c2-45bc-b75a-39d3427d9b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd53745-dc6b-4f4f-9c97-47d3bca83533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd14155d-2d20-4092-b25a-fca6a10d65d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d998ed0-7b28-432e-914c-f1a53140a0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa20648-db18-4fea-a5fb-9d9c0f73b4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74460c1-b489-4d25-a6a2-56c71aabe428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413afaba-1f9b-4e18-a6d7-e185b152dda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bac1374-80d6-4185-872c-8aa5914987f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00b76a1-530f-43d2-b157-d65339b65d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35de9866-5a0c-4fc3-96f6-8ecb1b217ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e69488e-c12b-4afb-a938-03bc1e30c644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04eec87-aa0d-468e-9bb6-a73ebc2e5ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fded23a3-185c-4a1a-aea8-eb9a9724ebeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a11228-41bf-4eb8-9976-0dc1fd94757e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8271ccc-fb92-4068-9a12-3569e56fcf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ca6b03-e44b-46ce-88e6-2633d84f2c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f816e7b6-eb8d-43b9-98b5-4bf33a8bd304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc37a970-1ecf-4cff-80a5-5591dfbc4158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa7115f-5024-4240-bb7d-88dd38011855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f483d0be-8365-4945-b68a-dbe5f96ac4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186dbd95-3089-4c3d-94a9-a88c7d147554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f0ac82-6d3d-4c10-954f-28a06775d1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e2fdb1-cb1a-4a29-9cb7-95e193d53796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a23e839-9883-4e5b-b2c2-fbc4c9d249a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074f53cb-1b4c-49ee-840b-e024bf379a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b7ae44-d01f-4faa-a408-45a674dd13cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070b6d98-1c1c-454f-b7a9-837d4ab556c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e2853a-183f-4afc-8875-4ad124dc4c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a8da85-2047-46ea-8e57-4ce3baf12fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09be0d66-fa6a-4c05-8d40-61a57121f0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34817ea-3fd2-4adc-9d75-23ece2886661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d96ed6e-a5e7-4739-b452-ef28390e82ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc8c870-5bb4-4451-9ed4-d0b54128d1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162618a9-4fbb-421f-9704-fd9aedf19f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda323c8-7426-4cc4-ba32-882a6ea25558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dba981-64b2-4985-8507-e9d217296bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751043fa-61fb-40b2-89e9-57507bdf53ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23c41b6-9659-4247-a718-d544b73be54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9794d769-cc99-4d6d-83a8-1708082e8933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.244.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4433ca3a-ab11-47b9-8222-4cd6ad4a8e88", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.65.70.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e59294-8a29-48dc-bf48-4075c6dd1965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb7dea5-1dbc-41c8-a1b8-9d7459df5ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.107.103.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4866ec-744a-408c-8981-5f1ed5694610", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.227.166.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92750639-a17b-4cf0-b564-9b53c829ecd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e4eeed-c3ef-433e-b46c-d5b705c12200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a693694d-2779-4e4f-a844-0343f017e5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd43cf-9d8a-47a5-b14b-e4b51211db93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3224ab-97f8-44f5-9304-3529093d1bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417a424f-709e-485b-a21f-95346cba2ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac78a1ac-94bf-4e6c-9ea5-cafbb3eafe69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.97.47.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636f0462-da22-40c1-971f-796247ebd275", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.35.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93a91ef-e079-4333-a260-8f83467659b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.44.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bebf34a-af31-4791-946d-34d1ad3f4a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6918f5b-6629-45ed-9118-8520f2c13fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfd15e1-1dee-40c0-87ab-f25dc4af0d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.89.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9284a18b-c843-46aa-bc00-6f96266e1fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.123.15.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc63878-5da5-4405-8473-5cdd56a621f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2d2844-45fd-4f74-ac9b-af8cd84531ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69fcb1a-1a1d-4b4f-ba37-d8fae0e0b1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a838149-6e1f-479c-9412-8df34b27f6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413bdc43-7a26-4bda-ab98-642feceefc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ee0026-f007-4601-ad5e-bbb585ced44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b558765-d489-44b7-b999-e421c6c85d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.134.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a244abf9-9fc1-4316-8856-a1f8b539ae7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01806372-b61c-4cba-a52d-07021e3936f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31079c4-7754-448e-ad30-9a4eb005177d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fade19d6-87c3-45d1-ad0c-b3fa908afa2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ccb1a0-5aac-44b3-ba8a-8ef7ef592e37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345504e1-e07f-415d-bd28-7378c1810520", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e341c7-eb95-4c9f-a01c-0b5b9ab0d133", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a8c232-241d-492c-ac81-a34a001212e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac5011a-d2d5-495f-9778-b36e675c83b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d7cd85-2a8b-453c-98e0-026d63f8e561", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7564e3e1-b876-478c-b9d1-bbeb703682ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd13c0d0-be6c-4f35-aef2-d8cac08ebb5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1650c706-75bf-4846-aac1-edcafebcbc0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ce61f2-47c2-4d10-885f-034920a2de50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f428d9ac-99e5-4dc4-a1cd-c77111606799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef72ec4-a833-4699-a7b5-19dcb1fcf487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ed42ec-4335-4769-8725-af392b196ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab09738b-20ff-41af-a1eb-123ffbe808a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc958c5-d1f4-4f3d-9aeb-9811e01e841d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.129.165.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237841a5-74d8-4fe8-9bda-5a895e91fa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.135.73.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f7d999-4171-451f-8b2a-806b1ad3375f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.1.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5348187-a173-455a-9665-d2564df4a29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.6.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce375711-9aeb-405f-89d0-9e6af8029788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7bae90-ab34-4b50-88c7-68bf410c23f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a59e3d0-acac-4a80-957f-f8a0396d8732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa796cb-6dfc-4299-a2dd-501b503f2ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9347f95-daa4-4259-8fd2-beb240ad9335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c1cb45-7802-4477-bc08-5d7b114c3008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cafc56f-d1a1-443d-a425-3415987b89eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8eeb5a-c78f-49d2-9c81-d17c64820869", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.218.248.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e844c3-b3e4-4dae-a311-10e4ff977bf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.230.85.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577d2fd7-8553-490f-96c9-ffc5416895b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.20.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5acf00-446b-4276-8c89-a036e1e57460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97588b88-a4aa-42fd-96e7-5dad404b0f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a3ec34-6083-4594-89b5-a1d89abda067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.111.241.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdccd7b-a2fe-47c3-aa48-d516435875ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.167.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113132fe-7040-4fa9-897e-68a626738ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.153.125.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd293e36-3078-4116-89c2-c654c49bce5e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.108.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c6c1d9-e068-4d4e-a52c-9cddf17463ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.97.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298ff7e1-d96f-4bfa-98fa-87ed51fc8fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e892c9-49e7-4b49-8dc7-5465e1ae9ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f308a3-3c8c-4262-8f3e-292ceb2536ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2338db-8dce-424d-8006-73210276680a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc6cd89-8896-47b3-89fa-65423fb88054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91975db-af8e-41ac-beb6-f827a9027942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731a982e-a6aa-46cb-9f0b-0f85b5d7488f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc3105b-202d-47dd-a14b-01dd1632324d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.22.236.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89211bf4-25dc-4825-b7ff-617bf315ab64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a382177-7fe0-4056-8353-8e71752840e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbd4de6-1ba0-48ee-95da-445b66cf432f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb7ea08-552b-4f49-ae30-3e29c3161181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32914dce-d9e3-42e9-a1c6-7b1554be86f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.251.8.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7398c4-04ed-4017-a681-a796deb6a192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.212.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387273f0-138b-4f34-a050-91956b854ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.101.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1063ab-2d97-4627-81b5-0ac67fed0c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0066b2e-0f6a-4d68-8679-22cca5e98d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd92041-e842-4503-ab98-7ad29034aff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.150.68.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6996b23-01c3-407b-9609-827dcb9febe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf74de46-713d-4177-b17b-936620a541a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6846075-e182-4aaa-98a9-a320b45b1822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.188.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fbd3ee-f8b2-41d2-b198-21f33cf5bb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e539a137-07fb-48fa-973a-9382f4a2c65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3efd269-0c04-4696-a3a4-c21220df3173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74715eeb-887b-4cd8-ab6a-903623c345d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a35e96-6ce0-4442-950b-8aa802da6617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fb69de-a6d1-46c9-bb22-1607dcd00891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65833b6e-eaad-40ad-8262-70243a23cfdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8d6ed8-24b4-4d19-a56e-90c4385ee8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b28a9c-93b8-4a75-bf23-e51c3cd0fd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cebb32-7ec1-4ea3-bf31-449e812fc0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f2ebc-bb71-471c-98a5-ba8066fb346f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb2aa80-01d3-4cbd-b7af-4e14c7660fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe5ecfc-ad84-4469-8c95-43fb067eaf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a379acd-7522-4cd8-a5ab-15fa8cde5e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c56da31-7042-4805-9d1f-64292749fd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3879637b-ea6b-491d-9ee7-8893a41aef2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da45b95-f674-4b73-9520-a708e931d1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d95086-ee80-460b-8add-dcb2ef94cbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b586fe-4a5b-4e0c-9bcc-85134072ae83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431c0e7d-732c-40a8-9a0c-51c75a346ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d114b084-2661-454a-8196-e814f41daca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f572a5-ad5d-4e99-9821-4711610847b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be82854d-fba1-4ecf-97e4-c7956fca3d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb13e97a-cc27-4f97-9f3f-fdc922aae498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e63a41-8bc2-4f5b-a666-ccb6662ec174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a122f8d-5a36-44ae-9de7-515746b8241c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0796098a-0777-45b8-8a57-b4eab5e65e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea82b76-ec52-4ffe-ba8a-9e97f346ae3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862d2b74-f5a9-4323-922c-f2c11b3f863f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796c61cc-0109-4aaf-a556-7daf2b9d68df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80282cca-9ee9-47ee-9e4f-85f974daa847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2350529-5f84-43e9-b2e9-5fdbfc3922ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73340c6f-baae-4d85-8cbe-f88ee22ba18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cf41c3-d807-436e-bd9a-8db50a6a624d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ac9fee-cf6f-4883-be08-4c6f2a585124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7422147-2964-4e4e-8ee4-a6aacb769869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eef6cc-b37b-40e7-8666-ba96edc1b318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f577ca5a-cefe-4dfb-a3f2-244ec27e5209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ade980-2df8-4fb2-ad77-9584acaa522d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26170d9c-89a2-43a7-b05d-ee0fbad68bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b006546c-d4c4-4c18-bd3e-60d93eada953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3c8edc-2ae7-41f6-a4d8-c6c5155c81ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc94ee98-2190-4891-98ff-af41edcbebba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.34.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d863e894-3023-4cb6-b0e1-3751188c0eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e5b6fe-438a-4afe-8637-181272ae7ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.204.122.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1229759-9acd-4509-9ef0-54fba644d081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53ba8ec-5c48-4d70-8abe-be87b1dcfe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f7ae09-dd20-4add-98c8-47fac17b5da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c335cb19-1c20-491e-a971-fb489156fdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.49.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb235426-128b-43b0-9a1f-e6725f6e3e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.66.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0888ec59-5c54-44d8-8ebb-3f24d62bbbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052253cf-1860-4292-81c5-eb40705cbab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb991ee7-d7e5-4be4-b902-a6c33c60759e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fbe630-4be5-4cbc-beb8-a7449eee6da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f968daca-5383-4849-b08d-a76e9e9d91e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db94e98c-b770-4aa8-8050-e027993e235d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93c0ba5-6841-4c25-b441-e864110d0290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45274724-8c1d-4e46-aef0-ebd479736b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c6fa47-8252-464b-90d1-6595ae74fe38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70059ee1-a120-491c-91a7-ad2368d16642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b361f4f4-cbd3-4140-a831-58b38fc16153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f961788-4cc4-43ac-af84-a3b2f44d923d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ce7a92-e549-4630-a503-a121b645be5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919537a7-11f3-4624-8b0b-0946cd70d2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc08494a-1891-427d-b0e8-21a9ba89ce65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5667c4ad-7390-42c4-8de6-f92a94d7cb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95b5aa6-669f-48b1-9bd2-49fd3d82abf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b21d60-7b05-47e7-aca3-a0fcdfe98abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06df9476-6a19-496e-8947-00f41625d661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817f6652-694a-4d9c-8c09-d7520c083022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b202a7a0-9008-43b3-a03a-30a158b35d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e806fa-231d-4060-a68f-f75448a51b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c48b3a-1dc4-46ed-b4a9-37a88d9a570e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9691a2a3-1499-47f3-8212-00e5c75fbd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33892deb-5f6d-474e-924e-ac7c24d9d839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7266a7-4543-4d40-8fce-6e220b16e671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ccd85e-cd1d-4d77-be22-0455df145a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fd5d03-af77-4297-ad14-6697397c4315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c9d8a8-c2fc-4be1-9572-a350ba9fa56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25c266d-08e7-446b-9eb5-314a53a0cd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e65381e-c0fb-4310-afa4-aa20e68eea2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a187b02d-69be-43b2-8867-f041231782c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843e3144-94e8-4ff0-9097-1f53823e0e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93a8e0c-9b52-4662-8621-4be3b76c9b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ddc350-4389-4973-ae20-e820214bbec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453755b3-4df9-4026-a11a-640933363e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da149e2a-382e-4a45-9a52-edfea5568062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a9b2ec-6f5c-42de-ade6-d0bba72f4923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f859f700-3b60-4365-b500-76eb7c1e5298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8edba61-1111-4327-8cce-4a68c87be867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a4027b-b82c-43eb-8882-7e7fd3278f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef525ef6-2d8c-4756-860a-2fec5f3e7966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddc9aa6-5cee-4996-a7b3-6bd7a0b61020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3986df-f2a5-4ad1-8ac2-721a0b16706a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048016da-ceba-4f39-af28-37909605481e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4757ce4-a2fe-4a9a-8820-fde74a8cb4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.14']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997598e1-c6c5-44b8-9f68-4abcbb4b371c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b9ceb1-3b36-446b-9de7-6fa2249585a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bcd50b-3fe7-45fa-ae90-7155117bd10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eed6074-eb27-4032-8656-1ca61f726f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a55272-7b02-42a5-945b-da377e616e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3f13f9-2aa5-4498-8e97-18cad9d60c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ae6289-9246-4f75-8ab4-286fd373e452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1532bb33-4f48-4a1e-b7ba-0fbf6649991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fe35d8-880d-4cd8-8605-f34e3164c804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b04fdaf-a571-445d-baf9-2a97a3162479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86be0efa-d9f1-4d80-a81d-d0ede937ae11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6c1463-8c98-4730-8730-9e84171e98ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8483edd9-e3c9-4890-829a-9922dd1fedd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc2dce3-fd6a-4765-b253-7b11d29c9a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa68f8b-f874-4dbe-b285-d52322c1ce72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7869dff8-6d32-4df7-a8ec-81d932f71b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c53e457-b48c-4d62-a7ae-d81e464f5f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5271a0b7-a3b2-4fd9-8a11-40bf0fd8e3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3377bb84-834f-4515-9895-9ec6ee80f4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009445e9-e64e-49ba-a221-aba8d5dace38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc4d9d0-10f8-4503-a340-b0a6cfe2866b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5acc012-f24c-4811-9396-c3b5d530ea92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8bfcc1-5fde-4344-a4fc-cc23d5e3a178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4185a516-8cc8-41f2-b300-8a46d66fcd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbdf001-0a79-4225-b772-fb26a25ca788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96eb5899-2118-4aa7-bdd1-a7ba74ca5d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029abbec-daeb-47a0-b0c1-9f63e5a5cc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881188d1-6fe2-4fa2-8190-a9786d8dc1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d757fe-f813-4702-9268-59e922e4f474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cc443b-244d-4b8d-a138-0991b0974bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a72018-161c-4e94-b94b-b1df2f206f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.168']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d432bcf-3c76-411e-8369-c2026a21f186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e238753c-4296-4206-84e4-b3a3431284dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34026334-0119-461f-9009-e2d0a051fd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce826ed7-1f1e-492b-bedb-351e44c7b314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66031cd-b110-4c2d-8181-e766294aa055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534fbec3-55c6-4227-88c6-090fc8f1bcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904a9cbc-7808-43c1-b827-9344a3ed33f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79211997-bc45-489e-8e65-cecc2fee4901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d3854b-3691-41d7-83a0-5930290f5b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f607f3-4502-447a-a02b-fde78976c330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78365211-85a0-4aac-a0cb-88aa72f45479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfbb61e-8ee2-4648-afd3-864648918596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fbfa23-0c50-45cd-b80e-4c29cee5eb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cfb185-0bea-4f7b-9344-d45f473672d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd3dc90-4959-4e1d-9c87-d3fed505b036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8496ab-fc0e-4414-86f8-b644d1683848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7010f1-3921-474b-ba62-8d459d5928fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59253f1-8450-4a6f-96e5-c9f3127558ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214e4054-1d55-4035-ab62-4a69b5ef0e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47749d94-5849-4f37-830d-7b59fb616207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2da7e2e-f0b2-44d5-8abe-3019b5f7a4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185ed551-a52e-42d9-916e-a5a3b4906490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a6c8de-5a96-4018-9aa5-cab6146b7ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c4c135-31e0-4d44-9479-3089bce5b7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e3bd32-da71-418a-b8e8-1c5be6c9f1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247ab4e9-7980-4b8a-a25e-7d2d97b9ae87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdd1b8f-2b45-4061-b078-a7c5ec0bd900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6743cc9-96ea-4a02-8646-a39b3ff6fb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed6146d-cb15-4a43-a962-785faca55e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abce5a4d-e663-4b97-a4bb-08deab62bb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eadf0a0-0b27-4912-bff0-66651e9e6550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3150c43f-3953-4ed9-81e8-9130cd681461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94a19fe-bc22-4681-a77b-ff72c1237004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce36354-0644-47cc-88d4-fb79ab49bd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2c0f5e-78e2-46f9-8b8f-5b163000ef4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91edd59-ea93-4009-bb9e-f9a080aa0e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db113301-b9e6-4364-8177-a3f27fb0ea15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0359155-eed9-4aaf-ba84-1edb37ab0ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccf669f-670b-4dc3-acbf-02326cef5d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a8a7b6-6ab8-4316-a6cd-7ce249e4a85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a649de8-3db6-4224-948f-6c457830222b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50ee09d-9062-435d-a41c-063f049d8653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4acdaa-7ee9-4298-9afc-11b0df54938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c7653d-d8fa-48ab-931a-f2c32b053e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a5315c-3287-4047-b81b-857013d1eb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216da3df-0ba0-4adc-b0c7-18f49e63746c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc791f6-d0f2-45a3-b078-287b3e05a17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b4eeb6-0051-4158-b7b1-6e80c557a0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb690aa-033f-4f63-979f-860b79c42741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac31e1a-c0e1-4996-9da7-12b721d90d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79f3d1b-6d57-4be2-b7f1-8c95fbb2fd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2499cbac-7c83-4259-92c6-96eacbffeaf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fc9459-bfa8-449f-9606-ed157907b05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbf220f-9b49-4ff6-9df1-5f81c74598bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5418467d-0b30-4b1e-a008-5873da2d9066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b716a3d-b68e-4e4d-8024-c4a81cfd5533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3327c05f-d970-49d5-94a5-cd65b62f3004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205e183a-bd7a-419e-ae94-bcd56605b24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ba4b50-57dd-4a41-a722-5ff131c47bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6fcc1f-8657-4ea1-9bb7-9ce1df548912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e20847c-6ecc-489a-8e76-8d05b184ae32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e4ae6e-3a78-4dda-8883-ee25b6b6d234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.223']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218e8569-0c9f-4a68-b1fd-3e9bdcdc1c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf41847-ada8-4a2a-9b74-38c61c9c9d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3fdd40-3c2a-42aa-bd97-f3f171118d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed5f5f2-37fa-4e4e-983f-aa29d1c2738f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9858b187-1266-4e39-9b7c-d6d0680c0ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a4de4e-e201-4f20-a067-74f4c4362d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92901bf8-0032-480b-b2f9-a7ae88e9f9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3de72fa-9cdd-453e-a6f7-4faacef40096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10baabb2-e59d-4aba-821a-dbca21eb736e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8918565e-f040-4ec4-a084-9073814afa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62bfb0a-a80e-4341-8c08-81d2988a871e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fca3b9-55b0-484c-9db0-8191efdf5e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29f9527-895b-4774-a556-abc0e44aedf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3f73cd-63cd-443e-ab75-3d3bdd41c772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c20e36-5f01-42ee-80e5-0e681c200aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d045792-0a88-45e2-b0cd-4b286e4a0364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.238']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5652e1d4-e176-4554-9e2a-bbf8a87459f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8697efe-4404-4272-abd6-33550609e7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e0208f-0230-41f9-8758-afbd786f3238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f810c29-6101-4f28-9091-d826220e8691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09389046-048d-45b8-a25e-94e8ce6654bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c10ed7-243a-4d69-9244-c290e9368cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58795b5d-2477-47b1-ad93-e7262282ce35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e051f3-c855-4a2e-a797-47c3465ce9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e672635b-35dd-4c55-81c9-053003f2ae1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b8e222-1c3e-45c3-9603-97a92d44cbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c2a23a-3644-4853-82c5-f707822b3862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7e5eaa-735a-4420-bd76-fb394ba13296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fed6f7-c23c-4df1-b4d3-b007fe0d8d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08511199-3f05-4954-bb93-56c605c175fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de74543a-0fce-42c7-beff-b0aeb5ecf49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14aa4d68-88e8-4002-afb2-b9f68c5bcf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c0072a-4255-4110-8c2c-ffac7473f1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b4a414-3cfb-4845-9146-11b5c7b46867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61ba6fc-d81b-4396-bfb5-385adc626778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebaa318-8a65-4c62-9b9a-a7180849b026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd37cbfe-2806-4dec-b826-14709fb20046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be2c286-91d6-4542-b83c-4383a73367c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3daa2a-a0b2-4c62-b815-ed47decd1c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b378809b-5b9b-4ee2-90fe-2adfd4ce3984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1db398-2742-4ed3-becb-3a62d8328e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e1c66b-4331-4c98-a9bb-7537f945feff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8eb676-1b56-4c6e-a35c-3e614364866b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb04121c-54f0-491d-9e78-5f102e2b2e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa37cc2-0f7a-4a95-9f62-99ed1a3f9f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9686622-a9a0-4357-8317-f65a8c02e9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7ffe8a-7eb5-4f74-9310-e62a3e6d43ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8290b189-3181-4601-9b32-cf8b0279ef4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03a9036-99ec-4ae9-baf5-7cf5adb55c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00757e4b-088e-440e-bb77-ceefdc127e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad98f66-1746-4f71-b670-e50d63b42f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b5014f-4bf8-4ce7-81cf-2b91bb06a603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d4daf6-88b7-48e5-9f58-83c154a863b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8841ba2d-1dbe-4deb-8e99-e05ca4b80be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f98cfd6-7f94-40b4-b5fc-594c848144f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.44']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef57ffc4-8b7c-46e5-a732-4535088e1ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfda24bb-ef50-4801-962b-d523898d219a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf711fec-9536-4710-9a71-1ba000b4fdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93ca9a0-b07c-4c65-baae-935632bb74fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40366a08-d0e7-41f9-9097-e90b51c9f2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58962eb7-3310-4262-b672-dce3f247b364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b80b4c-bfcd-4c1d-afa2-fd1002305adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b5747c-dd9d-443f-9e54-8f28185560a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22171dc2-4853-4ce1-bdbf-963532a106b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab21d30d-a4fd-44a8-aed3-67fc2d3a90cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1336731-6a35-4e49-8cd7-666474430e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76367e9-4295-444a-9175-eb8e8c6d4d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f28b29-4dd6-4981-9dd6-6e738f349504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05f5a52-36c0-42dd-9ab1-7c467e8de526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae09654-6698-4390-b43c-57252c25633e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30bd0ae-0a70-4935-bf69-437f5d4df27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27436b80-f6ba-47fd-a62f-63215c63cd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e2eb1b-d235-45c2-aad8-e1533f556526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79742495-ec98-4bdf-bc1e-dc9ef572622c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec37544c-f3a8-409f-af2d-5ed6e60bfdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4e0828-1224-45af-81f5-87ac9f7e1c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58952573-3f43-4770-9b47-73cdfa1a75cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0003370-be75-4420-a603-e83d749e75a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4feeb980-33bc-4f43-869b-69fe5fd04ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974f8935-a457-4758-b17c-ad71f07842d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a7aeec-7500-466d-bf8e-8d0079973922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d1ffb3-beb7-4d0b-a137-12ca281ce0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b160e011-c004-4811-94b5-fba53ace5e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42370360-429b-440f-bcf9-e5387dcc76b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fa79ec-63bd-4950-81d7-b2ad7117294c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab820854-ff6d-4757-80e5-da38387345e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d772d2-c1c0-40fc-841e-822375916458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bced9122-0146-43c3-ac53-20d3d8fff470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3a0d58-d558-411e-b03e-418cfa212908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db95090-d6f3-4e2e-8b2c-40ba2b6b57a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813724cf-63b5-4ceb-88bd-8c873d9fd5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.78']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2e43df-e3a5-43f4-b4a0-203c11d6e346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a4f9dd-3917-4565-84fa-f01d921b4812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9592e0-d902-4994-82b9-0f750fbc8d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e90f0a2-fe01-4e88-bb42-8c565b25a666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc51ae8b-62f7-4956-afbf-0c1b667b7eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1926eb2-24b6-4da0-b613-e44d9d1616f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af772dd1-7ad8-408a-b502-0491de18f805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d281731-46d2-4cb4-a950-0832494ee73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9ba88d-0886-4e33-b7ab-58d74f47ce9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd44eac-b9b1-47e8-8adb-b15f14b64e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f46dbd-7b83-4ba8-9671-d3dfc082b692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57b5373-c594-4b29-823b-2b81ab838c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998d1edd-4d37-4b0b-8f66-6b3f152990a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487cc18e-04ed-45a2-a168-ea2ada605a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1bc253-4dfb-4023-a81d-bc44b1147260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fb8a7a-ea04-4309-a284-fa4ab6def472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8905737-ecb1-4bcc-95c6-33ea3e1dc97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bae1b4-5376-4bb5-a30f-56438a218e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1a0f9f-dbc5-4a1f-be19-75465d7a6d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef6018e-100d-4ee4-b481-f10b16731476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b129530-4f49-449f-a421-b806ffdad14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62842ef6-155b-4327-b07c-6f5866b1302e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ad6006-59da-47b9-80fa-7040ee964bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.176.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c7654a-3d11-4cad-8f9c-792d9cbf081f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65f3bcf-4b8e-422d-9171-dc8b4c8fa210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.114.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8119f0e-e383-4576-a645-359e94d38778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.228.147.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4800dcf5-5ddd-43fc-8558-bf4b41d679a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44263d5-9091-4e26-92b0-2ab1de155128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b28e18-9307-4f8c-8921-ff57aa91db44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d20160-be0b-4b7e-a122-4350c938af38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1814d64e-dd3e-441a-90c7-5bcdee0a0fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62ec720-c44f-450d-9b5d-230694e92cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8c9ebe-89bb-4f85-b98e-c28d59abad46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5551823-d9f6-4f45-88a5-e134fca37647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033bdc80-5e43-4a56-a3b4-7ba01bccb93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38c2e4a-7194-4f44-82d5-9d2abbc2dc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b75e7a5-65f0-49f0-a8ee-ea13bb268888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a197d3d-0283-4867-89fa-e4c0d5b1dedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03309b2-c08f-4503-8994-17829067104b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e851610c-4eaa-4355-a80b-2b5035fa7d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426f8acb-81fa-4791-9358-b797bccb8353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cac02b-fb93-4697-b6f7-75722c00d86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ece2ac-42de-4260-b972-26c39fefdc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e1fe8e-4d53-471f-87bf-08962a8ccf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6a876a-b3b7-42f1-bef8-17fd1d5398e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b28fced-d86d-4b4a-ba55-ae103b6dc769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a2d464-4381-4f94-a0b5-fc087f768f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19d4505-2138-4df9-9ab0-9866135fa015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4498c85-6067-400c-8efc-98ace8617f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99726431-f1f6-4fb8-8cf5-e08c34e2c076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810f6082-5cd6-49a6-aab2-c4f3a5dc6feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2a8250-eb18-40c0-a7cb-5b59c48d93d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0653bfe2-8323-45dc-90c6-1e7e8ba06cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccdd369-ff17-4a8c-8898-3ee770007f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312bb313-37cb-4d80-96eb-e0768f612ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67377bbb-2254-4ead-b1d8-b3e6e7e0d5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752ecb5a-4d4b-45ac-9725-6492ae7833d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3237e927-8280-43ed-8b29-2cb1022eb103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d716cdb8-c044-4296-bf38-17594340b0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7102103f-da76-4049-958a-e216a36e62ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf35025b-3299-40d1-a1da-f21b376cf16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356c452e-8dd3-4fc5-9d97-efc826829382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252a6657-0f4a-4230-b15a-5fc1bea56c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2799ca5-1be3-45db-9d54-493709c8a9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f467ea-2592-4d09-a6ca-c18da06690f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acee835-b611-4994-88e1-ca7fd213d845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d302dba5-685e-48f1-9b5c-42a72dc7861b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4674bfeb-78b7-43b2-b63c-b7f4f6aa9c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfb25e6-cfde-4094-861e-bdc69411c6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d315457-488f-48e5-a939-e624d836cd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e54751-5110-49d8-8642-ed773f7b2ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f6bd59-e724-4afc-b2f1-cacbc7d4cee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f56ab8f-77e4-4e76-a5ac-0218ee2aa840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee06fa7-99f7-4050-9b25-6e4303f4e45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2335a278-921c-4f89-9a10-4729790c3178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b4e347-d7c5-400a-ab99-93fbd43150f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741d50b6-99d9-49d4-8dc9-b393ef64f916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31210393-54ca-47e3-9089-8b045bf0955d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1093931-e852-45f8-94b3-b37a4ea536f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e049d1f3-c197-42b6-930b-75ed9d4bd666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8307af30-6490-4a7d-946a-6e49460de545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f358a9e-7d81-4d2a-b004-f0038426c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90933be3-a4f4-4e7c-af40-d15bc0a9095a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cdc9de-213c-4bee-9dd0-2d9a05c92486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dce2d0a-53b4-44c5-a570-158705823dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1a316a-8c50-4020-ae38-0b8375d542e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3623652d-8b1d-4e53-8c3c-1c02bf3c3bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f01a60-be20-4f92-806a-6b8c6abfb899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26bb370-a808-423d-abe2-c5a3f13ffaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a8558f-48cf-42ac-830e-1ba3f814b71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad7e5ab-f05a-4e2d-b2a2-eaf9dd8e39bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e74719c-0270-4300-a364-f3cab85ff2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380c2d1e-79db-4698-9b1f-d22bd2205831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e9dce9-7a3e-4130-b7d1-87a2c7a59149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51e64ac-3af8-4518-8beb-b0678e547c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55d37ed-b137-49f7-bed5-f769d18f6532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d988d00c-4ef7-4d02-820e-e7d16e12fec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a28d1b-25b0-4dbc-8a1a-03b7703bbc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40c99c6-f295-44e5-9786-ff771e3569d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c077e0c-ba66-499d-baf9-a97489ad4366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe3be5d-4040-4b02-b461-9ad22a18ae62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1539d6a0-4921-4235-bfaa-bd9d790ae4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cc24ce-c339-4457-9f71-62e4bca2ddc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123e6e02-2d84-4553-a80f-d6f98a0eee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ef0753-7ade-4fd5-8d6b-a889f6099003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7ca858-a3ff-401c-b7df-4a0ed3e9cf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca773ed-26fe-4dc6-b81f-771eedf04c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d708b170-16cb-47c6-a77f-9324011b930f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c892ea-3949-4209-b1ca-6602139c2b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14888f7a-6eca-4c3b-ad33-955a61b302c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97509aa-0883-406a-8fc0-a702991d3ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a062080-fa63-43b7-bf96-1fb09d0cbe91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e6e719-1d14-4d6d-8d6a-eac0754b521a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c882110-cc94-46b3-909b-9ec44ce396f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e2b9e1-9232-40cf-9ce6-47ddbacf57a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378e79e6-eba9-4e9c-83e8-d6bf3e02fdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f091de14-c323-4e99-ad78-7e69b9fe3355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a962cbd-0f39-4e19-9499-3b53ae33b997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30abaa30-e1e4-486c-b25a-be415d7ecb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd93151-382a-41bd-bdaf-66a4b3f4dcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ec6dd6-c466-4e3d-a4a0-6ad7a2c63f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c4bb94-514e-4ac3-85c9-98b2c1f95055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e78a2fe-d2d8-412d-8c1a-f1f82664eb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab808f5f-adf0-400a-9a84-0c28dd0d88f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6499a70f-9e32-4098-8a74-131966bcd4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc9e9d4-15ef-4e66-8167-5fad608fbc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a77d65a-30fa-467a-af5d-b0df9959e9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bba1f6-5af7-4d87-9027-e75700873c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3901ed-1bc4-4eb9-b17a-65f5d5076e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278e2b3a-e2a0-4d77-94ab-49dabfa053bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d7da02-279f-4f14-a25f-7aa54143b4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551b0894-3bbe-4a13-8294-b9193e91d07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b67128-103b-4b4a-9dca-047bd1c6173a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9d04a6-1a77-4117-9d0f-c716cb1942c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90c2ac1-0328-486e-acae-e2a36292fc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8179b2-621a-4d60-bd7d-291e7817631d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ea276f-024d-46a9-89c8-12a0bf65c256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00038b53-120b-47e5-98e5-69ddd1f06c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161ac8f2-92c4-4214-b435-347a98227038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8734c96-9556-416f-9ccd-ff89c78bafe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b21d6eb-37d0-4d5b-8775-14a8bee0cc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a0d05f-b4b9-454d-803b-2cc86bb1e611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aadec0a-17a9-49d3-858a-168bf8ffba01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1807d0ed-5b4f-4bbb-95f7-b6e07fc57373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbcd8bb-f0a2-447d-8409-3c793ba6f1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0ae27b-6cc9-45d8-8f5f-fcacf2979466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3cc3e8-5262-469c-ad06-73ae1068c33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11e6f4-fd0f-42db-9d58-030d84ac98bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6104bb-969d-47a2-a4a5-f48ec6bf7a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f22341-cfd7-4beb-91bc-26cdc1ddc4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47dab48-95d5-4210-9809-895212d7bfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57363de3-09df-4343-bd68-e88ad7dfd9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83ab3b-2449-4ab6-8012-b3af94542d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c4893c-09c0-4fea-994f-8b0dbeecab55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e368d383-c3ee-4626-810b-8f7a70ec0cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f474d-ae51-4f21-9c5f-3c4fb1b225da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcc0e92-14e0-48ac-b6d5-9e261e020041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dcacd7-647c-4218-b16a-b5dcf5d4c0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd555a2-6f23-4c9c-a2e8-dbd4d4bc9b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480e12f6-5585-443b-bdfd-dc4cba61bdf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51248f39-74d1-44b6-84dc-8a5f1657d788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35847cd6-e404-4ece-b30a-0f9db4cd34b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4f00cf-6a4c-4c3f-8bb1-6afe03702f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe742f8-1e0d-41bc-a6a5-b21a7cf78dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda9b813-ef81-4d17-ad3f-a963161c6a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3c9328-b6b1-42f5-ae1d-6bb544250f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f349d03-fb55-4bcd-bd8d-2f1dc32dbc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ba69bc-6258-4897-aaf8-21a7baca8990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec978c7e-4812-413d-8129-d4faa6631e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205dc5a1-2969-4049-bb6c-30a11510c42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dffb09-af74-478d-b495-f8bac5d898ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdd44f3-d872-4daf-924c-56698eea8bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d83b66-47da-4e03-8b60-6099448fabf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fea34c-069a-48ca-a14c-4ff68a31d0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2d9c69-e672-4565-b34c-075490498552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed83df13-c935-4611-9ae9-07540206d042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12264df-66da-4322-b1ad-dafcba6b0e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a24372-1d83-4bdf-97c3-78ff20466c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece9e281-d9bd-43b4-ace5-2808739915dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2439a9-8168-4e45-b544-8cb717e98731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6844cf43-1dcf-47ba-8411-e1403db58324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743d5acf-5890-48b9-a987-0edd17673762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bfc79d-cf1b-4c62-84fa-bdcd07ceb66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142de295-7d8a-41b0-a09c-f8adc5d8050d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.159.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615b8fd0-8eb1-43b4-8a6c-3eadf87a81aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be46d2c0-8b1b-4b94-a9f4-c511986ba86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38b1278-048e-4f08-a27e-f5a4f846fe07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.100']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbdaccc-57a2-4420-a645-f003d7e1e6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0144a214-626e-4982-91c1-c30c6941df52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b2c456-9b05-4eec-b97b-9f610db998c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25635f5-524a-483d-8349-3752554a9846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.104']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b99e9a2-303f-4d19-930c-dd9f305af745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992769b2-f6f3-4d10-a10c-2e893eb2e8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81399617-4a64-4264-85e9-634544b28c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beabce3a-a595-4d49-a156-cc884209cef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.110']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2677032b-9795-4f13-950a-d6b1c8160404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797ff874-69c3-4a53-85ef-f61fe8338bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c885bfd3-1f6b-4763-8906-a4ac0d953c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbb3f40-238e-432f-b02a-8a5fa2c30459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378ff7ca-18a9-4f7f-8ed4-580d2db517a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c666a33-38ca-4bd1-a472-90e953976e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891eca0f-d77f-498d-b98c-199d957559fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8e17b8-c332-45fd-8452-a78fdd9efe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c18c7b-1511-44d6-baac-4cf0cac0402d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.120']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e8a1b8-8330-4cc0-b2f2-429690427b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41be2d29-7ee3-4828-81a1-d3945bd6ebda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15168cbd-d203-44f9-b040-8ea9764a03bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.123']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad7c034-741b-4a15-a778-cc77ac6309a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.124']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71eafe3a-4ab4-4f2c-b60f-3a12680d4788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9572367-fc18-4e47-8a2a-82ca0b856283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35873f61-868f-4d65-a72d-787c86f8f78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4b3354-6437-47f3-98c0-b1295038f986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7f768b-501b-4aff-ba44-837307bf1f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd41caf-153c-49bc-8c3e-be774a5e48fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b477a5ee-6b97-4942-a4b2-c6d894b86393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285a6c99-faac-4078-b8ab-d4e05ce6e374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bef58d-ae2b-4883-8ee7-9e136db142df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d103d06f-6c93-4b32-a467-ab556d437350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.137']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce6f319-5d76-498f-ba0f-6ddf7d0b9103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61b89aa-dbdd-4803-92f8-f0038e728069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ae9043-8d80-447f-9927-05cbc083b536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5ffa26-c085-4016-baa8-e6c729abaefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e281c8ae-cef2-4070-bb16-fcfd5862cd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1951ab-0df5-4ec8-87a1-f5687ac4f029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.149']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d11725-2fd3-43cd-8654-aea63d8c34b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.152']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e310a37-d94a-442a-83c9-b90996e3197e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.154']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b1666d-a924-4447-a258-60160977a8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc40036-7459-43cd-a2f9-b226be33da5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.156']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0679dd4b-ae51-4b12-b8db-6954905f8176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b0597c-93ae-45fc-aec0-a8371c79c69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1fafc0-edda-4693-b46e-18051f955e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909d9e5a-2488-41a6-90ac-f9bdfb98897e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f98dec-1876-4800-9aa8-0a38d1723e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d2b03b-25af-41bc-8fc7-137fcede611e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5aa320-f22e-4414-8518-f7616c7428b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b3e9c2-cf4d-41c3-8d66-6b761f40a2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f44dfff-8764-40a3-8405-c46be35d410a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440e1767-94d4-4621-b94f-0446e5b216b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc05eb9c-1e26-41e7-8557-5801b769efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e48190b-473f-49b8-a8d8-a0010a693f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.169']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baaef07-2c45-40e7-85c6-0a0d7769c1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4993de94-5e89-44ef-8e61-75c7df6732df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559f9dcd-c8bc-4a60-aed8-21feb27123c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7930b4f8-5fe5-4c3a-a5f2-72267ff14235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.172']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb16ca7d-1c21-43a9-a6ce-c0140026ab62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31389661-1840-41b8-badd-4288e756d210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005fdaad-b788-4c88-9e54-658e03d8ae6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883e3714-7e29-44e3-9a4d-3e8248ad5927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e0b491-1ffc-4faf-9e41-d21c6dbf6bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261d1983-1551-4998-8a02-518dd56e96d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb8e294-7cdf-448c-9404-ddd66bb39f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9df32a-a52a-400b-96d1-ad2a0e248469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.185']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4a0f14-0866-4702-9c3e-c6df820109da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b0d0e1-dc8f-4843-a2e4-226f61a096cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d4e692-f722-413c-b003-5f36bdc6e096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa912dd7-6e29-40be-b4f7-ddc23ded06a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.189']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01ebc55-1805-4b3d-9db9-84d2ed224d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2278b1af-5d9e-4d1c-b7ce-911f059e296b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.190']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96263844-3af5-44f8-94af-b1881ed2c2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775e2c46-91dc-433a-8842-bb8d724601ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d6cb8c-e0f4-48af-b69b-a00f9edda5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8324b076-b299-4d98-a708-f007c15379f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad924f1b-beff-4e34-9440-449d485ff75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd889c4-818e-4278-9406-6cad3e1635b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbb2324-15bc-4731-9e53-1038f421dc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dd5e76-61df-428a-9cb5-48dd9993961f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cabcf0a-e192-423b-b8e0-ad75f9d9406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fdf2ae-11a3-40b7-ac5b-c1940f1bb0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eac2a9f-fcdc-4afb-819f-aa2e63ba8d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031dd53e-cac9-4e42-805d-cf437913f7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.203']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba253d1-bd02-4be2-8d3e-ae193799d2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec7284d-f877-4b9c-badb-20fdad6a8d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c6aeb5-e6e5-4223-a824-103f17195092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0292580a-29fb-430f-8d36-17b427b2fe17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24762a0-c91c-491e-9b67-cb8be97eb9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feddd80-ef61-4ddd-a7fe-99fd99d9fd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.21']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabdd660-0e07-4a19-bbc1-0ec31d7a060c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1296b6f6-4159-4589-b7ee-ca153584c382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1ac0d9-df13-4c27-b907-d7ed2f91fdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc68c3ad-c61b-41dc-9ece-eef3cc88b543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e06b07-35b0-4929-8d10-ae3180f50bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c7d357-4f2b-4dbc-a319-837f3655a748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0edf34-7f93-46f3-afde-71e37c9b4669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a92dea9-f655-4244-87ca-0826550a8f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd9e3f6-db35-4782-999b-153c6c51dce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2136f4e9-ff5b-4253-8e81-8c3e6b77a70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4892932c-25d8-4fda-9248-40e5fd559812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ac43ff-f6e0-4ead-b700-747f098a6ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.226']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1d4f57-8b46-41dc-966f-bd698cf57372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.227']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d02a08-965a-4554-bfe2-02142c2f09b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232901e3-fa8c-4c73-ab50-a9c0646cd1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.23']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bcc9fe-1a4a-460a-a443-224e8a35ec6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501ed6d9-4b17-4d2f-8171-465b45f21d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a773fc-ce5e-46f2-895d-a11927b04631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607f7d69-8e50-4467-8d43-92a54a13a7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd771a06-5ceb-48e3-9e53-4b1f4a9ba06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d13593-8f4a-4c7b-a45e-6059ab7d1c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2823878f-c8ff-4e52-bf21-601403491ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44d0245-edc2-47d9-a89c-5e0bc0d896ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.239']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16babf6-f6b7-4c30-962d-dada5d28961c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa90180d-c0b3-4970-adcc-aa173bd4dd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62077b2-9dfd-4e0a-87b8-45099e61a42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56ee9db-30d1-408d-b22b-0f0bc8527589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37965e49-cf92-4ea2-9db3-672f99048832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac2ff88-4625-4fcd-b201-92dd4563d0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.246']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ba21fe-71c1-478f-82be-0f5104b064d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.247']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006980e8-3106-4f24-b8d4-66fd7452cb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a84d93b-23cf-4718-b816-d04f42610d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d579c4f-2018-4bac-9b47-04fab4d7cc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3824bee7-3f38-4522-accb-3b31cc4488e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcedd253-3dfa-47ae-afd2-d3ae6b4e39a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6497e5-0d7b-44cd-9b2e-58ba8abe46fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.27']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973f8370-d5b4-49ea-ae90-91d92d5e04b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.28']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9508c1e-0c54-436f-856f-ed21107a3989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa98c7d3-09df-4451-8211-8a7d013ff135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa012ec-f0f6-4527-8c49-cf00ddb085b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fbe434-6cce-4ff4-b274-e296f048bb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.32']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d594b97-8795-4fee-9dac-a8dfc6dca28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.33']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52a637c-b28e-4211-8dd0-63a4f947c546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2ebb51-39a0-4db4-92be-96537cd06e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da66ee7-10ab-4741-a741-ab87471409eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e494a88-8894-4c28-bd66-13e34f2f4a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e3950f-1aa7-4a87-8f15-8e0363fb9d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b735e3-502d-4d74-a8d9-5158e82371ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82c2f47-2da0-475d-8051-42ccbe4b90f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.40']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6b7224-ae33-4e1b-a139-5fa19dfb642b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe63097f-d4e6-4382-952f-14abfee8f0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.47']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9479ae-d4c2-4446-9bf2-3886711707a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e0d452-4c0e-4321-9329-2ec21e70c8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8898a2b8-c364-4638-83f7-45bd71be5441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.50']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca905f0-6244-4d3c-9649-334ee310b0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ecf881-26d1-4489-ac18-72a0c8d6ca20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb8ef4e-f92f-4f68-ac2d-200cb9cb8ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06783fe-76d3-4b46-a22b-f62416868a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c00e48d-1b97-43e5-8f58-54ecc0e69cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f04116-44f0-4843-b632-b7cc4bb8543c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8df852-8df6-4545-be25-8041adaa1b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0d2713-5527-4aaa-8b46-d2006c90957f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e665806-9105-423d-9b3d-e26213d8b19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.61']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4adcaaf-8357-438a-a89c-878c38205287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7df147-4f4f-405b-add6-4a8be3b0cca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ec5a73-3689-4384-9aa2-99715e9b65e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb5aa49-0363-45f0-b5e5-56ad5d360865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.66']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfa35ba-4d80-47a3-b6cb-0b197b65815a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bc7b43-db25-45ab-9d91-fbc29ba869bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a89e665-a0dd-4555-bf26-7af68a37d8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39336b8a-bcad-4c0f-957d-fb3977e8d370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eeafe9-39da-4c5d-9ceb-0c1ac4c722c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b462b08c-76b5-47bc-a2fe-3068de4b2812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dacb63-d657-40fe-8ae9-ed954814ab6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b1b451-69fc-48fc-8d71-5064df16ef79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.75']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6158f21e-0bdd-40b5-a3a4-b06c38db9e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0caa7cb6-3edf-491c-900f-b4d355b635b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7a13e0-dfc1-4f40-ad60-2dc28e772ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb53506-fccd-455b-bdbb-06105cc23aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd189907-2b08-4caa-bcf9-d3a17605baeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14aa2dbc-518c-4b1b-a0bd-888bbfdcc65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e31f61-03af-43c3-8417-f167f5e0291f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.84']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda41919-bf18-4d7f-8f41-5af9470864bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.85']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63814ef2-eabe-41a1-9e0f-4fdb1794bce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9ad7bf-84b0-48f0-a289-5f178fd7b53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32abb05b-3477-455f-8e9e-4957873ebb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.90']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693da992-3010-4cce-b9ac-ee27b90514be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.91']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d8fcbe-c8f7-45b5-a7e5-c01b2abae7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561b5059-8223-4928-9e01-9fed7a47cbad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7b94bd-f76e-4d4d-b3dd-196439c47dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1cb0e8-3da5-46d7-9056-8f2d1fb50709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9422592-0da4-45f7-a04e-219a03e807b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf53b18-d224-4ead-be84-34beb2742dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.28.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a1c4f7-19cb-4308-8503-7a0c9bebebdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.246.14.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d41fc4-f44a-4a3f-ba18-6feedeb5b95e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.80.174.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5565829f-1936-4c4a-842a-e8a23af7275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.122.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cb5de3-0eb4-4004-8010-6bfcb9a8df52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a38bbe-bd19-4c7e-a411-7c883ae260b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff49149-8dfd-43f4-aad5-56263f63e8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc87178-2477-43f7-b1ef-95d4b129d858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.34']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b951ba18-28a2-4d46-a7c0-8c99d6709132", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18e5d2e-6249-428b-b5fa-3c51c6bc3187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140e7fbc-695e-491d-b78b-f8ff7e64d428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b2d4bc-be31-4a8a-9f61-ebf9ed6c5358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.44.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e44be68-f618-4825-bcf7-588bc46cb446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.44.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3402cc17-6c20-44e3-a6a0-66a18c96712f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.45.129']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3fb164-88f8-45c7-a83c-1ebbbdf113a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.45.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf69ff9-1d7f-4601-be24-ad23b2a19b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.45.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681cc874-57d7-4c52-a3c2-f47f84f7f2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.45.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55859d8f-d176-4ce6-af21-27848e5f4aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.46.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff37c5c8-8abc-4e7f-9de5-9d887cf28571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.46.177']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e715cc3b-f79d-438f-87b7-fd5735b561d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.46.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c768285-0ad8-4130-866c-24f656ef1981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.46.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955f353a-5efa-4e5e-b7ac-ee3c000702e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.47.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de8bf19-fb7f-4bda-b0c2-87f558ac2073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.47.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cdf9c8-1bea-4a94-bb5d-5178ba5dd016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.47.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce2c18d-f537-4637-aade-ea7b4ef80c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.47.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e83a53-f99b-4fed-80bb-b7a8d34123d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.112.47.8']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fc3d5c-a061-43fd-a386-308eefcf402c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eef428-f396-477b-adf8-1541262813cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50ee870-a00a-4b2b-8398-65cdce94e8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.96']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5dac26-17ec-4d0d-9ce1-fa732210a2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a866a3-15bc-4b83-89b5-183c5b747657", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30e9900-2d62-4777-b066-3adbf9d53f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.23.128']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00be6424-362e-4ee6-857a-078fabd37219", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.61.48']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53dcd50-bf42-4c22-a574-c487de7f09be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.62.241.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c6fa1d-bc5d-4bff-990f-6a308c686fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d7c3a9-53b7-44f9-99e2-ab4004c0340c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.114.63.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf557f1-4333-4adf-b957-de77397ab3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e97902-242f-49e5-9f94-121371bf13e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca43345d-bfb0-4248-ad0d-6a6733ac6fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605b7bf3-6493-43cd-a8b5-693cbd417389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8ee752-58f3-408b-9e83-342b95c0cab2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.171.178.215']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0bb259-c36f-4419-a14b-fd139eac23c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ebe001-6485-4147-954f-b04442ccf3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce06b35-1235-4eca-903a-e1d8b40326b7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.77.187.140']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17fc368-e8ea-4c34-9bcc-2a9b17a6a16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.217']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e06d414-97e1-4c25-9dee-63a99006ce1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de86af35-4d1c-46f5-ab65-6ce5326cbd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a313e69f-2cf8-4308-9e8b-e738be3353ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.47.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9670760c-f26b-4865-a64a-18ce21d83a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.173.97.220']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84575b40-4ad5-4b95-8690-84a6487e545b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.198.1.94']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f1b5c7-8b03-4f01-842c-d93118eb363b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ffac6f-f836-49a4-bb43-2d0540c7338b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27374925-4f4b-4493-834f-1954e93cc339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6212a661-5a4e-479d-9eeb-372a9566c955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e83ee5-b5e4-421c-a31d-f1e3220c8f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.202']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7f2283-6796-4eb4-94a4-bea244165022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802e928e-4774-41a2-bc6e-d3958b0c979b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fdddba-e26e-465d-8613-fc9dfe5231c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.254']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7dfe3e-e0fa-4ec8-9a81-dd93c6cbcbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9f3e04-c5b8-404e-a024-8a7215e71412", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.14.19']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711dfc4a-a30f-42e1-b5c3-a5aec834eb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d9fd6b-ad6d-4b4a-ad0b-8f3485d94ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70063e3-6c83-4160-9062-ac21f36aa48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cb8a71-f8cc-4d45-bd06-5a2ba60e2223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.46.163.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122c69c5-e7b9-4e93-936a-93df6f351d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0428fb92-a061-4860-9ac4-cadc7821e852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.103.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53049226-d031-4237-886c-04cd49d90bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.0.206.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21424f82-a084-47f5-9bb6-a3590588c19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.105.68.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73c2a7-00a4-486e-8967-0fdc4393ac61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6659d2e2-1dac-483e-9cba-d98dc775a18e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79f7e03-dad5-4f03-af0c-4439ec7050c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c4e4e5-4828-4c0e-853d-615da6eb907e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef56965-4037-47c4-b3b7-119617e9666f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.142']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd947420-e179-4b7b-a030-814e2803056f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9328cf9-c2d7-467a-9c2c-9c8ec7ef683d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.167']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9677ba4a-354c-4bec-be4e-e521b200cfcb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50007d40-477b-460b-8a2f-6ff03f94de63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.191']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6a1314-c8e6-4a74-aed2-72a28142b990", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2363ddff-d785-46dd-9228-7ded5f775605", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.210']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c73cf3-f721-455b-92cb-bdee9cb08c4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2bbea5-5f7c-489f-bc2d-7de65d6d8336", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.252']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a696cee-d02f-47d1-8849-1b0a115e5eb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c017bf04-24d4-4e8a-ba66-fc8cbbb61968", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85ad4e7-74cd-4201-b167-e6e7075e1d6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25031020-81a9-4fed-a5c4-d7660c7dff8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2318ba96-7273-427c-abe1-d5765000f89f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f017aad-a0a0-43f3-8174-1e4783706627", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.230.218']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f029ce-43bb-48a4-b65b-d9987f2b7e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba07494-a4d6-4a9b-8c81-d3d93c13209b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.165.68.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d14f8f8-243e-4698-bc10-ec00569cce68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.114.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646c61c1-0e53-44ff-bd4f-5088a363cbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.188.91.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f414cbb-18ce-4939-b8a7-56d9dc5216b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e590fb6-b6ab-485a-8551-8d487f63e99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef539707-1a48-49b0-bfff-ac573a9abc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.32.11']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfb0488-3aa8-4808-a80a-aa68a6ad1ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.59.142.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070b7366-8e38-4c7c-9c87-d8074d3a28b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.71.127.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbf2566-df44-43cd-b177-dc1e3acaa847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.1']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39beac3-7b22-4afc-ac82-972019ff563e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.10']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3210cc9-8625-44e5-914d-3041d3d83984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.101']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70cb4f5-8f71-4694-9479-51b899562da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.102']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c405ce07-6f80-43ce-80c7-ba6eee521a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.103']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bf5cbb-b7a8-4dda-a30d-b35d5174a19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.105']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9ee11d-3c5b-4c0f-b32f-cd5811ab3e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.106']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0cd0cb-2e1e-4c65-867a-6cb3511260c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.108']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ebe4a9-b89f-483e-9d43-60968f64c8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.112']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e069ed-a18c-46e7-a948-04e9914d7e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125653dd-cec6-4dd3-8d25-141eaf7ba64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.114']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648565cb-e8d6-4ae5-af4a-2bbaeaf5b8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f09a3b7-057d-4e11-86eb-55067686ccc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.116']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316617b9-917c-4291-8d55-b10270acc19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.117']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04054f61-4cb4-4ca0-ad9a-1d2beea5c6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.118']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd9532a-0492-4116-bcaa-0e87d4abf9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.119']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d47b68-6938-4992-b90a-b13a0dcf1b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.12']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98505eba-300c-4bf7-b0c3-ba5ce41ceb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.121']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbcf445-4991-411c-993f-7a7e4c317af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.122']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d6cf5e-ec52-4064-99a5-6dfa1f0e359c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.125']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c454865-3190-43ce-8644-3b4d10c21da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.126']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b082c67-9def-413b-9bb7-4eda1c9a3414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5332a7-1d06-4da2-ba2f-c064c3d2ecdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.130']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b089926-dced-4e53-84f2-f3c3079a8560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.131']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960d1820-2da8-48b1-bc0a-8901d4f78695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.132']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05703e9a-b512-42f5-b9ab-d04027da9075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.133']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74e530c-98d1-4c9e-bd8d-cabfb2d6d2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.135']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee26335-deaf-47ee-a1c3-2d971d437860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.136']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbe77ed-6e71-4373-81b0-84ec42f29c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.138']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615df441-20d7-4183-8b43-85b18200ec32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.139']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6c490b-37af-4bda-914c-a3db0621f471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.144']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b649cb-e8e9-4597-8b24-b40ed17449a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.145']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e354c246-f810-475e-87e3-940673401268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.147']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32393f7b-8731-4936-96a5-e76f4aa33f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.148']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69771391-1f6a-4fba-88ba-90fa5bb7c4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0fad1c-f5c3-476a-ab70-96700bc4104e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.151']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72da00e4-6697-4b54-acde-245942133830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.155']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef49109-3f7b-4499-bac0-0aaa35612301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e356e3f-c527-41d0-b294-c2fa513add6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.158']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f82831-84b8-427d-9f89-aaa78877a450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.159']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f6f1f9-0d93-4784-9dbd-d987ca6658e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.16']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5806ecf0-e6f2-42b0-a98e-35f5e0d2616e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.160']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cea379f-54ad-48e7-b462-a7ca3879479c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdca0c5-299b-40fd-b8b2-52ebdce86211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.163']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458d5dab-ca9f-4528-b1b3-80f51a89e037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.164']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18b4b12-6017-481e-ab5a-7d97602e31bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.165']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1764a16-fea9-44b0-a0f8-15cd17fad8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.166']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fdbf4f-96af-4194-a76f-d71a1235f784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.17']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd947f9a-aea4-42b9-b07e-f0439550090b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe145a0f-1d7f-491a-800c-dcc88838b08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.171']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c23d512-02e0-4888-99a9-9fb3fa1ad9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.173']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa80f9a8-ed39-4814-9dcd-71f219a6ca7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.174']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d726bdba-09cc-4d3b-8a02-1a607bd9af1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.175']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d416635e-5bf9-4711-92e4-38c24fc1fabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c02240-be15-48b7-affe-ab9ca67a6add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.178']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae30c4cc-4f4b-4e31-8a36-fb406f3b9bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.179']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed4a0da-1b07-4cf2-979b-de2d61044fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62954c8-6091-4627-8520-a61022621df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.180']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571e4e05-7c6a-4f2d-9544-f13035a61550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.181']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efc4ef3-c0e4-46bc-ae4b-3a93e5fefd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.182']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebcf0d9-b15e-4dff-9dfd-22d6426bd2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f87c5d3-15b5-465b-bffc-e04628a983ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.184']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271bf5c9-8e63-4076-8314-a8cc2fdcae3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.186']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9503bde-88e6-45e5-abf4-7fb42bbeb103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353a6182-6d17-4d82-85ed-21a2b0f6c76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.188']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7ddc4f-6aee-48e2-8f0a-17339dd508fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.192']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65b34fe-1e8f-46a2-9ed5-5120eaae26f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.193']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a437a2-543e-41b2-97fa-d0406a2ce458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.194']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36524ad-9f02-4cb8-a0d9-7eff5b9de384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.195']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9602243-0378-4086-b420-d2a1b3bbbae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.196']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e74365d-5842-450c-b33a-82bf9f8c5502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.197']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cce76d-93f7-4bc5-a9e5-29e5b772b785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8e4f7c-7d62-4e47-9b91-3ecadedf9ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.199']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86a7d1e-1f50-4a44-a348-477257d89560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.2']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f994c0-fe7e-4b1f-9558-28ad6d18d89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.20']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e0e482-7481-40b2-a8b5-a37d7f0da811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.200']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c12c98c-d8be-45d3-a9c1-b9adc0909316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.201']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a3e4c0-bc4f-4022-a098-fb462520ae14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.204']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c739e28-c9c7-4e5b-8e3e-70b0c54ca0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.205']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2aa480-833b-4c61-9271-158857b8088e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.206']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a39d87a-29a5-4bb4-92d6-95b9e9e3b516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.207']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609b580e-45d9-4ba1-b073-6525243e4407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2b6da2-8a3c-4a06-b17a-68657c72422e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.211']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331fc7ab-1832-4c16-9af9-9c3cd986e817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.212']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75124b22-deb0-44fd-9109-3635112acae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.214']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de9b7aa-960a-48d0-9475-eb416089d72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.216']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf58d92e-19fa-4d08-b5a1-bad5914f646c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.219']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b60ddc-0873-43a0-ab74-c7a7e41357c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a72626e-3737-4918-9a8e-93d55bc7c807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.221']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a214ea-cbe4-4404-82d0-618849210cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.222']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1af8c86-ca1c-4552-a07c-8a7733cac7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.224']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2397ff-b5c2-4db7-b18a-053a99eec5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.225']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2277db09-2ef0-4ff1-b888-fd56ac79842c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.228']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3a2cb3-c25b-4861-8df1-95c718b205c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.229']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a0ae1e-d98a-4881-a559-59be688548f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.230']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f727b-ee9f-4f34-8f48-0aa9a8317004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.231']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5de2f24-eff3-4c0a-852c-8ddffd1dfd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.232']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5143d54b-bef5-4eaf-b036-2cf8d39ffbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.233']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea1c77e-7f48-4199-b0c4-485421de06ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.234']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c013673-903e-4b21-b789-effb8f353c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05d839d-d146-41f7-98b9-578009b0cd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.236']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743153eb-049a-4b1b-a2aa-ac887c2531c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.237']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdec8fc6-b26f-4fb0-8024-598d7babbc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.24']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143b5896-2ef5-4050-8c73-a45b9e34d37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.240']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448aadc1-0990-4fc7-b2e5-6603d11b6644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.241']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a50d602-bf46-4b90-beee-b52250fd27ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.242']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9e58e6-cab2-4a7c-8427-b81bdbbe7074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.243']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5290ccf-9144-4c07-8933-83ea491df785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.244']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99301cd4-7683-47c6-b280-519711317133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d581ba-39a9-4a94-9800-25a2f560b426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.248']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1322f0-8b21-4b6d-bb52-e1f4d0633920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.249']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e595d89-ad55-40bc-a531-a271bbc639b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.25']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef758f28-de4f-4c52-8dc9-f6d9e4481849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.250']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7e07e8-7e5c-4ec9-94c2-cd9ca0bbaeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.251']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803f289a-b4e5-4fd8-8359-d24bf7e082a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9511443-78a4-42a0-bad1-396f566342e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.26']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec45e979-3f9b-40a8-8ffe-dcf024335e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.3']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab024892-5be8-4ef2-882b-06652f5a4fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.30']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33265739-1d26-45d5-9321-da50d68771b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.35']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e4678f-0dda-4ddc-9cdc-bf914d671860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.36']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216ff71c-8901-4450-a4ad-1a56adb6d902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.37']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dcc9a1-5eb9-4789-a7c6-1d4e25f98c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.38']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677f157e-e8c4-4d3e-83ee-73d4d48c28eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.4']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9537bc2-1143-401c-8ee9-ed7dd946f1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.41']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15af9ed-5e8f-4a76-a410-ad1a339db222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.42']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee42dc34-5e80-4f27-b14e-252aaba9406e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.43']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa78736-df07-446e-9369-3da281d526a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.46']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2f90d9-05b8-4c2c-884d-1182c858f5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.49']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffc63e4-92e3-458d-9fea-3d6a5ff0abab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.5']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63354a76-1c70-4477-8d6e-8a42ad642daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.52']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c70154-7f6b-4dcc-9c87-83355c35267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.53']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1638f1d-c5b8-4d60-b7c8-21c9b4825c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307ad346-ee1e-426f-bff4-7cacef68c196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.55']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1437f6f9-38e5-46f0-ade5-c5d558137be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.56']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb8f43f-3929-454d-ab13-2308446e4271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.57']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81ee463-af03-4ca6-be33-d7ab81ae9fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.58']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc681aff-5563-4e2a-8a73-e7bbd9d1fcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.6']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07258d7-9fb8-42d7-b282-8fe34e532505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.60']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334b7751-7aa0-4d9f-aec5-3823f324d134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.62']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8648d8dd-a223-4d53-b59d-5ee57bfe7a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.63']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06dab67-f9fe-48c9-b302-67094ca5f4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.65']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29b92e8-2ac0-41bd-8898-b525f28f7fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.67']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b305b6-ed7a-4c24-b7fb-214ec045eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.68']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78486e97-ea3c-4588-9b50-a612149f5722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.69']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d0eb73-863b-4ab5-a9fb-f2870a035538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.7']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6250056-c7bb-42e3-b4d3-eddd263a792d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.70']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87702c69-907e-4357-a8d0-d404a885e0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.71']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d1ca98-6e22-4940-b4e6-19ad58a44b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f48f6c-94ce-4d86-aa19-87310a856a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.73']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14938a46-85b5-49ed-a95d-5427d2d995f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.74']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a325f2b8-6212-4637-b856-c174937fb3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.76']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411cb5f7-3ac5-4c67-8005-585f2f77b973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.77']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f971d22-2567-403c-884f-fd8956b6e31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.79']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b646974e-fd44-4966-8124-c2d7261a612a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.80']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89add66b-065c-4835-8075-3194e28141b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.81']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723359b4-f398-4d83-a908-62a1357ecac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.82']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292d0a4f-f346-47ff-8788-14df81a719ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.83']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93577ea7-5870-4e3f-afda-71dbbec594d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.86']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690b02bd-d70a-49e9-b122-834dfc07d3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.87']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53da959-2e39-4dab-b512-76f6ba58d9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.88']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7279d099-369c-4071-a738-5570b257a6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.89']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e608d1a-4411-4505-9e40-96462dacf391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.9']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf30fbed-ee2f-44ad-9c36-1fdeecac2996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.92']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675fbcc9-3a03-42d1-bc9e-5a06327c82ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.93']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d547954-ffe8-4d65-80f4-fb0add0896ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.95']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe5708c-7566-4fb8-8046-5a0ad15cc095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59788c03-9d2b-42e4-8e08-bd24ee408566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.98']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6322d9c6-156e-493c-8b9c-3f06ca8dd374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.81.116.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6b67f6-c1cb-421a-8a6f-facacf005cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.84.1.54']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8d3e99-bbaf-4641-8636-7d56e0a65a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6141e6a7-55d6-4d92-9504-367a7b287192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.127']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76683142-08eb-45cc-a916-91056d93d237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.176']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd84082f-fd95-4214-867d-22acc867665d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.170']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f795c6ac-5c65-411b-aa6c-adbf5aa51aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.18']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf995f0-27ad-4311-ad9d-02d06b120757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.183']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ebdd49-35ac-482d-80cf-c22caa7a3c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.198']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d1c5a5-3b6d-4e98-b42e-39e279057dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.209']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1104fc-0472-482f-898c-3bf06bb25139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb0c955-995c-43c7-83f3-b672ba554a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.31']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8170f0c7-e1a0-4419-aab0-0bb4d2b4b631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94cf907-786b-43d6-bfd1-d8f3f06fffe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.72']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110d0b9b-5c7c-4459-99b6-ba3cb6bf5437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.176.153']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ea86a2-7eda-49f5-8fbb-f36305926cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.180.162']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55defe78-f405-48a6-a756-88cc5ceb8537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.2.74.208']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc5d85e-a1e7-4c73-a420-4999b8131aae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.72.35.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f58816-abb2-4c43-9486-f111eacf3aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.51']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8591a7-3de8-4027-8977-7330c2cf1ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.99']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad67404-53f6-4b8b-9fa2-2d0d76bb1605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9b60be-7477-4b0d-af1b-ea54b6287b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d251d6-2300-403c-8f35-ac1edf785da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.64']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97833f9-9a5a-44d5-b8f5-8649889295bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.187']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e13565-02e6-4bdd-bd84-923d86f51061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.161']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2879ff5-dbe7-41e6-876c-30c182ff312a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4b8a58-080a-4510-a3b4-9752d199ba51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.101.34.22']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1b10a0-2817-4250-9ffc-3e2e47545d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.113']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d7bad0-2cfb-4bdd-ac7d-b187728fcfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.115']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81c22d0-e16a-4ae8-be0f-6ee778ce738b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.39']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628a7eae-d2e2-4c76-978c-3d1c5254e37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.159.234.134']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb466c66-52c0-4cb5-853e-931bf418641e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.18.75.253']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb4a9ad-0329-43bc-8605-0cd3fec264df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.30.235']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a69ca7e-4a68-45cb-94be-cac3e6994586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.53.157']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe01863-1d1d-4673-93aa-11d6976ac5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.39.245']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b52a67-5fbf-4bd8-baac-244c7dcc9299", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.92.204.97']", "pattern_type": "stix", "valid_from": "2026-06-10T00:00:00.000Z", "valid_until": "2026-07-10T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3334ca2a-955a-46b3-99ff-55a1ad1bb836", "sighting_of_ref": "indicator--5395f62c-6ac5-4d8a-940b-2b66cd5d30af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceb6082-9fd8-436b-abb6-85adf7b1bf96", "sighting_of_ref": "indicator--6e34da96-1f81-4975-b6c0-58c0a8ffc7f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092a6441-3c06-4c44-8f42-455d3c043230", "sighting_of_ref": "indicator--d09319c5-4249-409d-8662-3be680d9f2b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45af88a4-77b4-49e4-b556-4b76ea9ffbc5", "sighting_of_ref": "indicator--b546f0d8-f32b-4943-83c3-9f5aaf0f0700", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f453c382-91b3-4275-80fe-7d2e9885f4fb", "sighting_of_ref": "indicator--f07be617-52b7-4a3a-9e42-5b429b1929bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3e846a-d834-4df5-8c4c-a8887d09b888", "sighting_of_ref": "indicator--1488dbd7-214a-4514-8f84-c3c6d24ccfee", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f810cf4-583e-4df0-9975-884cdfae83bb", "sighting_of_ref": "indicator--0c7c7008-ecbc-4533-b801-5f47c2c9c0bd", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a76356-bf02-4298-80da-9209e2676a6c", "sighting_of_ref": "indicator--5764f1b2-76ce-410b-8675-ad273076d274", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c4909a-88de-40b7-80c7-451e0ba1cc21", "sighting_of_ref": "indicator--6468c36b-387c-4af4-83c8-c513077904b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccc9fb9-f58b-4c8b-a0c2-b941a7dae4ba", "sighting_of_ref": "indicator--6f3eb750-c55b-413a-96d2-f9661ad42ce9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0144378e-8bd1-4256-accb-160bc27069cc", "sighting_of_ref": "indicator--fc6afec6-236b-42fa-bd70-552127c34cf0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d558c5-bb15-4bf2-b1b6-aed9cf56437a", "sighting_of_ref": "indicator--cf6d6b66-c6f8-41fb-80df-70f3af23ca02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef66a13-cd3f-4f73-a6b2-2556ca15753e", "sighting_of_ref": "indicator--f1dea09a-39f2-4e07-9cda-ed1959edb8dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407abe84-1a17-458f-a1e5-dc1d3aefb1ba", "sighting_of_ref": "indicator--a0f9c788-6266-403a-91ce-ef9cdf1d735e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024bbc59-5ee6-42bb-84c9-02786e3fc97f", "sighting_of_ref": "indicator--27772405-9a9c-4206-99cd-69d00a689157", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0f38ea-45d6-417e-8988-3d5d38621835", "sighting_of_ref": "indicator--9ee45894-6a54-47f9-a075-3004b63e509b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679ef7af-6231-4ff2-8a99-e70b26a15fda", "sighting_of_ref": "indicator--d8a9d7eb-9cd5-47ba-b065-a955109ece10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075e48c6-9c76-4366-8b9b-6c767a970a48", "sighting_of_ref": "indicator--58d6e32c-5273-4738-bb28-b131daad6080", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99793ee8-905e-4b7a-9c89-3d1569088512", "sighting_of_ref": "indicator--b508c54c-00f9-4df9-9d57-6a90e266741d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538b71f-768f-4c57-936b-cac671c0f359", "sighting_of_ref": "indicator--fc6ba252-6d42-46b8-a634-de9df4b87c14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1963f22-8f60-4ed0-a77e-70917a7ef2d8", "sighting_of_ref": "indicator--fc6ba252-6d42-46b8-a634-de9df4b87c14", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce362f3-052e-49ea-b7a0-6e7feb9ea388", "sighting_of_ref": "indicator--fc6ba252-6d42-46b8-a634-de9df4b87c14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72f1739-2683-4061-89c4-3ac64018c57a", "sighting_of_ref": "indicator--9610095d-b16d-4d71-90b5-665ee8454641", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0994327b-618c-4273-8763-3da8b6dd9de3", "sighting_of_ref": "indicator--bc05ca7a-8f74-4273-8d64-651e28079062", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd80acb-bc52-4bc2-9de2-14df35f32c5d", "sighting_of_ref": "indicator--bc05ca7a-8f74-4273-8d64-651e28079062", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cddbc5-ea8b-45c6-97e9-f8ad94bbcbdf", "sighting_of_ref": "indicator--8964465e-ec78-42db-8331-12b23d29565d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd00766-e8dc-4062-a442-0d2bba18a2e2", "sighting_of_ref": "indicator--e322d563-37d7-4ec1-9237-bad36208cc93", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab7902e-e584-4701-9b16-4e04a52c15f6", "sighting_of_ref": "indicator--e322d563-37d7-4ec1-9237-bad36208cc93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d78162-0ee4-4633-94b0-34ede2042823", "sighting_of_ref": "indicator--bca7177a-78da-45e1-843d-dc745857500f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3948e49e-7b85-456d-b206-c247e2090723", "sighting_of_ref": "indicator--9ae979dd-432c-49b6-b4f2-dfd982c5c676", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4512160d-b034-407a-9270-1f9afcae83e9", "sighting_of_ref": "indicator--f245a307-7a96-4e0e-bf58-179879a811a9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd0039d-6edd-4f09-baaa-5bd5aadb71dd", "sighting_of_ref": "indicator--65e2d97e-a450-4beb-a8cf-fa547428e103", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215766ce-9fae-46f3-8c73-33ff40e73ff8", "sighting_of_ref": "indicator--17dade2f-31c0-4dee-b73c-dd605f3214e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfdfcf5-96ad-4d02-857f-c89525ad265c", "sighting_of_ref": "indicator--ca7483c8-b1f3-44e3-b6f4-33271e338cf9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73024656-ea54-440e-bf69-758268692bd0", "sighting_of_ref": "indicator--5a4cfa4e-a9ab-4d02-b449-872a8f55c7a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc0d3c7-8aa4-4b30-a262-106c091f6c6c", "sighting_of_ref": "indicator--e6faec82-b599-407c-b427-bcff44b5d8c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21e2b27-02e4-4a5b-9518-740884861024", "sighting_of_ref": "indicator--672eb516-dc4a-433e-9750-2ca20d36da07", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0838bae3-3b85-421f-892c-062b65ecda3a", "sighting_of_ref": "indicator--5206e350-8126-4479-9831-28a8e3deda65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d214e3e-4915-4ee9-a7e2-4e50ca10b3c6", "sighting_of_ref": "indicator--2b635e62-f430-43f4-80cb-4a2b6cd5b62e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1b300b-4d0d-4ef8-ba49-e3abf883d9b5", "sighting_of_ref": "indicator--bee16d01-73f7-43a7-8f4f-b06593762377", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45561d60-872f-4785-82ac-c300fb271cf1", "sighting_of_ref": "indicator--daa22bed-c835-4584-a0bc-8eac6221144f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8008fa2-5699-4650-a562-c1b18a8528cb", "sighting_of_ref": "indicator--f4de3474-ec89-4ddd-ab22-727d795cbdda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54d1bac-eb0f-4069-8db5-3cc2aefbfc04", "sighting_of_ref": "indicator--92826b87-e6b6-4337-812a-d989c70482c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becdbb78-120b-40b5-ab35-d324c8cb37a5", "sighting_of_ref": "indicator--493cb2f8-88a5-461c-bd2b-5aa3b0563bbb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8d016c-e2a7-46d3-96c6-ad3d6efb799b", "sighting_of_ref": "indicator--44362d58-e6a2-4bbb-a144-f739fc542aa9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a4a5e8-8773-4f26-a165-9b27912fd7a0", "sighting_of_ref": "indicator--b0436f97-6db4-488c-8108-84838ab03e13", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093d0f4a-6d5a-4de0-b02c-2d6985cc2178", "sighting_of_ref": "indicator--4bb6b588-f0d1-47e6-a3b2-b567a7a5117a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7827b8c1-0b79-42b8-aa2a-473b2f75c33a", "sighting_of_ref": "indicator--2da561bd-0d27-4a55-8332-6e1df6143b9e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6562651-88d1-48f8-b28a-f1bd28faa3fb", "sighting_of_ref": "indicator--14ea1db0-3792-4019-95a1-3926156ef872", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081485b1-97c8-42e1-bd3d-ed43ae78a914", "sighting_of_ref": "indicator--96f52769-b2ef-405c-ae7c-ecb05b6a2283", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b76b0aa-ed66-45f6-b0c3-ec2979ba8374", "sighting_of_ref": "indicator--27dcb654-d486-41b9-90ff-ad41688355f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca817ae-89d0-4dc6-add0-d5986e2b169c", "sighting_of_ref": "indicator--130ade03-d7f4-4780-9e03-30f4288f7656", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb66fe27-74d0-44d9-8157-c32cac57a78e", "sighting_of_ref": "indicator--f5897e26-dd7d-4927-9e6e-b590488c2e1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd7119-7f8f-4dd4-a21f-2317888adb1b", "sighting_of_ref": "indicator--6f02cad4-7e0c-4319-a834-20b4e820d920", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7a41ff-3612-412c-8dfc-72b04db1f8a0", "sighting_of_ref": "indicator--49e4cf35-add7-440e-a523-b7da8b6532e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da0e33b-af40-4cca-ab91-d31797b2840b", "sighting_of_ref": "indicator--03ebafe9-7fe3-474a-b3ff-f6b176f8cf3d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49a5572-e4d8-4bc2-a42a-dfbcc2876ccb", "sighting_of_ref": "indicator--08d1d5c9-fb68-4344-969e-1d2c4ff84c8d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036c8aea-8592-4b3a-aab2-9652d56cd0d7", "sighting_of_ref": "indicator--60cc4029-b03c-4d37-90b4-1bd4889821bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13c331d-f977-4621-ad87-070ec8bc3972", "sighting_of_ref": "indicator--5b632019-c4b7-40f9-8db5-c77527c3a59f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d2df7b-e6c4-40e0-b5c4-917c1eed7af1", "sighting_of_ref": "indicator--04779fd0-acfd-42b1-8916-48ef4d4d4b7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddda2b5e-bacc-47bc-8f33-4bf0ebfb0fce", "sighting_of_ref": "indicator--04779fd0-acfd-42b1-8916-48ef4d4d4b7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3d4ee0-1785-4f49-8ce8-3f3130737d1c", "sighting_of_ref": "indicator--9c4e19c9-6e01-4e6b-b9f9-b961ae16523b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c9d678-bda3-4669-a85b-625eed5f6f06", "sighting_of_ref": "indicator--29af5466-e165-49a7-a812-e021a60cddc3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7051db4f-a280-4e33-aa2b-6ff2a5f58d74", "sighting_of_ref": "indicator--72f27d54-e84f-42fe-a0ea-5da72da7bb56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9906dd6d-6788-4a04-9a31-d24f8a1c9396", "sighting_of_ref": "indicator--a5753e4c-9cf0-451e-9eaf-09370256d2f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88185878-3e1b-4d8b-ad30-aa314ffcd307", "sighting_of_ref": "indicator--0abb9c0f-f661-433d-9dda-7436f401dbd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4b7218-117c-41db-adcf-79489cd7f89a", "sighting_of_ref": "indicator--1dd50607-4811-428a-8918-dce8508be592", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a7f2e6-b3ef-41a5-8ac7-1893fa221339", "sighting_of_ref": "indicator--b60de3df-36b4-4702-b9b1-ae77cd233d8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceea576-f9fb-499d-b2ff-88cf58ea6d4a", "sighting_of_ref": "indicator--b60de3df-36b4-4702-b9b1-ae77cd233d8d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858468c8-b314-4190-9a56-7bac16eda5c8", "sighting_of_ref": "indicator--139bcadf-9705-41ae-b611-03d400e22a9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82016b96-c741-496b-b4ca-03dfb459495e", "sighting_of_ref": "indicator--b434b921-7494-4089-85f9-29e52f1b4918", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6995cf-51f7-4bfd-8f2f-02f6781d8714", "sighting_of_ref": "indicator--b09cffe6-3d40-43d8-95e3-12bb3c1d1a4d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73202923-d002-40b1-af0b-51614650141e", "sighting_of_ref": "indicator--2f8c8085-dfa9-4306-b94d-14e87f60f61f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da59916-62b2-4011-be83-f64ee5e2caa5", "sighting_of_ref": "indicator--4c992bee-dd4b-426a-b538-db722795405c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de8e4f9-2a2e-47a1-902b-6f4aa38400d1", "sighting_of_ref": "indicator--5fba7a06-b869-4d45-8b99-adfc1822f572", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba45d9a4-1106-42a7-807d-24b17a2a3fbe", "sighting_of_ref": "indicator--5fba7a06-b869-4d45-8b99-adfc1822f572", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525e86d3-a5d4-4254-9752-ceed7918b1bc", "sighting_of_ref": "indicator--5fba7a06-b869-4d45-8b99-adfc1822f572", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65fc759-e313-4f1a-9f39-fc27e29e4e23", "sighting_of_ref": "indicator--222a118e-a87d-4bae-967b-6751adebebca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d114e5-c351-48f0-93e2-c44c768a5101", "sighting_of_ref": "indicator--222a118e-a87d-4bae-967b-6751adebebca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cdbfc6-b6a3-4287-8f8e-33f1df78f54d", "sighting_of_ref": "indicator--222a118e-a87d-4bae-967b-6751adebebca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c7678d-ef54-44bb-94e0-166af4e12c11", "sighting_of_ref": "indicator--e2f55bb3-8a27-46e5-8fdf-75fa2f430d1f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d1fd9b-5438-48e8-a7b2-35447188863c", "sighting_of_ref": "indicator--a3d8acdb-a1a8-40d2-856c-1e70a126aecb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c13b07-da9e-4083-b52d-bea398fac661", "sighting_of_ref": "indicator--1fbf28ba-77b4-49ef-a312-937815f5bb7d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ab2553-f092-4906-b000-a3b921fadffc", "sighting_of_ref": "indicator--a47164f3-10e7-4cbc-9d4b-2b3d85535d37", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f55d1d-7f3c-4446-b116-d3e15aa362fd", "sighting_of_ref": "indicator--9f4d3406-5200-4e7b-8cec-3638b3e61d20", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f681fc00-74b1-4165-a1ba-e31928e63b6e", "sighting_of_ref": "indicator--f2c34118-c3fb-46c9-b47e-a6eab21530ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0a95ac-c7f8-4c80-8b3e-5ded7d6d2444", "sighting_of_ref": "indicator--99b3ead4-3e39-49ca-9b5e-9daa75fb9c1d", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfaeec3-4e0f-4156-942f-e6416f2c6c6a", "sighting_of_ref": "indicator--59579c9a-d69b-409f-87a3-2f18494c2a11", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98b4997-8803-4986-9940-ddf5a6241ef6", "sighting_of_ref": "indicator--a51e1b47-56b5-4acb-b310-98edc4b1d7ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbb1fe9-ea71-4d98-bdfd-3c2d6c4221c7", "sighting_of_ref": "indicator--ae3a1b67-aa90-41cb-a482-dd9d4130fbda", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2f348d-0559-4c96-aac1-684c2a459be0", "sighting_of_ref": "indicator--c29cdf01-02c0-4b25-bb77-0d0ee29248ae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18df9dda-d8de-4f5f-a089-18a3e7dd2ddb", "sighting_of_ref": "indicator--1210df59-4dac-4ba9-925b-6fc35a6e2964", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb91d248-455c-42c5-873a-4bb84250cb55", "sighting_of_ref": "indicator--3601a91b-bbe1-4606-b9af-3f7b457eb6e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2186a593-2a96-4dfc-a425-2d71b7b737db", "sighting_of_ref": "indicator--3601a91b-bbe1-4606-b9af-3f7b457eb6e7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15603d63-c736-454d-9063-3c65f9362bb7", "sighting_of_ref": "indicator--46e7d64f-4545-4020-917a-4c4977aaa998", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ecac83-6b0d-4a17-a536-ec46a5aa90e9", "sighting_of_ref": "indicator--671ba2dd-ccf6-43e2-b15a-ac5eabfb26bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe95fadb-393b-48fa-8c28-3454ae128f34", "sighting_of_ref": "indicator--671ba2dd-ccf6-43e2-b15a-ac5eabfb26bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e101469e-7953-4f2f-8bfc-1e8829c24429", "sighting_of_ref": "indicator--671ba2dd-ccf6-43e2-b15a-ac5eabfb26bb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5773ba9f-f861-4fd5-9b71-ff804eedda33", "sighting_of_ref": "indicator--39e5053f-5b60-4d1d-8070-bb78a10d1a94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027db129-8913-42b8-9d46-43c1a26fcd83", "sighting_of_ref": "indicator--39e5053f-5b60-4d1d-8070-bb78a10d1a94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eac0c8-44ae-4403-a9c1-d8b9f5e9b7ec", "sighting_of_ref": "indicator--39e5053f-5b60-4d1d-8070-bb78a10d1a94", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e14ee1-8e6c-449c-80c5-c4f78da03880", "sighting_of_ref": "indicator--cd9f9d39-4e01-4842-8010-7d940dbbe77c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df0316b-0464-4d06-bb26-efe454e95c28", "sighting_of_ref": "indicator--c2f95bb9-43d0-45dc-bb7c-accb70839f3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d49d00f-a62c-4f4c-afac-b29cc891a478", "sighting_of_ref": "indicator--e4e59f11-e932-4a3e-bf1f-bc424e838b48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eeea57-78fe-4eae-b354-d92438e3c591", "sighting_of_ref": "indicator--e4e59f11-e932-4a3e-bf1f-bc424e838b48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb46343d-b7d2-4297-b6db-e387bb5e1d0b", "sighting_of_ref": "indicator--e4e59f11-e932-4a3e-bf1f-bc424e838b48", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d52ce73-ec87-4657-8f50-b63466eaae2f", "sighting_of_ref": "indicator--ccce933c-cbbc-4e75-a48c-ed8e5e7631a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce98047-1e37-4adc-bf27-f7b0cc232b67", "sighting_of_ref": "indicator--ccce933c-cbbc-4e75-a48c-ed8e5e7631a9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5bc96d-6987-492d-b401-e6edea622cb1", "sighting_of_ref": "indicator--ccce933c-cbbc-4e75-a48c-ed8e5e7631a9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f6379f-b76a-41e7-895d-f25b280ed5a0", "sighting_of_ref": "indicator--c430f136-e906-432e-aead-a294aaf610a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acffb9b-2430-43bf-9668-43c6ef4f4d24", "sighting_of_ref": "indicator--c430f136-e906-432e-aead-a294aaf610a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b1562e-8ceb-4b8b-b51a-f95f200d1fe0", "sighting_of_ref": "indicator--38226507-0781-4609-a287-7ec569bb5f62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b34bf92-5982-4374-a1b2-b2fbdc021060", "sighting_of_ref": "indicator--8309a776-7419-4b29-90b4-6daee1e8c564", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff074db-d4e9-4e11-bf61-af4946cf3ad8", "sighting_of_ref": "indicator--f65d42fc-654d-40c6-89e0-78495aba45fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f297bb0-b239-4065-9f8b-9ded522c8578", "sighting_of_ref": "indicator--d8b23fb6-fe82-4a02-8f9e-549545240d11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17252b89-79b4-4ca2-b8a2-c77d68c1281b", "sighting_of_ref": "indicator--d8b23fb6-fe82-4a02-8f9e-549545240d11", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b34ef81-4d31-48e0-ac1d-ae7899831fc6", "sighting_of_ref": "indicator--d8b23fb6-fe82-4a02-8f9e-549545240d11", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b431fae-b4d2-4028-87f1-a41142d3905f", "sighting_of_ref": "indicator--fdace297-aa4c-4d89-9acf-199d913575da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd54a6a-f96d-4f48-967d-e49b9afe72a3", "sighting_of_ref": "indicator--fdace297-aa4c-4d89-9acf-199d913575da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871bcbef-abee-43f2-90f9-1ea9431d839b", "sighting_of_ref": "indicator--fdace297-aa4c-4d89-9acf-199d913575da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a0ec23-fcf0-4ad7-a659-402bd1a0f5d5", "sighting_of_ref": "indicator--6c739f84-3e39-4b3d-8f5a-ef4e9583bec4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93553c1e-916c-4892-b399-d55ebefb8765", "sighting_of_ref": "indicator--6c739f84-3e39-4b3d-8f5a-ef4e9583bec4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f9eefd-6e27-45aa-b02b-65442fbfd79e", "sighting_of_ref": "indicator--6c739f84-3e39-4b3d-8f5a-ef4e9583bec4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d308ac0e-b24b-4802-9c27-90b12e5cf093", "sighting_of_ref": "indicator--0ead1a37-d174-437c-a3af-9020fcaa19e9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d858df-2f9d-4986-8b48-6d44c429e83d", "sighting_of_ref": "indicator--31f649be-3e2b-4ee0-af04-fff7c1294b8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f21482-95de-44ef-b30d-71f5c82d3dda", "sighting_of_ref": "indicator--9bffcc93-107f-4df5-91a0-003c769601b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11df759-3944-4755-9fdd-a00eb3dcc8e9", "sighting_of_ref": "indicator--a19bcade-d911-411a-8b63-2ca91d0edade", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413ec165-d3e2-49b6-884b-7ccb9171e56d", "sighting_of_ref": "indicator--897ac56b-57d2-474a-be8a-06b25d432844", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25547d66-5458-47b7-97c9-6789793272a5", "sighting_of_ref": "indicator--897ac56b-57d2-474a-be8a-06b25d432844", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6114f5d-db2d-4c68-b79d-f36d5b0f6d5e", "sighting_of_ref": "indicator--79732055-52f8-4241-b83f-39d1c7444087", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d946e229-1618-4b6f-85e2-77097d1a6810", "sighting_of_ref": "indicator--79732055-52f8-4241-b83f-39d1c7444087", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f479d-2839-4108-b73b-f5d43e1475b3", "sighting_of_ref": "indicator--79732055-52f8-4241-b83f-39d1c7444087", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07d77aa-015b-4718-b08c-f2bcef65cd5c", "sighting_of_ref": "indicator--2ec1b85e-726e-4ffe-b502-04184a0eba29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a93c230-e4f4-4f3b-9222-bd2cf1aa1072", "sighting_of_ref": "indicator--2ec1b85e-726e-4ffe-b502-04184a0eba29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafd5d03-49e2-49e5-b72e-959fa95c7873", "sighting_of_ref": "indicator--e58dcd17-d428-4de1-84ff-3e5756987032", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f645a09d-47d4-48f4-bf98-4e5e5d55c1fd", "sighting_of_ref": "indicator--e58dcd17-d428-4de1-84ff-3e5756987032", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021a3fc3-be49-4d34-b803-8797919bf099", "sighting_of_ref": "indicator--e58dcd17-d428-4de1-84ff-3e5756987032", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a18f703-2f95-4545-a00f-405947e3c7a7", "sighting_of_ref": "indicator--33f23d61-1116-4cc7-8e7a-e56194c71e30", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc71783b-63d6-4e79-a3b0-bc3c754af87d", "sighting_of_ref": "indicator--56186196-1490-47cd-b8b4-f331012ff6c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f923da18-240e-4dae-b766-1b92ca610d62", "sighting_of_ref": "indicator--56186196-1490-47cd-b8b4-f331012ff6c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5821020-8ac8-412c-83df-9880c783f280", "sighting_of_ref": "indicator--56186196-1490-47cd-b8b4-f331012ff6c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebc8950-1d4f-4f78-8e8c-18874c9dd699", "sighting_of_ref": "indicator--d600a2fc-7004-4649-af90-91d5f70bf7c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a7410f-5510-46fb-823c-68a4fce937a6", "sighting_of_ref": "indicator--d600a2fc-7004-4649-af90-91d5f70bf7c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f0e4d0-64c5-4fb9-a6d6-54e90f84ba9e", "sighting_of_ref": "indicator--a3d6af61-e18c-4ff1-89ad-40a1b09bd697", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6cd731-f777-46e9-a4db-fbba97fcb7ac", "sighting_of_ref": "indicator--a3d6af61-e18c-4ff1-89ad-40a1b09bd697", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ee56d5-5522-4ff3-8e86-8abdf9d4009d", "sighting_of_ref": "indicator--a3d6af61-e18c-4ff1-89ad-40a1b09bd697", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f21fd3-23e1-4da1-99bf-aa8ee9c2681a", "sighting_of_ref": "indicator--d9aed9f8-a6fa-4d40-baac-e4905945fce1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4495f26-8638-4246-84d5-166d928df588", "sighting_of_ref": "indicator--3786a560-8e6c-4ddb-9c65-30ce68dd62de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ee75e9-13dd-4521-8907-96e6c831c7e4", "sighting_of_ref": "indicator--3786a560-8e6c-4ddb-9c65-30ce68dd62de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77aa698d-9c1e-445e-a1ca-0275cb7b66f8", "sighting_of_ref": "indicator--3786a560-8e6c-4ddb-9c65-30ce68dd62de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0e8235-bb63-444d-bcad-5bf60b1bf182", "sighting_of_ref": "indicator--bc266222-ea5a-4bcc-baea-e6826c2eba4b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54fb353-23c3-4179-8bd3-96b099bda240", "sighting_of_ref": "indicator--bc266222-ea5a-4bcc-baea-e6826c2eba4b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33d7357-e040-46e2-87de-9fd072dffb02", "sighting_of_ref": "indicator--bc266222-ea5a-4bcc-baea-e6826c2eba4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f25c6d-42ce-4fb1-a394-e6918d6d16e5", "sighting_of_ref": "indicator--ceca5210-43a3-46e7-81cd-d8541895fefb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8dee5e-396e-43b9-81ee-8f331c32d480", "sighting_of_ref": "indicator--fefcb47d-8fa0-4ae4-b2b2-8b671d1c703d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0135c7-fe3e-4719-ab53-d01a594d0574", "sighting_of_ref": "indicator--24f65c89-903e-4190-b504-f4b3c085ad46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e852250-6200-4756-9c4e-5cfd97ab5161", "sighting_of_ref": "indicator--ce954a7f-f0ff-4583-a734-601a7ce4b6f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a3b19-c6b3-4a2f-9886-9e0a8d1d91dd", "sighting_of_ref": "indicator--746b37a2-9b61-4d86-942d-fc36644dbd27", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff1636b-a2fd-41e8-b646-b74c06f08914", "sighting_of_ref": "indicator--21011c5d-93b3-4351-9fef-6de370062d54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5437a6e3-3e86-4c68-9afe-43a75d9be1b6", "sighting_of_ref": "indicator--f3169808-6f7e-4d89-b508-d072d65d03e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511c2988-598b-46eb-8fb1-d98c115b7ca4", "sighting_of_ref": "indicator--f7438f56-f242-442d-a2c8-0bbd07abf08f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbdf45f-1024-4272-8e57-a126bd2715d0", "sighting_of_ref": "indicator--86d61613-aa0a-42e0-be1b-5f43bc28dc24", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0ccd87-0b15-43f9-87ed-2e4e1633121a", "sighting_of_ref": "indicator--06f1173f-db74-4a4a-ad17-3954e545c1f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9842d8c3-6ebd-467d-8038-2c0dc8e91e09", "sighting_of_ref": "indicator--fb935350-e599-4ff0-9c0e-925eb70a5c9c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18104fe-64cf-4043-8ee5-90f30b1f292e", "sighting_of_ref": "indicator--bc30d73e-79d0-4402-b543-980887d48ffd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b478c7-b062-42f6-be3e-cc65f6562327", "sighting_of_ref": "indicator--db5f1d46-a4fe-4411-b023-12dda2a87a55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd97a736-7b10-4820-9de7-375145348586", "sighting_of_ref": "indicator--1745f468-a511-4149-8f3d-22fa2e2b39a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e0a104-7e71-4b0c-ac44-f7933cab97b0", "sighting_of_ref": "indicator--3888c317-cff4-407d-aba5-61ae2097518b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d02e9ed-83ba-4523-81bc-8705b0b06200", "sighting_of_ref": "indicator--e5c9810c-7d3e-4a4d-9d03-204ee8e2ff40", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57143583-a3b8-4ef8-af03-aef28f70c330", "sighting_of_ref": "indicator--a0a36d48-f08f-4000-8cb6-21a3f9e0a076", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d11952-4eb0-43b9-84b6-c837e370786f", "sighting_of_ref": "indicator--e2cefa74-f0f1-4776-844d-1273d1956b0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f220af6-bb6e-4a97-93fc-b3af8bfe02fc", "sighting_of_ref": "indicator--6957b4de-1ffe-4c1c-8e94-ab75fff6df5a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7142921-2343-4f0a-ad11-75847030a81b", "sighting_of_ref": "indicator--ae9aa735-8d55-448c-b144-5814f932f681", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a9f154-5040-45c6-a796-0959e39e1804", "sighting_of_ref": "indicator--4f87068e-2cac-4666-bf74-85acabf86e9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48528f62-eac4-4c22-854c-c82ce5592fa5", "sighting_of_ref": "indicator--c13dfd07-c549-49a1-9b55-8abdfd3005ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860b9089-b6aa-42c4-9e0f-37623eaac7b7", "sighting_of_ref": "indicator--5e614345-078a-4432-ab1b-9333bf7377b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eacc20-fcb4-4000-862e-b691890c63e7", "sighting_of_ref": "indicator--5e614345-078a-4432-ab1b-9333bf7377b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1f6289-4255-4d10-85c6-00197c816f2c", "sighting_of_ref": "indicator--5e614345-078a-4432-ab1b-9333bf7377b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e5f771-0cff-4ec8-82cd-acdfa81e1963", "sighting_of_ref": "indicator--1327ee01-f5ec-4230-aa9d-9079ad7e82ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4e033c-180b-4d0c-aeb9-68de87ab721f", "sighting_of_ref": "indicator--beaea4af-23bb-4389-bd99-80335af1c9a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e76e3-8fcb-4a6b-a849-640d780f1c03", "sighting_of_ref": "indicator--0553bfa2-c366-442b-8677-8c2f17fa1795", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192600fa-ea3f-4123-be3a-51f319c6bb18", "sighting_of_ref": "indicator--0553bfa2-c366-442b-8677-8c2f17fa1795", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e881b9-909e-47b4-abbe-ac4ef775fc53", "sighting_of_ref": "indicator--87df1a3c-fb3d-4038-acae-3ec91658fdbc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def4e9e1-40b2-4951-bd7a-a6ac3db2070f", "sighting_of_ref": "indicator--513fc069-6777-4e41-9952-d2abdb47ece7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c82079-6109-41a6-b527-ef5873e0b5f8", "sighting_of_ref": "indicator--513fc069-6777-4e41-9952-d2abdb47ece7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad506a-488d-44a6-a737-f3f4b44edafe", "sighting_of_ref": "indicator--8498d354-aba7-45b1-8a02-5f15fedcf96d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd025dc-264e-456d-8a8f-3ce5eb9ea3f5", "sighting_of_ref": "indicator--9a20af50-3fef-49c4-b151-fc413bbe149c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83af703-e921-4e10-9d85-aeb4df84cf7a", "sighting_of_ref": "indicator--d2ec48da-ad84-49d2-a5b6-a3441e9e2621", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b01d32-9d91-4efc-9f4e-ee4e2ea859d2", "sighting_of_ref": "indicator--2a8faf86-7af2-49ba-9ef4-8229749d799f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cd726e-9164-4bbe-a339-ab7060f3f10e", "sighting_of_ref": "indicator--2a8faf86-7af2-49ba-9ef4-8229749d799f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cdbe85-5fde-47a4-a877-eb7de178cba8", "sighting_of_ref": "indicator--cbfa2564-20b4-4e56-9bb1-05001b9cfa74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a487aedc-86e0-4c08-9372-2484c0005fd5", "sighting_of_ref": "indicator--cbfa2564-20b4-4e56-9bb1-05001b9cfa74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf70304-ee12-4ad5-b1de-db53cb5caace", "sighting_of_ref": "indicator--cbfa2564-20b4-4e56-9bb1-05001b9cfa74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb165e66-b1ef-4106-a33e-73f406294b5c", "sighting_of_ref": "indicator--2816f09e-d3c9-4b84-8ea9-9503ce34d293", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a915fc98-16fe-4368-9f89-6cd6c6ed6cb5", "sighting_of_ref": "indicator--99b86622-6c3a-4a83-bbc8-9369d2badae6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f21d09-acfc-4a43-b314-1e17d06566a0", "sighting_of_ref": "indicator--aa42a7ba-ba2f-406a-9fda-d3dac9bc6538", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620c28a7-203a-4560-83c9-add263695508", "sighting_of_ref": "indicator--aa42a7ba-ba2f-406a-9fda-d3dac9bc6538", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36351047-a86c-45d9-be46-e51407efd765", "sighting_of_ref": "indicator--aa42a7ba-ba2f-406a-9fda-d3dac9bc6538", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb422f3-ace4-4048-8ed6-0bb28b246f30", "sighting_of_ref": "indicator--497f1c09-3f3e-4046-9c8c-6590a6651a00", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b863e71-960a-4541-bedc-1b5bf328cc68", "sighting_of_ref": "indicator--497f1c09-3f3e-4046-9c8c-6590a6651a00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bdfb87-3f03-46b4-815a-ddcae5108c37", "sighting_of_ref": "indicator--497f1c09-3f3e-4046-9c8c-6590a6651a00", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487e8d7f-0819-4603-9db9-c1622c53a236", "sighting_of_ref": "indicator--83d3f224-073c-46a8-b034-580b4496db18", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dc8e9b-f57f-45a5-87c8-4095c9d59df3", "sighting_of_ref": "indicator--e23b5605-2ebc-4caa-861f-604694a10082", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab05311-17ce-48e2-b8fb-91e10ee62357", "sighting_of_ref": "indicator--e2ba5cbb-73a6-4381-b9e6-3c738b97ceae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fc580a-6a5c-4dc1-970b-af7cac6867c6", "sighting_of_ref": "indicator--40a6c804-47f5-4502-8297-4b1106ba76d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8740fc-8b66-4c9d-912d-1ebfc2baef59", "sighting_of_ref": "indicator--e8087ebb-671a-43cb-aa54-60e3359fd3c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0034a1-cc39-419e-8f2d-ae1532f41ca6", "sighting_of_ref": "indicator--e8087ebb-671a-43cb-aa54-60e3359fd3c9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76b2615-87c4-48cd-84bb-278267eea193", "sighting_of_ref": "indicator--afbc709b-57c0-44d9-a556-c03c305332e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08faf6ba-2517-4619-a8f5-8bec90c797dd", "sighting_of_ref": "indicator--afbc709b-57c0-44d9-a556-c03c305332e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89058cd9-2366-4b30-a377-7f45631a65c2", "sighting_of_ref": "indicator--afbc709b-57c0-44d9-a556-c03c305332e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae6338f-8ef3-4b9b-b9f3-86854e43d314", "sighting_of_ref": "indicator--d4c15e9b-175e-4df8-aa33-b3315dc481f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea0816a-eb33-438a-b7dd-e647af856294", "sighting_of_ref": "indicator--d4c15e9b-175e-4df8-aa33-b3315dc481f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47564b46-a0ad-4ceb-92dc-e5caa136d1ee", "sighting_of_ref": "indicator--1765f9d0-5467-4e56-8a51-49628693b61b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8efe1b-bb1d-4d6a-898b-5e6a88370819", "sighting_of_ref": "indicator--1765f9d0-5467-4e56-8a51-49628693b61b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e45aa6-c134-4c4c-b23c-4e06f5c3e260", "sighting_of_ref": "indicator--a66ab7e5-e129-4874-8337-4680c3fbce16", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed96b5a-16f3-4fd6-af47-180ff60e60d7", "sighting_of_ref": "indicator--c80a0ed7-8f61-4a09-8091-f82f2c5aa200", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa1585e-f429-4f80-9f41-628570ad788a", "sighting_of_ref": "indicator--c80a0ed7-8f61-4a09-8091-f82f2c5aa200", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15574820-392f-4075-b543-a355a793d08f", "sighting_of_ref": "indicator--021c4400-db60-4df9-999b-46ac207d55ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b36439c-2b41-4213-83f8-d9e686ab5d6e", "sighting_of_ref": "indicator--29e048e0-5718-4ba9-bb01-916089567dff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933dfee5-3d73-4eb8-8b92-b062d490b458", "sighting_of_ref": "indicator--8d7a9294-96ba-42a3-ac28-3c7bfccc042a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6090e1f8-f5ba-4ee5-9fd6-123a7b73cf17", "sighting_of_ref": "indicator--e1a05638-a27a-4b8d-b6aa-e69e776453b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdf715c-8e70-45a9-8ab6-aa3fdd64a775", "sighting_of_ref": "indicator--fa67d874-240f-4a72-b4c3-5c575287b08f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbc3438-0f35-4c87-8755-6f2bf4cd45c8", "sighting_of_ref": "indicator--f0e74727-c015-4589-8ba4-504dfa41d2b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfbc154-bc0d-4fdc-858d-9e3d0d873d86", "sighting_of_ref": "indicator--b567c458-8566-46d0-972a-a92bef1fa2ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d31f9e5-7e45-4cde-a166-cb6989453dfb", "sighting_of_ref": "indicator--ff87fac6-f37c-47eb-9da8-83c6f7a8a0a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25deec84-cd70-4ffe-a15f-24a24324ba38", "sighting_of_ref": "indicator--c14d2c1f-20f1-482b-9932-7256d60d451a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c56460e-ddbd-445b-b3a2-4a08eab29f1b", "sighting_of_ref": "indicator--16eddafb-1463-4421-bb83-00fe4d08d253", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f3aa56-9261-419b-b3fd-4d64a8da00f3", "sighting_of_ref": "indicator--a9aecf0d-5200-42dc-b496-5905dca9ec8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b188c9-efbe-484f-8e5a-3a764a2f00c2", "sighting_of_ref": "indicator--b0654d9b-71f3-4b19-a32a-eb597289ad19", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d064bd7-abd9-410e-8c89-b25211fdf21c", "sighting_of_ref": "indicator--b0654d9b-71f3-4b19-a32a-eb597289ad19", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a93436-09dc-4d26-a01e-b502e6df417d", "sighting_of_ref": "indicator--9c594ce2-bf12-466e-98b2-8f3d98b3f050", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa8c965-9588-43bc-b712-af39a660f3f3", "sighting_of_ref": "indicator--bfb11279-b356-487d-835f-d9f41c1ac783", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79335f25-f1f3-4a83-8710-6f46b2e0fe9f", "sighting_of_ref": "indicator--f08872d6-49c7-4889-9bc0-b88fba836915", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9b7759-05d7-4adf-b7d3-382e8eb3c5cb", "sighting_of_ref": "indicator--e434a85e-1a0e-4b57-adeb-d361f160d088", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2401101-de21-4f92-8518-90674c677993", "sighting_of_ref": "indicator--e434a85e-1a0e-4b57-adeb-d361f160d088", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d389f78a-26c9-4c0c-bb8f-a9a18e4101ba", "sighting_of_ref": "indicator--16045c9f-ceac-437c-b9db-4ff50ebe85e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0583becc-6ce4-47ea-b3a5-b46d7868c8b1", "sighting_of_ref": "indicator--38277232-89e7-4185-bec9-ab65bf6a2870", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f69930d-6427-4b63-9e42-94d1baa41d2c", "sighting_of_ref": "indicator--fef25179-5c6e-4532-bc5a-822567f85e37", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abd8340-e7d7-485d-8bd9-3c89195fe364", "sighting_of_ref": "indicator--cf77e2d6-1d7c-4ad6-8cc4-08930e043e3d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab83158-d740-4407-87dc-d74224ec1e9d", "sighting_of_ref": "indicator--0f146637-6b51-4fb4-a623-db522018b63c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa94887-a858-46c4-826a-31fdbc5ecd42", "sighting_of_ref": "indicator--01bfe1c7-89ca-437a-91e0-379f94299b0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34fad4b-fd6a-43cd-b2e9-48e495c2b5f4", "sighting_of_ref": "indicator--07a0ac79-54cf-4e2e-96e0-c1050c966b8f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a870b9b7-eaac-4391-a9f9-c9b931a13476", "sighting_of_ref": "indicator--90f1055d-388e-4955-9450-1101f895b6eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1995f60d-864e-4cd7-890a-862d54cc830d", "sighting_of_ref": "indicator--7e114ed5-591f-4a33-9fa3-5a7f7c0d20bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12f5c68-3ed1-417d-b1f8-93ee78d3b60b", "sighting_of_ref": "indicator--dfef4bbc-000b-4399-90e6-e9b4f4357cd5", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbab8751-1dcd-4e4f-98a6-0d7eb10a91d9", "sighting_of_ref": "indicator--9e757561-52bb-48b0-acd8-a5b1890d92cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47117e6a-4cb1-40a1-bb46-793f1af27e6a", "sighting_of_ref": "indicator--f33c470d-dac2-47a0-b176-754587d78a17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11aa57d5-865c-4c7f-9d19-c083ce6f9b8c", "sighting_of_ref": "indicator--5d920587-2628-4617-bc80-b4e99e5e5f30", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53bc00e-7c41-438a-a45b-2037eda0365e", "sighting_of_ref": "indicator--5a447a9b-c5dc-437b-98ee-fdcb48c47c10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197185b5-d752-4b69-a11a-a89e5c6148cf", "sighting_of_ref": "indicator--63c8e98e-7e79-4a7b-9478-8893f81fd33b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb9d425-e1c6-492b-8f36-24469448d1f2", "sighting_of_ref": "indicator--20c50c4d-77e6-4acd-8d2e-15847b0094ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3414c3df-2290-4b0d-9b20-028a1ff49f42", "sighting_of_ref": "indicator--c5ee50ef-f26f-4ce5-ae5c-880fd3379146", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2903dfea-f5b8-4c26-b58b-7b47b3363bd4", "sighting_of_ref": "indicator--ee07d8b9-e87c-4a6d-99b6-103c19d0f38b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c3b53b-2cb3-4593-b07e-7bc9bf710e07", "sighting_of_ref": "indicator--2d751166-e485-4927-9ca8-4aef7e87aa0d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4db30b-4f83-428d-89f3-4045af24e6e9", "sighting_of_ref": "indicator--2d751166-e485-4927-9ca8-4aef7e87aa0d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f18245-f12c-4cd4-9b4e-6ad8af4c61f5", "sighting_of_ref": "indicator--7d54280d-8ea4-4334-8547-fbc6e0cc746a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04de61df-f007-4633-b53f-b3c347c2d759", "sighting_of_ref": "indicator--352c429b-2ff9-436a-90d5-6b9394c23480", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151b6d13-9687-4867-845b-a63d46a38874", "sighting_of_ref": "indicator--cc40e36e-9244-4972-9f1c-be0a6fbfce2c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3109f4dd-33d9-4cf9-b313-824eae9537a7", "sighting_of_ref": "indicator--cc40e36e-9244-4972-9f1c-be0a6fbfce2c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4cdeca-37d1-4b73-bc66-5b1db792bb42", "sighting_of_ref": "indicator--cc40e36e-9244-4972-9f1c-be0a6fbfce2c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efb0ebc-c5ea-4e66-ae9f-912e89d88d29", "sighting_of_ref": "indicator--06afe288-e963-4011-835b-b20243bb30da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b086dfed-b327-456e-89bf-09ddfa537722", "sighting_of_ref": "indicator--a8232888-901c-4fc6-b65f-d9c556d860a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f28505-c05a-490c-ab9c-945a1a30d79a", "sighting_of_ref": "indicator--f0e77764-5e7b-4e62-841a-f5bf0ee6dc4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a776cb-506d-4376-8c33-98e74385cecd", "sighting_of_ref": "indicator--1f6d02ea-7a26-4b1c-a5cd-a5e7dbc9136d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b093892-8912-47e4-bd8d-d1aa0265339a", "sighting_of_ref": "indicator--4a3b6304-4738-4aee-830b-c88500bb4c52", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4022291-b75a-4bbe-a32b-aeb1d16ea585", "sighting_of_ref": "indicator--f9ed7a07-67d9-45c3-8a11-28999492f47e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da11c3d4-a29f-46cd-8683-82a9bbc77a1c", "sighting_of_ref": "indicator--082de3d6-33c4-4fef-a9de-fbe61e2fa3ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c8f17-9ede-412c-9c5e-c5dff01b505e", "sighting_of_ref": "indicator--8ea192ca-c72f-4fb6-a48a-5479a011f4df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252f7373-7c41-48e6-a497-a25e2bb01daa", "sighting_of_ref": "indicator--8ea192ca-c72f-4fb6-a48a-5479a011f4df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab632de-33b7-43ea-b83d-548a2578fe12", "sighting_of_ref": "indicator--8ea192ca-c72f-4fb6-a48a-5479a011f4df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d340ed9-8e4b-4448-b375-37d890b62976", "sighting_of_ref": "indicator--e673285f-0bdd-4f65-9018-bfe02be5999b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885debbd-bb96-4249-8dc7-95e99857b7e2", "sighting_of_ref": "indicator--73c42d4e-883f-4d9f-9b9b-2f302bec5941", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf2c4aa-b858-4428-a470-9f0c8b0c167e", "sighting_of_ref": "indicator--682c3c90-f87d-40ff-be75-6121a2264dcb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282ec86a-0bd0-42f4-b19b-5fe6b0a17961", "sighting_of_ref": "indicator--ef00f686-9abb-42b3-9dba-9f6718fac05d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454ab1aa-b317-478e-8f6d-f6d4bee40fe7", "sighting_of_ref": "indicator--519f1520-5690-4242-b91e-9f6976c3af15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7185c353-500c-43ae-9509-b370d9a6a356", "sighting_of_ref": "indicator--b9e0a9f7-179b-4322-a38e-1efa5ff031b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947c8ea5-a848-4c78-ac42-5e1f75a98b7a", "sighting_of_ref": "indicator--f3f426c3-9efe-48f3-8432-b7ca8f9d0bf3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61daf73-9152-472a-b351-160b59150f9d", "sighting_of_ref": "indicator--a891dd9f-1e75-41e6-9c3e-b5f4f5ac0d52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63453020-02ed-4ae9-95c6-35ca61681b21", "sighting_of_ref": "indicator--b6bf42da-6b6b-4574-a54b-468844ec054e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bab076-fd1e-453e-bb98-6b45b1947f06", "sighting_of_ref": "indicator--5424ae9d-dafb-4a80-823e-0495f52216d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ce1695-b69e-46f8-a7ea-9b6a07eeea57", "sighting_of_ref": "indicator--8c715b91-f132-470b-aee8-307c82ae552c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a95688-45bb-43b1-af56-daf8bb261e20", "sighting_of_ref": "indicator--5f6d5331-3d40-4dd8-8a5c-4046c125035b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc70b0e9-6899-42f5-a29a-b025e190bf72", "sighting_of_ref": "indicator--f5b7d5c7-a958-417a-8072-1fd636083b29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f194b7ff-3a16-420e-ba3b-40eceeba4034", "sighting_of_ref": "indicator--2d769cdd-d414-425f-85cb-4a402eb4d139", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bad16c-e79d-4ebe-b1ea-c1e94413a83d", "sighting_of_ref": "indicator--88414bbf-83ab-48e3-8e9d-1b58a33651e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410fd61d-bb4b-4c5c-8d42-3fc5e47b2f92", "sighting_of_ref": "indicator--88414bbf-83ab-48e3-8e9d-1b58a33651e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a93bce7-6e31-4d1f-b583-f1190a3fa6c9", "sighting_of_ref": "indicator--e6b53769-fa14-4764-a89d-b13ade693c6b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9a0b10-d794-45ce-8b0a-bda5fd15d12b", "sighting_of_ref": "indicator--a66e86f5-0d4e-4d12-ab5b-2c7fc87bcada", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d556c2-784c-492b-a279-f8802336b6e6", "sighting_of_ref": "indicator--64d72743-3fd7-4c5f-b2d5-306aafce8a52", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134b3398-5d6f-4f62-8c08-1acd962da7bb", "sighting_of_ref": "indicator--15cdef25-35ef-4b84-814e-71d06b1fe6c3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3c92d7-3f99-42fc-98ad-421d816a0f42", "sighting_of_ref": "indicator--380f48b4-9b2e-4de5-bab0-1c38cfa30ddd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103ff804-3cf7-4887-9c34-dad72e59f9f4", "sighting_of_ref": "indicator--7985b5b8-6d71-4521-a1e7-a1f0689eaac5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a6e244-d318-47a9-852c-d502786df48d", "sighting_of_ref": "indicator--7985b5b8-6d71-4521-a1e7-a1f0689eaac5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce472a4-adfe-48d8-a02a-605e62e7bfd2", "sighting_of_ref": "indicator--a58e19d8-e4bd-4a2d-8b90-4384d1464955", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca61624-080f-4602-bd0e-261d070bd8cb", "sighting_of_ref": "indicator--e937b9fc-6469-4df6-83ad-e3952120892a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bf731c-69c3-44e6-a905-79bb47734b65", "sighting_of_ref": "indicator--fa116b64-23aa-4573-8bcb-8de07feb22e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e24afbf-d107-44b9-81e4-47a26ab76a0f", "sighting_of_ref": "indicator--9c73399f-43f1-473f-9521-a72b30663c22", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe68fae-cd21-4ff3-8915-9c192a9ecc16", "sighting_of_ref": "indicator--9c73399f-43f1-473f-9521-a72b30663c22", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70c44c-b316-431f-8b9a-1ce0e29a9d32", "sighting_of_ref": "indicator--c7dba09d-6c6a-43c1-a0a8-7d011f7ab720", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5df84c-f4e9-465a-966f-7dd830d60393", "sighting_of_ref": "indicator--c7dba09d-6c6a-43c1-a0a8-7d011f7ab720", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0d8a0a-ea06-4362-ac5d-f79ea5897b69", "sighting_of_ref": "indicator--98aa9a0e-1e0c-4e94-8832-96691654948a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db94bc2f-2fb4-482e-b4a6-464ddef4e347", "sighting_of_ref": "indicator--f8afb64d-5bf2-487b-9456-d9971b6ccac5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7aeb0c0-3ab9-49fa-8b70-900a9c16bfa2", "sighting_of_ref": "indicator--f8afb64d-5bf2-487b-9456-d9971b6ccac5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690b0f7c-b13a-481f-9a7e-adb43af35e6a", "sighting_of_ref": "indicator--a00d5d27-c2e8-43fa-bd68-5711a3c006b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47faeb66-47d4-4c33-981f-792fc70a9cc1", "sighting_of_ref": "indicator--9c61b852-6e84-4c4e-890f-b326843fc7c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6e2613-442c-42e7-898f-a4465f6ab5e0", "sighting_of_ref": "indicator--c3cedcce-c6b7-4c48-977c-523ec784a1e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce47d05-234c-4432-a0ab-ab26092e4c0f", "sighting_of_ref": "indicator--c3cedcce-c6b7-4c48-977c-523ec784a1e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff84d85d-bb14-4809-b086-f9fd04109dfc", "sighting_of_ref": "indicator--e860c229-9dc4-4b41-b1fa-8a072f975500", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2332a934-031b-41cb-a769-22e6b555ff80", "sighting_of_ref": "indicator--d2b067ff-7722-45bb-ba9b-96f4ae3ada60", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a9a3a9-0ade-4c83-a3ea-cdd0baa33646", "sighting_of_ref": "indicator--98ae138f-9e83-4771-a12f-d1d85e5a3a41", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c6c2ad-bda4-463c-b591-90db1ba2ee56", "sighting_of_ref": "indicator--98ae138f-9e83-4771-a12f-d1d85e5a3a41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c747ea2d-221a-469a-9e4a-cbee17079a68", "sighting_of_ref": "indicator--98ae138f-9e83-4771-a12f-d1d85e5a3a41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694a1aeb-1952-4828-ae44-bf56dc6dcb25", "sighting_of_ref": "indicator--6ec6d0fc-164e-4599-8a89-72e3ef21a01b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5204bf-595e-4a51-8c5e-d1046738e2b0", "sighting_of_ref": "indicator--1da59893-a051-4887-a571-24f7698bcd8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72217600-9886-4698-a41a-94fa02159419", "sighting_of_ref": "indicator--1da59893-a051-4887-a571-24f7698bcd8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadc9e4e-9ad2-43d6-912e-0873726d0954", "sighting_of_ref": "indicator--9294490f-1f00-4a17-abad-5dd698042646", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42d94bf-d891-4fe8-80ad-4d3bb7cd2354", "sighting_of_ref": "indicator--9294490f-1f00-4a17-abad-5dd698042646", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3851a7-418c-4508-be2f-523e948bbf72", "sighting_of_ref": "indicator--a7bb0af7-187e-4098-83d5-35f35438b400", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc51332e-8cb3-4168-9953-36ab0e9740af", "sighting_of_ref": "indicator--a7bb0af7-187e-4098-83d5-35f35438b400", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3269b5e-f814-4b3f-bf3c-3321eb624d21", "sighting_of_ref": "indicator--3fff5722-5b4f-4829-bcaa-be8e5f25b4e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f763dc-31e8-4712-b572-5d44f6411e15", "sighting_of_ref": "indicator--ae617349-f0e4-48a2-85d1-277162f02d09", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c02f8b1-6632-4613-9bb8-ad293b41c69d", "sighting_of_ref": "indicator--8b01af22-7c45-4845-a378-9bc2bec953cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a18d7db-5b40-4537-ac12-93f6fb3ba1fe", "sighting_of_ref": "indicator--b8bfd0df-4021-4160-bb45-a4fa682603d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1f29fa-86d6-464e-8577-924d54a8ad62", "sighting_of_ref": "indicator--b8bfd0df-4021-4160-bb45-a4fa682603d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff7a9b0-9219-4d1c-816b-e26814836834", "sighting_of_ref": "indicator--42cefe6f-d861-4ebd-b275-da86469a83d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c83c7f-b483-4919-b0ae-c9f22da5d15a", "sighting_of_ref": "indicator--42cefe6f-d861-4ebd-b275-da86469a83d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf56bda-276e-4b83-812e-dc99f66e824e", "sighting_of_ref": "indicator--ff951d0e-a669-4c1d-91f9-e01147c811ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb34624-fb58-4bb6-ba7a-24201a84f551", "sighting_of_ref": "indicator--0164a237-12a8-4a1e-9ee3-369ce52430d2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847db710-afd6-4d59-a721-4b275796eda4", "sighting_of_ref": "indicator--62040a89-0316-43d4-a2d8-634eacc028ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a0bc06-6921-4273-bd62-13dd8ff39cf6", "sighting_of_ref": "indicator--54de242c-6777-478a-8c5a-e9155796239a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31290677-bb1b-41ed-b53f-ba8eaa0ce409", "sighting_of_ref": "indicator--40abfe40-182a-4699-818e-9d2cf466bbf1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b1889c-3f3d-422d-8cb1-1170e69fb5b9", "sighting_of_ref": "indicator--e934a2e3-d999-4709-9855-02170fe363f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dc03b8-5973-4d84-af5d-67d5a6dfa62e", "sighting_of_ref": "indicator--c268043b-e1d1-4e91-b6e4-692b7c74def8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d00215d-c93f-46ea-8fc5-39eff08c1f14", "sighting_of_ref": "indicator--5df90607-e3b3-4d95-af5f-3da620b480ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54209cc3-8fb5-4139-890b-90f33d66c2ef", "sighting_of_ref": "indicator--3a39a4ca-ac50-4553-9dfc-70d0f8d670c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92f423f-5576-4483-b7ed-019709897a1f", "sighting_of_ref": "indicator--3cefd53c-5683-4c3e-befc-0e902027924c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0425cf-49bc-4039-95c1-2ad2f3bbce31", "sighting_of_ref": "indicator--dc574f9e-6040-4c54-9dac-48661818c512", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a71de-42b3-4014-a900-34e285234f0d", "sighting_of_ref": "indicator--09fb4296-ca7a-4ccd-96ca-ad06e725a65d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128134c9-0009-4e51-9fb4-489559c7480e", "sighting_of_ref": "indicator--35712ab7-9c0a-4bc4-9171-0493164bc273", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de413962-905f-4e73-bf6c-522790f48d54", "sighting_of_ref": "indicator--08a68f57-2a75-4550-a6af-a29516f462b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c98e4e-0fa0-4c5a-abf0-ee40fb38f981", "sighting_of_ref": "indicator--c46bce02-d4fc-4ba1-ac8d-0323fe9aa36a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761c2541-d154-4dd7-a917-9daa1633acc2", "sighting_of_ref": "indicator--c46bce02-d4fc-4ba1-ac8d-0323fe9aa36a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0cb918-2a08-4bc6-b224-fa251e066dbe", "sighting_of_ref": "indicator--eb7485d3-085d-43c0-9de8-ec465e1084b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df457e4a-a9ce-45c2-a564-f5ebcfc02934", "sighting_of_ref": "indicator--eb7485d3-085d-43c0-9de8-ec465e1084b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1486cbbf-3431-4cba-ac90-284072d6dde3", "sighting_of_ref": "indicator--7cd5ea73-d9cc-4426-b873-a4ce3af9b125", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cceb0f76-f988-409f-adc8-bc1cc877f854", "sighting_of_ref": "indicator--d928278b-27cc-4349-8c0f-9f55f7107e15", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccf23d4-44fc-433f-b610-ac5f47f3aff6", "sighting_of_ref": "indicator--628427ca-f42d-4fb6-85c5-891b562c22b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811ded65-f82c-4895-a319-d4615834c6da", "sighting_of_ref": "indicator--628427ca-f42d-4fb6-85c5-891b562c22b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7928cf7a-c1e6-4a76-98ed-c5df7154e40d", "sighting_of_ref": "indicator--ddaa749a-b952-4018-986f-d93a805fb2b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b0077e-5c3c-4d48-81c5-0e0b1019b043", "sighting_of_ref": "indicator--ddaa749a-b952-4018-986f-d93a805fb2b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0567676-a66f-4662-8b4e-4e6c1ced787f", "sighting_of_ref": "indicator--066ddd32-24e8-4c78-bc75-d9e45e681934", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0961071d-bbdb-46ea-a937-f7cecc0f9b00", "sighting_of_ref": "indicator--d4b506eb-aa9a-4fae-bd7d-48097b7430e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f26e83f-6a92-479a-94ef-3f4bb9f18e9a", "sighting_of_ref": "indicator--5ceda623-e79b-4a66-8ce4-597fff291e67", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30424b07-87e1-4e90-a0d6-1340524d5785", "sighting_of_ref": "indicator--88594688-ce02-495b-a02c-990e5d0ad904", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c400a949-4dd7-40d2-bc1b-782e0b07ca30", "sighting_of_ref": "indicator--0d436541-6ad5-4ce5-b7fe-9bc3fd0caa08", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cbab6a-b694-49d1-b285-ce7ac1cab19e", "sighting_of_ref": "indicator--1662ecc8-5ffd-46d6-a8b7-fc3da14ea9ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906069dc-2532-41c9-a721-4ec26b240ab3", "sighting_of_ref": "indicator--386f5a9b-3b71-43b6-8943-2a7cb26763dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ed3c6-0fc2-4853-b4ba-b30ce2aaf8f8", "sighting_of_ref": "indicator--b8184fe8-ef31-410c-a65c-397cf4f1e7d6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9fba47-93e9-45d0-80df-bb5f656a2c0f", "sighting_of_ref": "indicator--c3068ae8-9486-4c2c-85d4-46a4fc5dbbb2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f52eefa-3c00-45cb-b98f-b6adeca385a4", "sighting_of_ref": "indicator--315e7bed-1ab3-4a54-b515-f0db047c6a72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7121356-0b4b-427b-b8e7-3a48a0161f0a", "sighting_of_ref": "indicator--315e7bed-1ab3-4a54-b515-f0db047c6a72", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa996e68-27d1-4223-8b3f-326df51989b2", "sighting_of_ref": "indicator--3f65c982-94eb-427a-8a5b-4db2aa435a00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc35947d-1e1b-411f-8a08-ffa6326d08ff", "sighting_of_ref": "indicator--68beb864-0878-424d-b2bc-b67b2ae534a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6e2a9e-702d-4a22-8ecc-a7598eed5eb5", "sighting_of_ref": "indicator--db0ae470-b403-48af-a2c0-46fb2b10d38a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87589e84-f880-4f83-8f4b-25b822edfe73", "sighting_of_ref": "indicator--c9644895-48b0-43d1-b212-e35f7f282a9b", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3bcf3d-f572-4d1b-9b75-be38750d1df0", "sighting_of_ref": "indicator--441444ba-b0a8-4b27-82c1-f43a1b24a14a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fbcc4e-8602-4951-8e26-ee628b21d3ad", "sighting_of_ref": "indicator--c97b4a6a-fbc7-44d9-9660-5c6fd5d94358", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b98d9d-7371-4ebc-a939-5bbd7bbae16b", "sighting_of_ref": "indicator--dc53e51e-ded6-411c-92e3-2769afb5cb3d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e100e3-0467-4fc1-9476-3eb92b15522f", "sighting_of_ref": "indicator--dc53e51e-ded6-411c-92e3-2769afb5cb3d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a201cfe0-722b-413c-a558-56f755d3d83b", "sighting_of_ref": "indicator--dc6dac60-2c77-46e2-87d4-40c0cdcfdca8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffff3ae-91f4-4c75-8389-9a212c31da41", "sighting_of_ref": "indicator--dc6dac60-2c77-46e2-87d4-40c0cdcfdca8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635e8883-1378-41ab-8a6c-6d331e3ed6e2", "sighting_of_ref": "indicator--dc6dac60-2c77-46e2-87d4-40c0cdcfdca8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9589676-0935-4ae2-802d-3acd7f792ef3", "sighting_of_ref": "indicator--cef34307-8d07-4c34-8094-7e2b3f1d7493", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996b2a93-6112-42bd-9505-72f7cdc847fa", "sighting_of_ref": "indicator--6da316e9-ad4b-4cc0-abcb-3d7a9b23cc58", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c462c31-1fbc-4622-b448-707821e97b30", "sighting_of_ref": "indicator--6da316e9-ad4b-4cc0-abcb-3d7a9b23cc58", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47db3164-6e9a-49d7-b9a0-2201ced214a6", "sighting_of_ref": "indicator--68a6cda5-8247-40d0-affb-dd37269d9c89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629b9156-5daa-40da-8ae2-cf90fb92b0f9", "sighting_of_ref": "indicator--2a4aac60-4593-4893-98d4-95a1259f6918", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2f49d-0842-46f9-ae85-18415d94d887", "sighting_of_ref": "indicator--598ae555-8000-4742-9d02-2b4d06c209ae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb598ad5-5e7c-4f1f-80d3-0861e4a2c46a", "sighting_of_ref": "indicator--243a2a25-6bb9-48aa-9b52-474f38c09071", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6179d30f-e3ff-4593-b74b-e0e4e3d82cb7", "sighting_of_ref": "indicator--c9d61903-f1da-4dac-a143-bce20c471886", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec62d2ae-cdc8-445c-bee7-76fd81216774", "sighting_of_ref": "indicator--2b0eaa53-fe47-41bc-9489-6b42f297c3b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7fcb36-d539-425a-b88b-d90140a2c2cb", "sighting_of_ref": "indicator--7e78c6c9-625e-497c-85d9-46f8752b7a4c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ecdb15-d04b-4bad-8973-dedc46ad7d0c", "sighting_of_ref": "indicator--09d8e401-3aca-42b3-a4f0-85b4b1ec5059", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca6de2f-0af8-46e6-a1fa-dc2d5a5f7f32", "sighting_of_ref": "indicator--e8d89eac-e72e-4c8e-8277-aac7db3a8930", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8caaaa7-265e-4a96-b1bf-039e91b7446f", "sighting_of_ref": "indicator--fc4c6699-c4fa-45e9-ad19-074166dcb963", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7a6e6-ceb2-47d7-bdf8-8c34f1b28bc8", "sighting_of_ref": "indicator--c6df3caf-35b3-4798-b6b6-2f8aabb5bafc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e2f47f-5016-481d-994d-66e7482d80e6", "sighting_of_ref": "indicator--b90557e0-7739-4054-be38-a8917668a273", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39d7577-cd29-4899-ae77-8076a7cbc53b", "sighting_of_ref": "indicator--32034ff3-8e9e-43cc-848b-d4c722369a98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e29105c-1f59-4a2a-9c77-9825c28d4bfb", "sighting_of_ref": "indicator--5c778e48-23b4-4dcb-bb6c-cb80dcf8b76b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d905590-55a3-430e-a5d0-c45a54633880", "sighting_of_ref": "indicator--b9c6bcb5-6afa-43d1-ace6-852a97ea7104", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c1380a-eb7e-46fa-954f-49d5c9ae47d5", "sighting_of_ref": "indicator--645be057-36ef-415a-a721-4ced402a6221", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99faf3a-d551-42f0-942b-2e733add7941", "sighting_of_ref": "indicator--9cc58040-a4d3-4ed6-8a69-20ba27d42f84", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e960d7-4999-4c13-bfb7-53c93bf0d0fd", "sighting_of_ref": "indicator--49cff8d7-aef5-40c4-9f5b-2f6690c9df1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee00116c-643d-4a3f-b315-29dfe7d1e9d4", "sighting_of_ref": "indicator--d00973cb-b0d0-48ad-a1ab-377e31bb0991", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d15682c-1fd7-4c21-9753-cf1eaa4eee17", "sighting_of_ref": "indicator--b4099635-81aa-4316-b909-23671a88631f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3b7c91-9621-4c6b-883a-1938f2910b25", "sighting_of_ref": "indicator--e55af4bc-e5dd-4593-a8f8-3ad4b68d8389", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d03f25e-62f4-4a84-bf19-db8498e06640", "sighting_of_ref": "indicator--b3f06217-28d8-48be-b0a2-404450bf0a7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6cb5ed-fc3d-4e09-8ea3-252815ac5a4d", "sighting_of_ref": "indicator--5bce9804-b841-4359-89bc-908f8cf55a97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afef8c90-c02c-4e17-9bc9-e36429d3b0a5", "sighting_of_ref": "indicator--ad3090f9-509c-4666-b717-48bf283d6ee8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e774ef7-e5af-4b2f-a5e7-bcfc40df92f0", "sighting_of_ref": "indicator--376e60a3-0720-497e-8677-12d21493134b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fe28a5-aa01-4420-aa40-1a2a48e832cd", "sighting_of_ref": "indicator--a5eeb824-0262-48b1-9704-157c7f70ea0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d62489f-0ea5-46b6-b280-6e433e0f144a", "sighting_of_ref": "indicator--5b3f63aa-5791-4c25-8e1e-806e964aa5e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fd8a94-36f7-4f93-acb6-4c6860f5d31d", "sighting_of_ref": "indicator--7892e233-f8e9-4ed6-99c9-93eb5152d994", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aa61e1-1617-4aff-8962-9d112544cec8", "sighting_of_ref": "indicator--d3f6dc1d-9ca4-47af-b822-2bfa001b650d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1346d4f-0312-4514-882f-ddb955809a06", "sighting_of_ref": "indicator--665d7318-d30a-47b3-92b0-a958057a8a9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5349cf-926e-4a43-8a87-e59bd49dd6f0", "sighting_of_ref": "indicator--49efa331-2361-469c-8de2-89e348e65f01", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341d1d55-9b46-4f07-9e38-fb2ef86e4037", "sighting_of_ref": "indicator--f4015282-765d-4367-8ae2-92079dbbec43", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78eeb425-b1b3-4568-a0d7-0ae39e9308dc", "sighting_of_ref": "indicator--ff9f79b3-9fc2-4862-a4f9-d4c45223317e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8852f23-942b-4968-b427-d45990ae9d27", "sighting_of_ref": "indicator--ff9f79b3-9fc2-4862-a4f9-d4c45223317e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37639a60-64d7-4130-a27d-0c03c2e93148", "sighting_of_ref": "indicator--93f8b3cc-01d9-4464-844a-a76a41da92bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664bfed5-21af-4ae4-9985-e5c34a571941", "sighting_of_ref": "indicator--93f8b3cc-01d9-4464-844a-a76a41da92bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd29ec64-7760-4982-a8d8-7b2f6c7c75b6", "sighting_of_ref": "indicator--c2c66b35-25bb-448a-8e32-140348f2df47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28a530b-d61a-49fc-8369-e11693ffcdf0", "sighting_of_ref": "indicator--c2c66b35-25bb-448a-8e32-140348f2df47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8046cd6-d230-4f3a-97ae-a1c922087fb6", "sighting_of_ref": "indicator--f38811a7-eafb-402d-a2d2-cb41bf43f2db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084acccf-9b16-4a37-81ec-343c3cb1c449", "sighting_of_ref": "indicator--f38811a7-eafb-402d-a2d2-cb41bf43f2db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ada3e7e-b9a6-46ab-b5b6-02e3cf5e8539", "sighting_of_ref": "indicator--6255960b-0b31-4b58-b1c5-fa72158b3adf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87a2502-16f2-43a3-b2b6-0916cc5aade7", "sighting_of_ref": "indicator--6255960b-0b31-4b58-b1c5-fa72158b3adf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd67d4d4-a55f-44f8-90ae-cb11c9ee349f", "sighting_of_ref": "indicator--1f09305f-b5b3-4ec7-a638-c902d81fe88e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7415e13b-c099-4ff3-8722-951dd99e27e9", "sighting_of_ref": "indicator--362a4be5-ee1b-4cfe-a124-b1ccd0e476ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be35e1a5-2387-436b-ba5d-966d010d8a1b", "sighting_of_ref": "indicator--362a4be5-ee1b-4cfe-a124-b1ccd0e476ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96858d3-f17a-4780-bb67-d0e9d1fbe7ad", "sighting_of_ref": "indicator--b7343015-bb44-4d51-8ac0-3f978a9f2195", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c860067c-d94b-40f0-8353-ebde14543eaa", "sighting_of_ref": "indicator--b7343015-bb44-4d51-8ac0-3f978a9f2195", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afda5544-5190-4692-ac2f-71136fb981e3", "sighting_of_ref": "indicator--354532b9-7adb-4daa-9a9d-6f949d44283c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc9bb9-8ef4-4b27-9e47-0a2929c0bff2", "sighting_of_ref": "indicator--354532b9-7adb-4daa-9a9d-6f949d44283c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cb2135-7ae5-402e-8431-83ea554640ed", "sighting_of_ref": "indicator--e4766330-d11a-487f-84ca-152d872e3e35", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d6d4c3-a2ad-444e-80f9-9120d570e941", "sighting_of_ref": "indicator--e4766330-d11a-487f-84ca-152d872e3e35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5bfb99-f0f6-44cf-aa65-118a0dd9005a", "sighting_of_ref": "indicator--398291ce-7174-4d3c-8ed5-c30aae978bb2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaced25-4c8f-4537-a665-188bc552fcf0", "sighting_of_ref": "indicator--398291ce-7174-4d3c-8ed5-c30aae978bb2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b4850e-a45a-4bdb-9aed-0243e01d53a4", "sighting_of_ref": "indicator--560c6dd6-7f3c-4c31-938e-f6b989d2e528", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680c0113-9c38-4eef-924f-40c614a40a00", "sighting_of_ref": "indicator--df3b3604-49be-4b2b-a85f-d288fd5ac13f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab2325a-184e-42e2-84f1-b1e9f76a2013", "sighting_of_ref": "indicator--df3b3604-49be-4b2b-a85f-d288fd5ac13f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388ef3a6-bc02-475d-9aa1-e87399c49a90", "sighting_of_ref": "indicator--63d859a8-35d9-412c-bf29-66dc70286084", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f29924-921a-4f74-9274-4ddff1918336", "sighting_of_ref": "indicator--b35b9e7d-d4b1-49e9-b12a-f2cde53579b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ab04d-68fe-4a1d-a95b-14373192332b", "sighting_of_ref": "indicator--b35b9e7d-d4b1-49e9-b12a-f2cde53579b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ff14df-5dc4-454f-adb8-f5f35ba5f079", "sighting_of_ref": "indicator--c10e551f-1d41-4655-8185-94efb558adfa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6be78ed-03a5-4f12-ae45-3aef10ce7519", "sighting_of_ref": "indicator--08767b22-e38c-4456-bf96-fbd3a8eff9c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e661af2a-52fd-44c5-8e1d-48f4ab0ed8dd", "sighting_of_ref": "indicator--08767b22-e38c-4456-bf96-fbd3a8eff9c0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a8b072-39a5-426f-9cda-cabe49e1ab08", "sighting_of_ref": "indicator--08767b22-e38c-4456-bf96-fbd3a8eff9c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d8660c-f67b-4a58-9e7f-25c7844c8b6c", "sighting_of_ref": "indicator--75890593-9908-432c-8326-a5949950af03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82744d7-22cf-4726-87ae-b8e54df4fa47", "sighting_of_ref": "indicator--75890593-9908-432c-8326-a5949950af03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30fbe42-f782-4683-9606-76efeed4d323", "sighting_of_ref": "indicator--75890593-9908-432c-8326-a5949950af03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c507758f-ba61-4ea8-82f3-1511bf87472c", "sighting_of_ref": "indicator--4c53f95a-3d83-432b-9827-21bfbead57b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238c12c4-cfe0-4941-b5fd-b9500b7d4252", "sighting_of_ref": "indicator--c1846279-0087-400d-aab8-37a55041535e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e60d423-53ef-4680-9af6-bb7d3da0d617", "sighting_of_ref": "indicator--d19a0403-6432-4e9e-91d0-eef244dcda83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75561a93-1c45-4f5b-a629-c7bedeaa0b06", "sighting_of_ref": "indicator--d19a0403-6432-4e9e-91d0-eef244dcda83", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc10629-e699-4ea8-b0e9-a4e17bb97788", "sighting_of_ref": "indicator--d19a0403-6432-4e9e-91d0-eef244dcda83", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bda94b-afa1-4440-8fb7-84fe4e84ca38", "sighting_of_ref": "indicator--4dead2dc-bddf-47f4-89fb-9e2a4d71fd7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c771477-de15-47f8-86ee-b56e52743335", "sighting_of_ref": "indicator--3443f2e9-a895-467f-adb5-9433a1fdfa0f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88f73bb-0e1e-48ea-9b4e-022b4d1cfb9f", "sighting_of_ref": "indicator--3443f2e9-a895-467f-adb5-9433a1fdfa0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd99ff5e-3c3c-4f5f-b62b-acc7d3c591db", "sighting_of_ref": "indicator--decc007e-1157-4f02-b87e-b11b95c0291f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e4a054-f31f-4b37-83e4-b99b9aeaa38f", "sighting_of_ref": "indicator--2b394f5d-a01c-4431-a992-8041423d392c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89904965-6347-4ce6-9391-060f7d321201", "sighting_of_ref": "indicator--c2829c10-f0b2-43dd-a646-1bdb3d650ff1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b953410-27c2-4062-b58b-289ee86685d1", "sighting_of_ref": "indicator--93d3cfa4-d0fa-4852-b0de-f55ec700bef1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f89b65-9ea5-4f86-9d5d-83a82b85858f", "sighting_of_ref": "indicator--93d3cfa4-d0fa-4852-b0de-f55ec700bef1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b17c36e-ade2-40df-a970-dfcf34a9fc4c", "sighting_of_ref": "indicator--47d44365-cfb3-4b2a-95d3-c442287ef875", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9e50e3-de0e-40f6-87dc-821604b9a789", "sighting_of_ref": "indicator--edca783e-0dc4-4462-ae24-74523fe269a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dcbd00-e63b-4cdd-ac0f-72d125340300", "sighting_of_ref": "indicator--f8fa74a2-0cc7-46ea-9757-bdd47eb3a845", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38795f68-ca94-4340-bf79-18b692c15277", "sighting_of_ref": "indicator--4f3afa82-63a4-4536-8581-030477d5213f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af230a35-d8cd-4173-ad77-843e08f364d1", "sighting_of_ref": "indicator--4f3afa82-63a4-4536-8581-030477d5213f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2642341d-ce3f-4626-9536-6f4573e67635", "sighting_of_ref": "indicator--4f3afa82-63a4-4536-8581-030477d5213f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0f5792-0c6b-410d-9fd4-1bfbbf3ba937", "sighting_of_ref": "indicator--1d08343e-592c-46b1-aa0e-1670d8a72cb3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e72ee0-2683-4bf4-a778-cd3e782941de", "sighting_of_ref": "indicator--fab32cc7-ee6a-43b9-996f-3c2936197e57", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2df315-77b7-4515-959f-fdc14ad86054", "sighting_of_ref": "indicator--c92c1619-4b78-454a-8d87-94f8e15c7e7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af30be7f-170f-4d0b-bbfa-10c905f6239e", "sighting_of_ref": "indicator--f98b2260-6133-46d3-978f-9ba52c8828b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dfd7aa-9092-46e9-8858-65744f452561", "sighting_of_ref": "indicator--54ed9fc8-5503-47f6-9b23-e45412f1eb1a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3242f6dc-8c7f-481e-ad55-2512fd5e5852", "sighting_of_ref": "indicator--54ed9fc8-5503-47f6-9b23-e45412f1eb1a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8ee83b-f269-40f1-9d7f-b5e518c0758c", "sighting_of_ref": "indicator--08b8572d-72d5-4f0b-aafd-83679f8e66ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f96ecee-7a10-4ba2-bf3c-57e2a5592b7b", "sighting_of_ref": "indicator--08b8572d-72d5-4f0b-aafd-83679f8e66ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55380d29-c048-46be-a33a-091fe3b3e9d7", "sighting_of_ref": "indicator--12b1ca3b-880b-4089-bad0-5d3db793c373", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a025666-21db-4e15-a83c-859f7ccababb", "sighting_of_ref": "indicator--12b1ca3b-880b-4089-bad0-5d3db793c373", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06511030-1de1-4790-84a8-a47916750763", "sighting_of_ref": "indicator--4f43de40-4707-4174-9355-9e41d7210930", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56cecfe-86b6-489c-8829-69bfdd045f0b", "sighting_of_ref": "indicator--96955215-1610-4391-b87e-58ef1b738e44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f92cc3-1db1-4ac6-b0fe-1a025d64111c", "sighting_of_ref": "indicator--96955215-1610-4391-b87e-58ef1b738e44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048e019c-b534-46ca-b278-f3a5e6be35b9", "sighting_of_ref": "indicator--96955215-1610-4391-b87e-58ef1b738e44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f42613-7555-4427-9a93-798660682163", "sighting_of_ref": "indicator--c7cebc40-bbf7-44d7-82e0-a70f411fa680", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13546c1-c3c7-4bb2-b246-fe07617c80c2", "sighting_of_ref": "indicator--3c309782-4853-49c5-9967-6162d646ef92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434d1617-615f-4aa7-8f0f-96e2e1dc4ea0", "sighting_of_ref": "indicator--3c309782-4853-49c5-9967-6162d646ef92", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00c4633-f234-4124-8007-47575702ac78", "sighting_of_ref": "indicator--3c309782-4853-49c5-9967-6162d646ef92", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7607f6a-421e-448f-b860-c0439371aa77", "sighting_of_ref": "indicator--4ac6558a-3560-4023-a891-5f2ecb769f38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc6c2f3-0223-42db-8337-06b5093b41b9", "sighting_of_ref": "indicator--4ac6558a-3560-4023-a891-5f2ecb769f38", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b02da7d-85e8-4e0d-9581-ad89729b30fb", "sighting_of_ref": "indicator--4ac6558a-3560-4023-a891-5f2ecb769f38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0796a8ad-7357-4b8d-8ec2-3b1133bb7360", "sighting_of_ref": "indicator--6c0e7e04-2c46-4026-8317-a59bea3fa035", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5fc6b4-e1ee-4db6-b6bb-380db91f8080", "sighting_of_ref": "indicator--6c0e7e04-2c46-4026-8317-a59bea3fa035", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38445287-4757-4f6b-b17f-73965f645f09", "sighting_of_ref": "indicator--6c0e7e04-2c46-4026-8317-a59bea3fa035", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e7122e-fdd4-4dae-b5f7-71eaeff8c844", "sighting_of_ref": "indicator--edb86916-67ca-4442-93f0-037f7ec0b316", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862b2ab1-671b-44eb-bce2-f183b3d738ea", "sighting_of_ref": "indicator--edb86916-67ca-4442-93f0-037f7ec0b316", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eda27a-4792-46cb-8393-853280d8600e", "sighting_of_ref": "indicator--4a2d53ab-3fc1-4669-a65d-2c5992d7dcb1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47899f2-6580-4197-8799-5a6b7f09c70c", "sighting_of_ref": "indicator--a9a72c10-e4c3-459f-acd7-ee14c4a8a49a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31416330-41b5-4cd2-8087-dcdd6bf40b9d", "sighting_of_ref": "indicator--9f5d204d-8052-4425-bc3a-991352ac0c0c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf5821b-e7c8-4fb4-8d2b-7f989f6eb247", "sighting_of_ref": "indicator--79a88222-1e1b-4e3d-8a93-837e685ec6da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ebe37d-7e76-4752-950d-38bdf280105e", "sighting_of_ref": "indicator--59a2ac39-74a2-4c7c-8426-1c8b014c98b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dadf7fc-07a0-4a25-9b21-eb3b5f11715d", "sighting_of_ref": "indicator--59a2ac39-74a2-4c7c-8426-1c8b014c98b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8aef94-ce32-4e22-bd14-f4b15d760f6e", "sighting_of_ref": "indicator--76f4b5c1-c73d-433f-9c18-7ab2ea397743", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5200615a-1ad6-4770-94bd-544d31560ee0", "sighting_of_ref": "indicator--6bd8846c-de87-4f9a-8b11-d7e34ef0fa24", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01796218-d047-48cd-bbb9-7d8e82c07227", "sighting_of_ref": "indicator--aa650bbc-b623-4ac4-85db-328c4bc1f919", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c356fc45-2cf1-4cc7-afd2-6b50f6af813b", "sighting_of_ref": "indicator--aa650bbc-b623-4ac4-85db-328c4bc1f919", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b001c124-6307-4024-95a6-21caf3b00cc6", "sighting_of_ref": "indicator--207c3664-e391-4da5-889e-af55b4631eda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d375f661-e4f3-4706-aef3-55bf070b5762", "sighting_of_ref": "indicator--4742fca4-9a20-4fc6-a77c-0a0e303ff7dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884e8091-146b-4b28-86d0-29925947c993", "sighting_of_ref": "indicator--9b4d4288-c623-4a00-8eb4-97869ab7cd18", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a25a3c3-c7c3-4727-8038-2aa13c3e4b19", "sighting_of_ref": "indicator--519a209c-6361-43f1-9e57-4b4a4c23529d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39231c6-c35d-4b5b-9ec5-6948970ca8d3", "sighting_of_ref": "indicator--d618319c-3de5-4cdb-8377-288554b5a201", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed5ed50-c2dc-4bb9-98bc-f81137aabd38", "sighting_of_ref": "indicator--5d30fcc9-03d0-43b6-8703-36eb720520d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409baac3-7e3c-451d-9714-3c61a4facd4f", "sighting_of_ref": "indicator--e8b443c2-40d4-4160-874c-2907d925d4dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c10c5e-8825-47b8-b1b4-f3f50e426519", "sighting_of_ref": "indicator--04d9f2c8-9e96-42b7-b629-bf065023dfba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8195fb-f79b-46ad-885c-d3c7cc4e0945", "sighting_of_ref": "indicator--548cb3e4-a044-4c8a-a79e-e6ca653e0715", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5169aabd-aae8-4a12-bd1c-56217667e5b0", "sighting_of_ref": "indicator--db9a1aa5-be37-4eb2-a6fa-fac5fe95b53a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c829ec33-1ae5-4239-8ea0-6dbda68e1bb8", "sighting_of_ref": "indicator--7d3c319d-a615-40d8-a682-c5bb1509b1ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2835c50-359e-4b6a-bdcc-584543aeca56", "sighting_of_ref": "indicator--4e5e3349-5269-45e4-a7a9-8ff195a53288", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e86d34-9529-478a-b921-adf7a54c6b20", "sighting_of_ref": "indicator--77e428c8-fab0-4d8b-9110-c8013b20ae97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58424767-fb36-4fb4-8edd-43a1fa5015bf", "sighting_of_ref": "indicator--8e215a62-9304-4ab3-84b1-06e2c5b60d4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceb5b4e-b7d1-476b-9eca-4aeae7790f5c", "sighting_of_ref": "indicator--8b16f8bb-c87b-42ff-a0c3-8dffa9d36ba4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577bf2e5-c4fe-4e8f-8df3-e9be38cac097", "sighting_of_ref": "indicator--72bb8ec8-7e82-42d1-a1ea-8bb8798bc8e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11075773-a628-4390-8b22-d84c32a2f6d1", "sighting_of_ref": "indicator--aa494d98-d780-4643-9ae3-42fc12702af4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770e3ead-71e0-4a67-8ae1-0ad26a70dc33", "sighting_of_ref": "indicator--dc872d66-db56-42a4-9027-5e2bcb1bcbf5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab219e7-b951-4a42-b235-1092caa8b511", "sighting_of_ref": "indicator--e5c465e6-930d-4d9a-8ee8-01fb854931ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b2fe3-c5b1-4589-98da-db77055910d4", "sighting_of_ref": "indicator--caf1f231-d74f-44d9-89e8-0d97b201d0ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd3aaec-6846-4cc0-9037-4b7e3bab5894", "sighting_of_ref": "indicator--a09c9036-667b-492b-80a8-79ea41c443c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdba40f5-eb3f-49a9-8e75-e82ea3393eb4", "sighting_of_ref": "indicator--17dd6643-8def-4e7f-a5ac-5e588a99d8ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601dd65f-19c4-4a8d-be6d-b28517e8b531", "sighting_of_ref": "indicator--3e3ee2aa-f24a-45ec-a01c-4984f68ca922", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f4b3a8-b2f3-454e-a745-65d1aea91263", "sighting_of_ref": "indicator--a45f3465-f42e-475a-b865-ea6bffa0d7db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f6d667-c756-4f13-8cba-32448be0b3c3", "sighting_of_ref": "indicator--ad1dbae8-d9d6-48e8-b615-e6bf1353fded", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86079c11-f99f-4c8b-8303-397df69978e4", "sighting_of_ref": "indicator--63be2d2c-5ce8-41c3-99fb-f77b9d81e8dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e674b5-767a-4465-b69a-b3e0fede91e7", "sighting_of_ref": "indicator--63be2d2c-5ce8-41c3-99fb-f77b9d81e8dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b8c860-5428-41b4-8b5d-2b04db4b259c", "sighting_of_ref": "indicator--1c32b869-58d0-46a6-a1ff-0a31bace1ad3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7418693f-e2a6-4159-b7a8-b7756e1f6890", "sighting_of_ref": "indicator--4325cf3c-60c4-4549-bff6-9b64913c16cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1101966d-3466-4a73-ab93-264b2a8a6644", "sighting_of_ref": "indicator--9d295b18-e8a7-481f-9dc8-985783aef9b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3218aeb4-4477-435e-b86d-cf20705355af", "sighting_of_ref": "indicator--7ebe5de4-1f48-4f52-84cc-049316a88796", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4388b3cd-61c4-4c5f-861f-d22a2d795f3b", "sighting_of_ref": "indicator--b39f7ecc-5239-4a99-8ba1-71b0d087924c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a529b64-2850-4f67-a952-b389f37b3d57", "sighting_of_ref": "indicator--b7086af4-3612-4754-b96f-643bbc41a7ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840b092e-f6f8-42d4-817e-abe877480923", "sighting_of_ref": "indicator--1cd629e2-5269-4e58-8c01-8e4eaa1100bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7e917e-b16d-41b8-83fd-7aac2fec6c9f", "sighting_of_ref": "indicator--841710c5-1c69-4536-a35d-7873a6774300", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17560da-3188-4814-96b4-0f9db5a7c9e2", "sighting_of_ref": "indicator--9ad4b344-b725-4909-a5ac-101086cb9881", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad6ad69-00c0-4f2c-bab4-c6e95e277842", "sighting_of_ref": "indicator--abc1e6f1-23f3-48c3-8b42-2e692cf705ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0d2d74-088a-43cb-bcb2-6aa6f2a2dc33", "sighting_of_ref": "indicator--1aacc36d-0b5a-40cc-b4b4-d29d29de9591", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3892cf-18a2-45b5-aaa7-af7f1dcc9514", "sighting_of_ref": "indicator--6ebf8b46-a9f1-4fb6-a7a2-8e4b3c242881", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5ff098-f637-41b9-ad08-d26c00a4b6c2", "sighting_of_ref": "indicator--c0bbde62-c135-40ba-bcdf-0224fb123101", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ea0b2b-5bb2-4982-b346-9e70a78fe628", "sighting_of_ref": "indicator--e1f23c27-ad53-4e20-b4dd-f8ea16f2eb35", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4defe8b0-1ff5-48b3-bf04-fac7ea951d9c", "sighting_of_ref": "indicator--66d4d4c1-3430-4984-ac95-b2b6774c25f7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7560ac14-23fe-49fc-a92e-2d917e1b1c6f", "sighting_of_ref": "indicator--e946ff8b-55dc-443b-9b5d-24bf245534da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593c4542-3869-4518-94fb-83a960b6c993", "sighting_of_ref": "indicator--e946ff8b-55dc-443b-9b5d-24bf245534da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7effc46-1bc9-4623-acac-354e8b4fa56a", "sighting_of_ref": "indicator--bf35290a-f8f2-49ba-875d-f74121e2d53d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecf89be-535b-4767-affb-aeb206be2663", "sighting_of_ref": "indicator--7da3a228-66c7-4c81-b7be-061314bc91f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15cb5c8-9c7d-408b-ac22-488e9da22256", "sighting_of_ref": "indicator--da3d2232-6b24-4131-bc1d-c837624a74d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cc44d3-de2b-4149-82e6-5d47a5cc5af7", "sighting_of_ref": "indicator--7a7eac01-9318-4299-88b7-961c88d6cab4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c5b6f9-ac60-441a-ac57-18b74cab1987", "sighting_of_ref": "indicator--bd6f967c-d672-4e09-b9fb-4805a9b9ec7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1be3400-73fb-407e-8dce-0e10baabe9c4", "sighting_of_ref": "indicator--bd6f967c-d672-4e09-b9fb-4805a9b9ec7b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4c4152-eeb3-4734-b6ec-b1c4b2effa42", "sighting_of_ref": "indicator--04789f4a-381e-4b54-841b-18648f68ef12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a89bda-2a7e-44da-a008-bbb552ce9367", "sighting_of_ref": "indicator--f0cfb8e3-47f0-41d7-a60c-55c599057501", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af652381-8149-4e80-af37-3c5d6979e85f", "sighting_of_ref": "indicator--85639e6b-89a2-4dde-ac04-c1eec1be26df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d9c48b-0be9-47b8-8537-7ec22952bc98", "sighting_of_ref": "indicator--afb38ae1-9db9-4fe8-a5c4-834eb4c4dbe7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc2b020-3a7c-433d-9b05-0dceb0d727ec", "sighting_of_ref": "indicator--e81074b9-cad7-4143-9334-9b7e71d6ae1a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0368f0-b381-4a43-9543-51a4c75b52b4", "sighting_of_ref": "indicator--d2f9e61a-690b-4531-aac0-5655c4b117cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c934de-1b11-4c93-abbf-b6d1e900c2e8", "sighting_of_ref": "indicator--95bbc18d-2321-4e05-bc4a-c3b5954ad0ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa3b27c-b8b5-4202-94de-a3e62d65784d", "sighting_of_ref": "indicator--b849d580-c9f0-403b-a097-6a65c8c061c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80656377-e627-450f-ab4b-a3ebb6ee9175", "sighting_of_ref": "indicator--b849d580-c9f0-403b-a097-6a65c8c061c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abda8c59-ff0a-459a-a6be-94f0b164df37", "sighting_of_ref": "indicator--b849d580-c9f0-403b-a097-6a65c8c061c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2784da-bd8d-4c2c-aa8b-28f0b87d5d09", "sighting_of_ref": "indicator--8e257aad-649d-4823-9a5b-94414addd658", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204aa321-19ea-448e-8573-7b7eb202e106", "sighting_of_ref": "indicator--dd472ef0-e668-4ab6-b20a-6532701a687f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68689945-ee24-4050-8cdc-d33790b96881", "sighting_of_ref": "indicator--dd472ef0-e668-4ab6-b20a-6532701a687f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbeb026-8a02-4139-97a5-53a9e8376c77", "sighting_of_ref": "indicator--dd14554c-dfa2-4e50-abc5-908147f443ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0a0da0-86b7-4f57-b123-a8e1bd023a48", "sighting_of_ref": "indicator--dd14554c-dfa2-4e50-abc5-908147f443ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af91f298-6381-4ca5-aa0c-cb42545d8ab8", "sighting_of_ref": "indicator--dd14554c-dfa2-4e50-abc5-908147f443ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f74887-7cf8-4df2-80dd-f37eda3efb37", "sighting_of_ref": "indicator--f3835d21-069e-46c9-8af7-803ea2931519", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f65615-3c88-467b-bc97-3165176f4af8", "sighting_of_ref": "indicator--f3835d21-069e-46c9-8af7-803ea2931519", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e057ed4-0172-471a-83bf-0d904dd43bc5", "sighting_of_ref": "indicator--f3835d21-069e-46c9-8af7-803ea2931519", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80336f8e-7325-4ee8-87c6-a478afef2485", "sighting_of_ref": "indicator--7b47a0d1-445c-4c22-8cba-96dcc266efc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d4b01f-dcc0-41d4-ba45-1ccee8e5af86", "sighting_of_ref": "indicator--4858db61-8d09-41df-88ca-667147400a09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86488f09-0d7e-4339-8278-3c4bafc5205b", "sighting_of_ref": "indicator--e7641e02-cdf6-4f2a-8a84-c67f46f581e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d226c7b1-ba2a-444e-9449-169076717420", "sighting_of_ref": "indicator--c732d4dc-4d6c-40ea-baf3-544923a55e5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6945cd0-1b9d-4c4f-b2b3-7bd2cf1731ca", "sighting_of_ref": "indicator--c4be4c0e-0fd0-4cd1-8a7b-f09c37d6e20e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765aea9b-dccb-427e-9bfd-9fce321d396b", "sighting_of_ref": "indicator--9f59b9c0-d179-4b30-8dee-046e4aa0f936", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9873e77-3e19-4deb-bf86-2e9a45973d4c", "sighting_of_ref": "indicator--94198c1b-551a-46f4-b4d6-414de7e4b60a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e038047-0862-4ec2-8415-b830d72f9ca9", "sighting_of_ref": "indicator--94198c1b-551a-46f4-b4d6-414de7e4b60a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005b563d-a0e3-41ee-b143-0b6e77868bb8", "sighting_of_ref": "indicator--1c2e12d2-dd68-4744-b68d-791cc0f178f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08964e3b-453e-4fa1-bc2a-ce07b29873b4", "sighting_of_ref": "indicator--c24e08a7-7e66-4b7e-b0a2-0a62c4d7eb46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620977d8-6302-463e-9e1f-7681d3cf3087", "sighting_of_ref": "indicator--253dbc2c-6b8f-4a58-8a57-715825cbf601", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561df4ae-528e-4270-82eb-19a57d94cb95", "sighting_of_ref": "indicator--253dbc2c-6b8f-4a58-8a57-715825cbf601", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2225d36-c527-4e24-8255-b587cb4076ec", "sighting_of_ref": "indicator--23dede97-37d5-4738-92a6-b9f4aa1a5177", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c099c00-a4ab-4774-8d65-8ef371cf8bed", "sighting_of_ref": "indicator--c27be369-447f-4827-a5ee-ef990eeeee29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0a6907-1a77-4d46-aecc-cd6684744abf", "sighting_of_ref": "indicator--f7810b6a-836e-4f2c-a7ff-4254fb98faea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aae5c19-9be0-43d4-bd97-b248b80fe21f", "sighting_of_ref": "indicator--af0fdad2-641e-4e42-a6ed-3b288443f750", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c47930-090f-489b-a5be-de2a2e0104d2", "sighting_of_ref": "indicator--af0fdad2-641e-4e42-a6ed-3b288443f750", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab28213-ef30-4b35-8dba-693642d6c16a", "sighting_of_ref": "indicator--af0fdad2-641e-4e42-a6ed-3b288443f750", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b857cc-f9ae-455f-a3fe-6d91f1421fcc", "sighting_of_ref": "indicator--5a18ef2d-793d-494a-9586-f7e7500c5434", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2282dab1-96b4-47e7-ba4d-ba530c21a37a", "sighting_of_ref": "indicator--5a18ef2d-793d-494a-9586-f7e7500c5434", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3d5fed-c40e-4c41-9add-060af29b6efe", "sighting_of_ref": "indicator--5a18ef2d-793d-494a-9586-f7e7500c5434", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54609989-8cf8-4eeb-8b19-8e11f3c3a835", "sighting_of_ref": "indicator--51d68d71-229c-4cea-9462-8be17c621c32", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9b70af-99e8-43c2-a059-b9df57139982", "sighting_of_ref": "indicator--07c66847-b36c-42dd-8cf8-6f338ae2b175", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300a7bba-0add-49ba-89bc-1c29a9984726", "sighting_of_ref": "indicator--73298f26-27fe-4037-8cd1-6ca865868fd9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f30b84f-e062-4b1a-8e42-fbb7018e8da8", "sighting_of_ref": "indicator--73298f26-27fe-4037-8cd1-6ca865868fd9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de730bd-2026-4645-b7e2-5ae526223bf2", "sighting_of_ref": "indicator--73298f26-27fe-4037-8cd1-6ca865868fd9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7547b976-1cc6-430f-a7cd-b182195f10c4", "sighting_of_ref": "indicator--af313d02-f82c-4425-b48a-b6b5cf70532c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2c8e68-64f1-41c3-a70a-0712c071f958", "sighting_of_ref": "indicator--33daeccf-b26a-4baf-86f3-1ee65eac367c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa97e494-04aa-4a85-b40e-c5ac7fe3b705", "sighting_of_ref": "indicator--1431f8b3-2c50-42fc-a006-98939c42d700", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ef63de-85f9-45ab-8871-45f0c904b8b5", "sighting_of_ref": "indicator--abcd5671-62e9-4a01-89fa-1f9fdafc0926", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3ec446-2168-4955-846e-d91de3c12587", "sighting_of_ref": "indicator--4d7b47f5-95d8-48ac-812f-5aee60fb25cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4683aa-d0d3-4885-8ab4-0233b7b2ae69", "sighting_of_ref": "indicator--ac633cc5-e90b-49ca-ae54-4872daa31328", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235d7317-5a3e-49f2-ba66-bd09e806d9a0", "sighting_of_ref": "indicator--ac633cc5-e90b-49ca-ae54-4872daa31328", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d5e505-0bbe-4141-9672-0429b7feb367", "sighting_of_ref": "indicator--c58a7dc8-c8a4-4047-acde-842a057bfb43", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb16e94d-3ab9-4c0d-bc86-282cb34cb4f4", "sighting_of_ref": "indicator--c58a7dc8-c8a4-4047-acde-842a057bfb43", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a1a4ae-2126-4ff9-a45c-6d8992e5ab1c", "sighting_of_ref": "indicator--5e8aedbd-9d48-4bc0-8346-2e02713186ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907017d0-c9cb-4aa3-b674-6a2674cfbc69", "sighting_of_ref": "indicator--bca0dac7-aa8c-4272-a328-7b334f27281b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8e1b79-e6be-4c12-9daa-e3980796a564", "sighting_of_ref": "indicator--be2f94c3-b019-43a5-b8a2-7fdf518a566e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0364167-c27c-4f89-a09d-fa76c9a83621", "sighting_of_ref": "indicator--4b129b4f-b397-4d2a-8295-0cc045a35501", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545369b9-b481-475f-a64f-d26e7424a731", "sighting_of_ref": "indicator--f016d49c-b837-48fa-9cb8-bb8775a81931", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06db5a8-d365-42bf-b5eb-52bf57f86186", "sighting_of_ref": "indicator--f016d49c-b837-48fa-9cb8-bb8775a81931", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493fa2dc-9f16-4849-b596-5afb43932b0e", "sighting_of_ref": "indicator--95620b56-2c38-434f-9bc9-6d0605d3f0b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a69b3b7-9f39-43e5-a35c-3aba6f02bb66", "sighting_of_ref": "indicator--95620b56-2c38-434f-9bc9-6d0605d3f0b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc9ff96-1429-4a0b-9975-78d4872711c7", "sighting_of_ref": "indicator--84337a0b-eb6c-43e9-93a5-7a41d2d2cd54", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0179410b-c574-426f-bc47-d8b416f8a084", "sighting_of_ref": "indicator--1fcc6098-11c0-4f30-8b2e-0d053b4fbee7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568a1d69-723c-4a0c-b1fc-f03881e18297", "sighting_of_ref": "indicator--1fcc6098-11c0-4f30-8b2e-0d053b4fbee7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efc36cd-7f39-4c9c-b64d-040eb1dd7d1d", "sighting_of_ref": "indicator--1fcc6098-11c0-4f30-8b2e-0d053b4fbee7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09b571f-1263-41e1-a9be-a6eea0e1d230", "sighting_of_ref": "indicator--cce3f8f2-9539-4d23-8f41-e65d46be4d82", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9bb0aa-a011-46a1-b632-944bf1027f90", "sighting_of_ref": "indicator--93b49210-8efd-404b-b81d-eeccf56297bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd832e7-6b5f-4b38-8892-861a1b20413a", "sighting_of_ref": "indicator--49755433-a991-44f5-b794-ac298eafe9e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0e60fa-4220-4926-be6c-66fda21fd223", "sighting_of_ref": "indicator--90d8acac-8fd6-4965-b8ef-489264e60ede", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f69ceaa-c534-4011-b532-a05cc56b6382", "sighting_of_ref": "indicator--d8044899-eae6-4d53-a31c-507204b1626e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993ea08e-8552-4c95-87f3-09635cf29fb7", "sighting_of_ref": "indicator--11b6034b-f440-439c-a099-4c778c666ae7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9804788d-ca05-4bd5-a0db-fa93bb63e541", "sighting_of_ref": "indicator--f8268c53-f6d3-4b9c-af46-c266c8a4306b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7020f1b-f442-4ad5-aea5-c2b73fafa7b5", "sighting_of_ref": "indicator--f8268c53-f6d3-4b9c-af46-c266c8a4306b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20524e58-5045-40ae-b269-1cc8657078a1", "sighting_of_ref": "indicator--f8268c53-f6d3-4b9c-af46-c266c8a4306b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8346eb-0fd8-4257-89e8-804242b7caaa", "sighting_of_ref": "indicator--970d50ac-7ec7-4835-a3a9-52d98ca884c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6d3aeb-0b64-47fa-9a59-e51a189088bc", "sighting_of_ref": "indicator--66256764-6dac-4d5d-9fde-01f8fcfc9c2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5cefd9-6e2e-4d89-804e-82c1bb552c45", "sighting_of_ref": "indicator--e00a461f-0794-4600-b133-c6317f09c753", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed88d5c-db46-43e1-ae68-fe71aac52f7f", "sighting_of_ref": "indicator--4ad9a51f-e394-4500-9d70-70dd03013f44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b0d716-9437-4280-b8a6-4ecd83b7ed9b", "sighting_of_ref": "indicator--e1fbf690-f6c6-4796-9800-0597f3cea792", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442cdfa6-94d4-4602-b3fd-ff331c9bfe55", "sighting_of_ref": "indicator--cbd2131b-a987-43b2-aa56-5b62c42ca7e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aedd0ce-794a-41fe-9324-4c42b8a41565", "sighting_of_ref": "indicator--8f851a15-fa82-46cd-9300-8e5ff2e83a94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7f985a-13b5-4ed7-b293-ae3c5fbb7ff4", "sighting_of_ref": "indicator--14fca0aa-97e7-44dc-80f5-9b89202dda8d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4abadc-005f-49f1-8839-15871fe18416", "sighting_of_ref": "indicator--ba6864f8-8200-41fc-a9c9-d23bd46265c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41191836-a144-4c38-a645-5de76594258b", "sighting_of_ref": "indicator--de9fe62b-9834-4559-9dd0-6ea0bbefc591", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41175bbc-cd06-460c-a923-69e533c15311", "sighting_of_ref": "indicator--3ebc776a-6b03-48c7-af30-d65e26f3fc2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c73bc5-68e0-4c1a-8612-f77ebb49436e", "sighting_of_ref": "indicator--c8f5bc3a-c61a-4ca2-85b3-d51490c88d35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c657cb-b5be-4518-b635-584f543df1ef", "sighting_of_ref": "indicator--e4f577e9-fdbe-43ff-8500-d416b46dece1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcf709a-63bf-4398-96c8-d913afe9ca8d", "sighting_of_ref": "indicator--cfba4e3b-f767-4ef9-a605-ed34d965ab66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a9699f-3ff4-46e9-8f0d-f89fc95b1dc6", "sighting_of_ref": "indicator--65f0fa94-f15a-43cc-b83e-9fc04bb39315", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9550d6e0-bf15-4b24-a2ea-a9a1fc6543a9", "sighting_of_ref": "indicator--3029d67b-c0ea-4941-a561-9e5e5787fbc1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28b7803-13a7-4a9e-993f-6758a6eb95c1", "sighting_of_ref": "indicator--9b45531e-0ffd-4147-9e52-bd9d2e0c7916", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561a34c9-aae4-423f-a1f3-5c630128482f", "sighting_of_ref": "indicator--7f665f7d-e191-4380-848f-6afd85e63407", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d43a27-58e5-43b8-94b7-6e5fbd1afd4e", "sighting_of_ref": "indicator--3e5ce433-cbd1-43cc-bcd4-495f7d9b308a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deff77d-ac44-4986-a562-aa9957488c83", "sighting_of_ref": "indicator--3e5ce433-cbd1-43cc-bcd4-495f7d9b308a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bd8fb3-06d6-451d-a191-1fb73eeaa1fc", "sighting_of_ref": "indicator--ddd612e9-d0bc-4d56-8279-0d1240027668", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a06327-e1d9-4083-b115-a81d6c9ad5ca", "sighting_of_ref": "indicator--3ad32be6-e075-4317-957e-61931c9ef9fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b280d65-e091-4192-a46f-ca1809c7f66b", "sighting_of_ref": "indicator--dc0d7b58-84f3-4021-b11f-3d850c1a270c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58137345-5c75-4a1b-a9af-1e1faeeb5efe", "sighting_of_ref": "indicator--1d71226d-e012-450b-b148-1d073a637dd7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ba3d04-1d33-4dd9-a016-81023456f6fb", "sighting_of_ref": "indicator--1d71226d-e012-450b-b148-1d073a637dd7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71f4523-7480-4c34-b928-432e116503c4", "sighting_of_ref": "indicator--1d71226d-e012-450b-b148-1d073a637dd7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b40b49-5fdb-435f-888a-07c2d81f53e0", "sighting_of_ref": "indicator--a82cda7d-1f03-4254-82ab-bb67fef700f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7667fde7-abe1-4801-8a3c-f1d4b4a0c74f", "sighting_of_ref": "indicator--b9647d8f-d781-449d-b660-25b58a44dc69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334e5ff2-bfef-4efe-a832-f7a15464be14", "sighting_of_ref": "indicator--b9647d8f-d781-449d-b660-25b58a44dc69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0677eae4-7cb4-4dac-9d8f-fb6baa0b4803", "sighting_of_ref": "indicator--d2f12f95-7f83-4556-938e-cd6b85ebf64b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb49b79-50b1-444b-a2a1-7f1a91372b06", "sighting_of_ref": "indicator--97dbb6b4-5517-4e4a-9861-3408bda5122b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde55ece-984e-4906-afb9-4d7535c4470a", "sighting_of_ref": "indicator--97dbb6b4-5517-4e4a-9861-3408bda5122b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aee4364-e78b-459c-8652-b5816855c38b", "sighting_of_ref": "indicator--97dbb6b4-5517-4e4a-9861-3408bda5122b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f012026a-e009-41ec-a1ea-a2af24d0efa9", "sighting_of_ref": "indicator--3d50479a-b4d6-466b-824d-895b24bbeb67", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a63091-9171-47f3-842f-d2c088fe69c6", "sighting_of_ref": "indicator--c8cbd142-3063-4d0c-98f5-315e647cc302", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f169b780-6698-47a8-b309-ccfc225af271", "sighting_of_ref": "indicator--e8261dd6-f288-47e2-bc5a-e72bafcfc59a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9871fb6d-92b3-4841-829b-de57aa2f85f9", "sighting_of_ref": "indicator--91159361-a98d-43b2-ad4f-7627eac9a431", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91e8d7c-1e6a-4c7f-b7e9-b2597d9ace20", "sighting_of_ref": "indicator--7f27a671-8288-4290-bde0-7f814f312eb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8da9120-a859-4c0e-a3fb-a4bdfdc9e57c", "sighting_of_ref": "indicator--0cf65c0c-4156-4494-a712-c607ab00f1a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad348d36-abb5-4d60-9559-90a1c64b0159", "sighting_of_ref": "indicator--54e70526-6cc6-45e1-bc48-06d5c2cec6f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb54acf-cb70-4054-9926-b628f00b587c", "sighting_of_ref": "indicator--4d70996f-c804-4a6d-b6fd-84bf90c7e846", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91ff3d3-eedd-40c7-94d1-67714ebb8d88", "sighting_of_ref": "indicator--773a7569-db9e-4a43-a32c-519962f0608c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3807b784-ca11-4134-9033-c040a9cab3cb", "sighting_of_ref": "indicator--96692a77-6ec7-46d5-8a46-7b888f5815bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24850d6-258f-41c6-bed1-4c19859e0f2f", "sighting_of_ref": "indicator--7555ef24-e74e-4d8f-93ad-84db07ce3d0f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d5e7ec-29e5-48a0-9278-5c06ff510438", "sighting_of_ref": "indicator--9fd35fc7-1001-42ef-a400-0432f5703b95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d612cc3d-f669-4517-b4a5-42f160abd0a1", "sighting_of_ref": "indicator--9720f803-7baa-48a5-81e0-e93201ed7ffa", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1875caf1-3bff-48fc-a5f7-050607e184f7", "sighting_of_ref": "indicator--188dbf4a-f22f-4038-bd06-e3079a72c280", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ec3f58-c703-4983-9e2e-f32eb59f0327", "sighting_of_ref": "indicator--5eae0287-a08a-4f82-91e4-2003749536d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcec280-4c74-4568-86b8-7a3019e17678", "sighting_of_ref": "indicator--1a7154f5-598a-413a-88a4-96a3007ec3ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4de2bd-93f2-4543-8e20-0c67d9cce357", "sighting_of_ref": "indicator--09929ac1-58fb-4830-8d12-12ed09722fe5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f7df0e-3f65-4a32-9701-d886f1616b4c", "sighting_of_ref": "indicator--ca441fc2-f456-4cb8-ac1b-92d4de42ba36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4aecc1-f20b-4e17-b915-e14ad4f0c13b", "sighting_of_ref": "indicator--1d4d6a4a-4109-446b-89cd-ee38c4c8e262", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17920dc8-8f23-4adc-acbc-bdc3fd019f08", "sighting_of_ref": "indicator--fa28a839-911e-425e-8175-2eb3d03355d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0fc5e1-e18d-453b-adde-fc94f716211e", "sighting_of_ref": "indicator--b60f4d4a-87e9-4a89-bb2d-1ebd12e29735", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbb6e39-735f-46f9-8cc8-cb238d539623", "sighting_of_ref": "indicator--a6c25d47-41ae-460c-bdb5-0efe6fad3778", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986bef1f-ae74-4406-ae02-cc01f1859f77", "sighting_of_ref": "indicator--2f9fe0f6-d48f-4a4d-9d45-ffa920fc9311", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58780bd3-8d97-47fd-9dd8-67138bfa1ac3", "sighting_of_ref": "indicator--e4090aa1-2433-4c70-a157-298cd5a4e42f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8b1d34-fe8d-43ff-a252-1b135964bdd1", "sighting_of_ref": "indicator--60005d9e-288d-458f-99de-1e2e4def585a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a692f1-9f1a-4a8e-ae9d-4788516e0703", "sighting_of_ref": "indicator--50ec1525-8a8d-45f5-845d-dc4a9f02e111", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19736b62-c9c5-42f9-ac07-5eafe64bf326", "sighting_of_ref": "indicator--084ae3cf-b38a-460a-9699-05c261c79ccd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5ac711-df71-4df4-a939-1c7305e7c33c", "sighting_of_ref": "indicator--a80ff647-25fd-4b2b-a134-c3c8e0d95cec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5ba175-ee20-4a6e-8cc5-710f6a81c748", "sighting_of_ref": "indicator--8d2fd3b4-ec54-4d12-9d2e-adc763fdc72c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcc9f34-c4a3-4906-adc4-a9f55ac8270a", "sighting_of_ref": "indicator--dcb8bcf0-7d54-4006-bb70-adca656f7071", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6a183d-210b-4125-ab59-60e9d5d12335", "sighting_of_ref": "indicator--7a8688d5-3a08-4870-a509-c09bded3a1bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6ea06c-02bc-4094-ac26-9060d739420a", "sighting_of_ref": "indicator--fc67fc97-5cd1-461f-8fe0-09c3a209e4c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b0c5fe-04ee-40df-8b4e-14ccb817a6cc", "sighting_of_ref": "indicator--9e05b651-e66d-4b39-b066-1b4870eb15d5", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb332fb-43ee-4d40-9db3-01c4069064f4", "sighting_of_ref": "indicator--871dffe0-5c7b-4a98-9f0c-594915b55389", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e59265-b034-4500-9c2b-83877416d1ef", "sighting_of_ref": "indicator--90be5021-644c-44c8-ad7a-e344db89a6e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16603021-cab3-446c-9959-480e0082530d", "sighting_of_ref": "indicator--a6aac2b3-3941-476d-9705-25b981896820", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2f6d2d-2f56-4e72-9b6c-4a658baa7896", "sighting_of_ref": "indicator--73979036-3cc2-4426-bd8c-1a0570e8272f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ece4f2-2671-421b-91e6-b1debfe5b903", "sighting_of_ref": "indicator--a2909472-f05f-40b0-85ed-9327c0d56ea2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910889ff-39d9-498f-ae7b-344152b889f3", "sighting_of_ref": "indicator--2f0a494c-048e-4cef-91ad-5560bce67d55", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bb31e8-87a5-4163-8b3e-3bf0391df3bf", "sighting_of_ref": "indicator--157cebc5-a6d8-4fa5-86ea-8dfb942fa5ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0670eaa-4165-434c-bb58-59f204a84d33", "sighting_of_ref": "indicator--9bbdbf89-d55d-4ee0-9ff7-2d876dd06bdd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eaec4f-19dc-4cdf-a977-acb9fae83492", "sighting_of_ref": "indicator--366224ae-89f4-4522-bf4b-58ab58128d0e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50c2c49-1ce7-421f-a946-b6baac4de93c", "sighting_of_ref": "indicator--30a44b54-fb24-4f56-b7bf-957df68001f4", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fca26c-a0dc-40db-bda0-96f7e376568a", "sighting_of_ref": "indicator--a682916a-a29d-4a18-b1d7-2e0ec5d68a9e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5124a7-c3ab-4778-bfef-c637567949a4", "sighting_of_ref": "indicator--0eadcd6f-706f-4922-a987-493f10f63ee2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7954446a-8b08-40c0-9fbb-4a5bb38fb2a2", "sighting_of_ref": "indicator--9d279c76-dd23-4854-970c-d1c6cd39dcf7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f5fc89-8a32-45bb-a799-ae6cb27dfacc", "sighting_of_ref": "indicator--dfd181bd-500a-43b9-8828-b57667996be8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea62f2cb-6fcc-48c8-86a9-cded43dadadd", "sighting_of_ref": "indicator--54f914c3-4d67-4283-9b62-f862a2040a74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4b482b-5969-4f37-b213-507ffda5b443", "sighting_of_ref": "indicator--0309f62a-d08a-4558-bea3-ef5bd700dae9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdb8d6f-b4ef-4c26-96ad-9d21a8dfbf0c", "sighting_of_ref": "indicator--dfdb164e-232c-41b8-9b67-32306a180343", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bf3be9-30d5-4861-8bbf-69877554f43e", "sighting_of_ref": "indicator--292ec1c5-635a-42c3-b479-352e20b47248", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925b40aa-3b10-4fb1-abad-863b453f97d9", "sighting_of_ref": "indicator--c97ce321-ab6b-4e9e-b911-0b54a634c9fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2ee0e6-e982-44d4-b39f-875d34eee7ab", "sighting_of_ref": "indicator--761e757a-d383-4fd4-8340-8b4ef02a0d59", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6572e20b-c5a6-4be6-96b5-0c495b15c8cc", "sighting_of_ref": "indicator--579db265-8a3c-4847-80b2-bcdb8e405ad7", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63960b1-1f79-4db1-930a-0f9b89816365", "sighting_of_ref": "indicator--0483015e-c34c-4e4c-b359-6b85af6a5ed5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bbc1ce-bb39-4528-aceb-06a56d55bf1c", "sighting_of_ref": "indicator--8add42a6-a3c6-4259-8f4d-10f14bf75e35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb72a28-990a-426f-8ce4-e3eed9975cb2", "sighting_of_ref": "indicator--147d1c7e-3751-4eb8-8887-6822b294a130", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b7f5d1-97a2-48c3-bda6-72132ffa9454", "sighting_of_ref": "indicator--bf746a72-59ff-448f-adff-5955184d35e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2b9953-ee7e-4e21-8999-ec9ae2d7f54b", "sighting_of_ref": "indicator--9b515b58-a537-4ef7-9401-3aedee8d9fd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6025943e-8c42-413c-89d7-f14213b4499f", "sighting_of_ref": "indicator--3559bd87-44e0-4475-99d5-330986211cdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb657fa-72b9-41f0-9a28-b981305c9100", "sighting_of_ref": "indicator--899c82fe-0980-4cee-aec4-7244a33a4e1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c00913-dd2d-412f-b1c5-2b4a41f88d14", "sighting_of_ref": "indicator--79f7234f-82b7-481a-a212-c42ec65231e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c9abe1-7cf9-461b-a605-0cd5c64612ab", "sighting_of_ref": "indicator--d4e7ce76-20f0-4dcb-90fd-1f032bbd3fea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93674e04-d0dd-4a09-b3d9-d78735431bfb", "sighting_of_ref": "indicator--4c77b181-5b32-41b6-9425-f05115ff79ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf25780-b402-49ff-a0f5-06d9c9d21241", "sighting_of_ref": "indicator--3c7690e5-ff34-4516-9ea8-e55970822da8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2e7ac5-63f1-448a-8eec-a98e0f0e82f0", "sighting_of_ref": "indicator--4d03c83e-28dc-4a5a-b673-e57053de242f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2871813-66db-422b-8bda-418848b8c537", "sighting_of_ref": "indicator--d24af791-f4dc-464c-be75-6c3971b6624a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e58d25-f4db-4d25-9959-3f50b4c360b1", "sighting_of_ref": "indicator--65d0ea97-eb79-464e-b479-73f91908b1e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043d3b89-9b22-4d0f-822b-eab975f94e67", "sighting_of_ref": "indicator--b441cbe6-b39e-4144-9691-671a5aaa0597", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b5be1a-f971-45cf-97da-3dee6035f11e", "sighting_of_ref": "indicator--728b006f-8976-483a-97eb-5324fdb0a838", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3899174b-9643-4f10-b191-5d4f1c6dd0bf", "sighting_of_ref": "indicator--dffb3792-f4d2-4fa4-a248-26b6807d04bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ea06f2-5bd2-452c-8399-57e1da7db425", "sighting_of_ref": "indicator--aec4f7b0-7fa6-4d8b-bc74-3f55c0a61c89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb64a8f-567b-4263-bd08-aa5b935a4f3e", "sighting_of_ref": "indicator--73c4ccc4-c032-46a6-815c-efd03010ae08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d16784f-f0ee-493c-a430-50eab3655cd9", "sighting_of_ref": "indicator--59d68e24-bc7f-4d86-8748-bff322431338", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaab218-8d73-4015-bdc1-7f20fbfcadf4", "sighting_of_ref": "indicator--6e146bef-c33a-4a79-9669-fba1ffbc0eef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc18f57-ad82-4395-886b-f780dd5897c3", "sighting_of_ref": "indicator--17f34c88-7da7-447b-8aca-2ef8533d7ecd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfab11f-059f-4096-92ed-42c353d5fccf", "sighting_of_ref": "indicator--8ed47d57-d8c5-494f-935e-0be49693ec9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70970e0-9bfd-4165-95b6-ce0573191684", "sighting_of_ref": "indicator--b5984d39-d334-46a4-8de2-9972ac2ddd0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4835d1cd-2925-4fc0-a71d-66bffd4c26c0", "sighting_of_ref": "indicator--66e4fcc6-a917-4cca-b322-ca9f3aba66f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a078f994-3767-4872-a40c-92b435c02a36", "sighting_of_ref": "indicator--b2fdc782-2357-4723-a344-0e708bc3534d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2880b0-dee6-437b-98d2-627932041a1c", "sighting_of_ref": "indicator--c959a91a-2998-464b-ad52-0590e8f69c14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d031e7-f825-4ce1-aed8-994541a4bd8d", "sighting_of_ref": "indicator--6f59ebb8-c828-4d0c-b7d6-ff184fcd80bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06804143-9667-4e8f-8871-0263d5e9c416", "sighting_of_ref": "indicator--313f745c-3b26-4e4a-b52b-1594f8d097cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb30616e-4904-4f80-893a-84b900267a8e", "sighting_of_ref": "indicator--252d21cb-98d0-4856-8d3a-e3ff11101419", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74befb47-0de4-4501-84b7-45d569baeafd", "sighting_of_ref": "indicator--a70fc6f6-07fb-494c-aa54-e911bd25b79d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93910df-ef98-419c-9972-e4a7d73523fa", "sighting_of_ref": "indicator--95dfa14d-c669-4f35-a33d-00b8efe6483b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5b04eb-1892-423e-bbfe-53baf340ede9", "sighting_of_ref": "indicator--f84b44fb-71cd-40d5-8d7d-9eed358b8142", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038d37a7-1ff5-4888-8f37-5abda7d266a1", "sighting_of_ref": "indicator--e6b7ddb3-863a-4b1e-8932-c419e636e6d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17827b0-44b5-4b31-8638-2662b333c8cb", "sighting_of_ref": "indicator--bc55fecb-2db2-4bdd-bf95-691d05dca4c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc5f24b-e46f-4bff-a79c-5cc17306030f", "sighting_of_ref": "indicator--cb7df673-1378-4e66-97a0-6679359af715", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c89b44b-ff7a-461f-865e-29dc27b208ad", "sighting_of_ref": "indicator--5869ef30-d546-4000-954f-b0aa606c1e8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bec65e8-8304-4e35-9fe1-8eb02de2d039", "sighting_of_ref": "indicator--6715e878-386e-4871-86aa-b41f824ec607", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5854b3-0f21-4e5a-9773-6515465a8a23", "sighting_of_ref": "indicator--61e631b6-7eb3-43aa-88e6-97c6769adeba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad19aae7-c273-4277-8ac5-1c6494edc870", "sighting_of_ref": "indicator--6b29a74a-9a28-4c73-9969-3afcb8a0c20a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e95d0a-97dd-4409-b844-681be6283841", "sighting_of_ref": "indicator--e49bce13-d5db-4c51-9de4-0d3d77bf22d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c31266-0bab-4387-8418-9c54a80db6c3", "sighting_of_ref": "indicator--45dc1ab4-73ca-417f-9ffe-8da6ed2a5478", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7cb822-f91a-4e10-ab41-af53eb17deed", "sighting_of_ref": "indicator--1e3b137d-276b-47d2-b459-fe65e0cb8b7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d817df7-ba1c-49de-a1fe-9926d5e251db", "sighting_of_ref": "indicator--d4559328-5692-4ef6-af03-531a7babfb67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fc3151-b3a2-4b07-adf3-ef20a8e785e1", "sighting_of_ref": "indicator--0a2b866e-aeb2-4d1a-a913-045ca88e2adf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bde946-82f8-4e6c-8a9c-77a5e1ade188", "sighting_of_ref": "indicator--b2315347-ef2a-434f-ac30-4033637d7f1a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9521d19f-8289-4676-a63a-e044b3c55a4b", "sighting_of_ref": "indicator--5daa2cea-9f0b-4039-966e-037bd10352ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e47f1d5-3281-40d5-8295-c337e2be4f85", "sighting_of_ref": "indicator--3c2190e7-26c0-4517-8c7e-6323f70b01b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ace08b-2f62-4ab3-9d59-2bfd814fefc9", "sighting_of_ref": "indicator--8fd4b28e-cca3-465e-92e1-17c954f3b1d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56046b7a-ecea-4068-9a32-e9673ce40183", "sighting_of_ref": "indicator--8e5aa179-c7b9-43f7-b4cb-ad960024d863", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0681c8-d970-4686-980f-2c3c4304f4b5", "sighting_of_ref": "indicator--88cfe31f-651c-425b-ae5a-4a47663b24f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce98530-e16e-46f1-a1ec-535a9c78d982", "sighting_of_ref": "indicator--2b9945a6-8164-4bde-851a-489bb9503409", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08269ed-7edf-423d-a040-acffad80fe4d", "sighting_of_ref": "indicator--a0b7b40d-8279-41da-85b8-0faee963e237", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ca4206-69d6-4e5e-a99b-8920533c51f3", "sighting_of_ref": "indicator--141c3105-b624-43be-8283-c102dac7f68c", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31eaec9a-de9e-4b0d-85e6-e468a7f73e47", "sighting_of_ref": "indicator--7e54f0da-6d64-4e2e-ac25-b870177ffa04", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1001badd-95d8-4dae-b2c1-1476d5f71258", "sighting_of_ref": "indicator--09a28670-a0c2-4e67-af53-621ac13850e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78091758-0122-430a-ace0-ba0c223357db", "sighting_of_ref": "indicator--74730e47-e73c-4ffd-a26e-459e2a8c66e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a77720-3082-4db7-aadf-d17da8180aa4", "sighting_of_ref": "indicator--72a2aa80-2da2-4f3b-807b-0a26f6e3c0eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fd7eac-7ced-4b69-bc22-e91fd068ec1c", "sighting_of_ref": "indicator--01538521-621f-40f6-9ba6-59fc5054e089", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbc5a71-5010-4b8a-b6e9-aaff9d375747", "sighting_of_ref": "indicator--392cfca7-a519-4615-8faa-001fc8ee5a35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002a6005-ea76-4a98-a56e-8a3745c15e9f", "sighting_of_ref": "indicator--8d965b95-ad3c-4c05-a722-75ebceb21a33", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c411a3b-b59c-408f-98c1-db05217b7f6c", "sighting_of_ref": "indicator--f38ea6ec-5f4b-4fc8-b7e5-bad1819b8bfc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a178a4c-5ea8-4b36-9368-e7c7f08f94d8", "sighting_of_ref": "indicator--5b585454-45a9-40bf-8afc-6800e86e0d7a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9becadc8-8a13-45ae-a7c8-ce603a389f35", "sighting_of_ref": "indicator--e4762b03-d0e3-40de-9856-c36db7416ef4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e71cb1-cb49-4430-896a-271b574cc21b", "sighting_of_ref": "indicator--01f14a6f-d2f1-4533-b1b3-a753adca410f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0327e1-af12-4ca4-9bb3-4a110bed6686", "sighting_of_ref": "indicator--ab5754bb-a136-49b3-96f0-37b5c7ffc336", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4796052-f494-4b37-b0ae-db804a3e952b", "sighting_of_ref": "indicator--0ec716e6-7e5c-49b6-acf4-dba3c36f4021", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92755d5-a126-4dbc-ad30-a577743f731e", "sighting_of_ref": "indicator--896cfa60-bd00-434b-9f70-fea4dad4f9ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1649c2eb-25db-40af-9c0d-dd59593f352a", "sighting_of_ref": "indicator--996d927e-d0fa-4231-b444-154282c1e668", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd90256-7793-4a9a-a695-9ca98651c9ce", "sighting_of_ref": "indicator--9ae44a89-c8b5-45c3-a1eb-40b6e78feed1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118595f2-a234-4b1a-9c15-98d2fcd638c9", "sighting_of_ref": "indicator--89157d39-9bf6-4822-8db3-278baaaa3768", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2ecb29-016e-4016-b5b1-9a0e1971332c", "sighting_of_ref": "indicator--34e79a69-7dd1-46fd-9087-681066b3ad74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b633a4c-89b6-455f-b663-f5bc889caf7d", "sighting_of_ref": "indicator--5bdb78ad-0d62-4e7f-b65c-2d903683c554", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcbeb50-4ab6-47e0-9b95-459658f269ba", "sighting_of_ref": "indicator--093d586b-e27b-4663-964e-4f928946a1e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f55086-69ff-4265-aecd-6ee25f09531e", "sighting_of_ref": "indicator--87e20805-e2c0-431c-b84d-cad116b50198", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5132daf-3af7-4b43-8c08-7233752a4102", "sighting_of_ref": "indicator--19f7b0e3-2bf1-4bf5-a6fb-a2a3c1090cec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28625557-db66-4b0b-aa45-9be15158c547", "sighting_of_ref": "indicator--2b3d6740-dd54-4b68-81e6-bd17e7b83018", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5037b0bf-b91a-469f-9b5d-89d49941bd55", "sighting_of_ref": "indicator--7b64b238-aed5-431f-a185-84eae451353f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2697d438-e3de-4462-bdda-dbf7869f04e9", "sighting_of_ref": "indicator--af65df0a-ab29-4c48-b3b3-2a00e86c2bd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6989ed-6f9b-434b-bf4d-db0a9f48a6ac", "sighting_of_ref": "indicator--16bde7c7-d4fc-4462-9c9e-54c09bf5b9b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fd04a1-fcf4-4e55-ac58-056d097d70ac", "sighting_of_ref": "indicator--053365b3-e8a7-4460-b6a2-31780c8e538a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad667dd-c265-4aca-b4ea-c703cb22f155", "sighting_of_ref": "indicator--abe5ba1b-035f-4541-892e-a9138f104251", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd604be-655c-4778-82ff-06ad92779139", "sighting_of_ref": "indicator--dcdcbb10-4fbd-42b3-bde4-82c9fa66c531", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86058943-40a2-4f23-afad-f40da71d31ae", "sighting_of_ref": "indicator--7c6eab5c-abce-41b9-b6ef-26e6fa90e67b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54cd3e4-5e18-42d3-9754-64aafa790d26", "sighting_of_ref": "indicator--190980b6-6582-4be7-a813-a40e3f821408", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b0d70f-fedf-43ff-bb3a-edfb0f0131b0", "sighting_of_ref": "indicator--b0b37176-22df-42cf-9fbb-6f7d79bd954d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ca1cec-d93e-43e9-9ce4-6ef1244b763a", "sighting_of_ref": "indicator--fa869edd-fb59-431d-8834-fc3c9b2d515f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2b18b4-450f-4f2e-b4a1-4ddf1eb496d4", "sighting_of_ref": "indicator--5e960b5f-9a6d-4505-a341-3d599af84f08", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f299d5-2cce-4da9-b9e5-9d317724058e", "sighting_of_ref": "indicator--39b3f02a-9db8-4d6e-a793-c6e1575d324a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8b2b58-38d8-468b-b1c4-1ed3792584fd", "sighting_of_ref": "indicator--d06c8c65-46c8-4d67-8ff2-d10b9525c405", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb6ea18-56c8-48d0-82c3-a4e95ced24ed", "sighting_of_ref": "indicator--cf7f84b9-d702-4eb4-a371-4c13a3fff983", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40dfe05-0343-4ea9-ad03-e923efa968bb", "sighting_of_ref": "indicator--7d0df93b-510d-4261-a246-47c31398f0dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d957c48-9479-4a30-a259-486dcb402f21", "sighting_of_ref": "indicator--bbee9444-6516-46ef-b5c1-dbc24ef56faf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc56b1f-28ee-4eaf-a9a3-1ad0acb6d103", "sighting_of_ref": "indicator--590db620-badc-4b41-a574-54869775fcfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7f211c-63b3-4984-b80f-c66972f61682", "sighting_of_ref": "indicator--cdca90a1-ee4b-4113-b275-21c994b2b254", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fda91d-6147-4cb7-ac90-440fa83832e7", "sighting_of_ref": "indicator--c567cb70-c9b4-46d0-a1f0-ae44d0d0c4d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd452d15-8a06-4aaf-8562-cab4ef7e10c5", "sighting_of_ref": "indicator--10c1ee48-86fe-4603-92d2-540f5b588c87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5063014-2cff-4f40-a390-ec22adc16a9c", "sighting_of_ref": "indicator--eeef5e8f-61f3-40f2-a6f6-9b46639bc6eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180ec872-2912-45af-b6d9-a2949a94798d", "sighting_of_ref": "indicator--307d20cc-d37c-4602-91bc-7764793c3cff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7232b370-83dc-4f05-a37b-68ef13245fbc", "sighting_of_ref": "indicator--654a12d2-5cbf-40b1-9afa-83eaf98cfa3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd96d4f6-a650-47c4-b770-527bb6260ae5", "sighting_of_ref": "indicator--dffd9fc4-c5ed-4c36-b916-417f0394e6a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f368eb-cf7b-4ff3-8f6e-19c23b5aafe0", "sighting_of_ref": "indicator--b19d71f9-9c9b-4086-9ac7-ea1e9d4847f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ad3ede-b2e9-42eb-8308-ca06d5d5e9df", "sighting_of_ref": "indicator--6716099e-8562-4798-9bcf-beb074509428", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93245646-b93e-471a-b0c1-5d4920ab5afe", "sighting_of_ref": "indicator--dd920ed2-0182-41c0-a8bf-7d9642a50eb0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8bdf2e-bad8-448d-942e-ad38b540f43d", "sighting_of_ref": "indicator--943cd9fc-ec4d-4258-b85f-edd033e06d42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be119499-b0f0-403c-bdeb-a3e4d2b9aa52", "sighting_of_ref": "indicator--15c80e63-97c6-4b4a-bb4b-3cdc1b80c9c9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a1899-8e6b-475f-8b23-9f8682eeb197", "sighting_of_ref": "indicator--b6bc514c-e23c-4dc6-a4f2-df9c47cb1ed0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52665355-936e-4c23-958e-ff772209d533", "sighting_of_ref": "indicator--6d007410-194e-4063-b809-21e6f5dc1d4d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb7c785-9925-4b59-a8c3-84207b5b4b24", "sighting_of_ref": "indicator--201e4a54-67a1-40f1-bd41-80957232fb71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd793c0-2ed2-41c3-b358-358b711f6e83", "sighting_of_ref": "indicator--345552f4-62c5-4c02-ad89-571c53b3d411", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b034b9-899b-4114-bcee-c7ffd1db0def", "sighting_of_ref": "indicator--f08bb558-53bb-4364-b130-26d795895f5b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71d01f7-2456-4155-8299-4e41bf1e24b2", "sighting_of_ref": "indicator--112eeac9-cddd-47f8-9c4c-b016d691c1b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46651979-55c9-4414-a0de-4808956187a5", "sighting_of_ref": "indicator--4284e9af-618a-4005-a7b8-f4c2ec1132d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3df502-a991-4985-b651-e57653a45f91", "sighting_of_ref": "indicator--ba65a747-a0b8-478b-a8b3-a2bcdf4a0647", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bee35b-a0ab-44fe-9b6a-ff780000e9a4", "sighting_of_ref": "indicator--ca179644-967b-4143-9b7d-249dd275095b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01969cf1-f499-4a62-8c41-e564ef3fb83f", "sighting_of_ref": "indicator--ca179644-967b-4143-9b7d-249dd275095b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde79b50-75d1-4497-b880-26ed380b886d", "sighting_of_ref": "indicator--e9f27b6a-69c2-4e7f-a30b-23935f8f5954", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3fc346-a1fb-47a3-8c60-f6db65fe22d0", "sighting_of_ref": "indicator--b5fbc9e4-2517-4c11-a315-27668f511bca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882f12df-bdde-4b25-b63c-a525da424ba6", "sighting_of_ref": "indicator--583c6cb2-d8f4-44b5-a09f-f842ff6cb18a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06f5e1a-a4e8-4a2f-a9ce-3e2bd8653bab", "sighting_of_ref": "indicator--ef0645a5-f940-4278-b585-11eb95c4135b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc42af1-131e-455f-a7aa-1dc97d6d15a5", "sighting_of_ref": "indicator--571cd823-0e7c-4ea6-a711-e2072d1b953b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7691421e-f69a-43ae-96fa-89718911c5dc", "sighting_of_ref": "indicator--ab00b777-f992-4cba-a86b-885458da3679", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686cfad6-2e5d-4e1b-88bf-4b2cd96edbaf", "sighting_of_ref": "indicator--75ebd737-e2fb-4588-9c42-f3732eb42caf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a3646c-3227-494d-9ed3-3a02eb986303", "sighting_of_ref": "indicator--a2d85a46-58b2-465a-8ca3-5e5a4c04441b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0faed3-e667-451b-83c4-573621359225", "sighting_of_ref": "indicator--f439b290-8887-4f8a-8f68-c21a452541b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79df699a-95da-47a4-81a9-1529c332ce9d", "sighting_of_ref": "indicator--9ed3da79-532f-4b7a-b94a-8e543c902acf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16f8a22-70fe-496f-aaa3-e47d16503320", "sighting_of_ref": "indicator--36009266-35fc-4bb6-aa8a-908731579b23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0f270b-fabb-4022-881c-0f1925824d75", "sighting_of_ref": "indicator--36009266-35fc-4bb6-aa8a-908731579b23", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52f8281-88ec-4e83-a0df-1876a6fe22b3", "sighting_of_ref": "indicator--4354849a-8da9-45f3-a8c8-e0061a795ebb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb39f49-5aa1-4eaf-916b-a126c8f5507d", "sighting_of_ref": "indicator--14f7d93b-1191-42bc-b11d-792c2adea621", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2f8806-00ba-42b1-ac2a-5cbccd3f713a", "sighting_of_ref": "indicator--1130948d-eb3a-4ffb-a234-6dc5dd8e67ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51a02a5-ba17-4f18-adef-09a6b7c7dc84", "sighting_of_ref": "indicator--7242ba5c-9753-45eb-886d-4b12e870febf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cfcd82-3781-4e05-a53d-5d70d4a6423f", "sighting_of_ref": "indicator--593f3573-0ee5-46d0-8839-86d068190692", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f01f76-c2fe-465f-bf16-96195f22e12d", "sighting_of_ref": "indicator--36faf273-d8f5-43b9-ac57-d2bf3a552380", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d123124-84d5-41e6-9048-0bcd75bac374", "sighting_of_ref": "indicator--36faf273-d8f5-43b9-ac57-d2bf3a552380", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e10e827-cddc-43fb-88a6-aee9403ff036", "sighting_of_ref": "indicator--36faf273-d8f5-43b9-ac57-d2bf3a552380", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3954c4-1255-44f3-bd0c-1589ad4615fb", "sighting_of_ref": "indicator--02c74f44-05f4-4512-adbd-78ae23b15c45", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccdc46e-bc38-4891-a44c-87ac06b13bfc", "sighting_of_ref": "indicator--02c74f44-05f4-4512-adbd-78ae23b15c45", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23996c89-211c-436b-bac4-909f93c28fb5", "sighting_of_ref": "indicator--02c74f44-05f4-4512-adbd-78ae23b15c45", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a265e1ae-93b1-4333-984f-8d5ee21ae0ec", "sighting_of_ref": "indicator--0759ae4e-ccf2-4ea9-9276-71c3f25f54cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3377d344-d707-4e99-97f5-9989a1aca99d", "sighting_of_ref": "indicator--da790355-897b-4110-8ca8-839b6bf0642d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4692d3-fcfb-456f-b97d-77a1aaae6662", "sighting_of_ref": "indicator--1df4b62a-e9b3-45ae-b1ea-3153708887c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405fb82d-273a-4af0-9254-9b7594beb33d", "sighting_of_ref": "indicator--1df4b62a-e9b3-45ae-b1ea-3153708887c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eed9775-facb-4fcb-bd6a-1b8e08d214ba", "sighting_of_ref": "indicator--8c5b697d-4869-4c2d-bd3f-898088b97aba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b8bb2d-c83b-4d05-9094-286b3d293378", "sighting_of_ref": "indicator--8c5b697d-4869-4c2d-bd3f-898088b97aba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a0f21a-2318-4aff-9b32-826304de3592", "sighting_of_ref": "indicator--8c5b697d-4869-4c2d-bd3f-898088b97aba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853e8e10-5dda-4e37-a44a-a7d057120100", "sighting_of_ref": "indicator--7654e1e6-4717-4621-ad76-9c5b10431e3e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2667ba87-1631-4dbb-b932-58f735767210", "sighting_of_ref": "indicator--74bc6ede-a620-4e27-a40a-f9bc8a84e434", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfd561f-1272-4ac5-a2ba-a77426dd61dd", "sighting_of_ref": "indicator--74bc6ede-a620-4e27-a40a-f9bc8a84e434", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036d61c8-8514-4fbd-ba06-e9edc49de9a7", "sighting_of_ref": "indicator--2db377f0-38f6-4254-ae15-3f9eb3b4f038", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51170d2-9b01-4937-ae98-abc55114e718", "sighting_of_ref": "indicator--b84de852-fba4-4d77-965f-7bda5903aa88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7f0f34-6678-46f3-92f9-b142d0c3693c", "sighting_of_ref": "indicator--b84de852-fba4-4d77-965f-7bda5903aa88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89255c4f-3fcd-4d8a-b832-446344ef23cb", "sighting_of_ref": "indicator--b84de852-fba4-4d77-965f-7bda5903aa88", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93aec91-2841-4ad8-9102-2e87d6f26bfc", "sighting_of_ref": "indicator--69fa70bd-31c3-4bf1-a5dc-10281fa0752a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70ccaa5-3f5a-4c7a-8522-63785a57a064", "sighting_of_ref": "indicator--69fa70bd-31c3-4bf1-a5dc-10281fa0752a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1106dc-8d19-4480-8b3f-a322d83726d7", "sighting_of_ref": "indicator--69fa70bd-31c3-4bf1-a5dc-10281fa0752a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19399749-8693-45b3-8bc7-dd8d3ac0fbbe", "sighting_of_ref": "indicator--48e8aea1-e5d9-4015-83a9-54104e1ca4fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5914d54-3f58-4ffc-9d7f-c180cff8bc7d", "sighting_of_ref": "indicator--f51c9213-2f83-4c0b-ab35-103859755423", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2e8429-47a3-4017-a60a-637eac6a450d", "sighting_of_ref": "indicator--cac8d146-2dbc-4867-b035-a6cb7577d1fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1e0588-6833-45ca-a874-ec252e80f6d1", "sighting_of_ref": "indicator--f34e7672-c4f1-4aac-b1a3-802edd259d59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95acb6c-c9a2-4901-ab37-fe211549acaf", "sighting_of_ref": "indicator--f34e7672-c4f1-4aac-b1a3-802edd259d59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f93cb0-219a-4d57-91b7-d0883bff9801", "sighting_of_ref": "indicator--494cf83e-ca83-4bb2-bfce-078e30154d0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c4b55b-ce31-4e61-ac73-71d4b22116dd", "sighting_of_ref": "indicator--b55bf183-7819-4b0e-936e-6bc01e4219ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a26f71-9669-4c2b-9c05-81748f462588", "sighting_of_ref": "indicator--b55bf183-7819-4b0e-936e-6bc01e4219ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548b3483-d64f-42fe-ba85-2cc74d314412", "sighting_of_ref": "indicator--b55bf183-7819-4b0e-936e-6bc01e4219ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac753c5-e587-40b9-907e-113d526e98ea", "sighting_of_ref": "indicator--50b355fd-1fd4-459e-9ee1-55afb890aaa3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecb85a1-5975-4400-abbc-f3cc67d659d9", "sighting_of_ref": "indicator--6e4ef140-4a50-42a3-8521-d22dfa000d44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81665fa2-b804-454b-aa56-4aeddcf388ed", "sighting_of_ref": "indicator--6e4ef140-4a50-42a3-8521-d22dfa000d44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c01beae-b7b9-4e74-a065-7bfa94b27f95", "sighting_of_ref": "indicator--ebe6ccf7-d4a3-4d9d-adbf-546dcbf31aa7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aaa4bf-49be-41f3-8ef6-d41d7169daaa", "sighting_of_ref": "indicator--02b4aab4-0226-4793-a09c-5413ab486ed8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2271efa8-e5e2-4d0e-b2e5-4d301d99e159", "sighting_of_ref": "indicator--e2f0e684-61f9-40ec-a0e6-179b2df7dd85", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80521118-dd9b-420f-b2de-79fcd3026333", "sighting_of_ref": "indicator--ef825ab3-5c58-4719-8f09-a6118102be5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb524bc5-e2b4-48fd-93c1-b96a6f715e0d", "sighting_of_ref": "indicator--ef825ab3-5c58-4719-8f09-a6118102be5b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ffce06-ef28-4a8a-ae04-dcfb570fe536", "sighting_of_ref": "indicator--dce210de-ab8b-4945-859f-f66cc75730cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20703829-683b-4020-bb10-cb472e7eb42b", "sighting_of_ref": "indicator--dce210de-ab8b-4945-859f-f66cc75730cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2d6ba4-9de6-4c5c-ae05-6f9af7005572", "sighting_of_ref": "indicator--4ea29043-995f-4599-b13b-91fc69569cdd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72f61a5-56ae-4416-84f7-c116f903415d", "sighting_of_ref": "indicator--4ea29043-995f-4599-b13b-91fc69569cdd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc73e5c-dc20-4068-bb53-ab9e14d3fb16", "sighting_of_ref": "indicator--a4965d97-4642-41f0-9496-2ab03d6b153c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8ebdb5-ba59-4633-a8ff-b9f73b3b2701", "sighting_of_ref": "indicator--a4965d97-4642-41f0-9496-2ab03d6b153c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6160390c-596a-4604-b70f-6da54b452486", "sighting_of_ref": "indicator--e915736e-af57-4bb5-941c-250e310a9ee1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49cff1c-66c1-4bed-8cb3-f16a67f8e3a3", "sighting_of_ref": "indicator--e915736e-af57-4bb5-941c-250e310a9ee1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2a9ed5-c607-45ed-97f2-ff8a960ec766", "sighting_of_ref": "indicator--e915736e-af57-4bb5-941c-250e310a9ee1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2668b140-6c12-4396-a55a-933e27fc3dc8", "sighting_of_ref": "indicator--433b6b7a-e0c5-4f0e-8ea8-ff6d0fb939d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9367bfcf-42b9-4c0f-9622-1a70fa918fd2", "sighting_of_ref": "indicator--433b6b7a-e0c5-4f0e-8ea8-ff6d0fb939d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386eb3f4-feb9-4643-ac65-73731d9e85e0", "sighting_of_ref": "indicator--433b6b7a-e0c5-4f0e-8ea8-ff6d0fb939d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2136cf70-442a-4c82-b1b8-95eff05fa66c", "sighting_of_ref": "indicator--eb4e02be-6b75-4d6f-93a5-0801fa764c27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b414510-a953-4fcf-b40a-c667d93231ec", "sighting_of_ref": "indicator--eb4e02be-6b75-4d6f-93a5-0801fa764c27", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c55b60-b527-40e9-9bae-8718ca4b3972", "sighting_of_ref": "indicator--58ca2287-170f-45d3-a03e-4ed4e9a6aeb3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe8242a-3cd9-43f9-ae0c-733cef710c34", "sighting_of_ref": "indicator--4c20f01b-ee00-495b-b3b2-c35c0646239a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bea569-d810-4cdb-a2fd-9b4907baea18", "sighting_of_ref": "indicator--73c2e432-e16e-4487-aa6b-6cd0b79b1a77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78759f3e-8bc8-4043-ae0b-27180a99918f", "sighting_of_ref": "indicator--73c2e432-e16e-4487-aa6b-6cd0b79b1a77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163d1830-e70f-400d-bde7-18aaf4964ad8", "sighting_of_ref": "indicator--8d4a8047-2518-4b6c-90e6-a9a85d0fe2e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1e3419-fa4c-49c1-bc49-659d8c2fc927", "sighting_of_ref": "indicator--90ff3b8f-2a9e-4be0-b9dd-ac5b8573637c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c168a66-d3f3-49cb-8cf1-c46bb3dfae2d", "sighting_of_ref": "indicator--90ff3b8f-2a9e-4be0-b9dd-ac5b8573637c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcc265d-109d-4e58-999b-ac8a7cc9dc97", "sighting_of_ref": "indicator--90ff3b8f-2a9e-4be0-b9dd-ac5b8573637c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c24470b-41e5-4ba8-81ca-af835eaa3d71", "sighting_of_ref": "indicator--b9a19131-3edf-48a7-b5a4-77e96ea9f91f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d3dee-4bd5-4b0c-bae6-f99da80cb759", "sighting_of_ref": "indicator--61d24955-377f-4445-8abc-85ffdb6bcaf9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45eac060-eb7a-43e5-b5e2-f5f5244e4a97", "sighting_of_ref": "indicator--895ea004-89aa-4352-a4f5-f18d3d6fea7f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24b2f7a-4120-464c-9784-12cbbe915b4d", "sighting_of_ref": "indicator--895ea004-89aa-4352-a4f5-f18d3d6fea7f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ce7513-0bed-4e23-8009-e09a0e48cb99", "sighting_of_ref": "indicator--2016dbfc-256d-496e-bb79-33c09b08d9e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c528f8-cdf2-4ee0-9634-897f073bd937", "sighting_of_ref": "indicator--aa8bae6e-2e9f-478e-b694-b747b5ffd02d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a2325a-63c3-4de3-a0a1-1fbccd0bcf35", "sighting_of_ref": "indicator--aa8bae6e-2e9f-478e-b694-b747b5ffd02d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb76ab2-fa7a-4c12-a12f-986d348f5878", "sighting_of_ref": "indicator--a5b205e3-06d2-4d04-b673-58eb1f04c22d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de94d2c-c65d-4362-b337-f35024882880", "sighting_of_ref": "indicator--2e861268-70e6-4992-91c9-c794fa227145", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2680c61a-3d24-49e3-b5c1-e3feccf81b6b", "sighting_of_ref": "indicator--e326a2b6-091d-4155-abe8-2a19d52ae3dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e163727-e102-41e0-abec-404271441b69", "sighting_of_ref": "indicator--e326a2b6-091d-4155-abe8-2a19d52ae3dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb7aa22-23e4-4c92-8142-de5c9ed81dce", "sighting_of_ref": "indicator--e8894148-6d8f-40e2-9828-2b968b5d05f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6f9553-4977-40d4-9021-5f0274eb4ab4", "sighting_of_ref": "indicator--e8894148-6d8f-40e2-9828-2b968b5d05f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8fa3b6-5a14-4d47-989f-b8e4abfbf51c", "sighting_of_ref": "indicator--e8894148-6d8f-40e2-9828-2b968b5d05f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a683867-0c16-4473-a7a3-1c235bf4ac98", "sighting_of_ref": "indicator--dc6796f2-b61b-4c4d-99d3-31d69292ebcc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa58931d-3fcb-40aa-9503-a14e12598bd6", "sighting_of_ref": "indicator--dc6796f2-b61b-4c4d-99d3-31d69292ebcc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e22a0-1455-4860-970a-5cdc0785ac11", "sighting_of_ref": "indicator--dc6796f2-b61b-4c4d-99d3-31d69292ebcc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea8ab21-2a19-464c-bbae-c2c49b044b1a", "sighting_of_ref": "indicator--e923651b-c5a5-4bbb-aa7e-64a1eca4e3d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3818d12b-98e4-46b4-8a8b-7f0668ecf45a", "sighting_of_ref": "indicator--e923651b-c5a5-4bbb-aa7e-64a1eca4e3d2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a368a3d-4e5c-4fbd-b57d-c2bbab3a42a0", "sighting_of_ref": "indicator--e923651b-c5a5-4bbb-aa7e-64a1eca4e3d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623502da-49ec-482f-8ee7-a35424a73afd", "sighting_of_ref": "indicator--22c5e72a-4a3d-4378-941e-5d03478a3c1a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef6d6f2-c5bf-416b-b650-efe22e456dd8", "sighting_of_ref": "indicator--7f726032-cadf-4c51-b45d-a2d5a221f841", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a7a03-e019-4dba-84ef-af56e6dda02a", "sighting_of_ref": "indicator--cbfcd12d-ef3b-4c28-b45f-4e062efdd36e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946e60cf-59a0-4c3d-8d87-8437071fab72", "sighting_of_ref": "indicator--de65d98e-05a1-41c7-a3ff-ab3fc227736a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fb159b-0b63-459f-8b93-ecc26d2a0a08", "sighting_of_ref": "indicator--de65d98e-05a1-41c7-a3ff-ab3fc227736a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816e0362-71ae-438a-aa05-75500fcab625", "sighting_of_ref": "indicator--de65d98e-05a1-41c7-a3ff-ab3fc227736a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11028876-1c13-4bc0-b48a-04c707434a64", "sighting_of_ref": "indicator--9ff98b9e-a1f1-4c28-b7a9-82dadcfafe75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86484ea-08a5-426b-89b7-e92731717d47", "sighting_of_ref": "indicator--9ff98b9e-a1f1-4c28-b7a9-82dadcfafe75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d7c64c-6395-4900-a212-b410a43a218e", "sighting_of_ref": "indicator--9ff98b9e-a1f1-4c28-b7a9-82dadcfafe75", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513514aa-b0d1-4d10-bebc-7dfa6c6f88c3", "sighting_of_ref": "indicator--284e30ab-d4c9-4d58-b886-e3da3d8abb15", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41c6c57-bc1c-42c6-870b-f81752a35057", "sighting_of_ref": "indicator--284e30ab-d4c9-4d58-b886-e3da3d8abb15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2e337e-d8d1-4a61-a366-1314605bf3b5", "sighting_of_ref": "indicator--284e30ab-d4c9-4d58-b886-e3da3d8abb15", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14da6d5b-ddbf-47f0-8c07-32f0b98f4163", "sighting_of_ref": "indicator--9ba4413e-ad1a-490e-8599-8faa6fdc1726", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00bbcbe-43ad-4452-a8c2-dc0cb64bafae", "sighting_of_ref": "indicator--9ba4413e-ad1a-490e-8599-8faa6fdc1726", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fa902a-b21b-427f-989c-44f2e84c703e", "sighting_of_ref": "indicator--f3c33def-74c2-4738-a061-6deabd649749", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f95abac-65c4-49f1-b0c9-4da73b47ffe3", "sighting_of_ref": "indicator--f3c33def-74c2-4738-a061-6deabd649749", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2928fa0b-5781-4b95-b1c1-75ef59d94510", "sighting_of_ref": "indicator--f3c33def-74c2-4738-a061-6deabd649749", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c01846-42a3-44ba-8ee7-10bf7cc7b309", "sighting_of_ref": "indicator--c49a0825-c734-44ed-9650-9e4a6698f6cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f573ef8d-87a7-40f4-8c58-2049dca6ba70", "sighting_of_ref": "indicator--c2891c50-2e9a-490a-b731-d9af3e0da1c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d9f07f-de75-4d1b-b01e-2e0224c5f26e", "sighting_of_ref": "indicator--4d87718f-0e49-414a-81c4-36f64a28ae58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25e1d82-db89-4aaf-8b63-c7e8e0ee9011", "sighting_of_ref": "indicator--4d87718f-0e49-414a-81c4-36f64a28ae58", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b9803e-de68-4562-ae16-8c9c0101ac7d", "sighting_of_ref": "indicator--4d87718f-0e49-414a-81c4-36f64a28ae58", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b56f73b-afa0-4436-9773-e932e19a81c2", "sighting_of_ref": "indicator--0a02127e-8739-4929-abeb-b28ec7f2f358", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3a6866-e246-4b2b-829c-6806f807fce8", "sighting_of_ref": "indicator--0a02127e-8739-4929-abeb-b28ec7f2f358", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33da32f9-9cf0-4f8e-871e-409331937954", "sighting_of_ref": "indicator--67202af2-4f93-4a10-89f2-19b7877eb8b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a374e395-4404-42f4-bf55-635250db681b", "sighting_of_ref": "indicator--7ab2b85c-1af8-490a-b6fb-9a1a02582e55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2766ae-5bc4-4d49-a0b9-fad2af4ea49d", "sighting_of_ref": "indicator--ac14de70-f56d-4182-93d3-556a5756201d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8dd11f-faed-4658-8728-a998596ecee8", "sighting_of_ref": "indicator--ac14de70-f56d-4182-93d3-556a5756201d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564d469f-8ebf-4009-bfe7-2591d5db0ee2", "sighting_of_ref": "indicator--7db97285-fa80-4ef3-9b99-e817c3686fe0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66f0744-6ead-4c9b-9cff-6ffd5c12f3b4", "sighting_of_ref": "indicator--2891183c-9237-4feb-b547-6d02b5685613", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386d2df8-7fb3-4499-9e52-35e1a7a19370", "sighting_of_ref": "indicator--32a62466-57a2-42de-988a-2e789481186b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdfcff5-3e8c-4c9c-b18d-9d646cf2d0d1", "sighting_of_ref": "indicator--7706e5d6-79e4-42f3-ac4a-e4a2dba583a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0811de79-8f86-4783-9204-dfcd8e98dd12", "sighting_of_ref": "indicator--7706e5d6-79e4-42f3-ac4a-e4a2dba583a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ca587e-63cf-41da-b082-f373d3c296ac", "sighting_of_ref": "indicator--4e1a5dbc-9077-41b1-9523-6662e02bf910", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f8ca40-3c5f-4b71-8861-34a6e0bbb742", "sighting_of_ref": "indicator--4e1a5dbc-9077-41b1-9523-6662e02bf910", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9953a7fb-79e5-4412-8475-bc44d44e6cc3", "sighting_of_ref": "indicator--db119464-7260-44d0-82d0-7dd3014afd0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2653320e-388a-4909-8ceb-8d45e1e24918", "sighting_of_ref": "indicator--75d2841e-837b-435a-925f-e62bed25d448", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda698ea-e46e-4cfc-9c7a-0090d569cf3c", "sighting_of_ref": "indicator--0fbd3d34-4625-4070-9d6c-727b252dbab0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc54c44-41d5-468d-be1a-0a36f1e8d8d5", "sighting_of_ref": "indicator--1318d3f8-75a9-4692-9343-349449480bc4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148ac4cb-a445-4712-91bd-caf8854b0bea", "sighting_of_ref": "indicator--196fc4ef-299d-485c-a29c-37f76b78a496", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5df244-64f4-490a-85eb-d5c8407fcb23", "sighting_of_ref": "indicator--4fbe5f92-126e-4cc1-8114-cf3859df39fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72c368e-60b3-406f-9c8a-fe7d8bc3fc83", "sighting_of_ref": "indicator--4fbe5f92-126e-4cc1-8114-cf3859df39fa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cf1b26-85e6-4657-beac-96a019dbb54f", "sighting_of_ref": "indicator--6b5abfa8-b88a-4668-a909-72a2e06a8120", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a58846-5f5a-4e03-b66c-e35c63dafd90", "sighting_of_ref": "indicator--6b5abfa8-b88a-4668-a909-72a2e06a8120", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8da049-2e46-4a51-85cf-3dcc83ffb475", "sighting_of_ref": "indicator--bd6d97b2-8734-400b-8d09-200b6a30b1c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530117ad-eb62-4b22-82e8-94a93a49ae56", "sighting_of_ref": "indicator--bd6d97b2-8734-400b-8d09-200b6a30b1c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f982c58f-7f19-4606-8335-9ee436e17f41", "sighting_of_ref": "indicator--bd6d97b2-8734-400b-8d09-200b6a30b1c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f3d24f-8dc1-432c-8d7f-e0ce2494cd43", "sighting_of_ref": "indicator--e815e5a6-3a6c-4875-9c9d-1f7e960010dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d19c327-4308-42dd-840d-f58b2d78006c", "sighting_of_ref": "indicator--e815e5a6-3a6c-4875-9c9d-1f7e960010dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db34941e-7d6e-420b-bd4b-865dff70a069", "sighting_of_ref": "indicator--e815e5a6-3a6c-4875-9c9d-1f7e960010dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c555e1-f07a-4924-ae2d-701b8ebc100a", "sighting_of_ref": "indicator--36d2b873-18d3-4f4d-9031-4259e1ddee71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce6fe89-06e2-4150-9980-20864314e0be", "sighting_of_ref": "indicator--36d2b873-18d3-4f4d-9031-4259e1ddee71", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd72e182-2ce2-47d2-bd49-387d759ce29d", "sighting_of_ref": "indicator--36d2b873-18d3-4f4d-9031-4259e1ddee71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccb05c2-4751-450b-8410-49616622ed7c", "sighting_of_ref": "indicator--b232208a-9e5d-47b6-bb9d-5d6e2dfb111d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5554f63a-9f32-42f8-83d5-f49e31db3ef9", "sighting_of_ref": "indicator--b232208a-9e5d-47b6-bb9d-5d6e2dfb111d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa8d1d2-ff3c-408c-bb4b-b4fcdb8bb6e7", "sighting_of_ref": "indicator--b232208a-9e5d-47b6-bb9d-5d6e2dfb111d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc85ace-9203-4fb1-bc74-54b2d14bfe61", "sighting_of_ref": "indicator--ddbbb030-1b70-4b34-8f97-e52bb71a0090", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd763f62-bb70-4310-931b-305321b55b1a", "sighting_of_ref": "indicator--09316ed8-d47b-4015-a469-f6f069adb641", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628b32e1-2eaf-4c38-a852-b337cb4623a8", "sighting_of_ref": "indicator--a56d148c-dc9d-4d4c-b6a2-f4bdd78062e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad21f47-feed-482e-a8ef-bd1a18cb90bb", "sighting_of_ref": "indicator--d703ea65-7164-4a2c-bd60-2c408ec23e96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be7b727-ec16-466b-a73a-8fe2a29b5d2c", "sighting_of_ref": "indicator--d703ea65-7164-4a2c-bd60-2c408ec23e96", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee96f65-8f23-45df-9f82-fcf9a81d2ebc", "sighting_of_ref": "indicator--d703ea65-7164-4a2c-bd60-2c408ec23e96", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2235c01-5bd1-4995-aa08-41164edd81c3", "sighting_of_ref": "indicator--468c5489-1bbf-4943-ad2b-6be6255374ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435ac090-4129-40ac-8610-0995745b5711", "sighting_of_ref": "indicator--468c5489-1bbf-4943-ad2b-6be6255374ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5a050b-09cf-4715-8ba2-aac13715bd47", "sighting_of_ref": "indicator--18143b2b-7cd2-463a-afe8-21e46ff02697", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f397ea4d-9df7-4331-9bf6-4e6e98dc197e", "sighting_of_ref": "indicator--400d9aa0-204a-41e2-9942-85a2c18e933b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafa14f7-b9c1-42ee-948c-136de365bede", "sighting_of_ref": "indicator--966fe686-4800-45d6-b5f9-1006eefabac8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72552f6f-6fcf-47e4-9783-2ea0125c9e34", "sighting_of_ref": "indicator--0ada2f18-46f1-4f78-acd7-d0b4e33b228f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e157b9b7-25ee-45eb-a41f-45710f8e2639", "sighting_of_ref": "indicator--7fdc7c1a-9c89-48d2-9a77-1aa0406ef2b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1256bd8-8f77-4412-a16e-db1444914444", "sighting_of_ref": "indicator--820902a5-c67e-4028-997c-005a3a73ee70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dbac51-418b-4f9a-9688-a335f2aed66c", "sighting_of_ref": "indicator--daa942f6-fb15-41ae-ac93-6f30dd0cacbf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b4a87f-f076-4194-ba25-9cf00635657b", "sighting_of_ref": "indicator--79184eb3-7660-4a39-be16-e0c32a05d8cd", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c9e10f-c45f-4f4a-b187-f260e3ba0123", "sighting_of_ref": "indicator--e3f7e56f-5787-469d-a5d7-eaf0b7b6c7d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1230656f-daff-4b50-b2c3-fde9a7d64440", "sighting_of_ref": "indicator--36beb718-dffb-4932-bc8c-ee3409c8ac53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a594f8e-b4c4-42ae-be3a-3017e492879b", "sighting_of_ref": "indicator--36beb718-dffb-4932-bc8c-ee3409c8ac53", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbfce6f-70b1-47bc-8671-f4d429111ac1", "sighting_of_ref": "indicator--36beb718-dffb-4932-bc8c-ee3409c8ac53", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d63b9f-2224-4c92-a1fd-d43e696ee072", "sighting_of_ref": "indicator--a26ca70a-5c85-458c-972a-47e95f28e264", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6119ff4-701b-4060-a6dd-0b9bd9f84d9f", "sighting_of_ref": "indicator--99ffb69f-d2d0-4cfc-a67e-6f7e727e1058", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5ca3c9-e9ad-46e0-8228-55bbfc77e463", "sighting_of_ref": "indicator--15199e08-2b41-4053-bd9a-f4c8b7d70e95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3751c575-77f4-4bd5-b00c-15ac01bea4f2", "sighting_of_ref": "indicator--67ae32ad-4269-4173-82bc-de1a6ba4c2c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4534f1e6-2fd3-4e58-8187-e57e0081d9bc", "sighting_of_ref": "indicator--716eb34c-8238-41ec-b3e4-2b31b3b4db5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6978447-9989-47ab-b16c-a8761083fa3a", "sighting_of_ref": "indicator--cfa36b81-6cb1-4d6e-b9a4-79df3288ee38", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8b3839-43bf-418e-95af-7f234602bcc1", "sighting_of_ref": "indicator--1c43cfeb-adf8-4d10-a1a2-a7167d4bd913", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b84fc5a-4291-4184-848e-05b7feac0f48", "sighting_of_ref": "indicator--1c43cfeb-adf8-4d10-a1a2-a7167d4bd913", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc1d1d0-5152-4975-bb5f-a7a0d6b8825c", "sighting_of_ref": "indicator--e7135f8f-373c-475d-9521-e91873253573", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bb46fc-145a-457d-ab0c-510129afd06b", "sighting_of_ref": "indicator--5ba53c96-ab5e-4cfe-be83-e48c9e7955e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5015c1-2536-4e49-ae00-b2dacd3b27e6", "sighting_of_ref": "indicator--f8d2cdf3-b06a-40b4-9098-74e6ab6798fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce9afce-8363-44d5-9e91-6649153ac003", "sighting_of_ref": "indicator--f3c5fa21-2c8d-46c0-baa5-77f97a006db9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7516f4-9e2b-4a3d-b140-d182853f30ea", "sighting_of_ref": "indicator--86680e24-2046-4589-9706-750619e5127f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91063a2c-d7e9-40a5-8a33-dec360b5185d", "sighting_of_ref": "indicator--1b8c51f9-bf4f-49af-baa8-9d0dbe1b3301", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110fd743-8bcc-421e-9308-4c5667e83893", "sighting_of_ref": "indicator--9fbff38e-1b87-4f52-abb1-7a7e1c7aba38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e16bd8-5bee-4594-a239-35d16af87074", "sighting_of_ref": "indicator--ffdd8dd8-b93e-4fac-93c1-5eab173b8513", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3646875-fe80-41ad-98d1-38d819f9e047", "sighting_of_ref": "indicator--7128b23f-6f0b-4a87-a0ec-18107366aae5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbfcf96-10bc-4877-9170-73332fdea486", "sighting_of_ref": "indicator--3f817e3d-70cf-4842-abb3-fd3bf785e10f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1d8060-4be7-44a0-90f3-174b425b8cdf", "sighting_of_ref": "indicator--dfeeab66-0cde-4469-8a45-aa36bad4ad7f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9145504c-8184-4062-a933-9efa5289ee11", "sighting_of_ref": "indicator--01fcb1f1-b9a8-4cc3-a4af-2c9e021eee2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd49d9a6-a159-418a-9de7-ef6e6b5d2583", "sighting_of_ref": "indicator--8888c003-cd70-4d1c-a4ed-d8094f50f755", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c563ca7c-4d56-4e52-b77c-d4c9eaf6e54d", "sighting_of_ref": "indicator--8888c003-cd70-4d1c-a4ed-d8094f50f755", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3129acb6-2e0b-4c0c-961e-e114d93334e3", "sighting_of_ref": "indicator--86cf4dd9-6843-4655-9808-3ebd6ab4a673", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdde2114-b0f6-4937-9e3d-bc74dde41bdb", "sighting_of_ref": "indicator--043141bc-21f0-4cbb-98c4-a7963a02e37f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7c247d-f3b0-45a4-816f-15adebd74633", "sighting_of_ref": "indicator--f509c8b0-8ade-493c-9c91-d6fe0c8f075d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf0bca7-0a77-4da8-99de-0b6006d095a2", "sighting_of_ref": "indicator--edba26c0-af8a-4a71-9b48-72dff37702a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d37938b-b724-488b-9085-aca037eb3f6d", "sighting_of_ref": "indicator--53dd88f4-515f-42e3-86ea-924c3f967a64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f958b5-b54e-469f-85f9-30ded8bdaa41", "sighting_of_ref": "indicator--380c06a1-51af-43c2-8cab-37e736109fd5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd6317d-2a5f-4d8d-b5fb-7575acdc0191", "sighting_of_ref": "indicator--f13a1fe1-a713-46d7-ba2b-03eb0014fb1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf324f22-513f-4aeb-b43d-1e46ee19e825", "sighting_of_ref": "indicator--f13a1fe1-a713-46d7-ba2b-03eb0014fb1e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d407836-81cd-4254-aa32-7d6f813f6884", "sighting_of_ref": "indicator--f13a1fe1-a713-46d7-ba2b-03eb0014fb1e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f5a6cf-e7cf-4b0b-8329-482158449140", "sighting_of_ref": "indicator--2b0b399a-5684-420f-819c-c24e19bc1818", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f03b972-0de1-4715-9c3c-3e207eb62b8f", "sighting_of_ref": "indicator--2b0b399a-5684-420f-819c-c24e19bc1818", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf75cb6-21e0-45c7-8ea6-4e0c10a06bae", "sighting_of_ref": "indicator--baae4a4d-f574-47cb-8419-e91370375764", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb866cb1-0843-4e52-8483-cf4a1eb918ea", "sighting_of_ref": "indicator--9df6b617-c75b-4221-8dc7-2e3777db5abe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c2a7cd-b882-4e56-b449-9c359b76bf85", "sighting_of_ref": "indicator--2e65017e-8e36-4516-b603-6e5984d4bbfd", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde4b3d7-077b-4851-bd45-23dfe5031380", "sighting_of_ref": "indicator--34f8d8c8-7566-43e9-9cd0-c6f25f886f38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e007d7ff-e94a-41f0-aace-eca7bdc7f2e7", "sighting_of_ref": "indicator--63f9a642-ec95-4ba8-b606-925215f32ba3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991597dc-4473-4a82-b0ce-dd416128b004", "sighting_of_ref": "indicator--b97bf410-2f54-4e7c-afcc-524025c5bedc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5205f6-5fdb-4c54-ab57-63d3ef847b4b", "sighting_of_ref": "indicator--cd3f84c6-3f2d-4fe7-86d9-6213d9903c09", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554e643b-88b9-4341-a7c2-f52ccb825622", "sighting_of_ref": "indicator--bf0b36c9-6401-42b9-ac0c-00d7322f9fed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b76c83-aecc-4912-89f0-29e8d4c53843", "sighting_of_ref": "indicator--94a44e81-d9d6-429d-b184-6ce5e041eb8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fb326d-b2a6-462f-9d99-8dbd1240f67c", "sighting_of_ref": "indicator--94a44e81-d9d6-429d-b184-6ce5e041eb8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5947d125-442b-49b7-b2fe-96f965c2e6d0", "sighting_of_ref": "indicator--052478c8-d58c-4361-993d-54b8dee8e098", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881d0a76-9919-48ec-b6d5-55c4e089e7c8", "sighting_of_ref": "indicator--8f5e9210-9487-4a57-8e25-7f1b1c34d73f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9242a99-bec8-449e-bba2-6881fa5f5f1f", "sighting_of_ref": "indicator--c0c087b6-2a29-4734-8d76-5d3e7585c1aa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1285ce1-c33e-483d-892c-cbb278566db7", "sighting_of_ref": "indicator--53a6ed4d-6545-4197-89ab-085a432a9611", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b778342-7513-4ccf-8c89-f3d86da95d95", "sighting_of_ref": "indicator--ab45d02e-8a4f-4050-938f-117c2ee7fcd2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefe3591-7f3e-46f3-be7b-88674f7c8a1c", "sighting_of_ref": "indicator--7b2ca812-3337-4f6b-ac6e-172768da7105", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75abb9-ec81-4d02-8021-3d8aa40259d0", "sighting_of_ref": "indicator--e5ba9286-8623-412b-8af2-e7063cb49f18", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33adba1-225c-4ba2-9b3e-78d788c9d432", "sighting_of_ref": "indicator--ca8a95b6-eb26-479c-a515-ac6e6c4b8209", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d20ae80-6149-48cf-a03f-1f94a4c6450c", "sighting_of_ref": "indicator--adcefb63-ebbe-4103-98f8-4eed37fb86b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165fcdee-47be-4758-ada2-a33dae8f1ff6", "sighting_of_ref": "indicator--1a35ac78-ccbe-40ab-9689-223f609606b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58bc4cd-2f54-4d55-be96-4e73c7086ba0", "sighting_of_ref": "indicator--522a26d5-9c4b-40cb-8400-c7f67e5f3f8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e795dd5-e2ee-4fee-998e-a8694329e75b", "sighting_of_ref": "indicator--76a4ec11-1593-4d71-9ced-bf9b23e1e807", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5ea876-ea1e-4b3e-b4d3-48c98e69be48", "sighting_of_ref": "indicator--e0fba899-d57c-4b04-9071-be111ec12096", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1720144d-6751-46f3-b2bc-cafb53df6194", "sighting_of_ref": "indicator--9d2bf9b7-cfc3-4f01-b5ff-37ff67c56fdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc45cef-41ed-4e7f-931b-64b8c90d336b", "sighting_of_ref": "indicator--a09250a7-9ac4-4b58-8009-979751c2147d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9005ce28-ff07-48ab-b180-d21fda997c35", "sighting_of_ref": "indicator--fa082cb1-3cb5-48f6-b775-aea5faebda48", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1dd5af-1beb-47aa-8832-f1c327a1de04", "sighting_of_ref": "indicator--cea922cd-94f7-4076-a133-31ee565ee5ef", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aea2a96-8f0d-40aa-8b30-03776dc7361f", "sighting_of_ref": "indicator--1ac9d64c-26e9-4aa8-b5f7-39c4529e6a7d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c80e2a1-cb93-4414-9630-78a9386500af", "sighting_of_ref": "indicator--af2f4bd8-3fdf-4847-b979-99c11905c6c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d44f579-445d-4173-b536-564e98508045", "sighting_of_ref": "indicator--3e973419-c9e1-4dc4-adab-d5ee870801bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babde79d-9b21-4542-b25a-a650b175213f", "sighting_of_ref": "indicator--c1e9d3ef-514d-40cb-983f-989071593d24", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3c7ba8-be95-4851-a56c-8688ecde5238", "sighting_of_ref": "indicator--24578e7e-ee63-4cbe-9c22-232bc6acc1ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc063ab-807c-48e7-9399-a96faaa39b16", "sighting_of_ref": "indicator--9a2c5ebd-82d0-4db2-bc08-a513f59f4b3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17790cb-1750-424e-8b24-b5099b511668", "sighting_of_ref": "indicator--58f1f759-43ab-4c5c-af68-a7f7a1c9cd0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537897a1-4fed-4d0c-a56b-cd39a1114701", "sighting_of_ref": "indicator--19899bd5-3013-4c71-8001-f8d9e392cfcc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf818823-828c-4e9c-a9e9-6f0796525b9a", "sighting_of_ref": "indicator--e5187293-9ea2-46f0-bd6d-6891e53afa73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a2f760-933e-4c6f-bd00-675acd2b39ee", "sighting_of_ref": "indicator--dbf74188-3a6a-4c70-9d89-eb467193acde", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5a1b08-d735-46b4-baea-137af57116d6", "sighting_of_ref": "indicator--65faf08f-c6d3-4492-a470-5099415b457f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f27b7fa-6b8a-476a-9f3f-ab0988411492", "sighting_of_ref": "indicator--98488e5b-b0ca-49ea-87e1-7d0dae8b64f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac12d3b-f77d-4f32-bbdb-bedb1b5dd0e9", "sighting_of_ref": "indicator--a9ba92d9-d710-4760-9783-0ced2d1fed21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ce3b31-152f-4a91-9a8f-3545724bd63b", "sighting_of_ref": "indicator--224da7b7-621c-4413-9e5c-d1df48e1a94d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50252da5-3cf9-4dbb-a6f1-f86c1ed4dae4", "sighting_of_ref": "indicator--e7e3f0d6-a621-47b9-bbed-e712c6ec88c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da734be-41b6-4693-b0f7-90451daf1e36", "sighting_of_ref": "indicator--e7e3f0d6-a621-47b9-bbed-e712c6ec88c0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f67b4f-b78a-4eff-ae25-6188b1758957", "sighting_of_ref": "indicator--e7e3f0d6-a621-47b9-bbed-e712c6ec88c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd5ad0c-977c-468e-95b2-08e00ae803ca", "sighting_of_ref": "indicator--f5912de6-5c77-4604-8419-90b5a1bcd3e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ceecf26-0c9d-4c2f-a186-c38091a2ff41", "sighting_of_ref": "indicator--f5912de6-5c77-4604-8419-90b5a1bcd3e9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23253d98-8b00-4b6e-b328-5e7f42d34998", "sighting_of_ref": "indicator--f5912de6-5c77-4604-8419-90b5a1bcd3e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab06f99f-6091-42f0-9072-8224d7de6f3d", "sighting_of_ref": "indicator--7956fdbc-a8a9-450b-a68e-1e66f3e0a7f7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b1660c-0175-4dda-828f-f70e7cc700e7", "sighting_of_ref": "indicator--10049633-efc3-47ac-bed2-887e82144fe9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485d221b-551b-4f93-81ff-f6e780abcbe0", "sighting_of_ref": "indicator--10049633-efc3-47ac-bed2-887e82144fe9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d216ab76-4780-4013-a6f4-c3df40e8fac8", "sighting_of_ref": "indicator--10049633-efc3-47ac-bed2-887e82144fe9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fa3408-3a3f-4d0e-9ac4-4a3575d67ed6", "sighting_of_ref": "indicator--f2701229-cb51-4c8e-9fb9-53524999e840", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901a1fc1-1b7f-41b3-85f2-bd2079599f6c", "sighting_of_ref": "indicator--f2701229-cb51-4c8e-9fb9-53524999e840", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bea737-5be2-4cf2-9a31-f01413148cd1", "sighting_of_ref": "indicator--ea277daf-787b-4769-8b58-cc537fbc19c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cfbb9c-30a3-44b3-864b-b4501b4fd0f0", "sighting_of_ref": "indicator--ea277daf-787b-4769-8b58-cc537fbc19c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828ad479-8aaa-4a7c-826f-0be4ea3dec96", "sighting_of_ref": "indicator--f9b191c4-8337-4a0a-8195-b5ab9550b15a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f9e5f-4ca5-464d-8834-2d7d3ef59e86", "sighting_of_ref": "indicator--34f86735-9a8e-42cd-9a78-17fe04b54585", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a23b4c-e768-4d83-a5c7-da54cc4c5411", "sighting_of_ref": "indicator--34f86735-9a8e-42cd-9a78-17fe04b54585", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3909e509-e1c6-4cd2-bd30-a3742e92d40c", "sighting_of_ref": "indicator--34f86735-9a8e-42cd-9a78-17fe04b54585", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57501fd2-bb87-40a8-a764-4c7d8836b605", "sighting_of_ref": "indicator--47e78209-001f-48f7-9c4b-4649b24fff27", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f92a473-c264-4bad-bfc1-8e1376c4e811", "sighting_of_ref": "indicator--21ce944b-9255-473d-b54d-2289f049f130", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07694e3-2aea-4c62-a716-bd4ad440c73a", "sighting_of_ref": "indicator--a25d4134-2069-4422-9a38-e8f517c1519f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72c7687-00ba-4350-b83c-09e5678641cb", "sighting_of_ref": "indicator--8a4b2663-0976-41fb-8e14-c5582ef5fb05", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf48420-9491-464d-ba1c-75f9f59de1ba", "sighting_of_ref": "indicator--84ea6c50-06c2-4c87-b56d-71c75c3e0d2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9903236b-09dd-4945-a1ff-94ea1b8ece8e", "sighting_of_ref": "indicator--716c08a6-63ec-469d-ab5f-b7ce88808d99", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4ae880-547c-4cfe-9fce-7e7bf87fc6f4", "sighting_of_ref": "indicator--d3a95c85-ee87-4901-bbde-873b998b1ae0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1c9b26-f2bb-4795-b583-0a11ef7e197a", "sighting_of_ref": "indicator--bc47fdf3-9f5c-4d7a-b358-79014076e982", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5658d8f8-b037-40e7-a1eb-f1ae999cb37a", "sighting_of_ref": "indicator--5da9b2ec-909c-4acd-bbdc-7d5a7508bfe5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7984a677-0a98-4230-b466-ae2ff0f7f858", "sighting_of_ref": "indicator--f8d2ebd2-3648-4de2-9430-3901c7ef4887", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc672da-60c1-491a-b2c1-d4f38d8edfae", "sighting_of_ref": "indicator--88d4d062-cd17-4aec-ba1d-bf2388fc7c3d", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f4c4b-46c3-41c2-88c3-19387d292f29", "sighting_of_ref": "indicator--19a2a9ad-e736-419b-9805-7dea0832a2d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44461b19-d539-46a6-8ddd-aedfbce0bf14", "sighting_of_ref": "indicator--19a2a9ad-e736-419b-9805-7dea0832a2d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6db6e3-890b-412f-a065-73ff86c6bfb1", "sighting_of_ref": "indicator--19a2a9ad-e736-419b-9805-7dea0832a2d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef8f028-8e72-474d-ad10-9bc8ea592832", "sighting_of_ref": "indicator--b0a87b08-c528-4341-8351-e549fb3cb832", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fb3ddb-15e1-44ce-9b16-577208b487be", "sighting_of_ref": "indicator--780005d5-d908-4066-a5b9-cadae356ce47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ee83fd-6667-4860-ac11-22f721010da5", "sighting_of_ref": "indicator--d61a93c5-c5a3-4cbf-a856-85255274d5ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be93a894-0127-48f6-a402-a7afb20ed40f", "sighting_of_ref": "indicator--a947328a-eb05-4ac4-9fed-0d333a12baa3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f11bde-f2c3-4b6b-a639-9a5cd5ca29b4", "sighting_of_ref": "indicator--a7d9d17f-1127-4906-a12b-04687a88cede", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32620679-284a-46b6-a1c4-3dec5c823235", "sighting_of_ref": "indicator--3aec48d3-7cb3-417e-81ef-dbc71e2fe965", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861df226-8c8c-4a2d-b346-ab54a21afdc7", "sighting_of_ref": "indicator--b43c129b-c8eb-4e41-a361-e46e125b58c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e087efd-a1c2-4562-ad2d-ae95bb21f3a2", "sighting_of_ref": "indicator--3ef3c172-a1e7-4e8d-887a-0a9508b38c92", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da14342-a545-441d-aa2d-2e9a1a8554e7", "sighting_of_ref": "indicator--84ac1acf-2152-4627-bd70-7d3c75f718f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33709841-bd21-49ae-b85b-621958c4b27e", "sighting_of_ref": "indicator--e7865ecd-d95e-432a-a574-7ea5d437af25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211248ed-52b5-49c2-b881-2e76030dc614", "sighting_of_ref": "indicator--c5134c3d-5f33-49cd-af7a-4bfc75824001", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d7c7de-8f8a-44c3-b365-4795a450cffe", "sighting_of_ref": "indicator--857b6611-655d-47d7-9b6a-ae0a4af12f4c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4e930c-ff00-4148-b5c2-f8a7cf4b6888", "sighting_of_ref": "indicator--47e7d833-8532-4aef-9213-a561384d0ff4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980df769-42e6-4733-b49c-caa005c78f56", "sighting_of_ref": "indicator--ac09164c-ecdb-4b1f-967f-fdadb542e919", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dfc435-5413-4825-b2c7-77307cc6d0c9", "sighting_of_ref": "indicator--f3cefed9-0ebb-47c2-b24f-10ffa6bdbef2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf87707-44ce-4f86-89e3-cf91f33342ae", "sighting_of_ref": "indicator--ac13aeb8-0504-416d-a381-c53838620550", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71acdba0-5818-4323-a98a-01be88a06b8a", "sighting_of_ref": "indicator--dd3359f4-fdb8-47c3-8904-9f7d33f7bad5", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732bf6b2-631d-4aae-9449-32b37b976a31", "sighting_of_ref": "indicator--88fc5be4-1b95-4daa-a92f-225146226852", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceba6c3-e2ea-404c-bdb9-667ced5b4d05", "sighting_of_ref": "indicator--523a1efb-c0c6-4547-bfac-21fb6db9dbbd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d445a5-ced9-4691-8480-a0eea4916bb2", "sighting_of_ref": "indicator--523a1efb-c0c6-4547-bfac-21fb6db9dbbd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a306a9-daa3-47b8-b6ee-15dc77ec8eb2", "sighting_of_ref": "indicator--523a1efb-c0c6-4547-bfac-21fb6db9dbbd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93579846-8b74-499d-a2fe-1e7e1ebaa1d0", "sighting_of_ref": "indicator--0c3d0dce-dc8f-4d81-a542-f558a7673754", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be334b70-7e5e-454b-aba0-05ce379ff1c0", "sighting_of_ref": "indicator--564f0b12-446a-4ca9-84d7-2aa46bf1d443", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d8a4f7-f915-48a2-80d7-e649f593b148", "sighting_of_ref": "indicator--cb1675a2-a53b-45a1-9e17-d2ce795f96f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1bf71c-6fd5-4413-918e-5959a28a5524", "sighting_of_ref": "indicator--0294b56e-ba82-4f03-9112-6e33b33c4cfa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcceddf-db4c-4313-ae0c-b9a2c734418e", "sighting_of_ref": "indicator--0294b56e-ba82-4f03-9112-6e33b33c4cfa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab660846-f810-4071-8441-3217457fd3bb", "sighting_of_ref": "indicator--0294b56e-ba82-4f03-9112-6e33b33c4cfa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9f4041-5642-48b6-b390-b0e0cb5696b1", "sighting_of_ref": "indicator--75f42a07-7e59-494e-b5d0-0ce7f5295198", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f2c6f0-80c0-4bf1-920e-dffa6b2c2bb2", "sighting_of_ref": "indicator--f6a6307c-f365-4720-94f3-22a6659e6a4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec129555-dd92-4ae0-8da5-9db7364c00f7", "sighting_of_ref": "indicator--f6a6307c-f365-4720-94f3-22a6659e6a4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f07105a-a6f5-4a3b-b42d-7c23c8ab0b51", "sighting_of_ref": "indicator--0a8d6856-4bd7-421f-8183-882f5b7d3ded", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3476d2-55c5-4484-bd56-8372f7e15d84", "sighting_of_ref": "indicator--0a8d6856-4bd7-421f-8183-882f5b7d3ded", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bca5234-acc1-4e3b-ab9e-9bffcba6a77b", "sighting_of_ref": "indicator--fbb5d9f9-4ad5-423d-9e92-d955ba656a89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeda892-e12a-48bf-9f4f-13dafc615350", "sighting_of_ref": "indicator--9e514846-b713-41ad-a0aa-857816148fe3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e85e286-71cb-414d-aff1-6762687438d0", "sighting_of_ref": "indicator--9e514846-b713-41ad-a0aa-857816148fe3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e942621f-e9d0-48a4-872e-08cc50d8beb8", "sighting_of_ref": "indicator--9e514846-b713-41ad-a0aa-857816148fe3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5aedc4-4548-441c-a27c-759758dc37d0", "sighting_of_ref": "indicator--0108eebe-c97b-41fb-a85c-39e29f14d508", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc73279-a5fe-4ba0-a5af-0a7eccfb4844", "sighting_of_ref": "indicator--0108eebe-c97b-41fb-a85c-39e29f14d508", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12473ac-7e83-4862-8a0f-b225d233a2b8", "sighting_of_ref": "indicator--0108eebe-c97b-41fb-a85c-39e29f14d508", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967a14d7-bda5-4664-9e8f-1f13d59e877a", "sighting_of_ref": "indicator--097f5392-7357-4432-8c31-114a2dea3906", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9326200-8dd4-4415-bb11-6e66989267fe", "sighting_of_ref": "indicator--097f5392-7357-4432-8c31-114a2dea3906", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc22a15-d221-4b1d-94ea-8a20dc1276ea", "sighting_of_ref": "indicator--097f5392-7357-4432-8c31-114a2dea3906", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3515c355-928d-42cc-8deb-240e9f77f52b", "sighting_of_ref": "indicator--e0112e37-b6e6-4a64-a90f-bd123bd8ff03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71caf06e-edb3-4dc9-8b02-f73fdfbebbdf", "sighting_of_ref": "indicator--e0112e37-b6e6-4a64-a90f-bd123bd8ff03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1c43bd-8753-4917-ab1a-e89d9545b0c3", "sighting_of_ref": "indicator--24b941ed-459d-4de9-ac6e-e6ebaebe46d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5107df-9fe2-41de-9368-522b850d8570", "sighting_of_ref": "indicator--24b941ed-459d-4de9-ac6e-e6ebaebe46d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e75c6ba-7ef4-4eb5-adf2-f8f68a3b7cb7", "sighting_of_ref": "indicator--24b941ed-459d-4de9-ac6e-e6ebaebe46d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa822bd-63a1-4524-b285-d4f891353122", "sighting_of_ref": "indicator--8e9e5aa7-640f-4ff8-918a-9fd15344db7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6893808-18e0-48c7-a28e-a97901a7e5b0", "sighting_of_ref": "indicator--8e9e5aa7-640f-4ff8-918a-9fd15344db7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b59355-9235-4d6b-8380-19c0a17f82ba", "sighting_of_ref": "indicator--8e9e5aa7-640f-4ff8-918a-9fd15344db7e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcfa232-9f50-40c4-aabb-dc80a684b122", "sighting_of_ref": "indicator--c1b28b2d-7ccf-47ae-9bc9-5dd948130bb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1f0e81-0ba3-44a6-a0bf-02dab128b69d", "sighting_of_ref": "indicator--c1b28b2d-7ccf-47ae-9bc9-5dd948130bb6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a49356-073d-406c-b4cf-f955ece9f95d", "sighting_of_ref": "indicator--79f09697-55be-4462-a498-b7b4ff967777", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538efd8c-4f8b-4733-ac48-2a6166d62276", "sighting_of_ref": "indicator--a7480554-fa5d-4830-8b95-b44465ebd5d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00065ffd-fc81-47be-9bfc-185f97318609", "sighting_of_ref": "indicator--a7480554-fa5d-4830-8b95-b44465ebd5d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41473ef4-bbbb-46ef-bf0a-bca40f640a3b", "sighting_of_ref": "indicator--a7480554-fa5d-4830-8b95-b44465ebd5d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88242c10-10af-465b-8313-f781811d5135", "sighting_of_ref": "indicator--9a557ec1-3a27-4bfb-8ef9-945de314d460", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65bb354-8af3-4bfa-88f8-737cd9856138", "sighting_of_ref": "indicator--9a557ec1-3a27-4bfb-8ef9-945de314d460", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a813e37-ca5f-4630-8e52-b99294c18845", "sighting_of_ref": "indicator--c974b4fa-1c68-4161-9309-00f5ff6e30b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230c85f0-cc60-427b-9e2b-26c53dd2a202", "sighting_of_ref": "indicator--685c915d-c39b-4e9a-a054-2e0c10eeedc2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaab886c-8915-483a-916b-219391709bd0", "sighting_of_ref": "indicator--685c915d-c39b-4e9a-a054-2e0c10eeedc2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b9c394-6cfe-4b0d-848e-158d17c598f9", "sighting_of_ref": "indicator--685c915d-c39b-4e9a-a054-2e0c10eeedc2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df08f3f3-eb7f-41a6-b8d4-685b23eb4369", "sighting_of_ref": "indicator--05c22330-209b-4b96-a0c4-8226cd15919d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5940659c-3341-4486-8c06-891a40748896", "sighting_of_ref": "indicator--aa0943e6-c5a1-41d8-82f7-538f14779c05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18039533-7447-43a5-8cd3-1b2f82770d5a", "sighting_of_ref": "indicator--06f6ee10-4ceb-4c7f-8459-3ce6a3e9861a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fded732-6d8f-4296-b7cc-e8865b7c5009", "sighting_of_ref": "indicator--c80fd727-746c-48e2-9e96-25295cbd80e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cf1b11-e9cb-4521-a4d8-8c4f55e1075b", "sighting_of_ref": "indicator--7bb857be-eeff-4e64-befb-50141371e505", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0505462e-55ab-42f4-8e9f-789006658c34", "sighting_of_ref": "indicator--d42e0a9d-5f7f-4d98-8dc4-c6d9f48552c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42055af3-bb47-403b-a1b7-a432e096c2a3", "sighting_of_ref": "indicator--0d4f32d0-20a3-47c8-975a-4929c1e4ae21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba373ce-1784-400e-a188-cceb775f8b87", "sighting_of_ref": "indicator--4d0a30b6-cdd4-4753-9d44-9269a7220d81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc6076c-003f-451e-96c0-1018c972737e", "sighting_of_ref": "indicator--304fd25e-a09a-4751-b5a5-74c6250b8227", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ddde2e-b584-485f-89d5-6404dee977e6", "sighting_of_ref": "indicator--c5910451-ed56-44dc-b8df-3fcea419872b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afd003f-a07c-41ce-b87a-ff3dcc35c5f5", "sighting_of_ref": "indicator--c5910451-ed56-44dc-b8df-3fcea419872b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7571342d-37b5-4843-b84d-ba3c43abfa11", "sighting_of_ref": "indicator--ad78545d-8082-42da-bd8c-27c8544c8e25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b36990-96b4-492f-824f-361ca7dc113e", "sighting_of_ref": "indicator--121a4ca8-1d0d-4b3b-bc59-3919556ed38e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e861f3d8-9f61-4e4d-bc05-196a66c74a27", "sighting_of_ref": "indicator--121a4ca8-1d0d-4b3b-bc59-3919556ed38e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99debc24-dac6-42b4-a5ea-142cc6d6db31", "sighting_of_ref": "indicator--5e5099e7-89b5-4c4d-93b4-44cf5df942f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e9a388-0153-42ed-964e-999ac981d29d", "sighting_of_ref": "indicator--5e5099e7-89b5-4c4d-93b4-44cf5df942f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805ea2fd-2011-4636-9e51-db7154c9311c", "sighting_of_ref": "indicator--8b3abc61-da41-4110-9112-74f7c3d6344c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1294362f-b696-4248-8e9a-438410748c8b", "sighting_of_ref": "indicator--58b6cff5-dec4-4d52-814a-7a020bc49705", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2293dcaf-c47c-4578-bfa2-99ff47a991f7", "sighting_of_ref": "indicator--a7d8a0da-cccf-4bc4-804d-147aa3103038", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0f79a-440e-4e5b-9b0b-2e09c5d5993d", "sighting_of_ref": "indicator--16958007-6bec-4f12-8e0e-ca0d25330d0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f22179-9d12-47ef-bf40-d7f01451a041", "sighting_of_ref": "indicator--dd638ae1-122d-47e8-8a9d-7d66d9354146", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca073b0e-5131-4110-826b-e5a7d0d4ab9b", "sighting_of_ref": "indicator--d12dbda5-4369-4293-9dca-1cb5d41a67e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19926a79-035e-4d7b-addc-ccf3e9a06978", "sighting_of_ref": "indicator--2ad4062f-9891-4de9-91f6-e335e6d4b64a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a21858-87c7-4f72-9cc3-a0423a7ead71", "sighting_of_ref": "indicator--7cc470e9-ece9-47c4-967c-aef5b04ec963", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bae002-5531-4c66-bd88-ce02756b5266", "sighting_of_ref": "indicator--35a88fa2-de3f-4234-9115-04779b1537a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d821cb-adee-4595-8a38-39938e10cb65", "sighting_of_ref": "indicator--fbab73e8-4677-4c45-8274-c1dd0199bd21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978bb180-fa30-432d-8313-c39cb51c872f", "sighting_of_ref": "indicator--72e40395-79d8-424a-ae5d-e2c5b3964fca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6037a801-1199-420e-a8eb-2fe5e9ce17a8", "sighting_of_ref": "indicator--ef9590ae-4100-4a08-b87a-1a06b1d28ff5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a936fe18-0941-442d-a8d9-c298ab92faf4", "sighting_of_ref": "indicator--36436db1-80d2-48f3-bb37-4812343bbadb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04f6d78-dbd5-4c27-aa6f-6a40e17121ea", "sighting_of_ref": "indicator--18c55c3d-228f-4058-86e4-583ff7a711ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ef4f1d-2117-45b0-81b6-a905c752b670", "sighting_of_ref": "indicator--e7cfa66f-317f-4b98-8523-8dab0ecdbe90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0056245a-ea73-4566-bc40-2b9bdbf0460a", "sighting_of_ref": "indicator--a449a924-56f0-4e6b-bd6b-0a8e3c080a99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0670dab-ec40-4c7e-8c9c-28101e3b4e62", "sighting_of_ref": "indicator--7b4c7126-4382-41ee-bffb-61b90d4c7f2a", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45eaba6c-9906-40ac-8222-e321e1a4ae48", "sighting_of_ref": "indicator--1dfcccce-e852-4de8-99db-c2927670e48b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80aa40b2-3c21-4895-83b7-57eeef8c2075", "sighting_of_ref": "indicator--3737fa85-2fc0-415d-93fe-0b0d342d4cc5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d7e4bd-bbf9-43cb-93d5-0b5c41b1141e", "sighting_of_ref": "indicator--13d8fba1-19d0-4b25-924b-1eb52b19b190", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d233d835-0063-49ac-b165-c8ae3c530230", "sighting_of_ref": "indicator--0d672f11-2674-4f40-a647-1af86e42d13c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5c72b7-b2ea-4946-813d-38a5f56b5c10", "sighting_of_ref": "indicator--2de2f7c1-198d-4890-b86f-29024a31c45e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bf571d-1882-4fbe-ae65-ece6b2304a31", "sighting_of_ref": "indicator--2de2f7c1-198d-4890-b86f-29024a31c45e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ca435-4ec4-40f5-9948-ae954191bb97", "sighting_of_ref": "indicator--b52ab90a-152d-4c95-a666-e4684cf44f9a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc4f53-f14a-4f7d-8f8f-2041dc83a964", "sighting_of_ref": "indicator--b52ab90a-152d-4c95-a666-e4684cf44f9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0e49c0-f0e9-4a9c-930d-bd2ed5260196", "sighting_of_ref": "indicator--3068f438-d54e-4dd4-b23f-aa69704215ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c63b34c-2362-4136-a528-f8304ef0f28a", "sighting_of_ref": "indicator--289c941a-3a43-46fa-808f-b68394031c5c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa2218f-5b68-4a78-a4c0-9a6940c00a83", "sighting_of_ref": "indicator--1bde470e-2166-4322-a8b4-2e9b12c04d63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3160ada-8e9f-44e0-8741-6a4705dc8abd", "sighting_of_ref": "indicator--e7c637ba-5560-47ca-8f9d-4a4641899aa5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5458da22-16f5-4958-b04d-5a03727c975e", "sighting_of_ref": "indicator--025648f5-c210-4cda-9695-6af15a96c90b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8325e894-dfc8-4c5d-ae31-fd819022d83b", "sighting_of_ref": "indicator--d7d521d6-47b5-4449-82a4-3f04509e6c42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80351fc1-ef02-429e-9f84-8b4b60134823", "sighting_of_ref": "indicator--8676ccc2-b220-4481-932d-5ba734359a75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5d141a-41c6-4b3e-b416-43a16d950547", "sighting_of_ref": "indicator--8676ccc2-b220-4481-932d-5ba734359a75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbc41cc-5f22-4b50-9ce9-17679cdbf754", "sighting_of_ref": "indicator--8676ccc2-b220-4481-932d-5ba734359a75", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5d833a-b077-48ce-8ec3-02cc7709e964", "sighting_of_ref": "indicator--11de8dd3-280f-4a28-921e-b3e49797246f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f850e00-9989-4658-be1b-b85d06fb61ed", "sighting_of_ref": "indicator--11de8dd3-280f-4a28-921e-b3e49797246f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c26899c-7a3c-44cf-ba09-30f35ab316d2", "sighting_of_ref": "indicator--0ada7fe3-e855-4e87-a5ef-bb6bddd64ba7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcb22a1-81bf-4bff-8f64-0dd9fb758839", "sighting_of_ref": "indicator--fd10eaf7-4558-46bb-9668-693c53c3501d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970bc195-31f5-4ce0-b374-aed541eadf5f", "sighting_of_ref": "indicator--fd10eaf7-4558-46bb-9668-693c53c3501d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fd08e4-b228-4952-9903-407096a2e249", "sighting_of_ref": "indicator--aa8eddc9-1e70-491b-94bd-bc648e15164c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1134e30d-d1a5-4c54-8107-68d260fc2ff3", "sighting_of_ref": "indicator--aa8eddc9-1e70-491b-94bd-bc648e15164c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c7ed66-ed34-45bb-ade8-1f8b6e94e1e7", "sighting_of_ref": "indicator--042e00da-7426-4e69-a931-24df153ced6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cb6f1a-6e02-40ad-9f15-e8094b7c27a1", "sighting_of_ref": "indicator--042e00da-7426-4e69-a931-24df153ced6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb8a924-655f-45f2-b116-fa3dc737f44d", "sighting_of_ref": "indicator--87747f05-6b38-4100-923b-b368a4cd4b8f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719f1926-b839-4d1b-847b-06a50ba6309e", "sighting_of_ref": "indicator--c486d809-1072-4755-a58e-0d74ddc88ada", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac5f610-c702-40ec-be11-d3b4bac65234", "sighting_of_ref": "indicator--c486d809-1072-4755-a58e-0d74ddc88ada", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4701eb15-03c7-47a0-a169-9cc94132cdf4", "sighting_of_ref": "indicator--c486d809-1072-4755-a58e-0d74ddc88ada", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02ed016-dbe6-4ad7-b933-ef2d25f5c705", "sighting_of_ref": "indicator--0ba0c2d6-336c-4d6e-a55a-b90eba7a206a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fb1afd-9d91-4a3f-a8d8-4469234e5724", "sighting_of_ref": "indicator--0ba0c2d6-336c-4d6e-a55a-b90eba7a206a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a22b8b-b1e5-4798-8a36-8320322b86a8", "sighting_of_ref": "indicator--0ba0c2d6-336c-4d6e-a55a-b90eba7a206a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee261391-a8d1-4f3a-8eca-f43bdbff5fdf", "sighting_of_ref": "indicator--316da565-3379-4b7a-aa69-55c660fb925a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311a3edc-a6f1-483d-b4bf-b363f609182a", "sighting_of_ref": "indicator--316da565-3379-4b7a-aa69-55c660fb925a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceaf242-d578-43b5-8246-ed8fc7d9e174", "sighting_of_ref": "indicator--221bdaf9-e90a-48b4-aab3-1929c4d60198", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582460ae-3f0e-4e72-a0f6-1e5a3cb833a3", "sighting_of_ref": "indicator--ecebb680-8c9c-4d93-a16e-a0e0f3f6e26d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e38ab1a-facb-42f2-aa96-6a197dbb29d8", "sighting_of_ref": "indicator--ecebb680-8c9c-4d93-a16e-a0e0f3f6e26d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a21f5c-ae2e-46e1-8cef-0a15b154e9b1", "sighting_of_ref": "indicator--d4cbbc61-fe98-4a12-ae3a-0712bb5bf22e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c5fe00-c809-4c11-9dbd-a0f17590924b", "sighting_of_ref": "indicator--d096236d-38f2-44e1-b4a2-67683cc43f0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78a1ff4-fc2c-4708-9417-e6dce5c5fe66", "sighting_of_ref": "indicator--cad3714a-882f-4a06-babc-e40dfa6de677", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efe7e30-77fc-48cf-9250-7faf0aac5617", "sighting_of_ref": "indicator--fe1257d5-6463-4569-8224-f8740607cb84", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a029a2a-f617-434d-80e6-fd9a07e93dfb", "sighting_of_ref": "indicator--22903416-6773-4fe2-bcd1-79bc0b24d3ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7470187f-51fa-4729-bccf-19b0bcef9171", "sighting_of_ref": "indicator--d3502579-c986-4eee-a042-b73dc260c995", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c513f7-9302-4e6d-9a17-588791001cd0", "sighting_of_ref": "indicator--3937bfbc-39e3-49bc-8526-ed6e8b053b01", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a8e04f-c720-47a0-8906-d75c089e9bae", "sighting_of_ref": "indicator--5304e3c3-4a66-4646-9530-1ef7c7fbd15f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca3bcd-66e3-4563-8290-0e00580feb1f", "sighting_of_ref": "indicator--15f2fb07-6c60-4faf-8251-b0a206bfad25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dbe268-12c1-4a11-aee7-7a9f8cd339e4", "sighting_of_ref": "indicator--15f2fb07-6c60-4faf-8251-b0a206bfad25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21ee561-c879-4f31-b06d-c4ee070894c5", "sighting_of_ref": "indicator--15f2fb07-6c60-4faf-8251-b0a206bfad25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebf2ece-51be-4279-813b-701688ae9ec1", "sighting_of_ref": "indicator--a28339a2-52c5-4e34-aaa5-cb1aee2cbac9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e032d0-0e06-49c9-b554-e13be74de4d4", "sighting_of_ref": "indicator--a28339a2-52c5-4e34-aaa5-cb1aee2cbac9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b09e42-6ea9-475b-9e02-7cd14f4c0f3f", "sighting_of_ref": "indicator--a28339a2-52c5-4e34-aaa5-cb1aee2cbac9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1237d26-065a-4592-bdb5-c131cd909c44", "sighting_of_ref": "indicator--0363f6fd-eb7f-4206-b554-740de60d1d20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692413c0-8fef-47bb-abfb-453cb861b7c3", "sighting_of_ref": "indicator--6b1a4b5f-27c0-43fa-a340-94cda580ba55", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c65133-47f7-4031-a531-03d0bf7450e0", "sighting_of_ref": "indicator--d4d5d76c-b49f-4233-9f25-a5cfaf39297d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d809d0-393f-4993-b621-5a0c7c6b24fc", "sighting_of_ref": "indicator--d4d5d76c-b49f-4233-9f25-a5cfaf39297d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d2259e-7027-4cf9-b5f2-c0e45d9106ab", "sighting_of_ref": "indicator--d9c84159-b7a6-427d-92ed-bd445724920c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff1cc42-cef2-4947-bff5-5fa41d5e5568", "sighting_of_ref": "indicator--3df67eeb-809e-499b-a447-cfa514934882", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02e3b39-b548-4e00-816f-58b57ca790a2", "sighting_of_ref": "indicator--32622426-47f1-4645-a9ad-20063057c6c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a910ae-2984-4739-bf10-5b11af0b3c66", "sighting_of_ref": "indicator--32622426-47f1-4645-a9ad-20063057c6c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73631f24-70b2-46cb-8370-26bce2f3bc0d", "sighting_of_ref": "indicator--32622426-47f1-4645-a9ad-20063057c6c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02b70fd-2ecb-4a72-ac24-1a8f39bb4580", "sighting_of_ref": "indicator--8aa64354-f1d5-4c10-b6ea-a15e1d6a69cf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f62292f-e443-44ee-906c-d9a5c7278d89", "sighting_of_ref": "indicator--a63a5e1a-0cff-4fde-8764-8d7e86fb2906", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32be64f1-41a3-45a2-a961-ed927eaf824c", "sighting_of_ref": "indicator--2556b676-cc32-4bca-9b73-f8c7044696a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725a989a-6c76-431a-bfc6-063d7915bb8a", "sighting_of_ref": "indicator--0a561602-aade-422e-8366-d22b35a712f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e46b21-cbc8-468c-91c2-9c9d5ec56b56", "sighting_of_ref": "indicator--df946f41-a2b9-4550-80fb-8d80514745e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac74481-bf1c-426f-9b1a-1158f9d5f067", "sighting_of_ref": "indicator--1dc73920-1ed0-45df-9440-1ed3d5dce915", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c46aeb-fc78-45e8-af4f-3f8eabbe6cfd", "sighting_of_ref": "indicator--cad947f6-3dd9-460d-ae70-d20c192f612a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52944477-02d9-40b3-ab0d-70c602ab1bac", "sighting_of_ref": "indicator--de1ba36e-80be-46ea-85af-0a1c9ec2b45f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1f6ad8-7032-402d-abe0-b76e03916647", "sighting_of_ref": "indicator--bce86389-2b33-4f84-86c7-81c5b278d177", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5cfb68-9264-4acf-8acd-d0e4e3127ab5", "sighting_of_ref": "indicator--54effa35-4e78-4d14-ae75-85535db0fc0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d55b29-2c4f-421c-ad01-087106b9bcce", "sighting_of_ref": "indicator--f2908fbc-2df8-4f6b-8980-4e6d9679ab37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6f8227-6dc4-471b-8561-0f2044bce257", "sighting_of_ref": "indicator--5de60c12-1743-44bb-97f5-749db2ee8e98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753e4ef3-7bb0-4245-b2e8-ff9c41ffbd64", "sighting_of_ref": "indicator--5de60c12-1743-44bb-97f5-749db2ee8e98", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa4079d-3af7-4789-84bc-1ca48f9f630d", "sighting_of_ref": "indicator--0c32b8e3-2930-4c04-a4d7-4d1012e10e11", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cb6022-572f-4780-886d-6e2785074184", "sighting_of_ref": "indicator--f99d8a3d-6966-4ef2-b6ad-762967dcbabd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f1fed5-5386-48a0-b71c-1de913eb43da", "sighting_of_ref": "indicator--6e8c4722-b24d-4c62-9b26-8c71e5735703", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1bbd49-6f6a-4320-8fbf-3d0c23cdb73d", "sighting_of_ref": "indicator--bc7a95a5-85e9-4670-9d8b-9e94f58c9ce8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c49d685-ca3d-4ccf-bed1-cf819c950675", "sighting_of_ref": "indicator--1d9cbd7c-57d3-4320-a2b8-b99b68fa4a26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d42d0ac-ef96-4c24-8f9f-e9d06d4eaa80", "sighting_of_ref": "indicator--85e29d1b-62e7-4393-b784-b2432181546b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc19bd72-62d8-4a60-9d02-e4d2dda42802", "sighting_of_ref": "indicator--85e29d1b-62e7-4393-b784-b2432181546b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4527d0d0-2f80-478c-b930-0063fac73528", "sighting_of_ref": "indicator--da2998ac-8288-41fb-b499-457b1f2da05a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9016e095-9893-4cbd-8a8f-0d5da8518e97", "sighting_of_ref": "indicator--707e7232-0d4c-4ed0-ae19-72033846002f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6f2127-a7d9-4b34-ad9f-3e1a9766a54b", "sighting_of_ref": "indicator--625d2671-1696-42f8-8e58-e867ab0bbb89", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2beae3b1-820d-428a-9dd0-bd5340875f83", "sighting_of_ref": "indicator--aad62752-fe2e-4d3e-9601-da596098dbd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e28353-0c17-47f4-bd32-a3d4a4d6b31c", "sighting_of_ref": "indicator--642a2f6b-2e99-476f-89b8-75fb00ecc3f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4651ab7-5f89-4123-943b-d1d034df6466", "sighting_of_ref": "indicator--42368afc-fd63-4d98-93d4-fb6f353644dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cc001e-b100-4fb7-969e-8a0a8e459202", "sighting_of_ref": "indicator--af47299c-4d16-4be4-8bb1-5ffb495ef01e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe3a259-d7ee-41a6-b667-c76047655e50", "sighting_of_ref": "indicator--18cc34fe-e47a-4bda-999a-aa6b86157156", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681791da-58ab-49e5-b1e3-078e155124a5", "sighting_of_ref": "indicator--d0c79f8a-c4aa-4a4c-8534-7b37df7e3f22", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13645563-60c1-4f69-83b5-3771c27143c1", "sighting_of_ref": "indicator--d0c79f8a-c4aa-4a4c-8534-7b37df7e3f22", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc07d6f-da18-4d7d-8d04-08f487642d2e", "sighting_of_ref": "indicator--cdb1f8b9-00c7-4df4-9b27-c724a5b5f9fb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5d27b6-5e5b-4e92-866b-724d6c767c1c", "sighting_of_ref": "indicator--f87c511c-b1a1-4dbe-8929-713f537844db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5422daa4-f85c-48bc-bb07-3d99e8dc4a04", "sighting_of_ref": "indicator--f4e886fa-042e-46ae-b972-303321813d81", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e07a01-1879-47be-ab4b-cb21e1a77397", "sighting_of_ref": "indicator--52adb30a-a2f9-46c2-865e-5efde789315f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1ea961-d2c6-48dc-a7db-6c1e74550f36", "sighting_of_ref": "indicator--c3300810-ce1f-4ac1-939e-d5b6f0414170", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d9a53d-0428-4d8c-a51f-15b063ed45fc", "sighting_of_ref": "indicator--c3300810-ce1f-4ac1-939e-d5b6f0414170", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd9e3c5-94c1-4248-9c23-9d12ce0c3c9b", "sighting_of_ref": "indicator--3672163c-323f-41b1-9a4d-d10e088caabf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03a557d-f28e-49a6-9f2e-9135297eb4d6", "sighting_of_ref": "indicator--3ef0a141-1c3d-491e-ae4c-8c8fb9e896df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f4332f-d2f1-4cd3-9c68-35bc57db6fa6", "sighting_of_ref": "indicator--14ac6db5-8304-4e70-bd13-3008910dae1c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e31abcd-b080-431a-ae9c-41866b098c87", "sighting_of_ref": "indicator--b896f9ab-6315-479a-9c23-4efdcedddd74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07d3231-b3d6-4ac2-bf52-785f9dd1e39d", "sighting_of_ref": "indicator--b896f9ab-6315-479a-9c23-4efdcedddd74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a828d3b6-c564-41ac-b06e-65140fc1f642", "sighting_of_ref": "indicator--1abcaf3e-c1c4-433c-8d72-7d695a702633", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b24b839-75b0-402f-996f-1e51b77baf12", "sighting_of_ref": "indicator--1abcaf3e-c1c4-433c-8d72-7d695a702633", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543300b8-9afa-4804-a1dd-e43833b6f75e", "sighting_of_ref": "indicator--099a912e-a44e-411b-aa61-2d350b26f17b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db796d7c-0feb-4919-b6db-365b1446c899", "sighting_of_ref": "indicator--099a912e-a44e-411b-aa61-2d350b26f17b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a50661-a5b6-4d2a-b5db-8d5f5bf5a3c3", "sighting_of_ref": "indicator--5dc1eaee-b775-458a-baf6-b4452c2a6ffd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99b9e91-984d-4977-bd89-18a599fe99ed", "sighting_of_ref": "indicator--0ac3faa9-6a83-47f6-9079-b7953720ad8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515a7de1-683b-4f3e-be5b-424ae0d1cef5", "sighting_of_ref": "indicator--3d89a317-fc42-41be-95ca-c3bec875d705", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923574b4-3e08-4031-ba17-ba7ac80d7cdc", "sighting_of_ref": "indicator--d2236f8d-5801-4fb5-a053-2cecd3088c1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd00e3f-a5eb-4887-9f72-363973bcc4d3", "sighting_of_ref": "indicator--d2236f8d-5801-4fb5-a053-2cecd3088c1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651cefe4-b119-4179-ba8b-0c3586c202fd", "sighting_of_ref": "indicator--39ad73d2-be98-46fb-8eaf-a89fb6744ccc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d06a73-cc39-4e67-bd87-30ddcb6d0d53", "sighting_of_ref": "indicator--0b06b4d3-9523-4494-af0c-331c58e8b6e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763e2f83-02df-4cfc-828f-2c5666078ec9", "sighting_of_ref": "indicator--4f0dcb32-2f9f-495e-98a5-5486da6456df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2de1ee-c270-4742-af6e-4b91300eb6ca", "sighting_of_ref": "indicator--4f0dcb32-2f9f-495e-98a5-5486da6456df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8559ae-f530-4c50-a76b-2ca78d6d294b", "sighting_of_ref": "indicator--39d9135b-e109-44f3-aafc-54ae0c6d1022", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e608909c-b102-4674-9bac-9df21c289338", "sighting_of_ref": "indicator--06e8142d-077f-4032-98e7-1b85f0b72c28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3323847-040c-4ad3-bdd3-0c42522ffd4b", "sighting_of_ref": "indicator--6c72fa42-9877-4e82-92c1-c4c9ec5f5834", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc956d29-9e2e-4de0-8101-5e2eb20d9a6b", "sighting_of_ref": "indicator--676dcb1c-2279-4110-970d-16d27b5cd32f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c54c63c-54b6-4a7e-a3ec-5e140c1f555b", "sighting_of_ref": "indicator--6b847edf-4197-4e47-b9c8-5a7b00299e88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408bbaae-a170-4e02-9634-87d695185367", "sighting_of_ref": "indicator--ddcf8048-8ed5-47d4-8202-d8f9ed4841aa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e5c4b8-777e-45a1-8b4c-bf0d1a6ac54b", "sighting_of_ref": "indicator--b7df9169-ad3b-4909-a229-bd4f206889a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fd1a4f-7a2e-421b-b996-53e030fc0ef5", "sighting_of_ref": "indicator--e4cef8a3-6411-42c2-9bda-32b2f2fc2581", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2c61de-b9db-4cbe-86d7-5833cfbec163", "sighting_of_ref": "indicator--f07d87b7-e697-4879-bc51-ebe717b1ddb0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7ba904-acc9-422b-b70c-372ed55189af", "sighting_of_ref": "indicator--220221db-1ef4-440c-866b-a3ed8ed0bdf9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1fa62b-00c0-4d7e-8ad4-24eca48ce547", "sighting_of_ref": "indicator--8feb915d-daa9-41e1-8e2c-fd2658ec16c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2cf331-a2c4-43ef-a0d6-6e8dd984a6e6", "sighting_of_ref": "indicator--a871bfec-d0a1-4612-971a-852309bb5085", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571e1c0c-436e-4baf-8f0a-c7031044e06c", "sighting_of_ref": "indicator--63b49e17-301d-49fb-8839-69d9979736b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79b0dea-5d60-4060-843a-a2b8688a6076", "sighting_of_ref": "indicator--f58eaff7-636e-433a-a87f-5b5bfe152834", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9950b1d3-76eb-43df-a321-5de261cfbd17", "sighting_of_ref": "indicator--897ef271-ccae-4293-82b2-94a6e84e382d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d45511-e297-4cbc-9286-01523643562d", "sighting_of_ref": "indicator--897ef271-ccae-4293-82b2-94a6e84e382d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4493f5d-d384-4da6-963c-ea79425977d8", "sighting_of_ref": "indicator--ce6d1acb-34b1-4904-8a32-f17400d231a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b16da8-dd43-4e80-bc2b-c1a912bfd853", "sighting_of_ref": "indicator--74368e9b-743a-4e6f-877d-5c4a4402a800", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baedd9d1-b602-4553-99fd-35af4cbe3683", "sighting_of_ref": "indicator--365a909d-29a4-4807-8e58-29aa0440ea94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77091ed-3a27-4e14-8af5-99a4d2431a3a", "sighting_of_ref": "indicator--365a909d-29a4-4807-8e58-29aa0440ea94", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6c197a-d008-494a-be12-1a2dd0c796b3", "sighting_of_ref": "indicator--198f3c11-4919-4d8d-b4b9-f2fba546b16b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c602b526-4274-42d7-b2ff-5092c3275823", "sighting_of_ref": "indicator--198f3c11-4919-4d8d-b4b9-f2fba546b16b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270f1edd-7e8b-4186-907b-739a53b0686e", "sighting_of_ref": "indicator--9f73c4bb-a88e-4894-b607-580e9c4e96d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512bf7c5-253d-4edd-a86f-56ea0898ce71", "sighting_of_ref": "indicator--d745194f-f7d1-464c-ab6b-2d373c2f4341", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276543a9-fa64-41cb-b70b-2b6ed9ca6fc5", "sighting_of_ref": "indicator--845d9cee-dfa2-4369-8b9d-d7b5b6395a8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b165b28a-3ae7-4d4b-a1c1-b47a8700fc85", "sighting_of_ref": "indicator--5c3f4c66-b08e-4eed-bba5-c2ee0d209b6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e72adc2-6404-4869-ba92-3a5e93db62b1", "sighting_of_ref": "indicator--f4b24902-111d-47e6-8a88-4c4ba7c541ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030aa54c-8b08-47ca-a924-4e1104a5038f", "sighting_of_ref": "indicator--6d1471ba-dfbf-443b-9182-c75c17a8a612", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ad5d36-a1bf-49aa-b6b4-7ef496abbe88", "sighting_of_ref": "indicator--d5fe775d-1b90-41e1-a09c-f9bbbd396fa5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497f6952-aafd-4fb3-8381-d918974b0ef9", "sighting_of_ref": "indicator--7e66be86-fa7a-4831-b771-0051b3a6a1e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b934a778-05f2-49a5-90ae-236c93007a6f", "sighting_of_ref": "indicator--bdfb522e-c628-49d1-9a07-ec68ec4464fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081abef0-47a5-4aed-878a-b451f3b8ca75", "sighting_of_ref": "indicator--7ac9ab2d-4eb1-492a-ba46-a4b6e135b8dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03c51a7-e112-4565-9307-c1c1247111f1", "sighting_of_ref": "indicator--544f6e0e-2ad0-41e7-8d74-3a82948ee1a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bdd47d-dcbe-452f-8388-1fa2947c4988", "sighting_of_ref": "indicator--5e413fea-a5c1-4db9-a024-e7cd34ece962", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f481e9d5-9a09-4247-9f5e-5bd357265a2e", "sighting_of_ref": "indicator--87440513-1aeb-46c3-a139-633e49fc0844", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2aac19-2bde-4cc2-be5e-d792f3e15eca", "sighting_of_ref": "indicator--3555b2d5-1d17-42d8-b8da-5b94c75f9105", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e206d15-5ffe-4180-b77d-b16b892935ab", "sighting_of_ref": "indicator--f829c4a9-8e2d-4fc8-b894-0f4e83598c9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3143cc0-5ca3-45bc-9747-6c2bd5f6da7a", "sighting_of_ref": "indicator--f829c4a9-8e2d-4fc8-b894-0f4e83598c9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790643b4-dd15-4202-93a7-4d3e8c40f183", "sighting_of_ref": "indicator--f829c4a9-8e2d-4fc8-b894-0f4e83598c9f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc26e831-35b3-4a8c-ae88-4b5ab8c6e216", "sighting_of_ref": "indicator--42027387-77e0-4171-83fa-e97317046a94", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907d9e8e-c987-4d21-9692-c01fd96c5139", "sighting_of_ref": "indicator--d347cfc5-46c2-4a43-bdd5-0b818d6d15fc", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1a09ee-82af-44c8-8a31-c07f0aa4d640", "sighting_of_ref": "indicator--3e698ad0-1d23-4149-9175-6398487d5edb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f276d9-be98-4cbc-a22b-5eaf66810051", "sighting_of_ref": "indicator--87b594c3-2130-4a64-97b0-63ecd7da9f6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de35467c-2925-461f-ac4a-09dab6e384c2", "sighting_of_ref": "indicator--44eb4c4e-ab85-4703-9170-b5ee2512fe10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045e31f7-4ffa-46ac-8bec-355323b2b3cd", "sighting_of_ref": "indicator--3af624b5-0b6f-43a3-a5d0-550bc983b933", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2f0a9d-97b2-40ef-b478-9673bfcd952e", "sighting_of_ref": "indicator--3af624b5-0b6f-43a3-a5d0-550bc983b933", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836d08d3-b1e8-4581-9e20-21ff1b54246d", "sighting_of_ref": "indicator--a67a5252-408e-4c53-aa51-e9e2ebb80689", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aee191-dcc8-4366-81b2-9b6a8c2fe432", "sighting_of_ref": "indicator--0852c1f7-e386-4ea5-a124-844b9d47d9d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ac0791-8041-4561-a769-56d31ffc653e", "sighting_of_ref": "indicator--0852c1f7-e386-4ea5-a124-844b9d47d9d1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e124d7-8e58-479c-8254-20c85f09d523", "sighting_of_ref": "indicator--0852c1f7-e386-4ea5-a124-844b9d47d9d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cdd3f4-e053-4f08-a343-3bd371afd2f6", "sighting_of_ref": "indicator--2c75c5aa-5b2f-49f2-ad26-3d919c1c3c61", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8771c58f-c7d2-415f-9692-eadda57eb229", "sighting_of_ref": "indicator--35e4cd94-c108-418e-b065-6a222e83d957", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a527fe4-63b8-47f3-96f0-b68fa7b5877f", "sighting_of_ref": "indicator--35e4cd94-c108-418e-b065-6a222e83d957", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631f7d0a-80ea-45ae-a2e4-49d9c9d6563d", "sighting_of_ref": "indicator--91f2c7be-ef32-4b85-bd91-a380992c9e1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fecf48-3a56-4ce1-9aaf-9803c40b0ee5", "sighting_of_ref": "indicator--ea7509ca-0db0-46eb-8360-df7132f254b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e733e0d-8941-4ba0-a719-ef4ffa23c167", "sighting_of_ref": "indicator--bace25a7-74c0-4785-9b0d-fce55cac5cfd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6cf964-6f4f-4047-ab6b-30eb5e0db5b7", "sighting_of_ref": "indicator--bace25a7-74c0-4785-9b0d-fce55cac5cfd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2495079-a4f5-4377-b9d0-0a805ddb968b", "sighting_of_ref": "indicator--bace25a7-74c0-4785-9b0d-fce55cac5cfd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d429462-9dc5-43cf-8a69-50189112a6f4", "sighting_of_ref": "indicator--d24be788-e5dc-4336-abf5-17c263bda6ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853530d5-6dcf-49d0-b281-40ffc2a53dae", "sighting_of_ref": "indicator--d24be788-e5dc-4336-abf5-17c263bda6ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4447e496-675e-4868-af56-544e771e52bc", "sighting_of_ref": "indicator--d24be788-e5dc-4336-abf5-17c263bda6ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015c576b-9138-45c5-984f-2d44bee4db24", "sighting_of_ref": "indicator--51bf37d4-cd6f-43fb-85b7-b2ed1b1a6e48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76badd3-1723-4c38-88ba-f7d7efac3aae", "sighting_of_ref": "indicator--51bf37d4-cd6f-43fb-85b7-b2ed1b1a6e48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec2e2be-8de4-4dd9-ba2b-2e7c6ff3857e", "sighting_of_ref": "indicator--51bf37d4-cd6f-43fb-85b7-b2ed1b1a6e48", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76d7699-9e31-4712-b81b-18f1d11bd6d0", "sighting_of_ref": "indicator--750ed4a4-d2a5-4dc4-8bfb-14fe69a4ae36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cee1e5-b26f-4647-a631-67814087c9bf", "sighting_of_ref": "indicator--750ed4a4-d2a5-4dc4-8bfb-14fe69a4ae36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f05532-b91c-48fa-b101-8fcf0c283d1f", "sighting_of_ref": "indicator--750ed4a4-d2a5-4dc4-8bfb-14fe69a4ae36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a416f07b-eb6c-4cf3-bf06-d60e1b3a5d9e", "sighting_of_ref": "indicator--cb54f1b9-fb1b-4052-a43f-9a9e4c09ec91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5963306-d338-4199-b089-b85650f3fb5d", "sighting_of_ref": "indicator--ea7a840e-b1d4-4150-a8ef-dd5df08f3d49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae599088-a43d-451f-9a7b-d9e528f615f5", "sighting_of_ref": "indicator--445bbdf5-c13a-48e0-b53a-64d360da1972", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be41e417-fbfb-4b5c-a75b-a319b5817083", "sighting_of_ref": "indicator--33f563e3-c1aa-4b90-b73a-d2a1ca346015", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9af24e-cb04-4e57-956d-0abaeeaaf2d0", "sighting_of_ref": "indicator--2311861f-63aa-4ade-803e-a4eaa767818f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124eed5e-f51b-48ed-bbde-088db6bffacb", "sighting_of_ref": "indicator--e78cf04c-20b9-4e26-b647-11431d4d9196", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577a6de4-ac96-42cc-8ccc-b30f49d67f57", "sighting_of_ref": "indicator--9d53d950-ee1f-4b37-8b4f-4b3301a34ecd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b65248-7dda-4371-b3f7-7ab57da40ded", "sighting_of_ref": "indicator--4f43b26b-6e3e-4fa4-850b-f7f1f2f6510d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd89d3de-ccb5-4f70-b6e6-42c363f74448", "sighting_of_ref": "indicator--f0632d47-c6fa-4bd7-999f-b5f9f9738366", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c26c3e0-0a40-4c9e-8408-59fb1850203b", "sighting_of_ref": "indicator--f0632d47-c6fa-4bd7-999f-b5f9f9738366", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475dfa40-07a4-479a-aa4e-39d5664d9f19", "sighting_of_ref": "indicator--f0632d47-c6fa-4bd7-999f-b5f9f9738366", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dc7684-50b5-4989-916b-dae6e016539e", "sighting_of_ref": "indicator--966a6b54-7ece-4207-9bd5-9f8db179aaa0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c86d825-f0b8-4151-9951-22cfa57113b6", "sighting_of_ref": "indicator--b761b6c4-4356-4ce5-9ba1-0a07945ad99d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b942f179-e4be-4627-9c98-94e1b043b628", "sighting_of_ref": "indicator--f7d26997-5b63-4232-be1b-7540a149e43f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed63c32e-2250-4852-b7c2-7df30e32e4c8", "sighting_of_ref": "indicator--edcb9341-e0f2-4bb0-9c5d-1e732e0d3650", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5420d7-a2ea-4537-a6ee-daabcecad1dd", "sighting_of_ref": "indicator--0b5a3e32-5bec-4085-8c63-1670861173de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2056c39a-5258-437e-bc14-32745732b587", "sighting_of_ref": "indicator--9d306dff-efd1-4028-8438-938a70b876b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40e9521-1d93-422e-ad89-6f79ce85dabc", "sighting_of_ref": "indicator--39b85ab8-a64a-4d5a-8df3-8e91a6280940", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa67d750-004a-48f5-b5f4-fa78761f7144", "sighting_of_ref": "indicator--39b85ab8-a64a-4d5a-8df3-8e91a6280940", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f04334-eb9b-4843-80e0-9a9ff972c54c", "sighting_of_ref": "indicator--39b85ab8-a64a-4d5a-8df3-8e91a6280940", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ea4ae0-3383-496e-86a5-f5271a49d5d6", "sighting_of_ref": "indicator--0efd6207-cae8-418d-b3fd-4fa7364741da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2b9bf2-fcc7-467f-93ef-c29847c0f9fc", "sighting_of_ref": "indicator--0efd6207-cae8-418d-b3fd-4fa7364741da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd88211-b8e5-4979-8119-f1512c6e173a", "sighting_of_ref": "indicator--0efd6207-cae8-418d-b3fd-4fa7364741da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c308f13c-6cb4-44b2-b881-73311e69dbd7", "sighting_of_ref": "indicator--cda7e7db-8e4a-4d8d-ac3c-9c98c22fcb48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42c48a4-753c-4b9f-9583-016121a47822", "sighting_of_ref": "indicator--cda7e7db-8e4a-4d8d-ac3c-9c98c22fcb48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41fda2c-0f88-45ad-8daf-b91efea86e13", "sighting_of_ref": "indicator--cda7e7db-8e4a-4d8d-ac3c-9c98c22fcb48", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6eaa2f-24ae-475f-95cc-770a7d05047b", "sighting_of_ref": "indicator--e4165352-2cac-47fb-8030-0c6e73443bae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d493cf43-00ac-4e7e-ada1-ea5ffcc97621", "sighting_of_ref": "indicator--a18b41b9-5a49-4130-bc7c-525ccabf9ac2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5158345-b858-4df4-9636-796a549ec327", "sighting_of_ref": "indicator--f08a6ae6-1ac4-4c5a-a293-d66334fce3f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8a1cc3-85c7-41cc-b610-10d3f341db5f", "sighting_of_ref": "indicator--d0c27dec-298e-421a-932f-9f04b675f090", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43c426-c94e-4310-ad2c-36660ac40fc5", "sighting_of_ref": "indicator--d0c27dec-298e-421a-932f-9f04b675f090", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d35898-2e73-445c-a830-35a439645499", "sighting_of_ref": "indicator--d00fa307-eaaa-43d5-b270-e786149747ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f22bc71-698f-4f9c-989e-3a8e84188cc5", "sighting_of_ref": "indicator--695bb01a-4ec3-43f8-9051-905b1a8379b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e4c923-4c95-470c-a8da-6dd86fc3e9f7", "sighting_of_ref": "indicator--77534040-e18a-4fbb-aefe-f95322376fd5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1fca6c-f6b6-4d92-b607-5b49b16d9b96", "sighting_of_ref": "indicator--f810d028-99ed-402e-a13b-b62b48dd005f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29727f35-aacb-415e-8165-965dd81b1194", "sighting_of_ref": "indicator--a0f28570-329a-4436-a439-cf55cd90b2eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b26817-f0fb-43b9-8738-dfbe826798af", "sighting_of_ref": "indicator--7b57a852-bc9b-49fd-afae-2dd72395378b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67f0dd8-a66d-45e6-8a3e-c1c83a0bb133", "sighting_of_ref": "indicator--4c41e7b6-685e-4abe-887c-587d4d94bd3a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baabc423-7e42-4f54-8244-8919ddb20680", "sighting_of_ref": "indicator--6fa92077-6f4d-4833-97d0-a7bb534aa4f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c0c4ac-892f-4172-b178-b6e0b812f446", "sighting_of_ref": "indicator--bbd934be-9004-46c4-a3b8-95a0d9865c97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8cfe7-c164-4d79-aac2-99ff0b779400", "sighting_of_ref": "indicator--b6d6e330-f720-484b-8bd4-3975971415bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a89e8f-7c51-4724-8b31-dda8abc1fa5a", "sighting_of_ref": "indicator--9cc62ee6-f094-4055-8936-d2811a49e478", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ad705-9ffb-4de6-99cc-a71c687aaaeb", "sighting_of_ref": "indicator--6c3fc522-fe08-4455-b57a-0d1849d00611", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7e0a51-8d3d-464a-84df-c8e00b3d68d8", "sighting_of_ref": "indicator--6c3fc522-fe08-4455-b57a-0d1849d00611", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328d6bc4-d62b-4040-adf0-6eb0f5253793", "sighting_of_ref": "indicator--6c3fc522-fe08-4455-b57a-0d1849d00611", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9b375d-032e-43ee-94c6-d79468002b5d", "sighting_of_ref": "indicator--adc4d70a-2296-4149-8bd1-9901c24ca3e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbc59ee-75c4-43f8-81d6-17b5bb1ece89", "sighting_of_ref": "indicator--adc4d70a-2296-4149-8bd1-9901c24ca3e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaad9dd-86de-4178-aa0b-9a78cc8b9e5c", "sighting_of_ref": "indicator--dc05e12a-53cc-4970-9a7f-ea8f2ccbd8a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d56df05-a0fc-4307-8209-bacf757f8700", "sighting_of_ref": "indicator--0f60d59a-868d-4e89-bbdc-130ed435b11f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae70252-6f14-4f6f-85ef-89e57f78347b", "sighting_of_ref": "indicator--379bb228-d724-4443-97cd-9b52a7a63746", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457829eb-16e2-4a42-9e2f-3b7c05075dc8", "sighting_of_ref": "indicator--e19d89bb-1017-417d-837e-02976c670300", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f729e50b-e996-4a0e-9abc-0c9feb1f64a8", "sighting_of_ref": "indicator--06b88892-af02-4866-b395-9b8e79cff05d", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab70c5f-9036-428a-9b8d-6d1110733d1c", "sighting_of_ref": "indicator--09dc151a-0f01-4dad-a5bd-d5f0706e58b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a934e49-d241-464e-84ac-afb75fa7dde3", "sighting_of_ref": "indicator--6c669f14-0db0-4c59-9767-975e3d1f0643", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e06488-2db3-4c5f-a81d-75cee3b900ee", "sighting_of_ref": "indicator--dfcf331e-405c-4593-bf2c-584a1071d997", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6734c7d-41c8-4b57-b8f8-3d9aa8e032f6", "sighting_of_ref": "indicator--6f4bb004-df87-4fcb-93f6-4ae41925944b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1ba6b0-3906-42b9-a16f-4eb3e97e42dc", "sighting_of_ref": "indicator--9e2e5c74-9f11-4165-b218-58b5f5fb0d9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22efb6d0-b4fa-4846-9b78-0930ec4e5f29", "sighting_of_ref": "indicator--6b26a099-b5b1-44fd-8163-bba3d5f48be2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8503e4a6-4c31-4281-a63d-f471999e66c5", "sighting_of_ref": "indicator--e9fb4fbc-9cf2-43ca-838c-19b3d3562afa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2912b5c-9232-48e3-ac82-f60aaf4f4828", "sighting_of_ref": "indicator--e661e47e-34ec-40c7-8932-ae9855e7ea7d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddf3e18-1da0-486b-827e-50d360a4fe5d", "sighting_of_ref": "indicator--edecc440-ef6e-4bec-8fa8-18a6f95c4897", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db071c1-1a41-4c38-b79c-e4e0866e772b", "sighting_of_ref": "indicator--760a50e3-a2b5-42ae-9754-fc7ec3403e64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d205c139-1625-4d7d-af0f-9e3aa46b4b38", "sighting_of_ref": "indicator--349266bb-b879-457d-80bd-c1f8096833ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2536f55-0ee5-4ad8-88b5-654047ed5058", "sighting_of_ref": "indicator--012c60a2-2006-4c22-afeb-1d924842c0b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3581a62-1845-4fbe-88dc-a91ef4d92d9e", "sighting_of_ref": "indicator--95cbf1a0-ac48-48c6-b479-3a9b33951896", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e735d1f-326f-467a-a98e-845dd1a6d70d", "sighting_of_ref": "indicator--cafc17fe-dd89-4bc3-a67e-c855b684f9e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14746cd-2d1f-449d-8725-5de0b18007e4", "sighting_of_ref": "indicator--2ddeabc5-ff27-4b35-9be1-8ade6369a0f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3958d5-64dd-45cd-8772-433338a89cda", "sighting_of_ref": "indicator--e2ed60d7-34d3-4f58-af5b-32c40d07deda", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c942b3-393b-46d5-bf6e-c973291b8bee", "sighting_of_ref": "indicator--61d67be6-6dff-4e54-bc5b-a5fcd2208343", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea043e80-0220-473e-baab-d0000ad4ba58", "sighting_of_ref": "indicator--203d9a65-37f3-4ad9-84f8-3d7527880cb4", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32409b4-0f06-45df-801e-51963f2b2a60", "sighting_of_ref": "indicator--bcd1b4a3-84e5-4b87-a8f0-b0027f8a2c6a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1485dd1-c38c-4e07-9808-af38c5bb12d7", "sighting_of_ref": "indicator--7277d43c-1700-44fb-8db5-aba2c070851f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cdbce2-0841-4a58-8af5-45711fa39820", "sighting_of_ref": "indicator--dee519b5-4054-44c3-a056-5811f50e8b2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85e3992-b0ee-4cd0-9249-bde9d2eb859c", "sighting_of_ref": "indicator--e972a5ce-8454-4aa7-bff4-a5691ff5f0a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaf5047-85e7-408c-9bbf-ccbc4d995db9", "sighting_of_ref": "indicator--b66611e1-03fa-4f8e-bc3c-a655691aaf52", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c404a63a-5181-49fc-85e2-8b64c22ca714", "sighting_of_ref": "indicator--55b95532-6d8e-4528-b684-99192be22740", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a195e83-51fc-4f04-8d23-3581f2e2c6b7", "sighting_of_ref": "indicator--55b95532-6d8e-4528-b684-99192be22740", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380dbe4e-6307-4ce6-8055-17ca8e89eded", "sighting_of_ref": "indicator--a1e4824c-f85a-4229-a8a5-124762e16259", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe7a511-5845-4bcb-8c9e-9a0858577266", "sighting_of_ref": "indicator--d5229e2c-5980-4231-946e-cd5e41f3fdd0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49bb519-78ce-4f53-8498-8f1d8ee90058", "sighting_of_ref": "indicator--9307ab29-8759-4372-bf44-cce9d10ff88f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a49431-b9b7-45c7-8f5e-85f7b4d18473", "sighting_of_ref": "indicator--9307ab29-8759-4372-bf44-cce9d10ff88f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b274a8e7-e43b-4bfb-8c4d-d8036f16cd5d", "sighting_of_ref": "indicator--9307ab29-8759-4372-bf44-cce9d10ff88f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2154a79b-a4b2-4301-9fef-5a2b4f644c4d", "sighting_of_ref": "indicator--bb659a7a-d368-40d3-91c6-fedd182ba897", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b331dd4-bc2d-41d2-a820-197bf60b4144", "sighting_of_ref": "indicator--bb659a7a-d368-40d3-91c6-fedd182ba897", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92021e87-12bd-4869-a6a4-72890d3f0103", "sighting_of_ref": "indicator--5770c70e-128a-4404-8b60-b4f904b5a03e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2090bb23-fd14-478b-be2a-9954beb22169", "sighting_of_ref": "indicator--332c86f1-6f69-412b-83df-b298ac2c199a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56690459-5d99-46c5-9e66-453485ba38f2", "sighting_of_ref": "indicator--93f1e450-7cdd-4f22-8a61-325c8e76d590", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7a8322-a255-4509-8a37-e4bcfa89ca78", "sighting_of_ref": "indicator--93f1e450-7cdd-4f22-8a61-325c8e76d590", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece8c004-a3b7-47fb-9509-f6dde4717ca6", "sighting_of_ref": "indicator--93f1e450-7cdd-4f22-8a61-325c8e76d590", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3bdbf0-4ca0-42fa-9c96-1f42c1b66833", "sighting_of_ref": "indicator--9279beaf-d6d4-4c8e-9d95-ddbcb3e95e88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7632f50-4019-4716-9d62-e07fa3bd7bd6", "sighting_of_ref": "indicator--b3b2a689-c4fa-4c27-a7fb-a11c38161124", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772dab70-d456-4aa5-92f3-f724a02fad7e", "sighting_of_ref": "indicator--b3b2a689-c4fa-4c27-a7fb-a11c38161124", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db560bd-31b9-44f9-b787-fed19964c644", "sighting_of_ref": "indicator--8b38ccd7-3695-4799-98e2-58dceeae31ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2ebd7a-b513-49fc-93ec-54f524c883de", "sighting_of_ref": "indicator--6017d215-276a-44a3-9dfe-0f6fce826c4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cf3ad6-7951-4cc4-82d2-bae9ee2d9478", "sighting_of_ref": "indicator--136ce01b-f6a0-4669-a84f-bd47922ff97d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a5fdc1-297a-4414-ac5f-d2fe7a5f71c2", "sighting_of_ref": "indicator--136ce01b-f6a0-4669-a84f-bd47922ff97d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25705d9c-3034-4a33-ba81-286c8e5364eb", "sighting_of_ref": "indicator--974d7efe-280c-498f-912d-8c2c4d10eef6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75384d23-3a42-470e-b6c5-eeb0f760c4b9", "sighting_of_ref": "indicator--974d7efe-280c-498f-912d-8c2c4d10eef6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef6bc3a-637b-4018-a237-fd64e5de311c", "sighting_of_ref": "indicator--974d7efe-280c-498f-912d-8c2c4d10eef6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7b9f81-a108-4112-a257-7b674f309803", "sighting_of_ref": "indicator--fb9c480d-002a-4042-b33e-fc97a425473e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d033d6-87a8-41f9-8d5b-d658704bda0d", "sighting_of_ref": "indicator--fb9c480d-002a-4042-b33e-fc97a425473e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405f29e2-5112-488b-8fb4-94ca9847ba34", "sighting_of_ref": "indicator--fb9c480d-002a-4042-b33e-fc97a425473e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fafd8f-fcb6-42c2-987d-68ef2b14e409", "sighting_of_ref": "indicator--93774e68-5396-4dc0-8f46-36a22f065711", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732d985a-06be-4d9c-be79-75cb55716e8f", "sighting_of_ref": "indicator--4bf2b679-16a3-4bf4-9ef5-98fa54c616c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed92d582-3e7e-4f1c-9275-6358b5a9cb3e", "sighting_of_ref": "indicator--52b94fee-ec0a-4e1c-a0e8-2ab158ac2a8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229b0037-4e48-4c55-a5e2-ae9cc8f21eaa", "sighting_of_ref": "indicator--5f442d31-b70c-436f-adf0-69d506884b03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de14ebf-29be-4e8f-96b9-a686f47097a5", "sighting_of_ref": "indicator--7be05211-70b9-467b-87dd-9b4bb2e3ea09", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf88129-861b-4098-aa6f-214cceed2d9c", "sighting_of_ref": "indicator--d01d89d7-e46c-400c-9d11-3f36fa8b8138", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205410f6-d22f-4888-9054-da14c71218f1", "sighting_of_ref": "indicator--d01d89d7-e46c-400c-9d11-3f36fa8b8138", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6121958c-0077-4be4-af1c-087c772c3b0c", "sighting_of_ref": "indicator--d01d89d7-e46c-400c-9d11-3f36fa8b8138", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89a8656-ae24-4352-bb77-3024c59c8d68", "sighting_of_ref": "indicator--76218df0-993e-43b9-bc44-8eaeb5aa40d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9a0975-5ead-418b-8453-767581270cbd", "sighting_of_ref": "indicator--44fb9fd8-ec57-466e-817c-110a2cd9b987", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3ed86b-5fae-4cd5-b9be-7aacad28ee89", "sighting_of_ref": "indicator--cfb226cc-23f9-424e-86ae-121c639d1383", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f5ceb0-46d7-410b-91f6-5754e667040b", "sighting_of_ref": "indicator--547b095d-8f04-47b8-b57f-d2ee62bfda34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23046f3-80c9-4c40-aaee-11717a83b043", "sighting_of_ref": "indicator--b121aa43-a51e-4276-90ed-1bc2fa7e210f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2a43d0-94d5-4c50-8daa-d4379c55311f", "sighting_of_ref": "indicator--da755082-eeb4-40ae-b33a-24d82eab09aa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c685397c-f978-44c1-bb4c-78b81400080c", "sighting_of_ref": "indicator--0705c16e-4700-4544-95d0-92eef7752008", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed969d8-b456-442d-b9d5-21b9ca89739a", "sighting_of_ref": "indicator--8e207696-d876-47d9-b04d-b0a72b88a14a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de3244e-8815-467a-9e24-3530ff5978c7", "sighting_of_ref": "indicator--c52173ab-1881-4d70-a8e8-e02044afc6e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942f369e-fa62-4d3d-9883-82970b471727", "sighting_of_ref": "indicator--6aae5ebf-ca5c-4f72-8db6-28cdfbfe2eaf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec4f3a8-3132-4695-b4df-be88722dab1e", "sighting_of_ref": "indicator--8a971b55-6c30-45ff-a560-ca419bef13e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dbfb6f-4ba3-408c-9e7b-0d0d80092010", "sighting_of_ref": "indicator--dc6e6ed4-aec3-4422-b702-edf6161c33bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e8939d-863c-4d3c-b866-0b49e13d1199", "sighting_of_ref": "indicator--300c95ff-d6d1-42de-add0-8edbcea5dcd7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa87b4c2-d580-4420-8970-64ff302efc36", "sighting_of_ref": "indicator--a5d3e42f-ec78-4ffd-b1cb-122ab24b8189", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf0329a-3cd3-4ffc-a761-7f0defcfb84e", "sighting_of_ref": "indicator--dc84f976-fde3-45ff-bcb2-6b67e6e42b36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3ecee8-c713-4ff9-a28e-d1c23a4a348a", "sighting_of_ref": "indicator--dc84f976-fde3-45ff-bcb2-6b67e6e42b36", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b085b517-739e-4b08-be24-c1ef33b271fa", "sighting_of_ref": "indicator--dc84f976-fde3-45ff-bcb2-6b67e6e42b36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21451665-235f-492f-a79f-1dfd00ca9ca7", "sighting_of_ref": "indicator--c74b4603-701d-4d89-981f-ecee65ce39cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bc30e6-b909-4d74-8667-3eac6e8326c4", "sighting_of_ref": "indicator--c74b4603-701d-4d89-981f-ecee65ce39cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ba87cf-9ae5-48cb-9662-0b6492008d2e", "sighting_of_ref": "indicator--c74b4603-701d-4d89-981f-ecee65ce39cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536f3f61-186f-431f-b502-e21aaae0f319", "sighting_of_ref": "indicator--8e44b1bf-07e7-4b66-a606-916c9054909a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b6a948-b8e5-4e90-a77a-3bd2a8aaca69", "sighting_of_ref": "indicator--8e44b1bf-07e7-4b66-a606-916c9054909a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d997dd-e466-44f5-b62b-715a057b578c", "sighting_of_ref": "indicator--8e44b1bf-07e7-4b66-a606-916c9054909a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623236b0-f356-4d34-8dcb-eb0f0e7d2f26", "sighting_of_ref": "indicator--c310557c-1120-4a26-8283-563b477d905b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25ad904-ba12-43ab-95eb-d9a6641568f4", "sighting_of_ref": "indicator--c310557c-1120-4a26-8283-563b477d905b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a63304-ffb1-4601-bd41-990c424adbc9", "sighting_of_ref": "indicator--c310557c-1120-4a26-8283-563b477d905b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdf3136-b5be-4718-8177-abdd33f538ac", "sighting_of_ref": "indicator--b1bd39bc-2807-4ebf-9b31-cf2aea57a798", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf2e5b8-5a82-48e9-bce0-1b3679cc6b3f", "sighting_of_ref": "indicator--b1bd39bc-2807-4ebf-9b31-cf2aea57a798", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fd1d32-2d47-4e74-af65-6bf70c2a7f5e", "sighting_of_ref": "indicator--b1bd39bc-2807-4ebf-9b31-cf2aea57a798", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eae2e0-baa9-43c6-af24-0b454f282489", "sighting_of_ref": "indicator--2b31ea0e-b9c4-4695-b7fb-b4de18de0cd6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3456d89-758a-4485-9a15-540373a1ae7b", "sighting_of_ref": "indicator--2b31ea0e-b9c4-4695-b7fb-b4de18de0cd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899c15ef-8f9a-4c0c-8348-f59941ceebbf", "sighting_of_ref": "indicator--2b31ea0e-b9c4-4695-b7fb-b4de18de0cd6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b00a634-6a00-4a73-8ebe-42f746879cea", "sighting_of_ref": "indicator--b59a4456-e9b8-4785-841a-ce945173c8f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f6c669-2273-4f8f-97af-ea4920c6543d", "sighting_of_ref": "indicator--b59a4456-e9b8-4785-841a-ce945173c8f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd889a2e-b52c-45db-8641-f2c24168db4c", "sighting_of_ref": "indicator--b59a4456-e9b8-4785-841a-ce945173c8f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb7807b-f844-48d9-b68a-7b9bc7bd6263", "sighting_of_ref": "indicator--22fac600-38de-4d59-8b6c-d3ff1fd33e56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d9550c-9553-4db5-bd6c-e6f1f0b20836", "sighting_of_ref": "indicator--22fac600-38de-4d59-8b6c-d3ff1fd33e56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96f685a-c87f-49b1-ad1b-6df184e66fb6", "sighting_of_ref": "indicator--22fac600-38de-4d59-8b6c-d3ff1fd33e56", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0461967d-b753-4f2c-a14b-b4263d0685ca", "sighting_of_ref": "indicator--6f8d8375-8f08-4fc6-b641-b12fbf078a73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91ea83e-1f75-456d-9b19-7e4f861ef9d8", "sighting_of_ref": "indicator--6f8d8375-8f08-4fc6-b641-b12fbf078a73", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885068dc-4db2-4f72-9f36-20d4c7e2ee41", "sighting_of_ref": "indicator--6f8d8375-8f08-4fc6-b641-b12fbf078a73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167ffc06-460c-4e33-b516-980271855b11", "sighting_of_ref": "indicator--b429e2e4-b1f2-4cb7-a80c-d9a2b84237a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca176e63-df9c-42e0-84cc-3bf399842d48", "sighting_of_ref": "indicator--b429e2e4-b1f2-4cb7-a80c-d9a2b84237a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17a13ce-b62b-4b69-a3c2-985ec291d3b8", "sighting_of_ref": "indicator--b429e2e4-b1f2-4cb7-a80c-d9a2b84237a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd8b947-4673-4e29-820d-6379315f138f", "sighting_of_ref": "indicator--122dea73-b666-4576-b3ff-0ebf75c36bac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90072ca7-3349-4243-91f4-79406e4c98bc", "sighting_of_ref": "indicator--122dea73-b666-4576-b3ff-0ebf75c36bac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cee7c9c-91aa-48b4-b0c7-36878ca8f4e1", "sighting_of_ref": "indicator--122dea73-b666-4576-b3ff-0ebf75c36bac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc290381-2708-4f1c-b780-69c106b18526", "sighting_of_ref": "indicator--972374a2-5741-4dc4-81e6-83060df17693", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7cacc8-36c9-4463-930c-edcba1094ff9", "sighting_of_ref": "indicator--972374a2-5741-4dc4-81e6-83060df17693", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a6ee96-b456-45ff-ad93-275e9c3f62d4", "sighting_of_ref": "indicator--972374a2-5741-4dc4-81e6-83060df17693", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3dc726-3a40-4832-8d8b-fd61707f3e43", "sighting_of_ref": "indicator--5985933f-3cd5-4664-80d1-68ac0013eb1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a7548f-2465-45d9-9dd6-b2e706368741", "sighting_of_ref": "indicator--5985933f-3cd5-4664-80d1-68ac0013eb1b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fd26e8-ef1c-4f0b-9099-52c6b6fc59fc", "sighting_of_ref": "indicator--5985933f-3cd5-4664-80d1-68ac0013eb1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba07191-3b87-49f9-842e-0e984854d260", "sighting_of_ref": "indicator--9ddb3892-6830-445c-a9a1-2defa55b0c0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4246c946-7a51-44a5-81de-074b5fa81ec1", "sighting_of_ref": "indicator--9ddb3892-6830-445c-a9a1-2defa55b0c0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27da7cd-067c-47f2-b777-af551ab1e8c0", "sighting_of_ref": "indicator--9ddb3892-6830-445c-a9a1-2defa55b0c0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8ad28-0fd3-4205-98d0-0571a1d87955", "sighting_of_ref": "indicator--c6a47053-8a2a-45bd-883e-1744165b2cfb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a2f517-164a-49e0-a2e2-78a1efbd8582", "sighting_of_ref": "indicator--c6a47053-8a2a-45bd-883e-1744165b2cfb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6546c5-b108-4955-921c-a522e49153b6", "sighting_of_ref": "indicator--c6a47053-8a2a-45bd-883e-1744165b2cfb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f459f1-35ad-46bd-935f-ee50ff2fec47", "sighting_of_ref": "indicator--6101c2f1-e389-4503-b654-e38fa4ae5019", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ff36ae-7640-45d9-ac5b-50c4c3ff9d2e", "sighting_of_ref": "indicator--6101c2f1-e389-4503-b654-e38fa4ae5019", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b8e5f1-e9b9-48ad-9663-7a39f3e439fe", "sighting_of_ref": "indicator--6101c2f1-e389-4503-b654-e38fa4ae5019", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c225f8c6-6f59-4ac3-a91e-c652ba922e79", "sighting_of_ref": "indicator--04b323f4-50bd-491f-8c8c-9a76bd2b2a77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40b85e1-d55d-429d-9004-bcbce1d5b0c1", "sighting_of_ref": "indicator--04b323f4-50bd-491f-8c8c-9a76bd2b2a77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26777c1-278d-4267-9839-c7e36635ca1d", "sighting_of_ref": "indicator--04b323f4-50bd-491f-8c8c-9a76bd2b2a77", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ad00e6-2541-4805-8848-c7bc21a807a7", "sighting_of_ref": "indicator--226476cd-4658-4668-8bb2-73e25e3c8515", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8ab729-991b-435e-b0d3-4c6b917e8783", "sighting_of_ref": "indicator--226476cd-4658-4668-8bb2-73e25e3c8515", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f90e5c-ecad-4908-b1cc-4bc8572ce623", "sighting_of_ref": "indicator--226476cd-4658-4668-8bb2-73e25e3c8515", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8570bc3c-6459-4eae-89a7-8f7e2d176c8e", "sighting_of_ref": "indicator--9242ff4c-ff4c-44a9-ab9d-0d34801499f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb53f5a-65ae-47c2-978b-658bb9d5e22b", "sighting_of_ref": "indicator--9242ff4c-ff4c-44a9-ab9d-0d34801499f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231085f2-d2bf-4e52-88d2-2b762c5c5765", "sighting_of_ref": "indicator--9242ff4c-ff4c-44a9-ab9d-0d34801499f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46050336-aeda-48ed-a257-a36a88442c9b", "sighting_of_ref": "indicator--c25c95ba-ee6b-4a04-b4c8-f58124830be4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b011fe50-a88f-4961-87d8-0a9f391d2056", "sighting_of_ref": "indicator--c25c95ba-ee6b-4a04-b4c8-f58124830be4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a33ea70-6044-49ad-a0a1-134e349456c3", "sighting_of_ref": "indicator--c25c95ba-ee6b-4a04-b4c8-f58124830be4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e5df97-e7d7-4b0e-a1f0-8b634a1ba8bc", "sighting_of_ref": "indicator--129c0dfc-7cad-4eb1-8dde-f7663e756e34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514ad2ee-ecca-42b6-85c4-fcbac1c49d80", "sighting_of_ref": "indicator--129c0dfc-7cad-4eb1-8dde-f7663e756e34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfdbcdb-ff40-440a-b414-8332aaa612ac", "sighting_of_ref": "indicator--129c0dfc-7cad-4eb1-8dde-f7663e756e34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73cb35c-c5fa-47b5-9b46-0b6cb595443c", "sighting_of_ref": "indicator--736623d6-bace-4601-a9f9-05031e89a8b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7959b11e-0fd4-4cb4-ba13-4f80aab327f4", "sighting_of_ref": "indicator--11b945bd-bda2-42be-bf27-bb39de53be22", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a0492f-ecd0-46b7-8d6b-2d27da2dadc3", "sighting_of_ref": "indicator--9539644e-fd98-44ea-8d5c-c178de969606", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e29b1ad-aa9c-49d4-bd7f-199cd716309e", "sighting_of_ref": "indicator--0deb4ef9-f7a6-4c19-bb80-ed872605c8ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2a8e07-cffd-4dd3-add7-2d84b9a500f4", "sighting_of_ref": "indicator--0deb4ef9-f7a6-4c19-bb80-ed872605c8ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0f3202-cf5c-44d6-abeb-51f5156ada28", "sighting_of_ref": "indicator--0deb4ef9-f7a6-4c19-bb80-ed872605c8ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad88939-9d1b-41a1-97cf-b782b2a966e1", "sighting_of_ref": "indicator--f548a098-8aef-4380-aaf9-814bf82bb773", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8298947a-37b4-48ef-8612-8c2ccf11b9c3", "sighting_of_ref": "indicator--7dbbd7f3-a1e0-48ff-b7e8-f3872af8a4cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bd4de5-21b4-4669-b754-1f682fe16d45", "sighting_of_ref": "indicator--94065159-caf9-4848-8d1e-1626a39ff422", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c1b8d9-f746-4350-b42b-41b2d5b0d99f", "sighting_of_ref": "indicator--94065159-caf9-4848-8d1e-1626a39ff422", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ed30f8-913b-4ed2-a175-4659b5148996", "sighting_of_ref": "indicator--94065159-caf9-4848-8d1e-1626a39ff422", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f3a5ed-9aa6-401b-9724-c02cd2b53144", "sighting_of_ref": "indicator--4911eb6a-b556-4618-b209-fc80b37228da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1512cd92-2352-4218-a391-4752b124892e", "sighting_of_ref": "indicator--bbc9ff7c-8e9a-42d2-a8d8-8fd67c06872b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c473e8ce-a14c-4604-8f9b-ef795810c454", "sighting_of_ref": "indicator--f2c3c050-3566-42b4-92a8-5271cc0b399e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce0b0e1-89ac-4acd-860f-c60b53fa12e5", "sighting_of_ref": "indicator--8171219a-6472-4112-9d6e-61b74dd22afb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d9a4eb-ba3b-442e-9392-ee6b2f02fa60", "sighting_of_ref": "indicator--9c009615-434b-4e30-99b2-720b381b5051", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661e1835-9ab0-4d0d-b4c7-310399c12437", "sighting_of_ref": "indicator--8611f185-d17d-4b22-b03a-44c7d585032b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6519d61d-c8ca-4ccb-b19d-7e1c0e52ea8a", "sighting_of_ref": "indicator--34077ac9-98bd-4c2a-ae94-5d9c9f06d7bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb10aa-9f3b-40fc-a748-97afa0b6122f", "sighting_of_ref": "indicator--34077ac9-98bd-4c2a-ae94-5d9c9f06d7bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b64b0c7-d167-452a-9acc-a1485b9238da", "sighting_of_ref": "indicator--34077ac9-98bd-4c2a-ae94-5d9c9f06d7bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7f3ad7-1173-4c72-84b5-edcb723aa501", "sighting_of_ref": "indicator--965648c9-479c-47fa-bbc5-9d3fe4e5a245", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1a5aad-0398-4b65-8a79-5a7c857d0ace", "sighting_of_ref": "indicator--433b9469-491d-4d12-a581-44a617ed6f7a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b265a9dc-1407-4d76-ace2-499bae493234", "sighting_of_ref": "indicator--3bc7c6df-3ef3-405d-8e49-e6b39f531a4f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981fc3b2-084d-4c9e-a7a0-1aa3d38624e0", "sighting_of_ref": "indicator--341d3393-8f4f-4c3c-acb4-dd2c164f658d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac402a4-9c33-4f21-8719-3178d46331cc", "sighting_of_ref": "indicator--40d7c39c-e719-4e1e-ae8f-e9733dd5308b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015cbed8-7dad-45e7-a53b-a920a56ac866", "sighting_of_ref": "indicator--6f001c43-92ac-494a-8d7e-8b19292ce43d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a7f490-10e4-4d97-a720-26d101266163", "sighting_of_ref": "indicator--d271ccf6-c68e-4ba0-90ec-d977ca378db1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bae4ef-c187-4c90-b6d7-5ecb67504ce4", "sighting_of_ref": "indicator--866eb4ed-6096-4883-af91-a524cabde68a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210d62cd-d734-4822-a9d3-9f595ea85ed8", "sighting_of_ref": "indicator--723d15e2-159e-404d-bccd-c84696957790", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a41c8e-acad-42b2-b8b1-234280fff393", "sighting_of_ref": "indicator--0c1aafa7-e2ec-48ea-9cd1-d00865c62f12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86beaa41-4fac-4f89-baa7-c9fede33c77b", "sighting_of_ref": "indicator--0c1aafa7-e2ec-48ea-9cd1-d00865c62f12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e0c97e-3384-4dbd-b788-87886c1a34ef", "sighting_of_ref": "indicator--0c1aafa7-e2ec-48ea-9cd1-d00865c62f12", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dafc4f-269e-49a4-ab29-f1143c8a4d80", "sighting_of_ref": "indicator--fe05985e-617c-4e50-886b-0a4121b3d0f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e356c304-e7e9-4c9d-8025-75759a7d1869", "sighting_of_ref": "indicator--fe05985e-617c-4e50-886b-0a4121b3d0f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3403b7ec-255b-499c-9427-dadefbd5ce04", "sighting_of_ref": "indicator--fe05985e-617c-4e50-886b-0a4121b3d0f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145c0513-60d1-4c18-98f0-a7dd68b0ecb8", "sighting_of_ref": "indicator--76719028-79f5-429b-9b3d-ba06c0f129fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a34b0a8-4f20-473c-bee8-028d96a5ee17", "sighting_of_ref": "indicator--76719028-79f5-429b-9b3d-ba06c0f129fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697bcc34-7ad9-4000-b743-1cdfc0653282", "sighting_of_ref": "indicator--76719028-79f5-429b-9b3d-ba06c0f129fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203808bc-af88-4c6d-a2cc-9267e8367f35", "sighting_of_ref": "indicator--89103ed2-0e3a-476c-9499-5319d24b01ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3ca194-8474-42e4-b90a-eb71afb453ad", "sighting_of_ref": "indicator--f65e6a8d-4d34-4779-9156-9906e2eb9990", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3de655-7fcf-4b4f-bb6b-8c680919b5cf", "sighting_of_ref": "indicator--c5033562-2319-46a6-826c-a10820edce73", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06b2c17-a076-4d73-861a-2ba701640b43", "sighting_of_ref": "indicator--63c82510-fe05-4ee8-ae7a-8622b8bd3cd1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1048f2-e2c9-4d05-b672-d64c464a2bed", "sighting_of_ref": "indicator--d31f92b9-733f-45c0-915b-033393b01f63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d4d891-ad09-4b95-b1d5-0c97dfdaa566", "sighting_of_ref": "indicator--d31f92b9-733f-45c0-915b-033393b01f63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb12446-4c80-49a7-b1fa-7578df46b1ca", "sighting_of_ref": "indicator--ce84cf07-7347-4865-915c-a8dc19cfed3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765d19cb-175b-4f2a-8441-b5674040cbad", "sighting_of_ref": "indicator--ce84cf07-7347-4865-915c-a8dc19cfed3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e77bdc-5c78-4f8e-9fc8-aea3e04e5894", "sighting_of_ref": "indicator--084916f2-c0d5-4c3f-b1eb-a5d9976e99ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ce84a-b2c4-4da7-94b3-760d99b1b402", "sighting_of_ref": "indicator--084916f2-c0d5-4c3f-b1eb-a5d9976e99ea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f349ed86-9e64-4341-b173-a012baf257d3", "sighting_of_ref": "indicator--6760cb0f-f823-4a6e-8ce6-3ba276396c63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fc86c8-4355-43d2-b2c3-d8e7c081bd5e", "sighting_of_ref": "indicator--cdaccbf9-8f6a-4a1e-a700-84f0eb27ed98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aed671-f55d-4330-adb5-d4c85f8ee081", "sighting_of_ref": "indicator--3defb6c1-f7b9-4f02-8d0f-c8f2967d9b6d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381c8c58-cdff-4965-a041-13727e032925", "sighting_of_ref": "indicator--caaa3f54-483c-4eca-9a16-cf575bacdae9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab4fcec-507a-4ee3-b017-93479aa33359", "sighting_of_ref": "indicator--450bddc6-edcf-46db-86ad-25d7606d74de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6c5654-b9c5-4474-ba5f-2e9ae55acdec", "sighting_of_ref": "indicator--b60ea48e-ed37-4924-b6cf-8b917f429109", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb9f666-83d4-4581-9cc8-d25a0d51ed5f", "sighting_of_ref": "indicator--b60ea48e-ed37-4924-b6cf-8b917f429109", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822972f1-f7cd-4888-a41a-25acc6670ca4", "sighting_of_ref": "indicator--eb12590e-87f1-4ddc-a3e5-fa3b98a68b81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f1f9db-1df3-4916-92de-98beb1c7a6cf", "sighting_of_ref": "indicator--eb12590e-87f1-4ddc-a3e5-fa3b98a68b81", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f820724-34ed-4c40-b9a5-1efa6ff5aba8", "sighting_of_ref": "indicator--2c59c7ab-6d02-48e0-9516-b7fdf2f754eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718ca393-a9fb-488d-905c-24e524d75919", "sighting_of_ref": "indicator--048e5d2f-bf0c-40a9-9e7c-1928de4dad11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd9d3e0-a3a6-4c7e-8a90-f63dc9824381", "sighting_of_ref": "indicator--048e5d2f-bf0c-40a9-9e7c-1928de4dad11", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd0d167-1d33-401b-b468-c3bb43e09c45", "sighting_of_ref": "indicator--7c57daaf-10a0-444e-a780-0ecffe6f94b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae9eacb-0626-44b7-8f01-fefab0f05dbd", "sighting_of_ref": "indicator--f695c806-15a2-48bd-bc45-5f328e641f7f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7a940b-e812-46f0-afca-cac8cd265c13", "sighting_of_ref": "indicator--f695c806-15a2-48bd-bc45-5f328e641f7f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92be977e-eec7-428f-bb98-0368cc52a5be", "sighting_of_ref": "indicator--f695c806-15a2-48bd-bc45-5f328e641f7f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712a2e1e-9eec-4221-b4d2-c9d4eb88fe27", "sighting_of_ref": "indicator--cb23a440-7fc4-4154-bb1c-5e246b29fce9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526cca3e-04e1-46cf-86bb-0fb6d0472d08", "sighting_of_ref": "indicator--cb23a440-7fc4-4154-bb1c-5e246b29fce9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b85c6d0-edec-4deb-8e47-a295b66d107e", "sighting_of_ref": "indicator--4c60c356-bd91-4f43-8544-496e97cab473", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12bee60-35aa-482a-90a9-2445e692f090", "sighting_of_ref": "indicator--41eaeb69-573f-4270-b233-d64b6d19c5e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b1e80a-8c0b-4392-88a8-ba3d243e7bd9", "sighting_of_ref": "indicator--b124c75d-3705-47dc-ac29-def523ba15e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd894c3d-04ec-41b7-aa2c-a26300cdb159", "sighting_of_ref": "indicator--85ba4bc7-da79-4059-8416-7c0ded3ded46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4eb49a-2bc9-4a22-bb23-a9d08d2ac8e1", "sighting_of_ref": "indicator--85ba4bc7-da79-4059-8416-7c0ded3ded46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69d9fa0-6d3c-456f-aa1a-97bcabe6cb4a", "sighting_of_ref": "indicator--85ba4bc7-da79-4059-8416-7c0ded3ded46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a51a14-3e9e-43a6-bcee-5080e95e0b9f", "sighting_of_ref": "indicator--5e90d75d-2639-49df-82fc-88cb8558265e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f48371-c64e-4188-a17f-67dd2231f1ea", "sighting_of_ref": "indicator--827ea009-12ce-4106-a7df-db279c9b3fd7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc09cab-3445-42f9-8b46-306ccb866762", "sighting_of_ref": "indicator--1bec7d8d-aed8-436b-a4a3-5cb8c8379393", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae585cc-290e-4eee-96d9-4fd15f2dbc4a", "sighting_of_ref": "indicator--1bec7d8d-aed8-436b-a4a3-5cb8c8379393", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f7ba40-6568-47e7-b323-bf641f1d230d", "sighting_of_ref": "indicator--f724c73f-62d8-4809-ac22-735d5ba1969a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e55f43-cd5d-4aa7-bf64-bd7ea37aa80f", "sighting_of_ref": "indicator--a7a96b62-62a2-4361-b4d6-18bcb32b16d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2070a462-5197-4fa1-8f2c-6fa2c16221f1", "sighting_of_ref": "indicator--a7a96b62-62a2-4361-b4d6-18bcb32b16d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b94c837-4bdb-42f0-9b96-7d9d275698c3", "sighting_of_ref": "indicator--c3c863b9-918e-49d2-b54d-b07960645814", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cf81d7-3ed3-49ee-9776-b035aa1cd838", "sighting_of_ref": "indicator--c98dc4d2-cd04-44b4-8fe0-080781af7e83", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b03df7a-da1a-450e-9b13-be3b21f58432", "sighting_of_ref": "indicator--98527cd5-6d75-496e-afd0-fac7c6322b3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e692689-4f85-4b13-a550-448eeadaf962", "sighting_of_ref": "indicator--98527cd5-6d75-496e-afd0-fac7c6322b3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5efda0-9f84-49c3-988a-10850a9872ff", "sighting_of_ref": "indicator--4ba3f496-1704-453f-be46-50768d8842b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e11e06-7ff6-487d-b95e-3ae6124e5889", "sighting_of_ref": "indicator--d1570295-7aea-4502-aa03-94a5fe796675", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0094295c-fb77-4e75-b126-724a7b464e9c", "sighting_of_ref": "indicator--4da49ff6-4eae-4167-8907-c0fc393cf87f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f76eb0-d568-4339-a510-f05c767aa41c", "sighting_of_ref": "indicator--4da49ff6-4eae-4167-8907-c0fc393cf87f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bfb641-b57d-40ab-a14a-42e7ffea2c91", "sighting_of_ref": "indicator--c55b9623-db7a-48b6-a725-183f5195c187", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c775fc71-b2ca-4633-91bc-cba5829dba28", "sighting_of_ref": "indicator--d9d0c595-1209-4809-a9c8-48cebaf4024d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae1c49e-2c98-45bc-9be1-6e057c75cce4", "sighting_of_ref": "indicator--d9d0c595-1209-4809-a9c8-48cebaf4024d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70cf8bc-a3bd-4c0f-977a-677cfecda51f", "sighting_of_ref": "indicator--a5e5dded-c4ea-48f1-87ba-a03dc2053962", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d2174f-595f-4658-9ec0-8d264634c43c", "sighting_of_ref": "indicator--9a492b28-43e1-4946-aa1e-97258e0e09fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590ab031-6b13-4673-a059-7366706723bf", "sighting_of_ref": "indicator--2629b12c-32c0-4079-b8e1-06311cd96b6f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7dacaf-f569-4b38-9a3a-52f499addd07", "sighting_of_ref": "indicator--2629b12c-32c0-4079-b8e1-06311cd96b6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62392248-2a5f-437a-ab3b-24430215774a", "sighting_of_ref": "indicator--f6735f8e-7c88-4b84-9538-c2f7820b313e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6f8dde-df13-4f3b-aeb8-afc645fb079c", "sighting_of_ref": "indicator--f6735f8e-7c88-4b84-9538-c2f7820b313e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f4e6d0-3bdc-4b13-9cd3-d8f7ba8cb8b6", "sighting_of_ref": "indicator--463f1561-ddaf-4613-9ded-bed1c15ab106", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4768dc62-30f5-4297-a326-835caa01eccf", "sighting_of_ref": "indicator--463f1561-ddaf-4613-9ded-bed1c15ab106", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d78b078-1352-475e-afd3-68be986aa167", "sighting_of_ref": "indicator--463f1561-ddaf-4613-9ded-bed1c15ab106", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcedf5b-0ec8-4cd2-94c6-260ce4fa0304", "sighting_of_ref": "indicator--a0f8cd77-24ac-43f5-939f-6365d599a162", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa9a15a-84e5-4669-ac56-f77ba5324010", "sighting_of_ref": "indicator--77a23c8a-ce98-424b-a062-04bad5f456ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f382244b-5a50-4df5-93d2-682b33af9597", "sighting_of_ref": "indicator--77a23c8a-ce98-424b-a062-04bad5f456ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030ea5d7-bc0e-42b8-897d-86c83407b30e", "sighting_of_ref": "indicator--77a23c8a-ce98-424b-a062-04bad5f456ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b635464-fa70-4264-836c-936773342a84", "sighting_of_ref": "indicator--b2f3cfa3-8fce-476f-bb5f-505f7b455e17", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c079684-2c12-4f49-b900-6b26cd2852eb", "sighting_of_ref": "indicator--b2f3cfa3-8fce-476f-bb5f-505f7b455e17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ad4e01-a2e6-4523-ba95-2c13ef2c7e57", "sighting_of_ref": "indicator--5ee6ebb9-34df-45ab-96d1-0e6819169223", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec816c50-d460-4113-ac08-a90fb574810b", "sighting_of_ref": "indicator--5ee6ebb9-34df-45ab-96d1-0e6819169223", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e060deb-4350-491b-b6e9-d368ce3a893d", "sighting_of_ref": "indicator--581a4851-3b7b-4d7e-9b4b-087d8dba1719", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b0c8b0-24f9-48fd-a1d4-2afd7261a1db", "sighting_of_ref": "indicator--e0dc03a9-1bf0-41fc-84d4-e50c3436826a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06f2c56-b02c-4c0f-84c7-735bf2f2f58e", "sighting_of_ref": "indicator--e0dc03a9-1bf0-41fc-84d4-e50c3436826a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1a2b4d-16f9-4aec-a2a9-89014c3d4c69", "sighting_of_ref": "indicator--c1cfd136-d321-4f08-aa83-ee980ac500d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7a4ad4-9ee8-4b52-ab80-d1fe4bb8fc6b", "sighting_of_ref": "indicator--307ea9cd-d6f1-4d62-849f-9666781e7c77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16b94d2-29ab-4846-accd-dc3ab915e78a", "sighting_of_ref": "indicator--307ea9cd-d6f1-4d62-849f-9666781e7c77", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f9c2e2-ee9f-4f04-9dc8-f4a0ec2c889b", "sighting_of_ref": "indicator--7b6eeccc-c240-4901-b288-324f9facc4a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15507fcf-9e27-4295-9107-9d188f7df7c8", "sighting_of_ref": "indicator--c720749d-f403-40ac-b6c5-c887328370d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf655319-b608-4374-ad68-4a5ef24fbe45", "sighting_of_ref": "indicator--1901c6d6-c6d0-49ed-ae2f-8001aa160425", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f35eda-702c-4bb7-947e-9207cb0f6dea", "sighting_of_ref": "indicator--a6335bcf-5be4-4066-a294-ba72d3ae469d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d7d3a8-1942-4c28-bbc3-9c70b793016e", "sighting_of_ref": "indicator--703c9beb-1720-4777-8332-79ec324aa200", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc39c44-2544-463c-ae01-bc9614dada9d", "sighting_of_ref": "indicator--79378778-5189-4e97-b762-98ab9d6bb51c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419ba61f-27b5-42a6-8821-caa448d6e672", "sighting_of_ref": "indicator--79378778-5189-4e97-b762-98ab9d6bb51c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e586d63-e0f9-4426-beb7-ad9adcbb3592", "sighting_of_ref": "indicator--10a598de-8b47-474a-8869-2b4d5bbdeee7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b6a42f-ba1d-4944-a739-743c306d929c", "sighting_of_ref": "indicator--e6317c15-8911-4d7c-98cd-3171bcc3a648", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff96b76-d1c3-41b4-9b05-be0bde41928a", "sighting_of_ref": "indicator--c61e9570-5b1c-49f5-99dd-5190581c71de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe00ae-3882-4765-8ca2-1abdde150814", "sighting_of_ref": "indicator--97db0a7f-d16b-4df3-96e6-a1f40de32bd9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c83a683-4d2e-49a0-8bd3-c8dfbf5c373f", "sighting_of_ref": "indicator--97db0a7f-d16b-4df3-96e6-a1f40de32bd9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f450963-6822-4ab5-8211-61e43344db6b", "sighting_of_ref": "indicator--7067dd1d-0a92-4aa4-a433-4390e0a6c82c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6420191-32a1-46da-8723-4c80fb755ae3", "sighting_of_ref": "indicator--19827901-a7a4-41f9-b847-17153a0f0590", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed9ce4e-1c9a-4277-90b8-222d0ecd0caa", "sighting_of_ref": "indicator--19827901-a7a4-41f9-b847-17153a0f0590", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42d034a-32f4-480c-892b-f49585627de2", "sighting_of_ref": "indicator--83b18f13-ec51-4720-b5ea-8252cced0fa7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b01cc3-440b-4d85-b1b0-1e97650b4c20", "sighting_of_ref": "indicator--83b18f13-ec51-4720-b5ea-8252cced0fa7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a109a03e-842a-4c83-80c2-6623499b318c", "sighting_of_ref": "indicator--83b18f13-ec51-4720-b5ea-8252cced0fa7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638c5f79-5932-4f92-a493-079cf9e6c0e7", "sighting_of_ref": "indicator--9240643e-4cc4-41b4-aa07-8a26d266bb39", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d229cb09-582e-4d07-953a-509c23c019b9", "sighting_of_ref": "indicator--82cb5842-8501-42bc-b27e-3c2dc16ee02b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0259186-17fe-4a32-aebf-a97063d06681", "sighting_of_ref": "indicator--4c5baab8-a1bb-474b-82d0-3f252bc57878", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7426cb68-71ba-40be-b434-93bd48d9b4e5", "sighting_of_ref": "indicator--3eae9e07-db98-4509-b8b0-07375241132d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca094d8-32d5-4674-a761-dc59d0a8c5fd", "sighting_of_ref": "indicator--803d8c60-9195-4b58-b54f-fc694573eb79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756e49d8-a418-408e-ab98-08ee34530b0d", "sighting_of_ref": "indicator--8065eae2-07eb-41a7-bb91-be3bad9da979", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064b5952-9788-4871-82fb-3967b89c3728", "sighting_of_ref": "indicator--8065eae2-07eb-41a7-bb91-be3bad9da979", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099cc387-b120-40e0-a218-90552f588d7b", "sighting_of_ref": "indicator--5a5e35fc-b3ef-4011-89ad-d7ff5cccb1e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a323161-ca74-466c-918c-315655fc48f5", "sighting_of_ref": "indicator--5a5e35fc-b3ef-4011-89ad-d7ff5cccb1e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc83200-ddcb-4dbd-a0b9-70a41ab450e5", "sighting_of_ref": "indicator--c2f39644-0019-4e45-bdf8-372b0baa9e0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7d7c11-115b-49a2-9f8e-7f7cca94637a", "sighting_of_ref": "indicator--c82f0c4c-45fb-4f6c-85d4-d7018e703465", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4b4202-120c-4221-a944-e01ea91ee1a6", "sighting_of_ref": "indicator--65ad10f4-2d18-4445-82d6-058a856323c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e811d402-be5a-4a2c-9594-330144ec6d60", "sighting_of_ref": "indicator--671f9c3e-5f2b-41a7-9769-a42c8b25ede9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c4c47c-4e96-4c60-a713-979441013339", "sighting_of_ref": "indicator--671f9c3e-5f2b-41a7-9769-a42c8b25ede9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489e489d-3890-4154-b722-4dc5ad423fa7", "sighting_of_ref": "indicator--534d5f5b-a0ca-4291-9071-fd0123ef2c56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc85893-160a-409a-bebc-1e3f2dcc7ea9", "sighting_of_ref": "indicator--534d5f5b-a0ca-4291-9071-fd0123ef2c56", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e23b01-89c3-4433-8caa-cc7743d7d48b", "sighting_of_ref": "indicator--fb3d2c94-aa30-4e8f-acd8-876bb8482dc1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96cec50-1e50-497d-ba64-965670ebec29", "sighting_of_ref": "indicator--29878daa-b010-4f0e-8e46-79dcf22fefab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d954ba1-5b06-45da-989c-bd211a5f94f1", "sighting_of_ref": "indicator--eacc04aa-36ac-4951-873a-892efaac2a79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344969c5-c537-4cff-8162-9902a2472179", "sighting_of_ref": "indicator--eacc04aa-36ac-4951-873a-892efaac2a79", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97d1ec4-7e77-4519-b2b9-7746139af908", "sighting_of_ref": "indicator--eacc04aa-36ac-4951-873a-892efaac2a79", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a45e5d-b1c6-44df-9aa9-590fabc340f2", "sighting_of_ref": "indicator--d44b5616-de51-437f-90e2-b2ec789bee87", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5751dc-9af6-4540-84b2-ff6d7ecb35e2", "sighting_of_ref": "indicator--3ffba104-7364-4805-be61-ce0b038510d1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5594d1b2-6ad0-4b94-b513-91289bfb4202", "sighting_of_ref": "indicator--3ffba104-7364-4805-be61-ce0b038510d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da86cb2f-2c38-4f50-b5c1-49eab3d9b9ac", "sighting_of_ref": "indicator--7874cb0a-0881-4633-bb76-943dbb657367", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c45398-276f-4b32-8cc6-1938b5dd1159", "sighting_of_ref": "indicator--0110fdb9-b989-404e-890a-349a593dcd03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0b2b2a-c22e-458e-9c43-bb6e8b080fec", "sighting_of_ref": "indicator--6b4fe5d9-1211-4ac2-90bb-dcd6349e79c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd770306-8ae0-4512-89b7-c8bdfe1559c9", "sighting_of_ref": "indicator--d8dd884e-08b1-40aa-9107-1120f500437c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edf94d6-2af4-4a3d-8832-da514819c101", "sighting_of_ref": "indicator--d8dd884e-08b1-40aa-9107-1120f500437c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe78a82-0f0e-4260-ad08-54714e38ea5d", "sighting_of_ref": "indicator--80966436-0d27-43f4-a8d8-157c4d4e4d4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c4a4ea-e0ce-42c9-ab02-dd23c59172eb", "sighting_of_ref": "indicator--80966436-0d27-43f4-a8d8-157c4d4e4d4a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce003cab-4295-4f71-a971-77c80dfd4b17", "sighting_of_ref": "indicator--9bccd1fd-491c-4b97-94f0-a51245e5c2d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fa55d1-7a58-430d-9b4b-44eb68294479", "sighting_of_ref": "indicator--05eae6bc-bd06-41f0-a7f7-2b02d939b661", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91916ab5-39ef-4401-a761-0a287d7d01f0", "sighting_of_ref": "indicator--75ddd82c-1362-437b-ae9d-364dbca8761e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6df071-0815-4685-8ddc-2e407b914dfe", "sighting_of_ref": "indicator--9b654c6c-2c4e-46a7-af19-ac389f7c0eae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6b546f-f076-4426-bb42-12b0f949f519", "sighting_of_ref": "indicator--9b654c6c-2c4e-46a7-af19-ac389f7c0eae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498ecf6f-cf29-4682-9538-d4708ab0886b", "sighting_of_ref": "indicator--435539ec-c3a2-4ab8-8f5a-e62946868114", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fab8d5-af86-4223-99c4-585e02795749", "sighting_of_ref": "indicator--143c57a9-ccb1-4ea5-b8e5-102051a861a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbeb50b-1fac-4752-955d-da81b5a7d519", "sighting_of_ref": "indicator--143c57a9-ccb1-4ea5-b8e5-102051a861a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75c999b-a924-4d75-9289-39609a6f27ed", "sighting_of_ref": "indicator--767d1c4b-1505-4ee2-a42a-76bf97f22a4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca8920b-f8d3-4b5b-b9f5-cea2dfaa1f6d", "sighting_of_ref": "indicator--767d1c4b-1505-4ee2-a42a-76bf97f22a4a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c62e753-e96f-47b6-89b3-5925e0d42e26", "sighting_of_ref": "indicator--df62aedb-b05c-49eb-8052-62ba44c59722", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c666369a-c738-4d20-85bc-3df1bacf5a15", "sighting_of_ref": "indicator--e9271dd8-0257-4f55-b3c7-9f0b53860514", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaf048b-e997-4e3d-ace4-2932f0ad2376", "sighting_of_ref": "indicator--e9271dd8-0257-4f55-b3c7-9f0b53860514", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee6420-261e-4254-ae25-df9e58d9d43d", "sighting_of_ref": "indicator--5694afce-91ea-48bb-8cbc-158dfe1b3196", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8135747f-1f0b-403b-ba96-b65b3f52d148", "sighting_of_ref": "indicator--1805bffa-eae5-4e85-8128-421cc940916b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54201ad9-a0d0-4f38-afc7-5ef300a8e119", "sighting_of_ref": "indicator--4fca9b7f-f244-45a6-a815-5c3e9893e4bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c385c1aa-f7a5-46f5-8b1d-c12f3fa06eac", "sighting_of_ref": "indicator--4fca9b7f-f244-45a6-a815-5c3e9893e4bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af0f749-75d8-41f2-a7f3-933d5cac1cb9", "sighting_of_ref": "indicator--3c53ec72-13f0-4eaa-ba6e-17ca84da7b7d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a8cd91-d144-4ef3-81c0-3b9084412025", "sighting_of_ref": "indicator--a9edf0e1-ea17-4dd6-afae-6b24aef66dd6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e52bb3-8cf1-44b9-a0d7-1e43faefbe93", "sighting_of_ref": "indicator--fc2660cf-449f-4d6a-b6e7-5a00db632a91", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d913f-a200-40f2-a362-ef23754e5c09", "sighting_of_ref": "indicator--f0540e96-1a1c-49b1-8478-1d6d04360bd7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7aba047-90e4-4362-b502-a81243be9194", "sighting_of_ref": "indicator--f0540e96-1a1c-49b1-8478-1d6d04360bd7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f96c643-0404-4a2f-b222-c7b745d269d7", "sighting_of_ref": "indicator--2fd8aa89-c8a8-4f90-a034-d2b9ff395d2f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df447962-57e2-4446-a007-13ea5d8e8890", "sighting_of_ref": "indicator--2fd8aa89-c8a8-4f90-a034-d2b9ff395d2f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd47248-a59b-4825-a419-3dfe0165bc3c", "sighting_of_ref": "indicator--fcad8625-1967-4c97-87d1-c86d0068d9b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c10e0e5-1b23-4e6b-8a3f-e1fa746c9b46", "sighting_of_ref": "indicator--fcad8625-1967-4c97-87d1-c86d0068d9b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dfe494-b285-4e50-b5fa-93369d32c15b", "sighting_of_ref": "indicator--74b39cb0-4d3a-4850-a935-e0e5aad626ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ecfd87-e5ca-4bbe-9b6f-85a6335e2b44", "sighting_of_ref": "indicator--8ef85a7e-64b3-4b21-a4e7-93bcd6a2afdb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74830203-600e-4ea5-8f6f-59e8284b7dcd", "sighting_of_ref": "indicator--8ef85a7e-64b3-4b21-a4e7-93bcd6a2afdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b342012e-d9d7-4053-9c61-844eb405695e", "sighting_of_ref": "indicator--11c100f4-5a54-4e35-8c81-1f41700061b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3d6544-ba1b-4485-af6f-4813315c515f", "sighting_of_ref": "indicator--11c100f4-5a54-4e35-8c81-1f41700061b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e58c0c-46b8-4690-b579-38261908671b", "sighting_of_ref": "indicator--11c100f4-5a54-4e35-8c81-1f41700061b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154fac95-8c54-439b-a99d-f01c870dcf61", "sighting_of_ref": "indicator--ad135ffe-b9cc-43dc-bec5-35e674329568", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1df6e6-8554-408f-af27-918f80e48d72", "sighting_of_ref": "indicator--6d4783c8-14e0-4521-8aa3-6b37e0c5189a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca63815-6eb5-40ff-aa0c-64c2cc9bbdaa", "sighting_of_ref": "indicator--e237bbb1-5397-4b23-b367-922c5d618ad9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c6b2ff-fc31-472e-8231-de82ca3dfcf3", "sighting_of_ref": "indicator--2f3657ad-6275-488a-8608-946cc88a0649", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0366d6-d810-44fa-9a56-0d57dd6ab891", "sighting_of_ref": "indicator--26f37286-0eb1-420b-9ee0-55448961d0e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed6f260-3263-470b-b02a-4c291b07d3cd", "sighting_of_ref": "indicator--3d95dc8c-9c74-47d5-bc62-6b4056cde603", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175f6af5-f705-4ec2-bd51-262bd0c78f26", "sighting_of_ref": "indicator--3d95dc8c-9c74-47d5-bc62-6b4056cde603", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9867fcb2-4d21-43ad-96c7-a08e5e4c2f7d", "sighting_of_ref": "indicator--b624e350-9fb7-4ba8-9bdf-b4941ec1ab87", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16ea753-46a2-486c-b099-56ce11da4a25", "sighting_of_ref": "indicator--c263c0a0-fb45-40e3-937c-da55056d4c5d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8a3b8f-11cb-4b44-b1be-e3ef9371c9ca", "sighting_of_ref": "indicator--c263c0a0-fb45-40e3-937c-da55056d4c5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09468732-fc02-4f7b-87cf-def7e0f83358", "sighting_of_ref": "indicator--c263c0a0-fb45-40e3-937c-da55056d4c5d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e63ea7-7da3-44b7-8589-57de1cb9f9d7", "sighting_of_ref": "indicator--e9388fe9-ce22-4ae5-b104-59b21bc4aece", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c22f587-a13d-40bf-b6a7-ea8c2bdb5e82", "sighting_of_ref": "indicator--5d216395-5cd6-48c5-aa4f-29bc8ec057a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a2b471-e86e-498e-a8e1-13846d0e2449", "sighting_of_ref": "indicator--5d216395-5cd6-48c5-aa4f-29bc8ec057a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62357181-f6d0-4eb0-a26b-12da51964bbf", "sighting_of_ref": "indicator--5d216395-5cd6-48c5-aa4f-29bc8ec057a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b2cd67-57ca-49c9-b3d8-4385342f0a4a", "sighting_of_ref": "indicator--f737e5a3-238d-45e9-8803-ecabdaec7e02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50d9803-06e4-4e7e-94e1-f9cbd6eeb697", "sighting_of_ref": "indicator--46936518-27e0-4b3d-8316-5d4b7e58b390", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5276a85-06a0-4ff1-920f-234c76b5f98a", "sighting_of_ref": "indicator--46936518-27e0-4b3d-8316-5d4b7e58b390", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef582d6-c879-4ca5-8b0b-efe525f192ad", "sighting_of_ref": "indicator--579f3010-e2de-4b14-b493-1b55011cd78d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e923fe68-6657-4d2d-a317-b1d6c774070b", "sighting_of_ref": "indicator--701b1f62-e9a1-453d-a883-6068b19d32ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bed0e47-e4c8-44c0-b442-5dc8a50a239b", "sighting_of_ref": "indicator--701b1f62-e9a1-453d-a883-6068b19d32ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab7e972-1d67-4ac6-b034-0ca7d6d4bbd4", "sighting_of_ref": "indicator--3e048fb6-da3e-4111-8d0b-b8ec2d24065e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62d07ec-ffa0-47b0-ab56-1871b4a3cf70", "sighting_of_ref": "indicator--3e048fb6-da3e-4111-8d0b-b8ec2d24065e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e301d9dd-acab-4952-9c12-016a72423ca4", "sighting_of_ref": "indicator--3e048fb6-da3e-4111-8d0b-b8ec2d24065e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e425b9b5-26e1-4da3-a45f-102f76147326", "sighting_of_ref": "indicator--6315028f-6f01-40be-a101-c5baddcb497a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2eac4c-b7be-4b7f-aef4-fbf8f96ec690", "sighting_of_ref": "indicator--6315028f-6f01-40be-a101-c5baddcb497a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a044ec-4754-4878-a6e1-81307017ad59", "sighting_of_ref": "indicator--e27df043-5de8-4574-8658-b3d51316591c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fe0b4e-145e-42a9-b325-7ad4ed29c792", "sighting_of_ref": "indicator--e27df043-5de8-4574-8658-b3d51316591c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2216d338-e186-425e-b9ce-54a964045a5f", "sighting_of_ref": "indicator--5e64c3b0-122c-40d9-ac2a-34b6e783727c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290b157d-a248-4656-a250-4ec6df3fee20", "sighting_of_ref": "indicator--aae5ee6d-d11f-4285-8f4a-c814ae65d52c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d290489-2e07-4973-a787-eda5116279a3", "sighting_of_ref": "indicator--3424b0c9-d665-423f-9f11-6e039f54d72a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aacf237-b063-43a3-8d27-12df9dd0a289", "sighting_of_ref": "indicator--eb1a1cbf-39dc-4810-b21a-840ed32d2843", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce18128c-ecf0-4765-bdbd-7d1c23ed18b6", "sighting_of_ref": "indicator--eb1a1cbf-39dc-4810-b21a-840ed32d2843", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3e40f6-c446-4759-810f-f2f5bee79ca7", "sighting_of_ref": "indicator--1893175b-6612-4147-a8df-c2f89f44cc85", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480f682e-ae7f-4899-8693-1d105f86c88e", "sighting_of_ref": "indicator--1893175b-6612-4147-a8df-c2f89f44cc85", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ca7c36-99f1-4f0d-9b41-0602bf297f7e", "sighting_of_ref": "indicator--afd4a7fd-8614-47b4-b6c5-308fbfe0569a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a49d384-3acc-446d-8f67-e02f6eb7a6a9", "sighting_of_ref": "indicator--776baa31-fa33-4d60-b48a-b102f99273d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27174c02-dc70-445a-b1f0-deb7d5adc025", "sighting_of_ref": "indicator--776baa31-fa33-4d60-b48a-b102f99273d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6638d738-283d-4e78-9a0d-69419767e53c", "sighting_of_ref": "indicator--a96237be-937a-475e-9d3e-5f88d936c656", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9314708-c9c5-4d8b-87a1-55409fc0007c", "sighting_of_ref": "indicator--a96237be-937a-475e-9d3e-5f88d936c656", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d121e1b-83d5-416a-b32c-9658eada3a1a", "sighting_of_ref": "indicator--a96237be-937a-475e-9d3e-5f88d936c656", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe84d1ba-b9b7-448c-b84d-2118eafc0906", "sighting_of_ref": "indicator--86f41b1e-cdf5-4e9a-9f0b-18822c0eb479", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a961c87-36be-4914-a0a1-898b5a2be448", "sighting_of_ref": "indicator--6bd39217-b900-4282-bfe6-a18e7df93f5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8665e108-bbce-479e-bd57-4a53bf85ade2", "sighting_of_ref": "indicator--6bd39217-b900-4282-bfe6-a18e7df93f5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf4b8f3-544d-4f10-ada1-229636b2708e", "sighting_of_ref": "indicator--6bd39217-b900-4282-bfe6-a18e7df93f5b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e0d992-edf1-4b8d-a92e-bd665a20b710", "sighting_of_ref": "indicator--d636c26c-8f31-482c-a36a-71eb151b1d94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551c73bc-f4be-4fb3-b0e6-d3b6b6989014", "sighting_of_ref": "indicator--29ed0c42-4dce-44c2-bed7-17f45ce2299b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cb7fd1-a415-4b3f-b048-e2904655b50d", "sighting_of_ref": "indicator--29ed0c42-4dce-44c2-bed7-17f45ce2299b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce04739-6770-4d5a-bb48-5517332fa3cf", "sighting_of_ref": "indicator--d35f0088-e714-42ee-b898-27ce05bf7a68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399b1b0f-2b17-4fdb-abfb-c4996a424d5d", "sighting_of_ref": "indicator--d35f0088-e714-42ee-b898-27ce05bf7a68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3efad63-6ee5-4f67-aacd-4d894bae5663", "sighting_of_ref": "indicator--a8c0e686-c17c-4bbf-b56a-d7338c51d06c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dc09c6-ea29-4bc6-8672-aabdd547e0b8", "sighting_of_ref": "indicator--a8c0e686-c17c-4bbf-b56a-d7338c51d06c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c5ef0e-7645-434a-8c05-58003d802429", "sighting_of_ref": "indicator--b5fad43e-a825-4173-98fa-7b8e0405083f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188051d5-8f30-4d7c-8a3b-8c5c4ad618f3", "sighting_of_ref": "indicator--b5fad43e-a825-4173-98fa-7b8e0405083f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cf7d2e-93db-4753-b16a-d5cf32a0db11", "sighting_of_ref": "indicator--ce41ce8c-d737-4e30-a320-4805c6bb2d6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb26ea35-fb99-4fb4-884f-0f16133de5cc", "sighting_of_ref": "indicator--1aa3211c-4bae-4fab-af08-7f97d61490a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a1a383-7b66-4d10-93fa-adbd8a6730ff", "sighting_of_ref": "indicator--e1cdd292-8497-40f3-9cc5-b61844e162e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1493f4a9-1f5b-4568-9f07-c4395834b5fe", "sighting_of_ref": "indicator--e1cdd292-8497-40f3-9cc5-b61844e162e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6def7faf-c269-4b95-99a3-bbd9dd6f4089", "sighting_of_ref": "indicator--148b38d4-c202-4729-a1d6-665b4cc32e8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fe3aec-a6fd-4df3-be5b-408f7bf9469d", "sighting_of_ref": "indicator--148b38d4-c202-4729-a1d6-665b4cc32e8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7634c5b9-75ec-414a-8671-4ab7975e0a92", "sighting_of_ref": "indicator--bcdcd4be-fe88-43ac-a2da-e6b51d0444d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843ab4f6-8132-49ae-8478-532acfb95402", "sighting_of_ref": "indicator--bcdcd4be-fe88-43ac-a2da-e6b51d0444d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cc33bc-94ab-490c-b351-081d8973e041", "sighting_of_ref": "indicator--2768e86e-a7b8-4598-bc1a-3c2f1c2ba213", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a14d5a-ab89-4a47-aeea-499b0c6dcfbb", "sighting_of_ref": "indicator--52c1670f-ed33-450e-91d6-69e5f4968363", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f91371-c5dd-4238-ac23-3e75e092f12a", "sighting_of_ref": "indicator--11da20d1-28fb-43d0-b335-96ce986cf4b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d7d832-2682-4d12-93a0-7c0292f44e15", "sighting_of_ref": "indicator--f3bbab0a-550c-4fd1-ba26-a52123b18fda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c7b554-ba79-4141-8c5a-34f666e502c3", "sighting_of_ref": "indicator--f3bbab0a-550c-4fd1-ba26-a52123b18fda", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015e853b-3ffa-402e-ae89-04d82589c126", "sighting_of_ref": "indicator--89968048-5c14-4510-805e-f2781317ece0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa25779f-0958-4f64-8221-4da18b8e9ae4", "sighting_of_ref": "indicator--89968048-5c14-4510-805e-f2781317ece0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8addf6db-dd19-4f4d-83f1-4e2415158fa4", "sighting_of_ref": "indicator--4910c057-adc9-4c18-a99f-586566ce4b2e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabe4a2c-80c0-4cfb-a281-d3055c8ecb8b", "sighting_of_ref": "indicator--86b92e9e-a42b-48e1-bb21-913b49912d70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f11cee-bece-40b1-8d79-b2f5ae9d4341", "sighting_of_ref": "indicator--825e8320-5238-4e76-b43e-458bc421f09f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d2b69-37c9-4225-9a83-eff07ed16e5e", "sighting_of_ref": "indicator--825e8320-5238-4e76-b43e-458bc421f09f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afe710a-f4f0-4e84-a4dd-4a43f207f576", "sighting_of_ref": "indicator--825e8320-5238-4e76-b43e-458bc421f09f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d8432e-de83-4f78-a113-114be883e716", "sighting_of_ref": "indicator--240edf22-74e1-456b-9504-0e82058861b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5111c529-57d2-438c-a6f9-3ff48c2f549f", "sighting_of_ref": "indicator--240edf22-74e1-456b-9504-0e82058861b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2aabfe-c2a8-4d69-9d82-61d81c0e1a40", "sighting_of_ref": "indicator--240edf22-74e1-456b-9504-0e82058861b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c59e00-5722-40da-9076-ce38cdab5daf", "sighting_of_ref": "indicator--e7014850-fa78-4956-9fef-69f214108134", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce811382-5f44-4a12-9c87-f98dc94867d1", "sighting_of_ref": "indicator--e7014850-fa78-4956-9fef-69f214108134", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17dffe3-1b4d-4dfc-8d6e-1f38af44004c", "sighting_of_ref": "indicator--ecc69f6c-1a57-48ce-8927-ae8dc18535d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caeb565b-ac17-4e17-b930-be7fb055b0df", "sighting_of_ref": "indicator--ecc69f6c-1a57-48ce-8927-ae8dc18535d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c2740f-3926-48e1-b4f9-e1a5b73ff8a0", "sighting_of_ref": "indicator--ecc69f6c-1a57-48ce-8927-ae8dc18535d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bc4044-2916-4960-811a-bc492e880afe", "sighting_of_ref": "indicator--d5d3dfcf-5acb-41fc-ad0f-aa2eb404a88a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6644de-b755-47a6-aae9-fb44407950a0", "sighting_of_ref": "indicator--d5d3dfcf-5acb-41fc-ad0f-aa2eb404a88a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda7295e-d490-446e-8649-d18ea613a3c8", "sighting_of_ref": "indicator--d5d3dfcf-5acb-41fc-ad0f-aa2eb404a88a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eacb53-57cd-45fc-99d7-9f1705158308", "sighting_of_ref": "indicator--cd06a6a2-f928-4b6b-b329-5661a3e17d60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcc89f9-9223-4b27-9105-65638bfc43dc", "sighting_of_ref": "indicator--5646dbf7-f3a5-46c5-b356-fb3078cc1d74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c322d1-6cc7-420a-a5d0-738b6e307e9d", "sighting_of_ref": "indicator--d3f752da-c5f8-4f02-ae64-3e46d01a80ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b308fec4-86cd-4a21-a411-b4c8fa7c09f6", "sighting_of_ref": "indicator--c5661cdf-b959-4039-987b-f2eab15e507d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852a8115-da7a-4668-8cb9-341b49df2e2c", "sighting_of_ref": "indicator--c5661cdf-b959-4039-987b-f2eab15e507d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2164d3-1c34-4ba1-a03a-72fb0796b4d0", "sighting_of_ref": "indicator--c5661cdf-b959-4039-987b-f2eab15e507d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47ff43d-a64a-488b-99fd-a0026141472b", "sighting_of_ref": "indicator--ebe669b1-96c3-410f-a368-edd627e85961", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f534a1f-aef3-4f2c-8f5e-83a1078a451e", "sighting_of_ref": "indicator--1e1d18c2-4502-45f2-ab93-f6683e9b0c14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed32e1b2-640e-4b43-af31-bc4b97da94ce", "sighting_of_ref": "indicator--bc6c3e03-9a45-4eff-b6cf-30da4513dea1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cc6d87-3122-44fb-bd49-7ed9fac9cd2e", "sighting_of_ref": "indicator--a99a1058-d5b4-4b3d-9ea4-588c7de7da70", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c120d194-dc3f-4abc-9254-19c6a1ede9ba", "sighting_of_ref": "indicator--23fe6f71-de08-47b5-9d85-31f94432d148", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776d5083-3aac-490e-86e9-ba9ff7517a64", "sighting_of_ref": "indicator--23fe6f71-de08-47b5-9d85-31f94432d148", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d6f33f-3a7c-4a22-a1ac-af3204051e49", "sighting_of_ref": "indicator--25d28329-298b-43d7-8c12-78555899b178", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df46e48-b90a-4630-989c-44acc327ef19", "sighting_of_ref": "indicator--25d28329-298b-43d7-8c12-78555899b178", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e2f283-f41a-4b1d-b16c-891fe7e5b52a", "sighting_of_ref": "indicator--25d28329-298b-43d7-8c12-78555899b178", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34562c72-e809-4512-ada2-5529aece6d7c", "sighting_of_ref": "indicator--6c09a3fa-67be-411c-8fa0-5266d4bcf18c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c605b36b-9847-440c-a797-70af34247041", "sighting_of_ref": "indicator--6c09a3fa-67be-411c-8fa0-5266d4bcf18c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ed4785-58bf-459f-b56a-d82535cfe076", "sighting_of_ref": "indicator--6c09a3fa-67be-411c-8fa0-5266d4bcf18c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23e8ac1-89a2-49f2-a964-4d846bde4b4e", "sighting_of_ref": "indicator--ed13e5d4-3dfa-4f75-be5a-12b1b2347cfe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8df71f-cdf1-463b-8a83-4b1203abf157", "sighting_of_ref": "indicator--ed13e5d4-3dfa-4f75-be5a-12b1b2347cfe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2276bf-e0bb-4029-bd4b-9e3f03b454c4", "sighting_of_ref": "indicator--ef40c361-50ee-461e-8e40-2e7db3ff546d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7aba5e6-8f2e-46e2-824e-701963f778e9", "sighting_of_ref": "indicator--ef40c361-50ee-461e-8e40-2e7db3ff546d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b03483-418d-4bb4-beaf-05b32d7f0baa", "sighting_of_ref": "indicator--ef40c361-50ee-461e-8e40-2e7db3ff546d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442642a2-22d1-4e4a-952c-4dc2697b1e74", "sighting_of_ref": "indicator--035a9c6e-3a49-4f4f-b2f3-32b7c9de818e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c00f8c-0087-4441-8de3-6d1a916cab26", "sighting_of_ref": "indicator--9487cdfd-08b6-4676-8a14-a10acae9f4ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5079f38f-7285-4a03-8d40-430c6fbba2ef", "sighting_of_ref": "indicator--9487cdfd-08b6-4676-8a14-a10acae9f4ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9102da-841a-492c-a46b-aae6d845b3fc", "sighting_of_ref": "indicator--6a36f85b-e75b-42b0-8684-dd60ad32363d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26810d41-31e1-4f5e-91eb-c050696f0339", "sighting_of_ref": "indicator--386b2c22-d3df-405d-8695-351fc75defee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2dce92-7155-43da-9a24-be05f7e5c521", "sighting_of_ref": "indicator--693f461c-cec4-4c7c-92e8-3361e1ef0473", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e39ba1-f0d2-441b-b1c4-467bf7f09e3a", "sighting_of_ref": "indicator--e3ba7e73-8dd6-4d64-8500-f87a9ef53927", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aff2fd-5969-4726-ae62-3a6b84d24c2b", "sighting_of_ref": "indicator--e3ba7e73-8dd6-4d64-8500-f87a9ef53927", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5b353b-ca7b-4559-b066-208486db5e17", "sighting_of_ref": "indicator--202a465d-d983-448b-b199-835d19aa3c5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d07237-3ac9-4d55-9a41-eaa90428ffcf", "sighting_of_ref": "indicator--aba9a9d8-075f-445c-b570-c141c0061569", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3929b8a-318c-4101-bc9b-1b54afee0c9b", "sighting_of_ref": "indicator--aba9a9d8-075f-445c-b570-c141c0061569", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e40b3d4-646d-4f03-9611-a36e85b0faa3", "sighting_of_ref": "indicator--5cc9a972-3788-4c3c-8ba7-582b073b27d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c698e4-b2fb-444a-ba01-afc99058374c", "sighting_of_ref": "indicator--a66f2155-6e6a-4dfb-99e2-1610faacd561", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f10e629-5bcc-4ecf-a1f4-8ba67207d7d9", "sighting_of_ref": "indicator--cd7c49e8-2c7d-4ee5-942c-280692c3858d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581e5b8e-4382-43c4-baf7-3261ac22cb61", "sighting_of_ref": "indicator--cd7c49e8-2c7d-4ee5-942c-280692c3858d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8193649-f2e0-4bf9-bdda-5a7f68ca672d", "sighting_of_ref": "indicator--3cdf1fc8-4d90-4ff8-ae4e-8b1dbfe8adfc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc44d4f-7b3b-40e8-b2c1-b101c30c6cc6", "sighting_of_ref": "indicator--d50ceaff-5e83-4ea3-b181-38c01a1f37b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480d9f70-50e1-414a-9196-615d47dd578f", "sighting_of_ref": "indicator--62873d12-39d0-4f83-95d2-e1dfa395ba4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9f8691-d855-4b38-9839-6e32682ce1d4", "sighting_of_ref": "indicator--57a411bb-f985-40cc-adfc-2e1983607f90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7e70aa-1b08-43b4-bb00-2025d2f13d7a", "sighting_of_ref": "indicator--72aafec8-ca88-43fe-a87f-e9f76c8b0aed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6cc870-585e-49fc-bc14-db283446e16a", "sighting_of_ref": "indicator--72aafec8-ca88-43fe-a87f-e9f76c8b0aed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06e6f34-9e92-44c6-9332-7239a641577b", "sighting_of_ref": "indicator--0c12af3e-d912-4d34-9de2-dd4ddbb12ac5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7eb2d77-d46c-4a2b-a5a2-ab11f338b548", "sighting_of_ref": "indicator--f87b4a0b-acca-410f-8ded-5aa737001014", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5e30e7-d22f-4c31-a98e-a205193e3914", "sighting_of_ref": "indicator--68cd986a-1376-47a9-a997-69abec1cbdc5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1f8b85-efb7-41c0-b45d-25579e8b870d", "sighting_of_ref": "indicator--a271399d-e0d2-4c66-96ef-288410c23ba5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a8f70-4f79-45de-9a24-1f83ba187b65", "sighting_of_ref": "indicator--e0f4d150-94ac-46b6-ba38-21ddbf44e0c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7c726a-332f-4ab7-be9a-ff43c0695e36", "sighting_of_ref": "indicator--98e04651-9b51-4b57-95dd-13081210fe4b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9cc5e1-357e-4910-b8ea-4c03c93f5659", "sighting_of_ref": "indicator--214cebc1-1937-4835-8bcb-227c860da4a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894e61e-9373-445b-a7d3-8ed2a31b6965", "sighting_of_ref": "indicator--4dcc306e-07d3-40e3-ab60-abcf208343cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83571497-d755-4616-9f11-25d70b69955d", "sighting_of_ref": "indicator--aaf9c4af-a69b-41db-8e12-0721ff542979", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1e7e55-ab01-4a53-bf60-9dcb0699ed9a", "sighting_of_ref": "indicator--1b267f44-4f26-4e78-8900-41aa75c6915d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6f8a2d-f331-4b5e-a94b-f70f72aedb2b", "sighting_of_ref": "indicator--116fa84d-5a5b-4338-8f04-9d9b42aa894d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b341300-c1df-4f03-9ea1-7fa5f24e3e3b", "sighting_of_ref": "indicator--7dde4bb4-6b1e-4906-b5c7-740c64cd08ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a663455-5a4f-42a4-a3fa-922ecf95beff", "sighting_of_ref": "indicator--302234e7-f5fc-41c8-8f41-59bf8f60c349", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a0c971-9bd0-4524-8385-7261a32f8239", "sighting_of_ref": "indicator--302234e7-f5fc-41c8-8f41-59bf8f60c349", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdbca38-4cbc-41cc-aaef-2440228d24ba", "sighting_of_ref": "indicator--56a8fb98-4c4a-4ae9-8fb6-c11bf1bf2f5a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aadd4aa-465b-42cc-bd4a-7c5925455e73", "sighting_of_ref": "indicator--6fd8d8b7-ba75-4004-a937-e17697f461df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7e56f6-f9ac-4594-8324-73014ff5b739", "sighting_of_ref": "indicator--fb74431c-c0b7-4f84-8b3f-4ffa2db02705", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33db6af-cf92-49fc-95c9-7a218ca3b730", "sighting_of_ref": "indicator--8c713558-6b23-4c6b-9aaf-15afe45c5bd8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc5b54f-894b-4bb0-8042-ff60d913db22", "sighting_of_ref": "indicator--cc36de08-c0cf-4fb6-b326-1731a494d73a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40c5094-c3f1-438e-bbdb-092a8984d604", "sighting_of_ref": "indicator--cc1ac197-09e0-4222-b68a-8377b2f13294", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37637842-35b9-4b23-a577-708f5bee9c32", "sighting_of_ref": "indicator--03ad225c-740b-496a-9371-49e106b6ecff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af2eaaf-dbd2-4cfe-99ae-67798dc3d60f", "sighting_of_ref": "indicator--b894d16b-0854-410b-9634-4d0e8ae1b26d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223fafc-7dbc-44f1-b4e5-2d5f01d69bb3", "sighting_of_ref": "indicator--b894d16b-0854-410b-9634-4d0e8ae1b26d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e0ef5c-37f1-421c-9259-dda4e2624850", "sighting_of_ref": "indicator--d47fa6a5-64b1-4477-9ae9-5446d33be00e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4fe931-9b0e-496e-b05d-d71d0c566058", "sighting_of_ref": "indicator--e0fcc951-b1a5-4a97-b740-e12521e07041", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10217993-9cab-44f8-9a2a-7a6020f888b5", "sighting_of_ref": "indicator--30b9bdd0-2005-419d-b49d-247b09c04aba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadba493-c5ee-474f-8cff-3967ac45ce23", "sighting_of_ref": "indicator--91db0b46-6793-4db7-8bb0-81a0805c2d89", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77111d3-8641-4e29-85f8-b4706ae3606a", "sighting_of_ref": "indicator--91db0b46-6793-4db7-8bb0-81a0805c2d89", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfd25d7-26bd-4f3d-8ba8-8f62a806e9a8", "sighting_of_ref": "indicator--d24637d4-0fa0-4390-b7b6-d3e33f28120f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155c80ad-4439-46bc-9aa9-cd04347e22e4", "sighting_of_ref": "indicator--b1f5063c-1ce3-44de-b608-159f3fec79a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001c01e9-74b1-468f-8f24-4d8dc402b22b", "sighting_of_ref": "indicator--5b75ee86-77bc-437a-9894-fcc9ab610078", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd578ca-e084-412e-8f06-a2b3b9f33f5f", "sighting_of_ref": "indicator--d7bc38d8-f44a-4c62-b86f-e9dfed59bcf4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd58433-98a7-4699-b4ac-7922906ee917", "sighting_of_ref": "indicator--bc4062f2-da0c-4efe-a238-06258d8253c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb11762-528c-465e-8320-16a41a17f39c", "sighting_of_ref": "indicator--28baca24-9ee6-4db9-a964-f3ae5084eee8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048eb94c-4e59-4fbe-9fc5-0b3aaed34ab0", "sighting_of_ref": "indicator--28baca24-9ee6-4db9-a964-f3ae5084eee8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fa12fd-8528-4c0c-938d-8d88a4231302", "sighting_of_ref": "indicator--73c5947a-69d6-4bff-a05b-f7bdffc36abe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ff5df2-2b0f-475f-8358-19f1365017e4", "sighting_of_ref": "indicator--73c5947a-69d6-4bff-a05b-f7bdffc36abe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776d5414-71d1-4042-a91c-c4ead576c149", "sighting_of_ref": "indicator--73c5947a-69d6-4bff-a05b-f7bdffc36abe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131bfdfe-8e1a-48a0-9ae5-a55ea3a04a7c", "sighting_of_ref": "indicator--f68558da-ad80-46c8-a091-3724475beb26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb22fc7b-f744-45d7-9c8a-4b4c864b8de7", "sighting_of_ref": "indicator--63d375cd-f950-4208-9365-995bac557d01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a503344-c106-4eef-84ec-fba1a21cd979", "sighting_of_ref": "indicator--63d375cd-f950-4208-9365-995bac557d01", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b84fb8-d021-4287-843c-ac2758a296ca", "sighting_of_ref": "indicator--2ce76211-408b-4d13-8c50-9972fc8e09d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d98824a-cb35-4043-91fb-af928e101a9a", "sighting_of_ref": "indicator--dec4403f-5ffb-47b1-b9f9-0291809cd033", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd133536-ee28-41fd-a102-ab72269eb831", "sighting_of_ref": "indicator--7fe2167d-2fdf-42dc-9861-5d2471dcce3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c4b085-dfbc-47ca-ae3c-3a44523fbfb6", "sighting_of_ref": "indicator--0c35fae0-1f8d-47c4-9ce5-1e8771aa332b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffd86c0-806e-4255-9ae0-988034eff046", "sighting_of_ref": "indicator--0c35fae0-1f8d-47c4-9ce5-1e8771aa332b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee95944a-5f30-4e52-abe2-143ab543872d", "sighting_of_ref": "indicator--97646d94-1f6a-4395-a0c4-e753d624a1f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0a55d0-d7a3-4042-a6ac-797384190e06", "sighting_of_ref": "indicator--e9fe6d9a-09d4-4ba7-a9b7-1143a25c6e52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813b466f-ea2b-47f3-beb5-9e71b173cf2f", "sighting_of_ref": "indicator--dd67ae4a-dd26-431e-a55a-2b9d30e70b73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2055429-9f34-4c66-baf1-c5954e56d73a", "sighting_of_ref": "indicator--19e24312-f6b5-4f7e-a3fe-1134f4dff822", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6226bec6-e4bb-412f-8737-5b08e1d1a377", "sighting_of_ref": "indicator--2cba8d1c-f9aa-409b-a5f6-bc06d2c04dff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cdcff2-00c2-46e6-b4eb-e63d2631302a", "sighting_of_ref": "indicator--2513e23d-fc0f-48c1-9de6-1b95f9e00ade", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b67f753-4fd5-4f50-a977-146e4fb8c7cf", "sighting_of_ref": "indicator--ec1e5729-b27e-47f5-9d1f-1c9e3e54896f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f96324-189b-4063-b0e1-2c7a53367da8", "sighting_of_ref": "indicator--803fa9a6-1522-4f64-9134-f51132765e1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf1c25f-24e3-46c0-9879-0e98f6618da8", "sighting_of_ref": "indicator--b5c76135-28c3-4f2d-b208-c104e8066e5e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d31e4ce-fd2a-4c12-8bf7-d2a41efe60e0", "sighting_of_ref": "indicator--b5c76135-28c3-4f2d-b208-c104e8066e5e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca9be12-975d-4180-b3cc-f24ede9dea89", "sighting_of_ref": "indicator--1a2ae877-cf11-4bff-835d-cfe1e244538a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c8098a-6ee3-420f-9f17-e1e7dc58491a", "sighting_of_ref": "indicator--7fb67f6c-4549-4f6b-990d-d8f76583695c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e85c4b-2a89-419a-9b53-34314f081020", "sighting_of_ref": "indicator--fa9319fc-7289-4df4-ac12-1739605fe921", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588c0843-e34f-49c1-95ee-51fef94b7902", "sighting_of_ref": "indicator--d907928c-395e-41be-8930-183f95655691", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6933d70-aec2-464a-bccb-a8275cf88ca8", "sighting_of_ref": "indicator--d907928c-395e-41be-8930-183f95655691", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2163ce83-dcfa-450f-9cd5-5820f5f2c8d2", "sighting_of_ref": "indicator--ad09b8b6-3b3f-4358-b5ea-bc3994ace139", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b0b3e2-d510-48a3-b532-08f1a0cc990d", "sighting_of_ref": "indicator--5fbfd69c-fe28-4ec5-a3ad-20532fc24649", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1528baeb-209f-495a-bc0c-117922817191", "sighting_of_ref": "indicator--85937930-fc08-4046-b505-3353b059fd0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912ef037-8cc7-4052-9b3f-76ef7b7f665b", "sighting_of_ref": "indicator--b6c6f279-3065-46d3-9901-d5ea58c01b22", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163bb37d-7a19-4e24-a95f-d2b02667c0ce", "sighting_of_ref": "indicator--b6c6f279-3065-46d3-9901-d5ea58c01b22", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8f9a41-e77d-4dbc-8537-10529ee0057b", "sighting_of_ref": "indicator--467d4893-493f-4196-8055-592a3965ccbb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfda05a-3639-437d-aae4-80dc10dd527e", "sighting_of_ref": "indicator--467d4893-493f-4196-8055-592a3965ccbb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6df4afd-a50c-4f51-b29a-1a681b0702d9", "sighting_of_ref": "indicator--d16bfa22-afdb-471a-8eca-43afbc8d6185", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00055bb5-31ba-482c-9b13-2405b6321db7", "sighting_of_ref": "indicator--abddb3bc-7993-448b-abb4-c72da7c45f28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5479b3-d4fd-4622-90ee-5a4dd0a460a2", "sighting_of_ref": "indicator--88da9c71-b36b-420e-800b-529080a8edca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9663db54-ec01-4644-8997-7c6eea160b8f", "sighting_of_ref": "indicator--45648d06-ed36-4cc3-ba2c-ced74993273d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc09da8-c145-4dea-bac3-5dc0a34c422f", "sighting_of_ref": "indicator--472d4498-52ca-474f-87d8-7d299a54a677", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8463bb82-caa6-45a1-b02d-14b11ff1176d", "sighting_of_ref": "indicator--7e74291e-a819-4df8-a2a8-85c32fa7ae1e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8096ad2f-16cf-4105-90f4-e02eeeac3f91", "sighting_of_ref": "indicator--7515028e-2815-4b91-9f9c-042e276ae610", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f70578-806c-4ca6-b332-c4a06ec4b4a4", "sighting_of_ref": "indicator--57b7f7a8-00de-4ca3-b9b4-1de9f7b04bdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ca4b8f-454e-41bc-9143-f86a1f6bcb79", "sighting_of_ref": "indicator--7fb81b32-5215-439c-bd3c-4f561165718a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99e84bd-85d7-4728-ba9f-b7367a9fa091", "sighting_of_ref": "indicator--cbaab657-d7b1-4b3d-a168-f9e631095095", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4259a80f-7c00-4bca-8ca0-2bcfbb08a110", "sighting_of_ref": "indicator--3dd24b6a-5c81-44a1-867f-b4da346f6ba5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f16e88e-d481-4013-afc7-bea0aafc2ec9", "sighting_of_ref": "indicator--22161394-230a-473b-b103-360c49aba90e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8dc3f4-bde0-4d0c-a4ad-b7392abd0084", "sighting_of_ref": "indicator--22161394-230a-473b-b103-360c49aba90e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990b39e0-3fe2-47a3-af83-c626893b112b", "sighting_of_ref": "indicator--15caac64-01ca-4c24-b8e1-7cea5bf837ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af55a465-d630-4070-a67b-65dd4998e7f3", "sighting_of_ref": "indicator--15caac64-01ca-4c24-b8e1-7cea5bf837ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14fc880-d432-47b9-bb34-6374b5597a9d", "sighting_of_ref": "indicator--15caac64-01ca-4c24-b8e1-7cea5bf837ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012bfc42-32fc-4d2d-aaae-bd9d5729eb71", "sighting_of_ref": "indicator--99621612-18c5-475b-b865-f63f7bca11e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc382fa-f496-41fd-9d12-93803c9b947b", "sighting_of_ref": "indicator--7d94418d-52c7-4aeb-8097-a9bb26cb8474", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22d3333-97ea-4c66-aab2-45868ab0ddc0", "sighting_of_ref": "indicator--94a37a4d-e009-4192-a9a8-fca44371f340", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c72ad0-f1b5-4e73-9dd9-34e5a33fe1d5", "sighting_of_ref": "indicator--78cbea52-620b-4332-8600-6c8cd4b0aa6d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc83f96-1843-4ea2-bc25-f2c227d4e7f0", "sighting_of_ref": "indicator--ba6bc3e4-865b-4519-8c77-bb2dd4228b16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103be3e7-cc55-4752-925d-bbb51ffc5f8e", "sighting_of_ref": "indicator--ba6bc3e4-865b-4519-8c77-bb2dd4228b16", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410aba0f-6826-44d9-8a7f-5107e3ee5194", "sighting_of_ref": "indicator--ba6bc3e4-865b-4519-8c77-bb2dd4228b16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c208cf7d-9814-4afa-b4d0-bf094a73674d", "sighting_of_ref": "indicator--95412f23-bc5c-447d-95d1-0c32f7d509a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb40665d-f754-4642-b363-94b566df56b8", "sighting_of_ref": "indicator--82bd7cbe-f083-4d8b-8486-a14b7eef82fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cde954-495d-4cd8-b294-28b8a5bb5a9d", "sighting_of_ref": "indicator--c4d59612-d701-41b9-9068-f557dc2423ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a8ca26-3ca0-45d4-9c0c-f59e5d2b20fa", "sighting_of_ref": "indicator--6aa1e56c-d629-438e-812f-412d6f5904b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bef0b06-6a37-42bb-8369-41a05c65ba84", "sighting_of_ref": "indicator--a97d414f-2061-4f56-9c32-173c69c210ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d48df2-5773-4961-bcf1-86162af46ece", "sighting_of_ref": "indicator--d2c2cdd0-e56b-4a4e-8965-3966a416199e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d181e6-53d5-41d7-bfc4-89d9f4fe3fc8", "sighting_of_ref": "indicator--baa0f932-3b19-4ac0-8170-db30d058659c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40300be4-2eb0-4349-b89d-8883c10f8f79", "sighting_of_ref": "indicator--0234fdd3-d18e-46c7-87ad-92f3ffbf2801", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15e6be3-e77b-4d02-acc8-546c43320fd4", "sighting_of_ref": "indicator--3a9c98a7-abb6-41bc-ae62-337d2b2bc25c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f2d0d4-6265-434c-9690-887d9631c1a2", "sighting_of_ref": "indicator--8372b487-d22a-47a6-86fe-6f300c60b3fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065441a3-30d7-4768-9a4f-4e512f9f2806", "sighting_of_ref": "indicator--b0d5cf17-8800-42c3-ae0c-a1e8fca60c43", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe7b6e3-20c5-4bcc-b951-260d6f4da497", "sighting_of_ref": "indicator--1a5e186c-de8d-4d58-b396-4034d1d5e49e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cdd12b-c114-46f2-abb4-18cedb479e8b", "sighting_of_ref": "indicator--e125dfbe-9cf4-4051-8bb5-40ec127b4a26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6634533-ceb9-41d2-b679-1b05bec4e897", "sighting_of_ref": "indicator--7185b380-77e0-4ddc-98f4-df425a9eae79", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1e5e9b-0606-4ec5-b247-50ab655b1549", "sighting_of_ref": "indicator--4c989ad5-2fd7-43a3-bd83-edd070b0724b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5c1c6e-92d4-489c-9eb0-c5b0c0fec77a", "sighting_of_ref": "indicator--463404c6-3c40-42bc-a87e-1d9ae0706930", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c1fc42-600d-4c6c-be15-29becaa60ee4", "sighting_of_ref": "indicator--1536d711-c430-4cc3-8f8c-6b1d4b4da0ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76751d13-c1f7-4631-9202-1a8c76678633", "sighting_of_ref": "indicator--1a848a25-d9e0-47e2-bf57-540c5e825e80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca45dc81-9f5d-4ec0-bf4c-88af509ca7a2", "sighting_of_ref": "indicator--12772baf-8ee9-4fee-a00f-e1c9c87cc312", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2983d648-a404-4c21-8ab7-79e48c0b90ca", "sighting_of_ref": "indicator--e5e2fa91-75af-4491-bcde-144bdf2194ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839c1c4f-b637-4469-b350-aa4b1d9f35e0", "sighting_of_ref": "indicator--461c7ad0-86df-4b01-b809-3395f43d5f9a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92b6d91-b4a0-4442-b661-e39b721238e1", "sighting_of_ref": "indicator--f8dae71b-ef6a-42fd-8322-4325ceb51d95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3e7066-0e91-485a-8d91-e9baabca5c76", "sighting_of_ref": "indicator--f8dae71b-ef6a-42fd-8322-4325ceb51d95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9908f401-6d71-4360-833c-616b545b7bf7", "sighting_of_ref": "indicator--d9c7b814-b952-4df4-90e8-79a80f8334be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0b790c-d5f4-4263-9f37-6b01ff166a4c", "sighting_of_ref": "indicator--74f5a67c-657c-4e00-b19b-50d4f09e95a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba758bfa-a563-4c90-929e-3c2c854b53b4", "sighting_of_ref": "indicator--74f5a67c-657c-4e00-b19b-50d4f09e95a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4378bcc-9071-415b-8da6-d8067580ecc2", "sighting_of_ref": "indicator--47ffd8cd-4275-4349-a1e5-2525e444c7df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a54ac83-1b0b-4d84-b612-6f2f34e0054e", "sighting_of_ref": "indicator--47ffd8cd-4275-4349-a1e5-2525e444c7df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbb550d-fbfe-4683-848d-ff1e34255bdd", "sighting_of_ref": "indicator--6e51005b-7f4c-4814-a964-ace2bb1f75d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4021402-74d6-49dd-80cf-100ff137fb6d", "sighting_of_ref": "indicator--6e51005b-7f4c-4814-a964-ace2bb1f75d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e019595f-f878-4c77-89ed-bb241c6053b4", "sighting_of_ref": "indicator--0e27956c-6b11-467b-acc8-1283aef04142", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc52e03-4089-40ad-9455-f1b4bdb67030", "sighting_of_ref": "indicator--39275223-8d55-46d0-aacc-4f5c6dc59f8b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4bab5c-804c-4e4a-86c5-5111f48e8176", "sighting_of_ref": "indicator--c922de66-f272-4db6-ac0f-7b3ecfda550b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132c2a9e-496f-401a-ab8a-2f13d6777708", "sighting_of_ref": "indicator--2f6faaa1-e45b-4757-99d5-33a4c11251fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589929ae-a9d5-4c90-ab70-0d23ff274174", "sighting_of_ref": "indicator--b12c1d75-20f3-4366-883f-a8b1fded3f34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca0fc6e-fd70-4bfe-8933-321102e71990", "sighting_of_ref": "indicator--d5db2499-5852-4686-9bd8-b4bdb68920d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc08479f-64e5-466f-9b99-219580b2b015", "sighting_of_ref": "indicator--7fbdb1dc-d0ac-41e6-b3ab-4d66e7f01dca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3475b2a3-e4d5-4a2b-81f3-3970fd3444d1", "sighting_of_ref": "indicator--64fe2851-95ce-40e8-bbfd-1f187f62e2f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6088e5-8dce-448d-9c95-a6028893e7a4", "sighting_of_ref": "indicator--20ab884d-1945-4cd9-98a5-dbb6903cffa3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3346bfc5-f48c-47c9-ac86-442b24b6202d", "sighting_of_ref": "indicator--b8cccdd0-d05d-408a-a4f4-f61670767b96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99d2824-845c-4f90-9634-11f849dce022", "sighting_of_ref": "indicator--622d479f-b7ea-4ea9-8d3f-f65898355141", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90537923-c577-4426-a5b4-8c4bb90cdb79", "sighting_of_ref": "indicator--1c80a20d-0dbd-4001-8e65-01e753cf5ce7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e26efae-11ea-490b-81e7-717e5cf769dc", "sighting_of_ref": "indicator--91ba86cf-8654-4872-b46f-f795db0de6b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4046b5b8-26fb-4afe-8c39-18e49e8001c5", "sighting_of_ref": "indicator--7d1acf7e-958a-4811-a336-cb240706c7a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf4910-9099-41b4-8e3c-f1b38af0bf1b", "sighting_of_ref": "indicator--5b6e06d1-9e98-4156-b89e-3d4f7ba093e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a178e29e-78fa-4bad-a919-2ae9d94158a1", "sighting_of_ref": "indicator--0590431e-068e-41c1-929c-a514e71e7aa6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffe5fc0-abff-4b87-b7d1-25631fcd9c74", "sighting_of_ref": "indicator--8cc4b525-a9dd-4850-a7e4-4a996563b984", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e1f55-bf2e-4924-b254-eab270138690", "sighting_of_ref": "indicator--44b44c84-6795-4ab4-937b-c31cad92d7a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494d1ac1-0cb8-4093-8c53-0befad8feaf2", "sighting_of_ref": "indicator--52d1f5d3-ca17-4a3e-8123-d5339d385748", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f62f1d-7938-4f90-b532-c49da62e32b0", "sighting_of_ref": "indicator--45b01ef2-49cb-4c7f-b2b3-c1d99df11ae4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5e7543-17fb-4131-b6ae-41366eb2867a", "sighting_of_ref": "indicator--81426c40-0011-4826-be3d-b971b66bf943", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f0bb4a-d2f2-46be-acef-d612dd0187ee", "sighting_of_ref": "indicator--b12b1f84-2301-4558-b412-ba29961ac100", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca657afe-eb2c-4a85-9a0f-a4df6d8ba1ee", "sighting_of_ref": "indicator--1f0dd90e-4914-4467-919e-b99a7cbf4318", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3351ccda-06f3-49d9-a118-c39e0a203506", "sighting_of_ref": "indicator--084ee3af-1081-4b87-9ee2-77777eb1f097", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dfc044-ed1b-4a83-a081-122d789e92fb", "sighting_of_ref": "indicator--47f8a0e1-b483-4178-84d3-bbf9c44acabb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeab9bd2-74c1-42cc-b39a-c665265cc782", "sighting_of_ref": "indicator--1b3a522f-6a0f-47c7-bc6f-ad894acb0094", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bceab67-8183-42ca-a5fe-ef5f3fae9979", "sighting_of_ref": "indicator--103c55cd-573f-4d94-b93f-edbb788715ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd810027-ba91-4436-9b16-a54d47c8985c", "sighting_of_ref": "indicator--103c55cd-573f-4d94-b93f-edbb788715ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdf3740-2636-42de-83c4-85aac82b838c", "sighting_of_ref": "indicator--103c55cd-573f-4d94-b93f-edbb788715ea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4c33db-c31d-4774-9d04-df623347861e", "sighting_of_ref": "indicator--58957a92-fe9f-43b9-b372-ce47b0336f37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ddd6c8-e935-494c-b02b-1fe28d7d81ea", "sighting_of_ref": "indicator--58957a92-fe9f-43b9-b372-ce47b0336f37", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb4c908-1330-473a-a8ca-aff76368abe5", "sighting_of_ref": "indicator--209fc173-5bff-4847-ab26-3cead53adae0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ed2c65-33aa-4a29-abd6-0655579bdfe1", "sighting_of_ref": "indicator--209fc173-5bff-4847-ab26-3cead53adae0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82810cad-94b8-4f0d-9cb0-664762c57152", "sighting_of_ref": "indicator--6a67a79f-7b01-4e56-8db7-01777d2c769a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5274a715-868c-4842-8e77-84ada2e57c83", "sighting_of_ref": "indicator--6a67a79f-7b01-4e56-8db7-01777d2c769a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddeac623-25a4-48df-8d30-990d66b10234", "sighting_of_ref": "indicator--e04f237b-84ff-46d0-935d-1e0edeaf5c93", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b225e6ec-84b2-4298-98bb-e39424af249c", "sighting_of_ref": "indicator--e04f237b-84ff-46d0-935d-1e0edeaf5c93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5f803f-857a-4762-abe7-e40e5ad50fc6", "sighting_of_ref": "indicator--7b0ea810-4efa-4374-af7a-d0d5383402ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800fea31-3306-4a93-9ebf-b1900db31a09", "sighting_of_ref": "indicator--890d803e-03e7-45ec-ae29-11bcdaeb30a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233280a7-ec04-4ebe-a361-4b5691997c4a", "sighting_of_ref": "indicator--890d803e-03e7-45ec-ae29-11bcdaeb30a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177440e0-c7c7-460e-9b4d-a123bc4c3bb0", "sighting_of_ref": "indicator--2d7b5c88-6f97-4ae1-af7c-34be2819d201", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe470ec-7dff-4b71-bd11-db8051ff3ad8", "sighting_of_ref": "indicator--15a64b84-3b5d-4fb5-b2cb-78e66aebd73c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23a48c2-4bf0-491b-8082-155385d9c7eb", "sighting_of_ref": "indicator--73ee428f-24e0-4507-a8c9-09048eaf1891", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377ee912-2c67-4fa9-880f-5ea527c14026", "sighting_of_ref": "indicator--bb087eeb-a488-4cf1-b066-5e7002ab8e26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7091b462-4ec6-41a0-b9b8-5de287fa0c9f", "sighting_of_ref": "indicator--97209084-0c8d-45af-8035-392498172a22", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b97038-f1ae-49e4-8e29-c664ec99f645", "sighting_of_ref": "indicator--97209084-0c8d-45af-8035-392498172a22", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf68bfe-988b-4a8c-b7ca-7c8c4ee9ed94", "sighting_of_ref": "indicator--20bac039-ae42-46de-aa2d-51104da536c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d71fda1-9ed1-4f34-9794-530aac063045", "sighting_of_ref": "indicator--73ad28a6-374a-4239-8f0a-d69b011ffcda", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2bd601-433a-4faa-938b-3076c72e05a6", "sighting_of_ref": "indicator--aeae88d0-50f4-45e5-acc9-ffbe3f287dc3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a3986a-fc96-4f07-a27c-8d49f33f875e", "sighting_of_ref": "indicator--aeae88d0-50f4-45e5-acc9-ffbe3f287dc3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493ba36d-b271-47e1-a147-6370d70111a0", "sighting_of_ref": "indicator--aeae88d0-50f4-45e5-acc9-ffbe3f287dc3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c13fe39-6502-4f17-9c07-aa8768689e8b", "sighting_of_ref": "indicator--5b22631d-8d38-4566-837f-825f6a824187", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6487a275-5677-4933-99f1-eb45180ce992", "sighting_of_ref": "indicator--5b22631d-8d38-4566-837f-825f6a824187", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57263b77-6a0d-4c5d-9a7c-9e807e5ffce8", "sighting_of_ref": "indicator--5b22631d-8d38-4566-837f-825f6a824187", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d3cd18-6302-4e0a-83df-afd8bfac5dd4", "sighting_of_ref": "indicator--3215a123-7e73-4e03-b7f9-e34802ab4629", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950cff71-1eeb-40ff-9467-8e08010f4249", "sighting_of_ref": "indicator--e66aa3ea-e7c1-405a-b4ba-1a579b60b9fa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db59820-d6ce-4aec-a622-7889380cc91a", "sighting_of_ref": "indicator--51243f6a-0a74-47c1-8836-b58ecd0a28bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009fdfa5-c027-4856-8e89-0de30b08f851", "sighting_of_ref": "indicator--459c7782-35cd-4617-be95-397f4c761fa7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e3d5aa-6aa1-42f8-a6e3-b14cb5c05f7c", "sighting_of_ref": "indicator--ed659349-7253-4a04-8a89-db3765e9bef8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e94a48-83d5-45e6-b879-16294bd207ce", "sighting_of_ref": "indicator--ed659349-7253-4a04-8a89-db3765e9bef8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfe3481-da01-4849-b758-26f4ddd4b138", "sighting_of_ref": "indicator--8953a449-5965-448d-a6e5-92196adff195", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d70b4aa-2f6a-41f2-be33-ef8fa32786bd", "sighting_of_ref": "indicator--8953a449-5965-448d-a6e5-92196adff195", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba232d58-d82e-47aa-8109-8d7d32dc444d", "sighting_of_ref": "indicator--f1b7b2c2-027e-4927-8694-64423cc68dea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9488a8-0ffc-4458-9e90-65670b72af9d", "sighting_of_ref": "indicator--f1b7b2c2-027e-4927-8694-64423cc68dea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e6887e-377b-4ed4-848a-6e3137e5c4c0", "sighting_of_ref": "indicator--36456677-79b8-47de-9997-a340bf65005f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31be0e6e-79b5-405a-8278-90f2f9f7e2da", "sighting_of_ref": "indicator--36456677-79b8-47de-9997-a340bf65005f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b213012f-d02d-4c1b-9e0f-c51673ad5443", "sighting_of_ref": "indicator--407ee12a-2fb7-4ea1-8080-c3bdcf734336", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dd8872-db62-4515-bfe3-766a56a32deb", "sighting_of_ref": "indicator--e900ad43-bd50-4480-8388-bdfe8f124333", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4787702-95a9-4a88-ba1a-14a65fae3a92", "sighting_of_ref": "indicator--c09fa8e2-a5cd-4018-8e76-8f42589eeba9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2841262-4f43-48f8-814e-a998145bf46b", "sighting_of_ref": "indicator--c09fa8e2-a5cd-4018-8e76-8f42589eeba9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af5d8a4-aa85-47c0-a6a0-3868138aa517", "sighting_of_ref": "indicator--c09fa8e2-a5cd-4018-8e76-8f42589eeba9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f9d38b-53e7-473a-b90a-d30731b6c1f8", "sighting_of_ref": "indicator--b3fee9c3-88bc-4593-b286-fdc50efc8f51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acba5d5-028e-416d-ab62-152d570b63b4", "sighting_of_ref": "indicator--efb52f1b-bf95-4527-a3c5-72a096e2af88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bba68e5-e45a-4926-bf56-7f35579d3222", "sighting_of_ref": "indicator--07385547-e0ef-4156-9168-1a87368fb031", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0bebea-2389-4537-9963-953738822395", "sighting_of_ref": "indicator--f76426e7-8a18-48c2-b7e3-bf43c8e24eef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d1328a-49cc-4170-9c78-8a3f24939476", "sighting_of_ref": "indicator--21c94b94-8472-4c3c-b3d8-b64c487b7fa7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea29edff-8829-405a-8a14-7d035d1ba98a", "sighting_of_ref": "indicator--7f8d03e3-6f19-4968-99c0-bcd2d251c52c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef01a377-4440-494f-8937-1ec7b5c820d0", "sighting_of_ref": "indicator--9b651a3c-4f3b-4bfc-9e4d-5cfefdbab104", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbe850a-975d-4fcd-b06b-7fb5b929bead", "sighting_of_ref": "indicator--9b651a3c-4f3b-4bfc-9e4d-5cfefdbab104", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c994f4-7bb4-47e4-a195-c7dcd38d8756", "sighting_of_ref": "indicator--f77a8db7-44bb-4271-b57a-c8967503abc5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1039ffb-b14a-4472-a73f-0fc820727843", "sighting_of_ref": "indicator--f77a8db7-44bb-4271-b57a-c8967503abc5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79317a1f-3c22-4f49-9028-0e4aac1ea6ff", "sighting_of_ref": "indicator--f77a8db7-44bb-4271-b57a-c8967503abc5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360fced4-d34d-4f4e-a5e0-1751a076952e", "sighting_of_ref": "indicator--0a6f58e8-f229-4058-9a65-eda50ffc0a57", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3891a69e-fff6-4c25-aa21-da6674bea282", "sighting_of_ref": "indicator--dd19479b-1d27-4708-8c76-1881256e4275", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3d20a6-caf3-4824-a765-60bfa6613895", "sighting_of_ref": "indicator--dd19479b-1d27-4708-8c76-1881256e4275", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f959c091-4905-4b82-be19-497f55b1e148", "sighting_of_ref": "indicator--65e95f02-9e8c-4547-bce2-7facb456a2b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc89646-8b57-41e2-a4be-da2135c09a36", "sighting_of_ref": "indicator--6d261c09-6b93-49b0-bdb3-2ba7563a2fa1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a42955-da58-440a-aa41-709dffb242f9", "sighting_of_ref": "indicator--6d261c09-6b93-49b0-bdb3-2ba7563a2fa1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6d8480-0cdf-47fb-9405-5a0fe0a0f6e0", "sighting_of_ref": "indicator--ac41b231-617c-48d6-96f9-b4c62071d1da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7cd919-4525-42ca-b4d6-946438f154a3", "sighting_of_ref": "indicator--31156411-8d3f-44a7-8cdb-05626cc1e845", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2008bbc0-fd93-479d-9e84-29c97d058111", "sighting_of_ref": "indicator--3ae0db56-2f50-471e-9566-8b96868c5ed2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a881150a-acdb-46cd-9734-1be69fd36558", "sighting_of_ref": "indicator--6d14510c-3577-4f3f-854e-b1c129af86ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48088340-b2cb-4760-9dce-d4de70082f28", "sighting_of_ref": "indicator--ee51f803-6053-4826-9ad8-ec807ed534c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85366a5a-a46a-4bc5-9df7-186d12386e03", "sighting_of_ref": "indicator--ee51f803-6053-4826-9ad8-ec807ed534c9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973e737b-47ba-4d19-a921-433424cd9d5f", "sighting_of_ref": "indicator--c16673c3-8542-43a3-bd08-c58855b03961", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b8730a-cac6-4b3e-93cb-befba4cbbd41", "sighting_of_ref": "indicator--0c6abf33-58d4-489f-b532-fb5bf6161d93", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22ce089-de89-4dd1-8c18-22870362f2fa", "sighting_of_ref": "indicator--0602ae5e-7aab-4f02-8e39-bde1d563d672", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9bc0ff-892b-4513-8526-a029a101089e", "sighting_of_ref": "indicator--595d502d-f050-4f6b-b04b-7c8358764c07", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67a92bd-640f-4edf-9aca-a306ffd221f9", "sighting_of_ref": "indicator--595d502d-f050-4f6b-b04b-7c8358764c07", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4e16f4-369a-40c8-ad73-e48b6a3772c7", "sighting_of_ref": "indicator--d3b5cceb-d30e-4cf0-84e0-5625d7b44228", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e9aa5c-2b68-41ea-ba3b-0c7749715ea5", "sighting_of_ref": "indicator--d3b5cceb-d30e-4cf0-84e0-5625d7b44228", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb18986-6815-4181-97bc-980bc2ddecae", "sighting_of_ref": "indicator--e8798315-69fb-4d87-9e9b-78cc1c1078a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02423fe7-f4fa-4d90-8911-6a8d401b55b3", "sighting_of_ref": "indicator--e8798315-69fb-4d87-9e9b-78cc1c1078a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc68713f-35e1-4858-9931-9bb667971bc7", "sighting_of_ref": "indicator--831e15aa-ce54-46d6-8d6f-4154b8462c2b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838ba75d-840c-49b6-8e79-1a6a0adaeb41", "sighting_of_ref": "indicator--831e15aa-ce54-46d6-8d6f-4154b8462c2b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15eb8e6-b0dc-4b70-ad02-ad7d87db75be", "sighting_of_ref": "indicator--fefbfa63-8be4-4f69-8be4-4e45d817e238", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc47ccb-9963-4acf-9ecd-bf3393816956", "sighting_of_ref": "indicator--fefbfa63-8be4-4f69-8be4-4e45d817e238", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647ca960-3446-464d-85c0-5acdfe08ed14", "sighting_of_ref": "indicator--ea9a991c-ec36-4686-910f-4e8dddd38ef0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5b2f5a-0d01-4773-95cf-77c0e216165c", "sighting_of_ref": "indicator--ea9a991c-ec36-4686-910f-4e8dddd38ef0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99b49c9-582e-4d4d-992b-2a71b2be051b", "sighting_of_ref": "indicator--ebd8fb81-2b55-46f7-8451-f962b0254942", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2791a6c0-1fd6-4ff0-a5d2-13e2c8647183", "sighting_of_ref": "indicator--ebd8fb81-2b55-46f7-8451-f962b0254942", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b005f10c-3989-4eed-8b66-858d8e38a39a", "sighting_of_ref": "indicator--303aef7d-a107-410d-9742-66dcc6a54dc8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2801f9e-c439-4c0f-a33f-4a9542832799", "sighting_of_ref": "indicator--9bef8f46-7463-4a58-9ab4-9dd008e24e96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9493342f-3445-492a-9877-ab6544a9bf21", "sighting_of_ref": "indicator--7bd3c051-e5ca-468e-b54a-4172ef7855ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908d5d8b-9d0f-4325-924f-ad45e4910903", "sighting_of_ref": "indicator--b923c6bb-e0d8-4c11-bfc1-690ec5fdca39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391c07ac-f1a1-4ce0-962e-68f32c65dae2", "sighting_of_ref": "indicator--f11685a9-35df-4998-a782-3943dcec428d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c095a8-a9a5-41ca-a6cf-c9d1f01bb2ab", "sighting_of_ref": "indicator--c116de24-cc76-4fc9-aee0-1a8d84ffc097", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50424f5-6cf4-4688-9666-153abf9323d5", "sighting_of_ref": "indicator--c116de24-cc76-4fc9-aee0-1a8d84ffc097", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aaf245-18c7-41b6-b2ff-703813993716", "sighting_of_ref": "indicator--c116de24-cc76-4fc9-aee0-1a8d84ffc097", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ccfe34-3937-40cb-bc0c-744b36b84f94", "sighting_of_ref": "indicator--cfc2ff18-feae-4969-9689-3c965e7ccc53", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6764d857-c03f-486c-8d47-517deae4b102", "sighting_of_ref": "indicator--14df0cec-3927-48c1-b55b-594a2beaf498", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe892218-2f24-4f78-8d8d-1d8abe2bb9bc", "sighting_of_ref": "indicator--8f29457e-8fe2-47a6-b02b-aac07127d7ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbd14f5-9772-4b10-b69e-e1a2b002267f", "sighting_of_ref": "indicator--1bf9cc07-a798-4393-949d-d2a81f37de27", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed53793e-d824-4446-940b-1b1803f99f1d", "sighting_of_ref": "indicator--c9901293-b39e-423e-9f7a-c79387c353d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280d8720-bf31-4e2e-a97c-7b4d2daade07", "sighting_of_ref": "indicator--a471c0f2-cd72-422b-b2c4-705939bbfa92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c59e2a-7924-4f71-958d-828ffb21a7c4", "sighting_of_ref": "indicator--a471c0f2-cd72-422b-b2c4-705939bbfa92", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a589f0ad-ba41-4abd-8156-592e4ce76b6b", "sighting_of_ref": "indicator--a471c0f2-cd72-422b-b2c4-705939bbfa92", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9205d6e3-7105-4ff5-b7fe-943a3ad5e791", "sighting_of_ref": "indicator--cc928fb4-14c5-4028-928c-8e2d0d5f57c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88cf59b-34e3-4289-848a-bb52edb9220a", "sighting_of_ref": "indicator--390ada13-a491-4df4-99ad-855cf0b9dec5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e152de73-82dd-4c4a-bcad-d856e810d383", "sighting_of_ref": "indicator--390ada13-a491-4df4-99ad-855cf0b9dec5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91df257-d906-4f99-a32e-285e9451e3c8", "sighting_of_ref": "indicator--58a40833-2e91-451e-8b58-50e097f6e062", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0890ba-cc2a-4007-8dc8-69a4ef375356", "sighting_of_ref": "indicator--58a40833-2e91-451e-8b58-50e097f6e062", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2ef0e1-652e-494e-966e-8a2ae8dfcf44", "sighting_of_ref": "indicator--58a40833-2e91-451e-8b58-50e097f6e062", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8eb380-6195-468e-9dd2-968e0b578a62", "sighting_of_ref": "indicator--4ffb7e5b-481b-4ce3-a39b-e58ca269064d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce1cec6-83d3-4106-8103-e45a989c4b09", "sighting_of_ref": "indicator--77d49b85-1af4-416a-80cf-e475a49614f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7921fb7-7633-424c-a16c-97caef441aec", "sighting_of_ref": "indicator--1a3c9138-5490-43f9-9b4d-f4c9bd1a2380", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ac0032-8dfe-4e75-8da7-0db226c5f12f", "sighting_of_ref": "indicator--5f2c6eda-779a-45dd-94a3-a21216fc45ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3820aae5-a6b4-4fde-8f88-82cdd51cd5d4", "sighting_of_ref": "indicator--5f2c6eda-779a-45dd-94a3-a21216fc45ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562b4ed4-1d92-4879-abbb-bd13c79d7466", "sighting_of_ref": "indicator--5f2c6eda-779a-45dd-94a3-a21216fc45ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f364637c-0cf7-4bc1-8575-4c4049b7a7f1", "sighting_of_ref": "indicator--4f7b08cf-0689-4377-9170-fd29ec81d3dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bbca28-ad53-4ed4-b885-9d7ea044d38d", "sighting_of_ref": "indicator--d4b865cf-1a3f-4a0f-b2c3-816f095b2f50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e104b22-8973-440e-beb9-ccc711f2f0c0", "sighting_of_ref": "indicator--d8638cbe-712d-446e-a785-b88f59ab95e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb88362b-7fcb-4adf-8d80-77409f71f396", "sighting_of_ref": "indicator--0d987a62-a5d5-49d2-94a9-aad1ed475006", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0827c1a9-a90a-4ef7-904e-eab198548414", "sighting_of_ref": "indicator--a3d27a4c-aa06-453d-b9b9-ef995b7e0151", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277495c3-b6fd-40de-b296-b0de70ec6144", "sighting_of_ref": "indicator--cd5f1475-da69-442a-847d-10d11c2dd02f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75fac42-e325-499a-b722-8a05db3cc489", "sighting_of_ref": "indicator--29071124-b313-4657-af64-b0f20078c3b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08683b2a-4b35-4e44-ad80-d20b2a586bfb", "sighting_of_ref": "indicator--93e07750-533d-4444-84b7-dc0542b84b9f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6040b24-bb00-4147-a0cc-e80beef7aa42", "sighting_of_ref": "indicator--0aa0827f-e5ac-46f1-ae68-e630ca77b987", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caeaa7e-17a2-4117-a85c-fb55b22f4b41", "sighting_of_ref": "indicator--31f7aa75-488a-447f-9346-de11799a88ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a6c2b8-9d77-4497-8883-e5de97a28b9b", "sighting_of_ref": "indicator--1533e392-0135-4306-8b25-d8bb5b450f17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af60982-c81c-4e11-8343-5553a07ca19b", "sighting_of_ref": "indicator--e212ed71-0e7e-4fb1-91a4-2d587799af4e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62965c86-710e-455f-81c8-a3292fef6796", "sighting_of_ref": "indicator--e212ed71-0e7e-4fb1-91a4-2d587799af4e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eff1398-4f23-499d-bbc9-40bf28cd3fdb", "sighting_of_ref": "indicator--c55e6858-f746-4284-95ee-2f5462fc5732", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa7d20e-be4a-4cd1-bab1-f33575bbce2c", "sighting_of_ref": "indicator--a4ba7927-9a09-443d-b5ce-3d8d26c57330", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7afa46-a7d9-4bcc-8b8b-7baa10f9d0b9", "sighting_of_ref": "indicator--efb4f2f2-98f1-4f87-8056-54c233609e27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc5516c-6a86-4de1-9839-c570413bd022", "sighting_of_ref": "indicator--095c3181-2d6d-482b-a291-2a7882789701", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08a578-cfb5-4cde-8733-f268c6eaecb7", "sighting_of_ref": "indicator--6bb23775-9b98-43f8-980e-620be82ed97d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081dc8eb-6bbd-4743-93e9-514a584f5daf", "sighting_of_ref": "indicator--6bb23775-9b98-43f8-980e-620be82ed97d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60eb2bd-584a-4cee-a693-b78bce4a1775", "sighting_of_ref": "indicator--62c64a97-e0a1-4ebc-b1d8-41a238bd757e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eee0e9c-f9ff-436b-b2fd-2e20d545ff2d", "sighting_of_ref": "indicator--3aab19d2-5cc8-4aa8-8e4e-e9fb9d3046da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56021e23-5493-4214-8a8c-48698a5050c8", "sighting_of_ref": "indicator--3aab19d2-5cc8-4aa8-8e4e-e9fb9d3046da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d9ce35-9540-4742-b45e-9de24d3658d8", "sighting_of_ref": "indicator--3aab19d2-5cc8-4aa8-8e4e-e9fb9d3046da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cc2668-9af2-4b0e-a2c8-42c1d56ac0a9", "sighting_of_ref": "indicator--a83ffd2f-155e-4d63-ba69-cb1ceab7ca87", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97280e18-6780-48db-9694-63d6ed9bcd9f", "sighting_of_ref": "indicator--c960b930-9b46-4649-af67-d37bac4123d2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4df350-64f6-4992-96be-97df9f007a70", "sighting_of_ref": "indicator--8ea490c4-c994-4336-9397-d37908beeafc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf152d-c6ae-4d25-b276-74e33d43fa67", "sighting_of_ref": "indicator--8ea490c4-c994-4336-9397-d37908beeafc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc2a01b-3439-44b9-b427-edb3bded84c3", "sighting_of_ref": "indicator--8ea490c4-c994-4336-9397-d37908beeafc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4286f0-62f3-419b-9504-3906f3587649", "sighting_of_ref": "indicator--b118b78d-efce-42e1-8958-c7859d1fea43", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbba715b-2e92-4b91-b905-9208f9c417fe", "sighting_of_ref": "indicator--b118b78d-efce-42e1-8958-c7859d1fea43", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3e73a5-d6f1-4382-9729-f79d0f1afe94", "sighting_of_ref": "indicator--74bc913b-7100-44bf-84c5-2802b9aa341c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ea65a8-28ff-4a18-9b81-a505d3216da8", "sighting_of_ref": "indicator--74bc913b-7100-44bf-84c5-2802b9aa341c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afbd84d-2983-40c6-ae6f-e3b5e5987af8", "sighting_of_ref": "indicator--74bc913b-7100-44bf-84c5-2802b9aa341c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5493d1-0d38-4edd-93c3-df0678f03acf", "sighting_of_ref": "indicator--b38454ab-641f-40f9-b47d-3a5779103708", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9a91c2-0e8e-4c31-a651-2f1d7415abb8", "sighting_of_ref": "indicator--b38454ab-641f-40f9-b47d-3a5779103708", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47de9e5-c5f2-4dc6-9ced-e17091a27e18", "sighting_of_ref": "indicator--b38454ab-641f-40f9-b47d-3a5779103708", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d5cfd0-8a6b-4794-ab65-f461994072e9", "sighting_of_ref": "indicator--97d1b1c7-458c-40a9-bc0c-34293890a460", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acade71b-2892-4d66-8c96-be5917321135", "sighting_of_ref": "indicator--97d1b1c7-458c-40a9-bc0c-34293890a460", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69b47b3-1c8e-4a43-bcc6-40fca3a6d607", "sighting_of_ref": "indicator--f3d7c48e-9306-4f41-9dc0-27bf4abe9add", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd38753-523b-4066-bbdd-c1414717e6e8", "sighting_of_ref": "indicator--f3d7c48e-9306-4f41-9dc0-27bf4abe9add", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356637c2-188e-4ce8-a908-9803154d65d3", "sighting_of_ref": "indicator--f3d7c48e-9306-4f41-9dc0-27bf4abe9add", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a1f419-8d45-4887-9512-1c5a387775ec", "sighting_of_ref": "indicator--0a881f86-b2bd-4d03-99c7-e55645948d81", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2128ba3-b59d-435f-af4e-8de7b53ce107", "sighting_of_ref": "indicator--b262958e-badb-4cfd-8af2-684df47e7bb6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be019982-e00b-4595-a8db-ac348e31abb5", "sighting_of_ref": "indicator--1bec9adf-81b4-4937-abb6-9d917352ba42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae077754-e936-48da-83c0-de02d3e7a52b", "sighting_of_ref": "indicator--1bec9adf-81b4-4937-abb6-9d917352ba42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0049e1-7b08-4a7a-a547-042ad585b81d", "sighting_of_ref": "indicator--1bec9adf-81b4-4937-abb6-9d917352ba42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92a7798-16b3-4a9b-b128-665a1add89b6", "sighting_of_ref": "indicator--d73f9034-36c0-416e-bbcb-30d9db116107", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2b260f-46e4-406d-9c31-e13e557a15e1", "sighting_of_ref": "indicator--d73f9034-36c0-416e-bbcb-30d9db116107", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e952fb17-f30d-48df-bd84-d8289ab58e9e", "sighting_of_ref": "indicator--d73f9034-36c0-416e-bbcb-30d9db116107", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1b86db-5896-4209-99b9-9051d663a9c4", "sighting_of_ref": "indicator--a3e1b625-37e2-4c47-9f20-69d775aeccae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55d81c8-4cbc-4d56-a1cd-119ede8b057d", "sighting_of_ref": "indicator--a3e1b625-37e2-4c47-9f20-69d775aeccae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c303804a-a5d9-4b28-b139-ec645af6afdc", "sighting_of_ref": "indicator--a3e1b625-37e2-4c47-9f20-69d775aeccae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ad275c-d534-424a-a922-03c7804f73e5", "sighting_of_ref": "indicator--4c534637-1d8d-46b5-ad4a-34bad08c5317", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34437624-5981-4bff-a342-3b46aca0be39", "sighting_of_ref": "indicator--4c534637-1d8d-46b5-ad4a-34bad08c5317", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0ce8ce-3a0f-4094-a8ae-2e20c0ce34f5", "sighting_of_ref": "indicator--4c534637-1d8d-46b5-ad4a-34bad08c5317", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ea7cca-9ea8-4ef7-9ed9-6bcc12a3f91c", "sighting_of_ref": "indicator--ae3a7930-a7bc-499b-92b2-4fe5cce71613", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86de7f6-1ba1-44ec-96ea-5aafb217f0f8", "sighting_of_ref": "indicator--ae3a7930-a7bc-499b-92b2-4fe5cce71613", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f655c778-ae03-4c44-abfe-0b1703e074cb", "sighting_of_ref": "indicator--49b392d2-39c8-4961-bec5-9c46888fb220", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df05df6c-ceff-4860-bf60-de7b71b9388b", "sighting_of_ref": "indicator--38b629ea-db00-4bb8-90f1-2be73e8d9187", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7ea262-be9e-4039-be11-2a7ddf46b328", "sighting_of_ref": "indicator--38b629ea-db00-4bb8-90f1-2be73e8d9187", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57297f-acf8-4a02-bb23-1bcd66f739f7", "sighting_of_ref": "indicator--26274883-f24e-4405-8ac4-5150cd8975eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c2d3b6-92e2-4d9c-b5c8-62c389b86b97", "sighting_of_ref": "indicator--26274883-f24e-4405-8ac4-5150cd8975eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550bc12a-f691-45e5-a6d4-69cb4b125114", "sighting_of_ref": "indicator--26274883-f24e-4405-8ac4-5150cd8975eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e117bfc4-eee7-4e29-a62e-41b731e30bd5", "sighting_of_ref": "indicator--ee22f983-8621-4cd0-8949-a05b4cb057c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4f0ac7-eeff-4001-95b9-f0bd7731fc7a", "sighting_of_ref": "indicator--01ae6537-773d-43ea-a962-d16fe6eb5b79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b11086-5fb2-4276-ac73-a2ecd9008da1", "sighting_of_ref": "indicator--01ae6537-773d-43ea-a962-d16fe6eb5b79", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61971795-c774-40ec-9394-bcc51600cf63", "sighting_of_ref": "indicator--01ae6537-773d-43ea-a962-d16fe6eb5b79", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fd9066-2e94-40ba-abf9-9587e57141fd", "sighting_of_ref": "indicator--e27f5b85-a671-4770-b756-301ce6aa260a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2727b21-ec74-4d98-84a3-09e40057fe18", "sighting_of_ref": "indicator--ccf66531-e88c-4804-ad65-0fba9d459bd8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90667118-39bd-4afd-909d-cf07e75d49c6", "sighting_of_ref": "indicator--ccf66531-e88c-4804-ad65-0fba9d459bd8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa859a5-f849-4bc6-81db-40c1a6b28930", "sighting_of_ref": "indicator--6ec5fd0c-2636-447b-bf8c-9a7f9793c8a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2835632b-1460-4ff4-855b-c9f47964d146", "sighting_of_ref": "indicator--6ec5fd0c-2636-447b-bf8c-9a7f9793c8a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad93a4-cfbe-4831-b99f-efa1e3dfed19", "sighting_of_ref": "indicator--6ec5fd0c-2636-447b-bf8c-9a7f9793c8a7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94e9f3b-f55b-4a70-9056-118a36d6a144", "sighting_of_ref": "indicator--8f6a4d56-d776-465a-ab9c-75c4613a3fdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b33881-f073-4071-887c-ec69a790d4dc", "sighting_of_ref": "indicator--2dd97480-c025-49d9-92bd-603679437cb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744abd1d-ebcc-402d-a2e9-dc78d071bbc2", "sighting_of_ref": "indicator--2dd97480-c025-49d9-92bd-603679437cb6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879effd0-7c1f-4436-a354-e06af0149957", "sighting_of_ref": "indicator--0f2b59a1-71f7-46b5-95c5-66ae54d29016", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75cb649-4a19-46f3-ab83-744143c171d2", "sighting_of_ref": "indicator--0f2b59a1-71f7-46b5-95c5-66ae54d29016", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78aa89f-8023-4c38-9d9f-88d64f2b7b72", "sighting_of_ref": "indicator--0f2b59a1-71f7-46b5-95c5-66ae54d29016", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ffacc3-8aaa-4487-8723-dbc79bdfdb76", "sighting_of_ref": "indicator--50ad5d25-b864-4fe8-bb08-86bbf64ba05d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a37709e-2679-4ded-9910-727508b51987", "sighting_of_ref": "indicator--53a98b6e-f848-4d34-9aed-393aebba33cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c73316-b044-4399-920d-36e4678045a0", "sighting_of_ref": "indicator--53a98b6e-f848-4d34-9aed-393aebba33cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0152750-0522-4694-a267-525cce7581d2", "sighting_of_ref": "indicator--4bb77664-167f-464f-9824-c416935beb2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0a86ad-4ffb-4cfb-ac05-9a579a87097e", "sighting_of_ref": "indicator--4bb77664-167f-464f-9824-c416935beb2a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90d9723-34e4-432b-9290-488a164dbeff", "sighting_of_ref": "indicator--4bb77664-167f-464f-9824-c416935beb2a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0187217a-87be-468b-bfd0-1bca7e8d0aaf", "sighting_of_ref": "indicator--2004f50c-cb80-462e-81ed-d799d5f6c916", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cca5b77-e7c9-4e43-b961-4dd4bda09470", "sighting_of_ref": "indicator--7724b4f9-3d99-441a-988e-d295e0e9d714", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73319d21-6426-4a45-9f77-03d2ba3f9c34", "sighting_of_ref": "indicator--378c0d6e-13fc-4ca2-9288-bfe055feed68", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdf73ce-b141-4b11-bb66-6e16ef0f6843", "sighting_of_ref": "indicator--45d393a8-18ad-4863-a716-33fe0203ec66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b783b61c-8185-4c1d-947f-10ffd2797f1b", "sighting_of_ref": "indicator--45d393a8-18ad-4863-a716-33fe0203ec66", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c589b9-f425-4411-8ec4-0be3b3071ec9", "sighting_of_ref": "indicator--45d393a8-18ad-4863-a716-33fe0203ec66", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3260c663-860d-43fd-9032-16c08a764d7a", "sighting_of_ref": "indicator--a03b4695-5649-4af2-8e40-4814c1341d9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f3fb1c-4b25-4cec-b9bc-ea4601accb8e", "sighting_of_ref": "indicator--a03b4695-5649-4af2-8e40-4814c1341d9b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a675217-1118-4169-8ffa-ef749fd7bd88", "sighting_of_ref": "indicator--a03b4695-5649-4af2-8e40-4814c1341d9b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60113148-93b2-494c-b330-ee4f1481b93a", "sighting_of_ref": "indicator--c85d8e4d-18a6-4e4c-b9b4-479989d88bda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa632de-8cbf-4929-9f22-7424f0d9bd1a", "sighting_of_ref": "indicator--497893c6-92a6-47a5-954a-8c03b518864d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b3e671-e821-4d56-b3a2-2c0e7a30ab14", "sighting_of_ref": "indicator--f742fd9e-9f38-47cb-a7f6-c2c33504bd60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4b9107-d5d2-4510-8a09-142470abc4f2", "sighting_of_ref": "indicator--7ffb5cfd-6085-4622-8fa8-c6dffe03c894", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed7f374-1808-4414-9eff-f90e6ee2351f", "sighting_of_ref": "indicator--7ffb5cfd-6085-4622-8fa8-c6dffe03c894", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef02edaf-2385-40d7-b24d-9299dd7aa7a1", "sighting_of_ref": "indicator--dfe91002-2847-4965-a5f9-f74bdb52ce42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeac778-20ea-4864-972d-b4f24e4b7202", "sighting_of_ref": "indicator--4f2f6538-602c-4aa8-a64b-44caccdd1082", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0338e144-2432-491d-ba02-b872583b8d8d", "sighting_of_ref": "indicator--4f2f6538-602c-4aa8-a64b-44caccdd1082", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe0f9e9-a328-4ac2-a933-c7fca064920a", "sighting_of_ref": "indicator--23cbc1d2-5a74-4329-88c8-84ac1d8ddcd0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0ff3a5-3b49-4b00-86cd-07008d73aeb9", "sighting_of_ref": "indicator--d350b3b5-8e1f-485e-9c37-3051e4582b9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b659bf6c-f5a5-4d59-8833-650c1f606686", "sighting_of_ref": "indicator--d350b3b5-8e1f-485e-9c37-3051e4582b9e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c2730d-fa0e-4487-ac1a-51b9f0952a29", "sighting_of_ref": "indicator--d350b3b5-8e1f-485e-9c37-3051e4582b9e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1790434d-3ee7-40c6-95f8-64e1faa47341", "sighting_of_ref": "indicator--049831c7-c1bf-4c17-aca4-7ad6a9c5e9a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d791700e-46b5-4fe0-b47c-387848db9e1b", "sighting_of_ref": "indicator--9818d0a4-ffa1-4644-85b8-33351b6692c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99a9005-a1dd-4011-8348-ec622f25fb01", "sighting_of_ref": "indicator--9818d0a4-ffa1-4644-85b8-33351b6692c0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4454589-8aa8-4964-8c49-e39e989fecf1", "sighting_of_ref": "indicator--9818d0a4-ffa1-4644-85b8-33351b6692c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce22ee67-1df4-4b7a-b619-6e707227d0e5", "sighting_of_ref": "indicator--8daa716e-e360-42ce-acfb-6198981cd19b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cf67fc-7a49-4513-9bc0-f20ed73db63a", "sighting_of_ref": "indicator--8daa716e-e360-42ce-acfb-6198981cd19b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2e20c8-c5eb-4cd5-97b3-edf9ec28611c", "sighting_of_ref": "indicator--7e7eb011-063c-4ab9-86f4-667b42720497", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7341617b-67d7-40a1-a468-af3177eb96ae", "sighting_of_ref": "indicator--23f3eb34-3a09-454d-9217-dc0bc16d33a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9029ee-cf0b-42e9-b594-a45604d1187e", "sighting_of_ref": "indicator--23f3eb34-3a09-454d-9217-dc0bc16d33a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f09fe-28b2-45cb-adae-42b0a7cdc50e", "sighting_of_ref": "indicator--23f3eb34-3a09-454d-9217-dc0bc16d33a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a696320-d332-4940-9da3-45676117c541", "sighting_of_ref": "indicator--eab2a698-f374-4816-858e-61cc7a66ce3a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999989f8-4bae-4fbf-8336-3bfebe39f450", "sighting_of_ref": "indicator--eab2a698-f374-4816-858e-61cc7a66ce3a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9204133f-0617-41c7-810e-cf1010ed56ab", "sighting_of_ref": "indicator--eab2a698-f374-4816-858e-61cc7a66ce3a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d5c60e-264f-431e-8862-4ac4c77923bb", "sighting_of_ref": "indicator--5b9989a9-a563-4a74-a4f6-0c8a9de41966", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700bc39f-0d4c-40a4-b67e-1b14c0578f22", "sighting_of_ref": "indicator--5b9989a9-a563-4a74-a4f6-0c8a9de41966", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e3515d-9156-409a-a5da-6ee80ec46125", "sighting_of_ref": "indicator--5b9989a9-a563-4a74-a4f6-0c8a9de41966", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b30de6a-2373-470d-bea7-083ecdd31c25", "sighting_of_ref": "indicator--9af84c44-a258-45cf-b5a2-7369d8b842bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3dd346-c4a7-40d6-9655-fdba2af7e599", "sighting_of_ref": "indicator--9af84c44-a258-45cf-b5a2-7369d8b842bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9e169e-a593-4a09-986b-0cfd7ceb1d82", "sighting_of_ref": "indicator--aef8687d-b589-4a63-bfe1-1113a942349c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73292bb-949f-478a-9eaf-619c2c6a87f2", "sighting_of_ref": "indicator--8d662598-92e0-41dd-9638-4e912c179e51", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95859d7-a52b-4be4-8612-7925f2efdd97", "sighting_of_ref": "indicator--8d662598-92e0-41dd-9638-4e912c179e51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb9132d-72e0-4bf0-b15c-7bd3e64cc263", "sighting_of_ref": "indicator--8d662598-92e0-41dd-9638-4e912c179e51", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d099749a-8e3a-410b-a465-6586b4adda03", "sighting_of_ref": "indicator--9122337e-4dc9-49ab-8e9b-848d6d078e05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad2e33a-9e91-4ff4-8bfe-21f30cce29b3", "sighting_of_ref": "indicator--9122337e-4dc9-49ab-8e9b-848d6d078e05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe9f11b-8bd1-4a26-bacb-6e478d3a57c4", "sighting_of_ref": "indicator--4e8d9a0a-d452-4bff-8fa2-b476ff58a485", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691d7b5c-2f9a-4d39-a34b-fdafa5a269ff", "sighting_of_ref": "indicator--4d7042ee-6930-42fc-ab62-561a76a7175a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82030f03-33d4-4a66-9fa1-dadad1226239", "sighting_of_ref": "indicator--2264fc30-868c-44ec-8a20-90ea3776cce9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab71916f-f16a-4824-a9c0-02ab99c18607", "sighting_of_ref": "indicator--2264fc30-868c-44ec-8a20-90ea3776cce9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c47301-9ff7-4cb9-bcf7-ba056c8e8676", "sighting_of_ref": "indicator--2264fc30-868c-44ec-8a20-90ea3776cce9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f443081a-d7c9-46bc-bf79-5717e0157e0c", "sighting_of_ref": "indicator--1c7844a0-aca1-445b-a89d-cf83a755554a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfd3d1f-7226-44b7-af5c-b07eb4a9b174", "sighting_of_ref": "indicator--1c7844a0-aca1-445b-a89d-cf83a755554a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a73cb20-bde7-44eb-841d-73d7ce830a8f", "sighting_of_ref": "indicator--1c7844a0-aca1-445b-a89d-cf83a755554a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff51098-43d7-4fa8-ac23-81f6a6825814", "sighting_of_ref": "indicator--7c0b87af-4627-4267-9abc-61707d1ea67f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16cfb10-e95f-4721-b302-be3cd3e39137", "sighting_of_ref": "indicator--7c0b87af-4627-4267-9abc-61707d1ea67f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22be0b2-7316-4c7b-8601-5b4d8be836f9", "sighting_of_ref": "indicator--7c0b87af-4627-4267-9abc-61707d1ea67f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd652f9-b285-48f1-9fa1-922838e401d1", "sighting_of_ref": "indicator--257118dc-88b8-46fb-9e9f-6cfaa555fc06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12a6b98-0632-4f4c-8f03-bc4167a22959", "sighting_of_ref": "indicator--6e0ffe54-49d9-436d-a816-7941dc6f2aad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ff831f-6238-451c-9676-797ddce61696", "sighting_of_ref": "indicator--deedbdf4-a600-4d44-a7d9-75e2af0297c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9febf4f4-45da-4c2e-b5f4-58ea9e47c71e", "sighting_of_ref": "indicator--deedbdf4-a600-4d44-a7d9-75e2af0297c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b65957-e393-4a2d-80ce-639bf531e59a", "sighting_of_ref": "indicator--f4477ff1-1cc7-42bf-aa57-df8798bb5b71", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9a4ff3-9411-41a4-948b-71e5f20e450a", "sighting_of_ref": "indicator--43a24995-dee2-4ddc-9622-f215e6986e06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e3fafe-ee23-4094-bb94-5f4c7c7ce410", "sighting_of_ref": "indicator--43a24995-dee2-4ddc-9622-f215e6986e06", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4afc9f5-d9b1-47fb-98cd-c021754097f6", "sighting_of_ref": "indicator--b803429c-e8ee-448d-af22-081e3a666384", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824f21f9-442a-4acb-8e22-30f687c03bd2", "sighting_of_ref": "indicator--b803429c-e8ee-448d-af22-081e3a666384", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c888208-9674-4dc4-96e0-588c94bb3bf5", "sighting_of_ref": "indicator--b803429c-e8ee-448d-af22-081e3a666384", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dfcd5e-1f3f-4abf-88bd-3f6540d311fb", "sighting_of_ref": "indicator--08db2b3f-f749-47c1-94d0-033d77f14cec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3a3873-58d1-49df-9680-43fe4e66eb9b", "sighting_of_ref": "indicator--2888a918-71f5-4d1a-a895-6f3964e769ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fae3fc-dcbc-458c-924e-fb981388fe8b", "sighting_of_ref": "indicator--2888a918-71f5-4d1a-a895-6f3964e769ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a58a05-6afd-4e24-a901-56de551c720e", "sighting_of_ref": "indicator--591afe7e-7e53-4a95-8322-2814476325d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd025de-1998-41d9-9696-fbc0ecf00e6c", "sighting_of_ref": "indicator--ddc363a6-3ccd-4192-9a98-a7efcb9a8054", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04db17e2-fcfa-4741-94f5-2b9e001e7f3f", "sighting_of_ref": "indicator--ddc363a6-3ccd-4192-9a98-a7efcb9a8054", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3d90c8-b305-4dac-947a-d4fbfd8eeca3", "sighting_of_ref": "indicator--ddc363a6-3ccd-4192-9a98-a7efcb9a8054", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5801d4f-a5e4-40ee-a022-f693f3dc8fcb", "sighting_of_ref": "indicator--d871e12c-900d-4654-8797-8b1e2bfe7534", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e98b82-34d0-4a23-84d5-315cf24bfdf5", "sighting_of_ref": "indicator--0a21421d-ccb0-4a72-acb8-c7c0411c5b66", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a8c4f8-8ac6-41a4-abfd-f2ec95a17d97", "sighting_of_ref": "indicator--7deb72e7-50f1-44d1-ba2c-0d58fe0e8d7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e86c85-7760-4a66-81f3-09f1b2250e59", "sighting_of_ref": "indicator--7deb72e7-50f1-44d1-ba2c-0d58fe0e8d7c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827fccbd-2fe1-4f75-9411-a4f4c92a19cc", "sighting_of_ref": "indicator--7e7921e3-f629-4c56-a4ce-c36e54ced639", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a837e624-f1fd-4e24-9003-1878ed096e43", "sighting_of_ref": "indicator--ccad205a-a3f5-4920-91e1-370889f0fd6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d52c614-36d7-41fa-9218-ff2d7c00c367", "sighting_of_ref": "indicator--43800ffa-4842-41f3-9adc-7f32fbac83c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658745d2-2a35-4df2-9d3b-a9a287581392", "sighting_of_ref": "indicator--43b094b4-21bd-4e5d-a8d8-ef92bcda395c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fe03ec-87fe-4512-8be0-0b5367eb6e6c", "sighting_of_ref": "indicator--e16f0195-617b-4193-8a82-9e6ba36612db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d75fac6-b689-4d99-a211-692dc8ac376e", "sighting_of_ref": "indicator--70f8c5d1-091d-4907-8ac9-3c4cfecc12ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17134e5-5a6d-4a27-8b84-a9219d63039e", "sighting_of_ref": "indicator--70f8c5d1-091d-4907-8ac9-3c4cfecc12ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc89aff-b735-4c72-aeac-3f97dd4d8a87", "sighting_of_ref": "indicator--70f8c5d1-091d-4907-8ac9-3c4cfecc12ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cb2e2d-632c-4c5c-8fa8-4aca0a76dbcc", "sighting_of_ref": "indicator--f4b91b98-18fa-42e4-b8f3-62ee6654ea54", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8db060-2232-488a-9024-029a2ac1cd98", "sighting_of_ref": "indicator--0fa544e4-c522-4554-b773-699284c5ecb8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6901e80d-6993-421d-86d6-6a284d9f2cfe", "sighting_of_ref": "indicator--0fa544e4-c522-4554-b773-699284c5ecb8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7555211e-4fd1-4c49-9e15-733d8231bf07", "sighting_of_ref": "indicator--549cbb14-7f48-4f7e-917c-1a16da606d92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8e205b-8ddd-4051-b30d-9e24f9a4b04d", "sighting_of_ref": "indicator--549cbb14-7f48-4f7e-917c-1a16da606d92", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bc9a5e-fd51-45a4-8d52-d703bddd71d7", "sighting_of_ref": "indicator--549cbb14-7f48-4f7e-917c-1a16da606d92", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f294fe-9f3a-473a-ba4b-92a4e91dc902", "sighting_of_ref": "indicator--d2581f62-c0c7-4571-8a02-7e5b24ccc258", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ca1d31-207c-4ade-919c-d9bfe6ddd101", "sighting_of_ref": "indicator--1bd23450-7fad-4519-ba27-05385ac6534a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41716093-cfbf-4ddc-a6e8-f7291310a1d0", "sighting_of_ref": "indicator--1bd23450-7fad-4519-ba27-05385ac6534a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e474c11-0df0-4e23-88bf-d38ab5a58cee", "sighting_of_ref": "indicator--1bd23450-7fad-4519-ba27-05385ac6534a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abe1ab6-56e8-4b88-a1dd-352f99f0e676", "sighting_of_ref": "indicator--dfb863dd-2b93-4586-a633-a266adbaeee6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdef06c-eb03-4934-8fe8-724225b84bf1", "sighting_of_ref": "indicator--dfb863dd-2b93-4586-a633-a266adbaeee6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb40953-fee8-4999-a8bf-a9243cc8c999", "sighting_of_ref": "indicator--83d81e30-ea65-4ccf-b7b3-39d17338e6ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130b123d-bc83-41e9-98b3-1ba0451533cb", "sighting_of_ref": "indicator--1667fead-f35b-4d62-b730-911b77ab409d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c05d20-65c9-4c95-b1be-74c10539dbb1", "sighting_of_ref": "indicator--1667fead-f35b-4d62-b730-911b77ab409d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef716b0a-7a1c-4bd8-b907-e94f9562f82a", "sighting_of_ref": "indicator--1667fead-f35b-4d62-b730-911b77ab409d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100aa8df-9cc0-44c6-ad64-35fb4024a2b9", "sighting_of_ref": "indicator--1526e371-99ec-4e54-8104-2f2209a27133", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4e214f-ff0a-46d1-aaa8-0290fe0e0d56", "sighting_of_ref": "indicator--a0792ee5-1ea7-4098-ac91-234f9d0d4e1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc1b6f-5d06-4393-b7e2-96da6296f664", "sighting_of_ref": "indicator--a0792ee5-1ea7-4098-ac91-234f9d0d4e1d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df63b02-0e16-4480-84af-122f862bb343", "sighting_of_ref": "indicator--21084bc1-f17a-4aaf-95cc-fadeceec2e99", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679d20d7-85bc-4c12-b0d9-400dc6833555", "sighting_of_ref": "indicator--07259e8f-6b6c-4a17-943e-a6cbcac9704f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9762191-0bb3-4cfb-9edc-e8d87d0ac7e8", "sighting_of_ref": "indicator--bcd428ce-3724-4e6d-a3a5-b20dc9283584", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b882449-1eb9-4710-a441-09f64dcc9a1f", "sighting_of_ref": "indicator--bcd428ce-3724-4e6d-a3a5-b20dc9283584", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358c145b-3db0-46a0-8c2b-250bcb2d2590", "sighting_of_ref": "indicator--bcd428ce-3724-4e6d-a3a5-b20dc9283584", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96880dd-51d0-4f39-bfdf-d32c1e3532d4", "sighting_of_ref": "indicator--3e49e03b-252d-4803-8a16-40556e0d0e2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7779f6-e5f0-4188-ab4f-4938da2ead47", "sighting_of_ref": "indicator--e32c94df-26ae-4a4e-b7d1-a5d20344d315", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22679c2a-c61d-4061-a3c1-3903af8d1f18", "sighting_of_ref": "indicator--b0a1c8fc-d698-4a47-ace9-b5e55ca4e6d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bacfc4-69fa-40bc-b5f3-4adc24db5072", "sighting_of_ref": "indicator--b0a1c8fc-d698-4a47-ace9-b5e55ca4e6d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7908be10-d174-4c28-b504-3e8b90ce4f1f", "sighting_of_ref": "indicator--b465cc5a-2fb9-401f-93c5-93d5dc106558", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413f29a0-6ac1-4200-90cd-29ecb5f9f18d", "sighting_of_ref": "indicator--b465cc5a-2fb9-401f-93c5-93d5dc106558", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6777f1b-7cfb-4676-8b51-c7a9937dbe41", "sighting_of_ref": "indicator--b465cc5a-2fb9-401f-93c5-93d5dc106558", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a038167d-272e-45fa-a85b-e436f747a6ae", "sighting_of_ref": "indicator--eba1ff92-c8b9-4f6c-bb27-2463f880e1e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695aace-d037-436b-9a68-e70e0ef612d7", "sighting_of_ref": "indicator--eba1ff92-c8b9-4f6c-bb27-2463f880e1e9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7afc8bc-5899-4c95-8b35-2dd7f25c322e", "sighting_of_ref": "indicator--eba1ff92-c8b9-4f6c-bb27-2463f880e1e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2f8175-2f1c-4261-be79-e2c3930343e5", "sighting_of_ref": "indicator--86dabd54-6345-4faa-89dd-a23ec2b73bac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5878ca45-0c98-41f8-a4fa-9374765c9d91", "sighting_of_ref": "indicator--2425d424-5c95-473c-adb3-ed6cf3ac6eff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d209a444-c304-4574-8403-909484126073", "sighting_of_ref": "indicator--f274565d-4afa-4c01-8bb1-96eb30f66ecd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e199f16c-a8cd-471f-a6b5-4320b02a0b89", "sighting_of_ref": "indicator--f274565d-4afa-4c01-8bb1-96eb30f66ecd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6926fac-0cc9-42bd-a1ba-ca13e7c26bb1", "sighting_of_ref": "indicator--f274565d-4afa-4c01-8bb1-96eb30f66ecd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113bbdf9-666d-4133-b13b-47660f6311be", "sighting_of_ref": "indicator--309542d5-8368-437d-9823-42cfa59c55db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c52a75-34f0-4666-8466-658fa760e1c5", "sighting_of_ref": "indicator--65e5a0c2-3edf-4629-a363-0579f3ace260", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8deaae-2c77-4f3a-9b8d-3785590c76a3", "sighting_of_ref": "indicator--65e5a0c2-3edf-4629-a363-0579f3ace260", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eb18cc-234d-4906-8c57-e3c746d19f21", "sighting_of_ref": "indicator--65e5a0c2-3edf-4629-a363-0579f3ace260", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952b0e8d-475b-470e-8b1b-fd93c37cae46", "sighting_of_ref": "indicator--50c0d9d7-b1ea-433f-bff1-665f2b18a438", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f6c725-7166-4869-b5b2-aa6bb8b17b99", "sighting_of_ref": "indicator--50c0d9d7-b1ea-433f-bff1-665f2b18a438", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2de3ce2-d74f-4f5a-8ee8-1afa9ce2a915", "sighting_of_ref": "indicator--50c0d9d7-b1ea-433f-bff1-665f2b18a438", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9393b1f4-e063-442c-be61-abace89eac98", "sighting_of_ref": "indicator--80109195-85ca-40f0-b4f2-8fee08a147ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8325d8e2-eea2-444e-8cf0-7f84ead1fa66", "sighting_of_ref": "indicator--80109195-85ca-40f0-b4f2-8fee08a147ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120e6f3f-845e-46cb-b57b-3e3d59a6292f", "sighting_of_ref": "indicator--80109195-85ca-40f0-b4f2-8fee08a147ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3921c5e5-4363-41eb-b57d-261c5d099836", "sighting_of_ref": "indicator--3fc3da22-4b71-4827-9649-c909fe0382bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08c2571-4af1-419b-bbb6-988d7b3d259c", "sighting_of_ref": "indicator--3fc3da22-4b71-4827-9649-c909fe0382bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c6fea-a943-459f-a308-b603668a7e35", "sighting_of_ref": "indicator--3fc3da22-4b71-4827-9649-c909fe0382bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64105381-6106-43b0-b968-61fd6f2babef", "sighting_of_ref": "indicator--8d567449-534d-437f-817c-23b3decfe96e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2f4bc9-9179-49cb-acf6-956041bf3eba", "sighting_of_ref": "indicator--8d567449-534d-437f-817c-23b3decfe96e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ca5f46-24c6-40ab-93ef-6faa0824faca", "sighting_of_ref": "indicator--8d567449-534d-437f-817c-23b3decfe96e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6b9238-b0e5-4b02-aff8-24fc9dbfa250", "sighting_of_ref": "indicator--6ffa37ba-03bc-4fe5-8ad7-83cd8edf5092", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd416444-efd9-4989-ab8d-555b59106687", "sighting_of_ref": "indicator--6ffa37ba-03bc-4fe5-8ad7-83cd8edf5092", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e194b2ff-94f9-4592-9cde-d59fb7ae5c0f", "sighting_of_ref": "indicator--6ffa37ba-03bc-4fe5-8ad7-83cd8edf5092", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddcff1a-2725-4566-9aac-cbe44d277312", "sighting_of_ref": "indicator--4ce59620-16e4-452f-ab14-80b1c6602531", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d740941e-dcc9-4521-9275-750e5fd27539", "sighting_of_ref": "indicator--4ce59620-16e4-452f-ab14-80b1c6602531", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b3dfd9-1564-4e05-b65c-2f5c86159444", "sighting_of_ref": "indicator--4ce59620-16e4-452f-ab14-80b1c6602531", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30826261-a6e4-40e7-82ae-cbde626782f3", "sighting_of_ref": "indicator--800ce1ec-9d73-4a67-b193-02217edd35b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf50535-38ef-458a-a20a-a44103fc8ef5", "sighting_of_ref": "indicator--800ce1ec-9d73-4a67-b193-02217edd35b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20a6a82-18e9-40be-ab65-6eb3c1ae0709", "sighting_of_ref": "indicator--800ce1ec-9d73-4a67-b193-02217edd35b1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155193a-0c84-4c55-aa9d-48aa8afa5f40", "sighting_of_ref": "indicator--7f7baa54-a4c4-4d9a-9694-0bbb30bae91a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d01ec2-4d57-4a10-b8f6-697da5d02c91", "sighting_of_ref": "indicator--7f7baa54-a4c4-4d9a-9694-0bbb30bae91a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f322fed-9998-42d8-89b4-91887c36a7ef", "sighting_of_ref": "indicator--b0b952a1-c9d5-46a4-9e64-619432e98a75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e4cfb4-7715-4a5c-a9fe-e777aba666fe", "sighting_of_ref": "indicator--b4379c14-70c4-4436-ba1b-fdc80a069603", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc249d4-d718-4996-aaba-4b751bba5b00", "sighting_of_ref": "indicator--63561a13-4377-4a8a-9868-af45b161e84a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b70807-495c-4753-8219-474919db920d", "sighting_of_ref": "indicator--63561a13-4377-4a8a-9868-af45b161e84a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac93bd2e-9d01-4314-8ec4-c41f4ce95001", "sighting_of_ref": "indicator--63561a13-4377-4a8a-9868-af45b161e84a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23d64c9-e761-43c9-98bf-de3474b0e52d", "sighting_of_ref": "indicator--7b3a2edf-b2b4-481c-a951-b0c4f78e5c63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c7cb6f-18be-4eea-af0f-e6ed6cefbae0", "sighting_of_ref": "indicator--7b3a2edf-b2b4-481c-a951-b0c4f78e5c63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1d67bc-dd53-4369-b2c6-2696bd590d10", "sighting_of_ref": "indicator--bb0fe063-645f-4fa4-8ba0-b3f18402f68f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4622a220-f76b-4cba-a8df-4ae25b53ca67", "sighting_of_ref": "indicator--f7ba6499-c813-43a4-96ee-2666681b0089", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286df56f-9d4f-4426-ad61-6dfb59a82472", "sighting_of_ref": "indicator--f7ba6499-c813-43a4-96ee-2666681b0089", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee606f0e-400c-4e1d-ad4a-7874fcee7533", "sighting_of_ref": "indicator--f7ba6499-c813-43a4-96ee-2666681b0089", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1601d4b-f267-4b5b-bd47-3597926dd006", "sighting_of_ref": "indicator--f2cde630-3bfc-47de-bd7d-5f4c67432f5e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccbc225-c806-4d7d-9803-4e42ffc42f8c", "sighting_of_ref": "indicator--6c6b408e-ab27-4e6f-9292-5fb7cb81cb18", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc96238-7793-474c-a985-7f7a93175713", "sighting_of_ref": "indicator--6787025d-5a26-45cb-9e07-7acdf2bab3a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a2ad81-96be-4c3e-a576-4a4012329e29", "sighting_of_ref": "indicator--a4517887-b7ea-4c72-a777-6809177027b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba03eb5b-0be2-400f-9fb0-e365921b54b0", "sighting_of_ref": "indicator--a4517887-b7ea-4c72-a777-6809177027b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eebc57a-2f80-4877-ace5-565884101458", "sighting_of_ref": "indicator--a4517887-b7ea-4c72-a777-6809177027b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e87dbdb-ee43-4204-904a-832e0247f249", "sighting_of_ref": "indicator--c0ef8723-d139-4d05-bf3e-959534f7d82f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f681b8-1462-444e-afc9-f8a33a4e619e", "sighting_of_ref": "indicator--c0ef8723-d139-4d05-bf3e-959534f7d82f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ef37f2-84ad-4265-9d63-eb67b8c53c34", "sighting_of_ref": "indicator--85a2ab96-9f0b-402e-827c-189ee2a5e21e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f684c2b-3832-4637-b08e-f07dabf331db", "sighting_of_ref": "indicator--85a2ab96-9f0b-402e-827c-189ee2a5e21e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2b9901-91c0-4f15-9bea-c2831b4103e3", "sighting_of_ref": "indicator--95efda2c-3ce9-4260-be86-a56a05fea643", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7fceba-b892-41b2-9da9-d6d0c01d8f12", "sighting_of_ref": "indicator--8042ab44-60c5-4abc-a51a-5ed3044351f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0bddda-4808-4708-a852-3e24246aea15", "sighting_of_ref": "indicator--8042ab44-60c5-4abc-a51a-5ed3044351f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b72e6e-191a-4e69-a3b1-bcbfeb231214", "sighting_of_ref": "indicator--8042ab44-60c5-4abc-a51a-5ed3044351f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648eaf3b-ea21-4461-b43d-fcb9332239fd", "sighting_of_ref": "indicator--d525e93a-4d52-4827-b44c-51ebcbdd1d23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0fd03f-059c-4b45-9e63-6609995cd2b9", "sighting_of_ref": "indicator--d525e93a-4d52-4827-b44c-51ebcbdd1d23", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc69cfa6-0874-4d3a-bb97-4e82dc1507f6", "sighting_of_ref": "indicator--1d03f842-4b2f-4f0c-a542-ad5fb5e78a99", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3eb5fb-2a80-4622-81a3-bd4f6ddc1dfb", "sighting_of_ref": "indicator--9bf664ca-8a37-4e13-bdd4-32ab56830004", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1734ffc0-4760-44a3-8625-bcc269d5b13d", "sighting_of_ref": "indicator--9bf664ca-8a37-4e13-bdd4-32ab56830004", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8193dc6b-809d-475b-b3e2-128aae3ad1ee", "sighting_of_ref": "indicator--9bf664ca-8a37-4e13-bdd4-32ab56830004", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db2954a-628a-4995-8e3d-a3e3789c121a", "sighting_of_ref": "indicator--ecacd2e2-103a-4dc6-ba13-ca2135064009", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9213082-29d4-440d-b5b9-e60e54604828", "sighting_of_ref": "indicator--ecacd2e2-103a-4dc6-ba13-ca2135064009", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d629cf-c8ce-4b46-b20e-6205dd3c0597", "sighting_of_ref": "indicator--673466d7-962c-456f-8336-5cfab2fd9038", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca7103-a618-45a6-bf0d-75ee9a34a56f", "sighting_of_ref": "indicator--b7201129-d00a-4ec2-966a-35db58f773cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201639d5-fb79-4f6c-9960-065d877c0ae2", "sighting_of_ref": "indicator--b7201129-d00a-4ec2-966a-35db58f773cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efbbe12-deef-4c91-953b-0d77a8410ca2", "sighting_of_ref": "indicator--88b58af9-ec93-4a3e-a748-85b27fed88e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c252331c-31ab-4b8b-984e-e0d781c66e19", "sighting_of_ref": "indicator--4505c347-705c-4a9e-b114-6a5b1f3e49fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f70bcc-8afa-40ad-8634-992deb92d4c1", "sighting_of_ref": "indicator--9d9f77ed-5a1c-4a7f-96ed-6ee84de7e9b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a3d773-ed8c-4e4c-b379-717cdb78163a", "sighting_of_ref": "indicator--9d9f77ed-5a1c-4a7f-96ed-6ee84de7e9b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3952162-5df1-4124-b811-36c89e29cd56", "sighting_of_ref": "indicator--9d9f77ed-5a1c-4a7f-96ed-6ee84de7e9b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce10ea7-d5e8-47ca-a7e8-fe84d3475173", "sighting_of_ref": "indicator--27d2e0e0-556d-4a04-be90-f948e5e48e1a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08918636-e9fe-4762-8cd1-64328bba7a99", "sighting_of_ref": "indicator--27d2e0e0-556d-4a04-be90-f948e5e48e1a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c81d9ba-88db-448d-9177-561a34ca5d17", "sighting_of_ref": "indicator--27d2e0e0-556d-4a04-be90-f948e5e48e1a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d6797f-9c1e-4147-845a-b9dcb2a9c24f", "sighting_of_ref": "indicator--08fb028e-1018-4fce-9871-586eb2284be9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725bcfa-b6fb-44e7-b945-a1d7d6a31690", "sighting_of_ref": "indicator--3481b7ec-8896-411f-b6ec-438411ee2655", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ed59c5-754c-466e-bd02-fd0c54e31fb3", "sighting_of_ref": "indicator--3481b7ec-8896-411f-b6ec-438411ee2655", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05be2ef-55cb-44be-ba31-3ac8e3716d14", "sighting_of_ref": "indicator--3481b7ec-8896-411f-b6ec-438411ee2655", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9718b9-9e01-41b1-8302-b2beb6c6400e", "sighting_of_ref": "indicator--78224973-5c43-444f-aa20-5493f3e873b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a599cb4a-9531-4add-a265-be5de116700e", "sighting_of_ref": "indicator--78224973-5c43-444f-aa20-5493f3e873b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179ab951-bbad-475d-9eed-d59af3e5fc49", "sighting_of_ref": "indicator--78224973-5c43-444f-aa20-5493f3e873b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bad444-172a-4cab-88da-8487dbb13acd", "sighting_of_ref": "indicator--9d6ede63-0d17-4db0-b59d-088a04b474e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8eeb46-6c21-48f6-aa4a-904601906d19", "sighting_of_ref": "indicator--9d6ede63-0d17-4db0-b59d-088a04b474e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672db472-d3fd-459c-8b5c-d9ab9f121509", "sighting_of_ref": "indicator--9d6ede63-0d17-4db0-b59d-088a04b474e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3646a298-7a41-4c46-a6da-1ef71b4f1e4c", "sighting_of_ref": "indicator--764401be-454a-4c92-b292-b7ec601b04b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054d4d9f-740e-4b11-9c04-c99d1d8a263b", "sighting_of_ref": "indicator--ee7f35b4-61d4-4078-b008-e011f99d1fb4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c9bc1c-1c0f-4ad2-9901-21744268f200", "sighting_of_ref": "indicator--e2c4ad7f-4c1d-45f6-b10a-bacb330e66cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819b9584-971b-44df-880c-aba4badb7d7c", "sighting_of_ref": "indicator--e2c4ad7f-4c1d-45f6-b10a-bacb330e66cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dfa191-3e04-4bb2-be68-01f839764a5b", "sighting_of_ref": "indicator--e2c4ad7f-4c1d-45f6-b10a-bacb330e66cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825e1504-ee5b-4e09-8344-c1ff50a0e34c", "sighting_of_ref": "indicator--c027052a-6015-4ce1-bcaa-ebb5a55ea623", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf404c88-1891-4600-829a-78a71e6da332", "sighting_of_ref": "indicator--bbca9a0d-7b9a-470f-9176-6a2248c11607", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b11b786-8e93-4dac-be6c-473cafe7f568", "sighting_of_ref": "indicator--bbca9a0d-7b9a-470f-9176-6a2248c11607", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5586802-4cd8-463d-81cb-8492cfc12ae1", "sighting_of_ref": "indicator--bbca9a0d-7b9a-470f-9176-6a2248c11607", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39d5a07-4520-4f5c-8caf-cd6160d04f2d", "sighting_of_ref": "indicator--c6bf0977-bf17-4524-8b77-8eafd8f2887c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3909b1-2d21-473e-b1ad-5265c2a1fb24", "sighting_of_ref": "indicator--eaa87ceb-d42e-41bb-93cf-aea8b80d655e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e78022-6228-4a5e-bfc4-7e02061e6b20", "sighting_of_ref": "indicator--eaa87ceb-d42e-41bb-93cf-aea8b80d655e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25475d0-50fd-45fd-83ec-3d880854732d", "sighting_of_ref": "indicator--eaa87ceb-d42e-41bb-93cf-aea8b80d655e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c907bd5a-14da-41aa-ad37-d79b4c1e313b", "sighting_of_ref": "indicator--c34ba8cd-ecff-4825-b880-6309ce2218d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb85c738-ee9f-450a-93f8-df2ddd0d35fc", "sighting_of_ref": "indicator--c34ba8cd-ecff-4825-b880-6309ce2218d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97935c8e-12e2-479f-925a-b5fbddc509e5", "sighting_of_ref": "indicator--c34ba8cd-ecff-4825-b880-6309ce2218d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ad7262-a818-4572-b5d7-a7589d2defef", "sighting_of_ref": "indicator--faca4bdd-4645-42bb-8a17-36c3bdcf0533", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c7d90a-2af5-4e89-8455-a2b1a2f0f86a", "sighting_of_ref": "indicator--faca4bdd-4645-42bb-8a17-36c3bdcf0533", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a126359-c1bc-41ae-aafd-4f2083135d45", "sighting_of_ref": "indicator--faca4bdd-4645-42bb-8a17-36c3bdcf0533", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401eb4da-aced-419e-be9d-bace66c779ba", "sighting_of_ref": "indicator--4a964e0e-2e3f-402e-898d-ab17f1883094", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f444f20f-1a3f-4139-95b6-90677bcd994d", "sighting_of_ref": "indicator--4a964e0e-2e3f-402e-898d-ab17f1883094", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b74f57-62c6-43f2-be8c-72950a24a70b", "sighting_of_ref": "indicator--4a964e0e-2e3f-402e-898d-ab17f1883094", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c5ff28-64ab-4666-8925-610f53e562d0", "sighting_of_ref": "indicator--4f85666e-cacf-4a1a-84c6-1811458f45e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803be235-f40f-4a06-bbb1-61c06131e2a1", "sighting_of_ref": "indicator--f2651248-32e2-4f59-b8ec-22e9f88d6c77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5863877c-1c15-431e-b65b-5c23f0407163", "sighting_of_ref": "indicator--f2651248-32e2-4f59-b8ec-22e9f88d6c77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f489c62-d29b-43c2-a168-77897f7b1ad3", "sighting_of_ref": "indicator--f2651248-32e2-4f59-b8ec-22e9f88d6c77", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffcc8ec-7db1-4f6e-bfbe-5c94ddc64c8b", "sighting_of_ref": "indicator--d736319f-cee4-49e9-b4f9-1e20b7b2b516", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ecc4a3-923f-4338-b779-e1bfce201513", "sighting_of_ref": "indicator--d736319f-cee4-49e9-b4f9-1e20b7b2b516", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4645f1a-07ea-4bfd-873d-64aaf247c9c9", "sighting_of_ref": "indicator--d736319f-cee4-49e9-b4f9-1e20b7b2b516", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f32b27d-dbb2-46b7-bf02-20820d132506", "sighting_of_ref": "indicator--cfbccefd-b05f-45ac-a53c-0c618a64ea1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a583557c-10e1-4f09-a406-54baad6c7270", "sighting_of_ref": "indicator--95bf75d7-d79b-4688-80f8-3db04e45b1af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27892afa-691b-44ee-b883-ad65a3a8f19c", "sighting_of_ref": "indicator--92b2487b-f778-4d88-8afa-7f0ce99ce81e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc26d1c-ba52-460d-bf28-160e47243cb1", "sighting_of_ref": "indicator--92b2487b-f778-4d88-8afa-7f0ce99ce81e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133193e8-b603-4d4d-b2b4-03f5da7ed337", "sighting_of_ref": "indicator--92b2487b-f778-4d88-8afa-7f0ce99ce81e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d02e52b-3f5e-4437-883b-4ceb32686cc3", "sighting_of_ref": "indicator--faf3043a-66c4-456b-adb7-922bb279d632", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dae5cc-b493-411b-8cc5-b523d977415f", "sighting_of_ref": "indicator--bb411c11-d5bf-4585-a384-e8dfa6046718", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03fbb52-f714-43d0-b7cc-5fb6391c67c8", "sighting_of_ref": "indicator--bb411c11-d5bf-4585-a384-e8dfa6046718", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b2ef3a-c364-435d-a631-e04f36f7556d", "sighting_of_ref": "indicator--7deedcbe-b627-4a91-a135-c55fe218dbcf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cae73d-008b-4f55-8bf5-388546144234", "sighting_of_ref": "indicator--4492b7f6-1d9b-4ea4-a842-4f8fb364cae5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d1ebdd-408c-4117-8ae7-774c7d7a7e31", "sighting_of_ref": "indicator--4492b7f6-1d9b-4ea4-a842-4f8fb364cae5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce7912d-464b-490d-b446-8f593a361f43", "sighting_of_ref": "indicator--4492b7f6-1d9b-4ea4-a842-4f8fb364cae5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9484d3e8-b047-405a-a589-2ed217f69b37", "sighting_of_ref": "indicator--8289b825-5673-4a53-ab81-926e539ebf1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41241beb-efab-49e9-a52c-2f99d2bc1b25", "sighting_of_ref": "indicator--8289b825-5673-4a53-ab81-926e539ebf1b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05317bd7-a6a5-42d8-86c2-befc6fa0df50", "sighting_of_ref": "indicator--8289b825-5673-4a53-ab81-926e539ebf1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85045ec7-8a7c-448f-9fb3-799d8b97ea61", "sighting_of_ref": "indicator--fee3dc75-bdae-4686-8aa3-49c1427dff17", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00e522f-ff8d-41fb-ae2f-34664098f7c8", "sighting_of_ref": "indicator--fee3dc75-bdae-4686-8aa3-49c1427dff17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcb1a94-c02e-428f-a531-8ce9111892d5", "sighting_of_ref": "indicator--5dfd0891-c42c-42e5-b0b3-6e3a9df157e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd739d-4197-4568-a9ce-d22be727fe26", "sighting_of_ref": "indicator--5dfd0891-c42c-42e5-b0b3-6e3a9df157e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8256cd23-32e8-4dde-99f6-1b05982c7337", "sighting_of_ref": "indicator--dd099ff3-6b3d-49ed-8dff-11388ce1b375", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd5759d-6e73-4482-a0dd-0b4cff9283f1", "sighting_of_ref": "indicator--dd099ff3-6b3d-49ed-8dff-11388ce1b375", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a801aa8a-bacf-4836-a90e-f42109fcb60a", "sighting_of_ref": "indicator--89f627fa-f94d-4177-a8e5-f3954699a0a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180ce4cb-3511-4783-8824-7c230d98b2fe", "sighting_of_ref": "indicator--1d9744bf-4b2d-4199-80c5-d4662c80947a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d1c7a9-f280-46a5-ab2d-eb6a0d7a8c55", "sighting_of_ref": "indicator--e24ec6ae-5766-4132-b7f9-5863a44f13fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d4f801-4b1f-4076-afab-5059ac6c66f5", "sighting_of_ref": "indicator--d3ab1951-571e-46d9-ab4d-ad2eef60a0c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa7a0c-84aa-40bd-b815-015e755f0116", "sighting_of_ref": "indicator--d3ab1951-571e-46d9-ab4d-ad2eef60a0c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8ae8d6-833a-4dee-823a-ede41db24a0a", "sighting_of_ref": "indicator--d3ab1951-571e-46d9-ab4d-ad2eef60a0c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb14b417-6834-4193-ad93-407a023d955a", "sighting_of_ref": "indicator--398d77c0-a412-4f59-9152-92886c64ff9d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd00966b-9193-4e94-8543-d7f65eb05784", "sighting_of_ref": "indicator--e40d7d6b-abcd-4644-a9ea-4a1ef95f1fdc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e085af-a141-4465-b579-223906f81ab5", "sighting_of_ref": "indicator--e40d7d6b-abcd-4644-a9ea-4a1ef95f1fdc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b314bb-3665-45e5-befa-04c195fef80e", "sighting_of_ref": "indicator--cf9a2bda-4594-445e-a16f-6d3fc4d974ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac95dc2b-4634-4409-8f16-093fbef74589", "sighting_of_ref": "indicator--cf9a2bda-4594-445e-a16f-6d3fc4d974ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd867003-81cc-4e07-b049-aa3cde2d6ec2", "sighting_of_ref": "indicator--8471760f-cf81-4a34-8035-6213d48370f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41feff0-12f8-4d0e-baf6-8eeb6be8279d", "sighting_of_ref": "indicator--63288332-117a-4635-8881-53e6062a0e4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fa9ddb-04e4-48ad-b5a7-31956226c49d", "sighting_of_ref": "indicator--ee76782e-e2d8-4b0b-93d4-76275d8e9516", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d85a49-eb2e-4b15-a195-cb28db963d48", "sighting_of_ref": "indicator--ee76782e-e2d8-4b0b-93d4-76275d8e9516", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f6168-e1ec-4595-ab8b-ae7739f768bc", "sighting_of_ref": "indicator--ee76782e-e2d8-4b0b-93d4-76275d8e9516", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb697c9f-3c9d-4fa8-bba5-1c3ca1f80745", "sighting_of_ref": "indicator--65c8be44-3b93-46df-9cea-6bc15331cedb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851fef84-6b44-48db-b26c-12a170517f48", "sighting_of_ref": "indicator--0fbd0b2a-5d3c-4f07-91ae-585425a69d1f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e464c49-5a4d-4d8e-8535-6d00a157503a", "sighting_of_ref": "indicator--8fa0af6e-afec-4ce3-8485-45d51c1b43d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1074d1fc-599e-472b-8299-19de5904b7fd", "sighting_of_ref": "indicator--90ea7b05-8e6c-472d-85e8-9143e9680f80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c06068-05f0-484b-b8d2-b4c34f3614dd", "sighting_of_ref": "indicator--d1dcc444-d709-47a8-a5a7-d1f03a328fdb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038566b9-a069-408f-a7bd-80264596a943", "sighting_of_ref": "indicator--62f48818-2db9-449e-a864-60691d73d9c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5d29f9-b25c-406a-95b6-8bac85ed2e62", "sighting_of_ref": "indicator--62f48818-2db9-449e-a864-60691d73d9c3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aba55db-35f4-4c24-b198-2c29789b2a63", "sighting_of_ref": "indicator--dc6af3fe-49f4-4766-8e25-bf35ae625f67", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2859fc4-27db-4e27-9208-66a076cc1342", "sighting_of_ref": "indicator--dc6af3fe-49f4-4766-8e25-bf35ae625f67", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32354ee3-abb9-4dd9-81bd-de7ea46bc54c", "sighting_of_ref": "indicator--dc6af3fe-49f4-4766-8e25-bf35ae625f67", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04da5888-a455-40f4-be37-66740ae2a68c", "sighting_of_ref": "indicator--c4e90e40-8fa4-4aae-abca-55bf10454e56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f6ca43-2e39-4d20-b58a-d538b9f49e9f", "sighting_of_ref": "indicator--93ed349d-e837-43c3-b644-d59aaff62338", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f52f94-ceb0-4e42-a1c0-a0cb5e9ab77f", "sighting_of_ref": "indicator--93ed349d-e837-43c3-b644-d59aaff62338", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a6156c-c5fc-44dd-9ebb-b13e7fb5f8c7", "sighting_of_ref": "indicator--11f7f2c7-9fe8-45ac-9d9b-d4db15098279", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee67f8f-6489-487d-abf0-64678bfdcc98", "sighting_of_ref": "indicator--11f7f2c7-9fe8-45ac-9d9b-d4db15098279", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaafe28-2c42-4c1e-9487-785bd797f09c", "sighting_of_ref": "indicator--e3ed6118-29fb-4d20-b8f1-f63da183e418", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9138a987-7a11-4a8b-9976-2aeb22b5f564", "sighting_of_ref": "indicator--f0c7e7d2-641e-48ac-826a-5cd01358ae9b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5208484a-9dde-48ab-b52b-58b7ded314d4", "sighting_of_ref": "indicator--46080e61-b23d-4f2c-a956-da9c6fc5461a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b15284-e03f-4feb-9cb9-5ebe04b50b24", "sighting_of_ref": "indicator--480e1760-f604-4296-b78e-55fb4a40eb27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ae853b-55e3-4fec-a1fb-a7fcb5d48abf", "sighting_of_ref": "indicator--480e1760-f604-4296-b78e-55fb4a40eb27", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46205e4a-8532-46d5-be64-f371e2c08bc9", "sighting_of_ref": "indicator--480e1760-f604-4296-b78e-55fb4a40eb27", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4ae5f9-1732-4afe-9532-7dd77af255bd", "sighting_of_ref": "indicator--dc2f532b-5dfb-4259-be68-7d267ddfc149", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86df6d7-2c4e-4469-b8e9-9a65fe733e35", "sighting_of_ref": "indicator--dc2f532b-5dfb-4259-be68-7d267ddfc149", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca2e11d-cf14-4c6b-9994-2f4f2f890cce", "sighting_of_ref": "indicator--dc2f532b-5dfb-4259-be68-7d267ddfc149", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96edbc81-f4bd-4144-bda4-1252366cc536", "sighting_of_ref": "indicator--8488bca6-aa15-447e-93ac-3562f9f44113", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4a2078-74f5-4d62-b669-3dcd65b4f2cc", "sighting_of_ref": "indicator--29e15b48-38d9-45d3-91a6-9fe9b0450f45", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebab6ef8-7f02-4662-92e0-96318f6c3590", "sighting_of_ref": "indicator--736ac0bd-607d-4d34-99d3-5b1d6dcf0e50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b49e98-eaa0-4b4c-b799-b58086bcc2ff", "sighting_of_ref": "indicator--736ac0bd-607d-4d34-99d3-5b1d6dcf0e50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89491331-86e4-4aaf-a14a-4dd98f7e16ea", "sighting_of_ref": "indicator--736ac0bd-607d-4d34-99d3-5b1d6dcf0e50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84326b38-852c-4518-b677-7f4d24e61eaf", "sighting_of_ref": "indicator--7e9e88b8-04a4-428d-a674-d20098242311", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d203b6-283e-4218-bcbe-957c0d749eb3", "sighting_of_ref": "indicator--c23ee024-0c00-4685-b8dd-6de38d05a395", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50e21a8-59d9-4cf7-b756-28b1ae784816", "sighting_of_ref": "indicator--cd6e523d-fbef-4206-9dcb-9f3e8e3859af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1a4727-3eb2-4657-a7de-5bf0ce080950", "sighting_of_ref": "indicator--38f32e7f-a155-48a7-afcc-b95a931f95c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab893373-8225-4acd-931a-969044c39172", "sighting_of_ref": "indicator--c9e22037-756c-4cda-af6e-117e10f89402", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf867558-f8d0-42fc-9065-8e4d26215dda", "sighting_of_ref": "indicator--6ea32aa9-90e2-4998-9198-8f7de7389dc4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d75ef0b-beb2-4d79-9f6e-5b0382e0d3ab", "sighting_of_ref": "indicator--d1837fac-0486-491e-8fd2-5e6376171783", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35680b00-ab76-43b0-9dbf-859950a356ba", "sighting_of_ref": "indicator--5517d3da-5b28-4fbb-9090-8797369ab973", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b0add0-2888-4a15-a834-5e6ba7d2828a", "sighting_of_ref": "indicator--00df600b-04a4-4505-978b-468880a9e626", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1062cdea-8180-4ed9-b329-968583fb7d1e", "sighting_of_ref": "indicator--a5f33fb1-c15b-43ee-ba64-f34de240e443", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c1ac60-de79-4684-9a38-d2f1224f60f5", "sighting_of_ref": "indicator--8511f939-25cc-42ef-a1b7-408980c6a609", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e83e00-e66f-419c-876f-0fb834171d5f", "sighting_of_ref": "indicator--984a4b5c-a4a4-4ac1-8af8-1cf27c5ea686", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a1ab6f-f299-41b3-a07c-b8b9790de96a", "sighting_of_ref": "indicator--e35cdb67-98cc-4c30-9528-e846224b5d3d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ededa61e-1402-4615-a51c-1158174bf62a", "sighting_of_ref": "indicator--bec724c7-0e2d-4b9f-935c-53628e105361", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211a1cb0-8c64-4799-9d57-73f47882e1f7", "sighting_of_ref": "indicator--75de5506-33c0-4f11-9c63-1c43d33ac180", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3699891c-3a62-4844-a4e2-34333be5afce", "sighting_of_ref": "indicator--206d17b5-37b5-460a-9887-6be87d85d920", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a49047a-9708-404d-91af-6f0c0d874fbd", "sighting_of_ref": "indicator--b867f4dd-a8a0-4190-b5d3-3cb9c0a67404", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c137e8da-5df6-479f-b0a6-631e76f78d21", "sighting_of_ref": "indicator--a2aacf2b-283b-445f-a387-ab335cc43b05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ae6537-d627-4b21-909c-8a072f7653e0", "sighting_of_ref": "indicator--3812bf36-c55f-4a1c-bf5e-d25fbcecc13a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1892d6-8c27-4b04-908b-d7239df1b175", "sighting_of_ref": "indicator--f93602b8-7bd0-47d5-af05-3584c769211a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6784e7b1-83fc-41c3-98cc-33373991545a", "sighting_of_ref": "indicator--fb64c2f8-e43f-4855-b105-0ff6d6010239", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3770132a-4b6a-4314-b0e1-28c23ec585fd", "sighting_of_ref": "indicator--a2d5421a-4fe3-45fd-8088-546e023f7c39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd01ded-fb0e-4de2-a6d3-1602785c5c61", "sighting_of_ref": "indicator--77c37af2-3012-41de-84d2-a7787ef20140", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c355be3d-a121-473e-b56f-65f0a0e64171", "sighting_of_ref": "indicator--b4ced47e-0d18-404e-949e-72aed6a46588", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2c4eb1-f4c1-4dfa-9fd6-2d6d80eba0ee", "sighting_of_ref": "indicator--3ce6fdbc-1d55-4be6-a2c4-1de93e096ebb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d0cbe3-d9d1-4bbf-adf4-a94c7ba4a3ed", "sighting_of_ref": "indicator--1b7adb04-7aae-4478-9ca8-e5b01c8e9cf0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c543fca0-787c-4518-ab69-87bb4878b49f", "sighting_of_ref": "indicator--79f19012-92c7-4cfd-9b38-461cf6e34a8f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed72d4f3-07d6-4bdb-9da3-8c7fa77e48c0", "sighting_of_ref": "indicator--05dedb3a-5b61-43d8-9b06-abb770e8eeec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4ddfa2-5c59-476e-8b1b-394beb0b3c9f", "sighting_of_ref": "indicator--2a43a58c-c15f-4664-91ec-d7ee707aa280", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1841b853-1499-4116-a07c-f3a00e342707", "sighting_of_ref": "indicator--4f15d962-d2c7-4151-9333-39167bbb9ec2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc7af2d-326e-447e-b2b5-57fb4079e8d1", "sighting_of_ref": "indicator--b264d63b-4bd3-46c6-8447-cdbca8cfbed1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d458a19b-0ed6-4bf2-82ec-9306f985f33d", "sighting_of_ref": "indicator--07c0f05a-c468-4449-8fd3-69d8995482e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8dfa3f-d7d4-4321-a665-01132e114faf", "sighting_of_ref": "indicator--0e19caf3-f3a2-4e21-8dad-952786a14184", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b627ba7-c924-4a7d-98f7-d928485a836d", "sighting_of_ref": "indicator--66956b9d-b466-4ab7-9f58-00cbad1bceb4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac30a1-c768-4968-97e7-15bf0728180a", "sighting_of_ref": "indicator--f46f0843-a6e7-4888-914e-c9a3828af2b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8118ec-67a7-4e4b-8eeb-c81a08ee4c3d", "sighting_of_ref": "indicator--9c4362b0-3687-40bd-a489-d244a322bc90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f87907-e033-4d28-9e41-e8ac31817257", "sighting_of_ref": "indicator--dff2719d-ea41-424f-99df-7fc9755ab8b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bb6654-208f-4d13-b53e-b8f895003e79", "sighting_of_ref": "indicator--a6039bf6-ba59-4896-afd9-ecaefd7c4ca2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813660c6-ca37-48a0-bee6-d13eb0b5a8b7", "sighting_of_ref": "indicator--0cdc4e4d-04e2-45d8-b98f-9ca08d666217", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dede7e-abad-45e9-a345-1ab1f7993d09", "sighting_of_ref": "indicator--8d13c809-627f-45ed-adce-69d7af58448d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941825a3-a1d7-42f4-9f54-20dd8d4f8117", "sighting_of_ref": "indicator--1e968a17-8258-4dbc-ace9-c8b031adb7cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15ebab1-e849-4703-be19-a589328e7b5b", "sighting_of_ref": "indicator--46569fb0-66bc-4695-bb73-cc47d56efb7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f52b2df-b0ef-4b83-91d0-2c794a93111c", "sighting_of_ref": "indicator--639f3636-1950-45cb-9fa0-d268704d48d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9d8295-f8a6-4413-b7da-207dbcf80b01", "sighting_of_ref": "indicator--639f3636-1950-45cb-9fa0-d268704d48d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6089b9-101c-4f02-9c4c-4043d2ba7fe0", "sighting_of_ref": "indicator--639f3636-1950-45cb-9fa0-d268704d48d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e312c3-4d9a-45c9-8ce5-97df517f817c", "sighting_of_ref": "indicator--3509f69f-b174-4d16-97fb-6cd62a78406b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e9daa2-8650-4006-a590-97b9f8baa5cd", "sighting_of_ref": "indicator--f06610ff-cc01-40e7-9792-550b18c40af1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4256217-523d-45e5-872b-b05d6651b6c5", "sighting_of_ref": "indicator--f06610ff-cc01-40e7-9792-550b18c40af1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb47df4-c18e-4281-8038-a217343b9d83", "sighting_of_ref": "indicator--f06610ff-cc01-40e7-9792-550b18c40af1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285a97d9-0c84-49f2-8fed-66be7de8eb78", "sighting_of_ref": "indicator--ca10d9ae-96ee-44e8-ae5f-0ee1cb462a03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516498a0-3926-45d6-ba43-0ba56b892637", "sighting_of_ref": "indicator--5fa37228-18e1-4565-ac1f-492c6cff6e12", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a841e7-5d56-4079-b646-d04452bb5bba", "sighting_of_ref": "indicator--f9ca19b0-55e9-49f8-893d-cc570a561930", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdc8fe8-da88-465a-bfbb-01c6fba9aa4b", "sighting_of_ref": "indicator--f9ca19b0-55e9-49f8-893d-cc570a561930", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfb3ef9-c650-4fa2-9976-08c9d7c1b52d", "sighting_of_ref": "indicator--396898e9-4592-402c-8b30-067d1af620cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be46709f-e431-458a-ac89-032a46e6c484", "sighting_of_ref": "indicator--396898e9-4592-402c-8b30-067d1af620cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b168bd86-e9f1-4778-807a-c0de0b296aac", "sighting_of_ref": "indicator--ded5a070-3264-4d41-9d0d-976283661f55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f48c1c-72dd-4556-9ffe-8232c6ee5beb", "sighting_of_ref": "indicator--6bcd4a6e-797b-4900-8c5a-c5a8d6147db0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f555b8-dd6f-4322-b927-4373b3daf340", "sighting_of_ref": "indicator--5cf5df00-7bef-4756-8b81-3ad32a9a67f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7836c367-cc63-4fa9-88f6-812aeded9ead", "sighting_of_ref": "indicator--8e0951b2-7794-43c9-bc81-2042af7c107d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87adbdd-6a35-41fc-89a0-1b5378922ae1", "sighting_of_ref": "indicator--b004b601-76cd-456e-a965-de422e111b72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6d8b2a-d48a-46ca-99bb-b2e82f2f9df8", "sighting_of_ref": "indicator--84c3bd0d-f260-46ae-bd34-c9853cb2f0a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae1f8db-adfc-489b-84b4-f5ab22ebca88", "sighting_of_ref": "indicator--031b3c3d-8108-4f81-b4ff-eef485628873", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1e23fb-efcb-4993-8e6f-5fa73eede576", "sighting_of_ref": "indicator--031b3c3d-8108-4f81-b4ff-eef485628873", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c48c8c-b060-4db7-91a2-a587c22b8c66", "sighting_of_ref": "indicator--246ada91-7a52-4e2a-86a8-4619106ca7f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb40599-de4b-4b9f-96b7-d217e1e18293", "sighting_of_ref": "indicator--246ada91-7a52-4e2a-86a8-4619106ca7f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1557c4-4f86-4d5d-8fb9-75c1caa43272", "sighting_of_ref": "indicator--f9303644-963b-472a-95f2-a8f8dfa226e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a35814-789a-47e7-8a1b-4949e1d2d6af", "sighting_of_ref": "indicator--f9303644-963b-472a-95f2-a8f8dfa226e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa769ac4-9eb8-43f4-a086-d5c78c9babbe", "sighting_of_ref": "indicator--6b573994-8d75-4f53-8480-45893e705e4b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f7ca06-b747-4d0e-92ab-5b8e9e59370a", "sighting_of_ref": "indicator--37bc64e2-a0b0-44dd-91f8-69cc71b7f480", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024fa0da-8a16-4474-9cc6-296ca6a3eccc", "sighting_of_ref": "indicator--37bc64e2-a0b0-44dd-91f8-69cc71b7f480", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50198d1-3a8f-488d-a42c-1626c62398c6", "sighting_of_ref": "indicator--2f9cd008-f9b0-46e9-b93b-80357650fedd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87380485-90f6-4499-aa16-662e0e60846d", "sighting_of_ref": "indicator--910b0e8d-1db1-4423-9de8-d0adf0df945e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b095e43-ecaa-44a2-87f9-0e4dbc9afb47", "sighting_of_ref": "indicator--55c70bd7-e5a0-473b-9ff4-db540035f65e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0984559c-d15c-497b-9e64-780bb1112e65", "sighting_of_ref": "indicator--a3ad00db-1a91-4943-a457-a981bf2bae0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b83351e-2ff7-4e24-a300-abe1702a4ae6", "sighting_of_ref": "indicator--c4d0a8d7-56aa-4908-8274-db1b1e7ebad2", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aba185e-885e-4ba1-9403-7b3cd7bcab1f", "sighting_of_ref": "indicator--82aeb092-e763-4e34-8ac6-e636df91b38b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87195aca-6508-4d41-bdad-c1b96da5d32b", "sighting_of_ref": "indicator--da94c9c8-10b8-431d-8437-97d47a832f34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b859a3-447c-43d1-b1ff-17d93965edda", "sighting_of_ref": "indicator--7859afca-cbbb-46de-9357-9b8f58ce710e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08406f3-3f70-409d-83dd-f84bdfbd9413", "sighting_of_ref": "indicator--b513a541-ca01-4b25-83ea-274b437ef9b3", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf8fd0-c3cd-4ed5-ade6-61431edc5d32", "sighting_of_ref": "indicator--7aa92dc5-5d02-4199-8fb5-c61563d134d6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65eae01-e40a-4283-8e66-2bac2dd978e7", "sighting_of_ref": "indicator--c6b18b42-bcfd-4e1d-8fd6-f319eec1ecfb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05656dd8-ac72-4057-983e-fe649e4a4846", "sighting_of_ref": "indicator--3cb0813c-bb48-4640-acc4-5facc1beec0a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd2a446-ea08-433a-af3d-621631e50562", "sighting_of_ref": "indicator--3c804cfc-0a63-47fc-a330-582425d5b635", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca195f5a-03f3-42b0-b254-937d26e64161", "sighting_of_ref": "indicator--b8fa0d18-e5d2-4925-8c0a-71e349abeaba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f073ef00-0b4e-4732-84c1-0cf9ce338fa7", "sighting_of_ref": "indicator--2c1c7d88-f18b-490a-ae43-7b1f21fd4a6c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1925b40f-d8de-4fe2-ac78-1b698fc251b5", "sighting_of_ref": "indicator--aa6d11d4-10de-4813-a9eb-fcb9ca60d75a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c6479d-414b-4c66-becf-58186f98d3cd", "sighting_of_ref": "indicator--6b36d1e1-ba05-4cdc-a371-de7938754cc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c653d5de-a5e8-42f6-b634-3b8b69a01757", "sighting_of_ref": "indicator--6b36d1e1-ba05-4cdc-a371-de7938754cc8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487fcc8d-59ab-4269-8eb1-b5773de747d7", "sighting_of_ref": "indicator--125f855a-a3d0-4e8d-b98e-e90a3c1fbccb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1f63f3-1d34-44aa-8ad9-07f93eec7aad", "sighting_of_ref": "indicator--125f855a-a3d0-4e8d-b98e-e90a3c1fbccb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24cec26-96a1-4ac2-a9dd-91b085f57643", "sighting_of_ref": "indicator--125f855a-a3d0-4e8d-b98e-e90a3c1fbccb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f524f119-fbd3-47a0-ac8c-dc6919f46d71", "sighting_of_ref": "indicator--294881da-3c21-4e45-8e12-35f426fb005d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c18872-df7b-4df1-8fd9-a57f57865b1e", "sighting_of_ref": "indicator--189dbf37-0902-4507-88e9-7d770018f7e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e2ac88-6ad5-45ed-ba90-143584fe7a7e", "sighting_of_ref": "indicator--17ee792c-60d0-474e-acef-dc04c35c0779", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdef5ff-f0de-471e-8a22-2750cb43efa9", "sighting_of_ref": "indicator--facc2278-328c-464b-897a-fbc3ffb0a911", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db50ac50-8903-4f94-80eb-e2cca2ea2c97", "sighting_of_ref": "indicator--536f1c4a-74bf-4a0f-9e02-4ea7d412255b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b309d7f-088b-46ec-8059-c20ebec0ee99", "sighting_of_ref": "indicator--536f1c4a-74bf-4a0f-9e02-4ea7d412255b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03003b19-e0e9-4c77-a91d-dc36c21dc609", "sighting_of_ref": "indicator--05d86198-aebf-4c1d-b920-06b8922465d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c83bae-1ff8-4f01-8c92-f4c5148d70a0", "sighting_of_ref": "indicator--a91b9d64-2851-47e6-aae8-94048120d565", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d916c1-3fde-4db2-8dbf-fa4537176a51", "sighting_of_ref": "indicator--a91b9d64-2851-47e6-aae8-94048120d565", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09a1bbd-d610-4758-aa77-abdcc1667794", "sighting_of_ref": "indicator--165c21f0-1a07-4b69-8d67-cc112612edb6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a9d6fd-9b93-4e48-8238-1330298f690e", "sighting_of_ref": "indicator--75d1ff2f-1df6-4398-b3e8-d66b1f235f91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8786d1fb-e73d-4731-8669-571102312bf0", "sighting_of_ref": "indicator--75d1ff2f-1df6-4398-b3e8-d66b1f235f91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7450426b-3113-4849-aef4-779f30eb87f2", "sighting_of_ref": "indicator--5a353c98-1e77-4616-92e7-7429da23d1c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3858c88d-9e84-4a4a-95ba-9e2d51957d25", "sighting_of_ref": "indicator--adfa598c-f7ae-4a89-9c90-819556ba4e16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66948faf-89c0-475e-8147-6d49ec8e01df", "sighting_of_ref": "indicator--adfa598c-f7ae-4a89-9c90-819556ba4e16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8553e440-efb3-44b6-a953-4c2eeea631d0", "sighting_of_ref": "indicator--cd2a87d6-cf81-46ab-b374-3c455ae4350a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4df5318-cb82-4e79-9ee3-c8ab51d4c27d", "sighting_of_ref": "indicator--07084dee-1816-4a3a-a1c4-7a14047e45aa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7086bf-7834-4e1e-b667-4a87a9496e07", "sighting_of_ref": "indicator--679f54be-cb9b-43fd-97d6-6136ab0df2ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f485f7bf-0174-4819-85aa-9ced103db619", "sighting_of_ref": "indicator--d6b9a80c-44c7-41ae-9533-77ba518c1485", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d2e1b0-18d2-4e4a-a448-8e4ea9988d7d", "sighting_of_ref": "indicator--d6b9a80c-44c7-41ae-9533-77ba518c1485", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e43f74-932f-4bd4-af21-e92467780e5e", "sighting_of_ref": "indicator--d6b9a80c-44c7-41ae-9533-77ba518c1485", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330e48f5-c688-4387-bfd7-542709cc06d3", "sighting_of_ref": "indicator--46a018c0-fb00-4cf9-9644-bbbcefa324f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656616a0-dd8d-42f8-ba0b-6fde803af76e", "sighting_of_ref": "indicator--46a018c0-fb00-4cf9-9644-bbbcefa324f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88126a44-7e40-4bbb-af47-327da139a4bb", "sighting_of_ref": "indicator--136ef7f6-b496-4589-91ba-666af44cf4dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ab9af6-b6ca-4dad-918e-f8c506c2f1f6", "sighting_of_ref": "indicator--0a5bf2db-fb8b-4f75-ae5c-aee74c56b0e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca6c808-77ff-46c8-b22b-ce2b3173c4fa", "sighting_of_ref": "indicator--0a5bf2db-fb8b-4f75-ae5c-aee74c56b0e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb294f81-6c29-48dd-9706-0aa9c3d52495", "sighting_of_ref": "indicator--8bf16778-fae6-41d0-9b98-a5968004792c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366998c7-20bb-481a-862f-a6bd4590629b", "sighting_of_ref": "indicator--8bf16778-fae6-41d0-9b98-a5968004792c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f728280-8e8e-4953-9093-90883ac7069d", "sighting_of_ref": "indicator--8d72bd75-8510-4272-88b2-263a8a513a5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7afbc4-1163-4359-b38e-ee3842d1afe5", "sighting_of_ref": "indicator--b38197e9-f8c0-43a4-bdf4-1456966edcb0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcabb949-143c-4f50-93e0-12ab3371e791", "sighting_of_ref": "indicator--e50afd90-505e-481d-8d72-d6c8d55c648d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e999dab-a729-440c-a365-3cdc4300a0aa", "sighting_of_ref": "indicator--e50afd90-505e-481d-8d72-d6c8d55c648d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590d8a5e-e262-4601-b141-0778f5935465", "sighting_of_ref": "indicator--e50afd90-505e-481d-8d72-d6c8d55c648d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab38cf3-298a-419e-b241-3bd8335ecf29", "sighting_of_ref": "indicator--245cbd3e-04c6-4704-ae8a-2866342e215e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14782f2-e5e2-4213-9a55-2552b3df6566", "sighting_of_ref": "indicator--8e8d94b8-4a5b-4471-a5b8-5ed0436048a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1225246-de41-4f5c-81ac-11d465d9ed4e", "sighting_of_ref": "indicator--1fcfceaf-997c-431b-bbd5-f974c57d4a44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67212837-8275-429c-9095-a472e684cafe", "sighting_of_ref": "indicator--1fcfceaf-997c-431b-bbd5-f974c57d4a44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2440528-2d57-4279-8dd7-7a6cabfc237f", "sighting_of_ref": "indicator--1ad614ef-08a8-4519-9dea-ec0ca685368a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765e5bb4-e064-4a6a-8330-7632ece7a316", "sighting_of_ref": "indicator--6d4f7b8f-7c9f-47d8-a440-6bb5cb39c94d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e578cb7-699a-4136-96c2-959bedd39dab", "sighting_of_ref": "indicator--d469f53a-c709-44b7-904b-9e7d4c3126ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f916250-3ddf-48b5-8f3d-250bf5dd981c", "sighting_of_ref": "indicator--bd651b4a-cfd9-43e5-8f14-4a44a10721a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2c27f5-2415-4286-bd7f-ae27b1726e7c", "sighting_of_ref": "indicator--32b99ad4-860c-4bcc-b40e-07b7a09df7d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4594b42-35f2-4fe7-914e-f3ae4efed680", "sighting_of_ref": "indicator--5b8dc559-94b7-46ff-a883-6a9dc4ee23e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1167c88a-893b-4c5f-9e6a-66c51074002d", "sighting_of_ref": "indicator--5b8dc559-94b7-46ff-a883-6a9dc4ee23e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac7f8f8-d611-4d8b-a6a5-0d7c89f79d99", "sighting_of_ref": "indicator--c7ac74d7-c016-4bde-809a-de9856cbf676", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c03284-f8aa-48b4-91d3-e551c54e2efe", "sighting_of_ref": "indicator--b199a3a1-b751-44f4-a940-e508a6336e29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b553c40-7189-4fc7-8baf-b1d4a48d4aca", "sighting_of_ref": "indicator--b199a3a1-b751-44f4-a940-e508a6336e29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6a30bf-e710-49bd-b376-d034c4da42d4", "sighting_of_ref": "indicator--8615a2ae-2fb0-4f56-bd5e-789eb87885bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fe281c-94b6-43d1-9936-9e3f12a65e20", "sighting_of_ref": "indicator--4165033e-4bf1-4723-ae7f-c923bb2ced97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee295e11-15a6-4393-9777-4bc23cf4c5b8", "sighting_of_ref": "indicator--4165033e-4bf1-4723-ae7f-c923bb2ced97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1384515e-4269-456b-a9e0-561356af845a", "sighting_of_ref": "indicator--4db62746-6563-4fed-8bae-796d7d631ac1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2021e12b-96a4-4645-9030-2357562a1b20", "sighting_of_ref": "indicator--b0cff93c-a48e-4aa3-8db8-1bb6f939073f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e21aae-e3b4-49df-8625-002455d84821", "sighting_of_ref": "indicator--579467b4-1c16-4a3b-865b-df9fdf86a523", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4922076-3dd7-404f-87f2-476c704b22da", "sighting_of_ref": "indicator--390ffde2-8919-4a42-a73f-ab88d5da9bb0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cdfab4-928d-4d39-adbd-f84102d14cdb", "sighting_of_ref": "indicator--5634fe65-d948-46f3-8f3d-97316bb93206", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14c5ec2-66fa-4fa1-954a-94c7e574b54c", "sighting_of_ref": "indicator--7a04711e-7d88-4555-8504-be1b5196918b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53948263-c60e-4a55-b5d5-135cd39c08f1", "sighting_of_ref": "indicator--6b7cc515-7abd-4caf-abe4-f4fdc03e2ddb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd6c39c-5eac-4a89-9c0c-5db4a634de99", "sighting_of_ref": "indicator--cdcc9df8-9608-4dee-8375-f3d7a7a8e62e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d69b1ea-2800-48ec-8068-ef7d6f8720af", "sighting_of_ref": "indicator--7532a2a9-1da3-42da-95b3-88d4f6351095", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc35691e-6774-406b-813b-842ac64b1909", "sighting_of_ref": "indicator--43f55536-169d-4813-afaa-a912f74b8097", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efafdbb3-cfde-40c6-80bd-486034727d1d", "sighting_of_ref": "indicator--43f55536-169d-4813-afaa-a912f74b8097", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3af8b2-2011-4338-acd1-02b81f4e2da7", "sighting_of_ref": "indicator--3fd971e7-9489-420a-a3f9-94ec019e6a1a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb394e8-0862-4e31-939e-0247d0040539", "sighting_of_ref": "indicator--bf9ca84d-ecf6-4542-b7d7-af4862b53f5a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aa24ed-6c27-45a1-a68b-04ff5291dd69", "sighting_of_ref": "indicator--d053d872-5689-4f4c-8d43-3e7c24580362", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcfc617-94c3-45d6-b89c-01bd4e1df647", "sighting_of_ref": "indicator--7bd8fb08-f238-4337-bf18-e87e244d7b87", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0a0054-caa1-4b85-957c-6ff8630f64bb", "sighting_of_ref": "indicator--4c2cc9ac-b226-48c1-a9c6-9194ed747097", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1b736c-1699-4aab-9ef5-3620b6ade048", "sighting_of_ref": "indicator--09537a60-3ffe-459d-8361-be8c4b5ed32e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24273032-269b-4ad8-bf16-16b888c5e1d1", "sighting_of_ref": "indicator--76e6ab83-012a-49ac-894c-fa1f617a1e7d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42ebad5-262f-4497-b471-b1993065e90c", "sighting_of_ref": "indicator--1c189b06-6b30-49a1-a447-95952765c20d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1119f36b-ad74-4ce1-9a28-833f437c5600", "sighting_of_ref": "indicator--c5dd8e80-c343-44bc-9d7f-fca4221f3737", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8656e1-4e93-4303-a9f0-f92a72c8e1f3", "sighting_of_ref": "indicator--245c4011-bbd7-4bfe-8043-dde0529ad910", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82db391-ccb4-4f87-8b21-de5c617ccad2", "sighting_of_ref": "indicator--245c4011-bbd7-4bfe-8043-dde0529ad910", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afd0205-91b4-4e2c-bc77-295b9320c4e3", "sighting_of_ref": "indicator--4910a33e-00b4-4df8-a03c-071670510c05", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3453aebf-f095-4730-a9c2-b06dab3e9b80", "sighting_of_ref": "indicator--ce4d9f43-044a-4617-b5d9-2eabb0469e71", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1f111b-3fc8-41da-8067-109e70999136", "sighting_of_ref": "indicator--5836dee2-dce3-48aa-b78d-1bb518bf3c0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9094a1-cd14-4525-a3e7-852c9092ac7c", "sighting_of_ref": "indicator--a69d061f-f569-44bb-b2be-7de311477aa4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0bb221-6ca0-41b1-babc-9084e9039cec", "sighting_of_ref": "indicator--f7453be2-c84a-4378-9bbd-6fbf457b1ee4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efe6ff8-181c-4d06-b839-c601ba000d4a", "sighting_of_ref": "indicator--ee8ede68-4413-4cab-8972-7008568c941f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ed24d0-0409-4d3c-869d-c48a46b551de", "sighting_of_ref": "indicator--6556718f-849e-4c47-9f98-4e6dc6fa473d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4ab2d1-12de-42f1-b961-732469e031d0", "sighting_of_ref": "indicator--f179ec37-1402-499c-863c-8b26c78f7b8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec87beb8-6a4e-4b43-b877-458917eb2bf9", "sighting_of_ref": "indicator--33cade05-6572-430d-92b4-453613718469", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1584d70e-7338-457a-a909-eed9dbfc7261", "sighting_of_ref": "indicator--ba0a158e-6df0-4772-937c-372cdfcd7402", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996efcc8-9f32-48b1-93d9-68af1c6e6837", "sighting_of_ref": "indicator--7780709f-42b8-44e9-8916-349710042ded", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840bad62-cb9b-45f1-815d-fe32601b02a8", "sighting_of_ref": "indicator--5489963a-9c70-4081-9b63-bea3c687c9ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8967b78e-40ab-44fe-b89a-2c898a4b15ea", "sighting_of_ref": "indicator--7bc3d434-8fb1-4d0a-9b14-5a5ebfe67668", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebcc412-36af-4c69-8427-d60571d76bd3", "sighting_of_ref": "indicator--bfc836c2-3dca-47b3-ac0d-efda08734719", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d148caf-3a8a-4c3b-8152-76f59fb805d7", "sighting_of_ref": "indicator--533fb3b9-3062-46fa-8999-335aa9604b65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc174b3-4c75-4c47-97bd-99ff53dba9c6", "sighting_of_ref": "indicator--533fb3b9-3062-46fa-8999-335aa9604b65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947680cb-a564-4629-b23b-8617aceb96b6", "sighting_of_ref": "indicator--fdadd49b-c295-404e-91e3-21d9fb6b0330", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090c63eb-063b-4f3c-9239-ea626dd42eab", "sighting_of_ref": "indicator--75d7dd77-d265-4c39-8b29-ae8591652151", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adba1fe-3d3a-4cfa-82fc-93fccc9d562b", "sighting_of_ref": "indicator--628fe1da-68df-4cff-ad87-949ae40cd4bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586e08fa-1d7e-48fe-8031-fc8a9aaaa387", "sighting_of_ref": "indicator--79667654-c4b8-4fe0-9ea7-3df8d541e4f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ee272f-8b4b-49ee-8578-6cbab3393180", "sighting_of_ref": "indicator--79667654-c4b8-4fe0-9ea7-3df8d541e4f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96e02f5-2845-4693-8f9b-144aec6ae45a", "sighting_of_ref": "indicator--68fd4b3a-1733-4217-a3f0-d51220a6a13f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4b35d-a399-48af-b9af-3f43ab0ab82e", "sighting_of_ref": "indicator--6b6ce880-4ed2-49a4-903b-39574f5bb2c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cc71a0-9d7e-43ca-bc1d-ada8134bbeb0", "sighting_of_ref": "indicator--60228279-e03d-486c-a971-524bb95abf8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b071d7-9432-4039-920d-5c5a19954eca", "sighting_of_ref": "indicator--0ac90f9b-673b-4849-99b4-cb3006974768", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b1b3ff-2543-4b91-9676-9b0280bc034a", "sighting_of_ref": "indicator--5b588821-a884-4155-88cf-e4f4d277475d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53521b90-2005-4291-812c-f803db02c1d8", "sighting_of_ref": "indicator--add90265-b85f-41c5-9eee-dbdadea77b16", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9bd9e5-6d2f-4968-831a-e0d175aa3765", "sighting_of_ref": "indicator--17533331-0737-4ee4-a9ff-be3ef129759f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3084356-c580-4a02-82a7-d88eb31ca339", "sighting_of_ref": "indicator--38c9db73-eeaa-4283-bc0a-faa53159e498", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaf3feb-0b82-4bc1-bd70-2c7a55543810", "sighting_of_ref": "indicator--7042101c-511e-489f-9306-69c6b14170d1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75832e53-075d-4a74-8978-8f20730c1e6c", "sighting_of_ref": "indicator--a5532af2-74f6-46e0-b0bb-035ed1f27964", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8c2268-652c-45a3-946c-48ce4179050c", "sighting_of_ref": "indicator--90c2e88f-4947-4dbd-9f47-4d875df4371e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbc2967-071c-444e-93a9-2706861efc96", "sighting_of_ref": "indicator--39197a52-30a2-4837-a9d7-912ed8f10c6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b625abbf-5062-4567-b658-55dc79a2ca01", "sighting_of_ref": "indicator--69cba4bd-8b53-4c84-8226-8540c213be97", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b6707c-b4e9-4f7b-958d-8e7e07160d82", "sighting_of_ref": "indicator--e6ea72cc-793f-491d-960b-97d537992a67", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6232b1d1-c612-461a-953f-54feb9f4a799", "sighting_of_ref": "indicator--75c7aa26-182c-4ffd-a354-477cd65e6834", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec5b3e1-565a-435f-b791-f7999f2e884e", "sighting_of_ref": "indicator--e27d2797-d5f9-456e-b89f-c784fd726d0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b00d15-1c6f-4a8e-ac8a-2c9d72766241", "sighting_of_ref": "indicator--89e8ac4c-f238-4765-933e-f58af10567c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814fb89f-c71c-4d29-b489-08069157ef87", "sighting_of_ref": "indicator--5a8474f7-0616-4d42-b81c-88cb3dba7d28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8649869d-6437-44a9-adf9-4da4b6b79946", "sighting_of_ref": "indicator--5a8474f7-0616-4d42-b81c-88cb3dba7d28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a823143d-b519-4728-8929-33bbcb5db22f", "sighting_of_ref": "indicator--8f070e6e-1ad8-453f-98ed-9b7e8b78b61c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4f098f-11ef-4dd3-9bd5-e67444b9c711", "sighting_of_ref": "indicator--63d82c67-fcb0-4392-9d0d-89fc75eb11f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa294bc5-50d5-4373-ae17-1a9738ea21fe", "sighting_of_ref": "indicator--a6c3a623-3de7-4d6c-877d-5ee650373efa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a1d002-a3eb-4a64-b572-83bfe773736c", "sighting_of_ref": "indicator--e59e876a-052f-4e5f-a95f-833ebabbf83c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae81807-fd2f-41c6-a311-0542692a2c20", "sighting_of_ref": "indicator--2d27aee5-b2f7-453b-8ff2-ffcdf9b3c5f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b36c16f-ec01-41ff-9bd9-7797d595c984", "sighting_of_ref": "indicator--2d27aee5-b2f7-453b-8ff2-ffcdf9b3c5f5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666fcd3f-b18d-4d98-b66b-ada3dea657ca", "sighting_of_ref": "indicator--048ee296-4eaf-49b5-aee1-02a7dbab8913", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39af8716-4ede-4d20-a358-d32cd92ccb67", "sighting_of_ref": "indicator--f85a0286-bdec-4ab8-86e1-99eac156e5c9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f807364c-4a56-4321-9842-e2db1f63c9ef", "sighting_of_ref": "indicator--605e0748-466f-4cb9-9ac5-1483267940c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4145c72-45a1-4f91-99e0-a3650fd961e7", "sighting_of_ref": "indicator--0f5a70bc-42d9-46bb-9464-d0f55d544091", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2e94d6-7572-4d96-ac24-a2209052ddf1", "sighting_of_ref": "indicator--867c40e7-be74-4018-90da-88dcc6180789", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562c48d7-e396-4eb1-9c9a-f92d0bc429d0", "sighting_of_ref": "indicator--634e16a8-0479-41a7-8a5c-4368c7d8b476", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36350c2-5605-4dc1-af77-f1784ba9ec74", "sighting_of_ref": "indicator--b71d6ffe-cb3b-4585-a5e5-85edb2380041", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2515fc48-c0fd-4f85-bccc-9d2cde6f16fb", "sighting_of_ref": "indicator--beac4b64-efd7-4800-821e-05fb4e8b48c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc1844c-532d-426d-b210-8abc26d620f5", "sighting_of_ref": "indicator--ae56a4a7-eee4-47f5-8e73-725a2e74d700", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21656c1-ece9-4815-b152-3674eadcbfab", "sighting_of_ref": "indicator--519c0965-c1be-4dec-85b1-4c5d1bdb0e25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edbd335-7440-4b39-b0bc-55da887fe9a3", "sighting_of_ref": "indicator--37d64d9a-577e-4ae6-8cbb-b5a8648670fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c01b650-971e-4f6b-aca2-687f9c52a3e3", "sighting_of_ref": "indicator--9be88b5b-11f1-4e61-89e4-52695d04f21c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54362fe2-c41a-42d2-9e87-7cd7b7908f2c", "sighting_of_ref": "indicator--a70637a2-1ff4-4cd3-95fa-23190cc6d8bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cc66d4-951b-45d7-b7e9-3792784b3e5e", "sighting_of_ref": "indicator--a9549506-466b-4667-bcce-76a40e4d9af6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5207f44-c919-4c6a-93cc-d930a90fb5a7", "sighting_of_ref": "indicator--a9549506-466b-4667-bcce-76a40e4d9af6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29c28b5-d87a-4654-a7bb-d96e65c53160", "sighting_of_ref": "indicator--a9549506-466b-4667-bcce-76a40e4d9af6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca499c6-6c60-4f9e-af53-a17977d7e223", "sighting_of_ref": "indicator--f04b2d3c-d2d3-4e47-b3c2-a7dd857a3a6f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d341d597-eda1-4bc9-ae97-938a605a8656", "sighting_of_ref": "indicator--f04b2d3c-d2d3-4e47-b3c2-a7dd857a3a6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e10d22a-3706-4efe-a8c2-03130fc5b278", "sighting_of_ref": "indicator--f04b2d3c-d2d3-4e47-b3c2-a7dd857a3a6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f520753-b75c-42be-8d00-03be425d8853", "sighting_of_ref": "indicator--78ff5a13-970e-4cb4-885d-8239ee96344d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf4fac9-ff91-496a-8d10-69f8d90f192e", "sighting_of_ref": "indicator--78ff5a13-970e-4cb4-885d-8239ee96344d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9e8fb0-cfa9-4568-a769-c89d868066e3", "sighting_of_ref": "indicator--78ff5a13-970e-4cb4-885d-8239ee96344d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc68700e-afc4-4a3f-8962-d9a16bce1d59", "sighting_of_ref": "indicator--251a7b7e-0f80-404f-ba86-8ac6b1ea9944", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b7dce6-803d-40c5-a681-9d66d43d9901", "sighting_of_ref": "indicator--a8e1e781-33b4-46b7-a4e4-5268c22a164e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7216b525-430b-4900-bbda-d000e6082ebc", "sighting_of_ref": "indicator--539c965d-ea34-46b7-b2c5-00aa3b1cb96a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08ccae9-2d5f-4723-9e4e-e65a3799529a", "sighting_of_ref": "indicator--539c965d-ea34-46b7-b2c5-00aa3b1cb96a", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61f008e-c030-48c2-8cdc-9f92983713ac", "sighting_of_ref": "indicator--c57acd0c-516f-428f-abda-183732625de1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242fa3b7-22d1-4997-b5bf-1a6140893795", "sighting_of_ref": "indicator--dd0c3f8d-3bfb-45b9-8538-7e989c8c0661", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd02ea1-f719-4879-b28f-127f5580515d", "sighting_of_ref": "indicator--4026f93a-3420-4156-87fa-fb3cd3fa54ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacac890-eae4-4352-836f-e895fadcb0ad", "sighting_of_ref": "indicator--88edbc38-5d29-47d2-83d9-6c4c7252eb06", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ec1831-5745-4d18-b0d7-ca78f3a8f15d", "sighting_of_ref": "indicator--866a9c03-a4ca-496b-9bdc-c3ddbe080cfe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cf04a4-9875-4eaf-8b0f-234dbda00342", "sighting_of_ref": "indicator--abe67b9a-f649-4bb5-8768-14317f391db8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4d31ba-0596-476f-9989-82e21fcb16e8", "sighting_of_ref": "indicator--a09bca2c-4ca4-43a3-b674-ca5d43934288", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d88ef6-2ec8-4bf9-8a4b-d38b39bd2075", "sighting_of_ref": "indicator--bd607b6b-ba04-44ee-b486-423dee69f368", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0f89a4-993f-4077-b46a-cd6cff2d131c", "sighting_of_ref": "indicator--4cff0ae3-a1af-4f71-8741-240e4c40ead3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b19cf04-f5b9-4c14-b489-146c32707f39", "sighting_of_ref": "indicator--471796ae-3f88-4422-914b-3a20efafed72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894ac0fc-4635-490c-8c96-51d5f6cbf082", "sighting_of_ref": "indicator--62ce1636-457f-45b5-94cb-1654ecbeb401", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998bc593-3bdf-44db-b023-c4cb4a77e103", "sighting_of_ref": "indicator--23b9a678-2a9a-4fc9-a419-f0e757394022", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be34762-e1a3-4b35-a1e7-e3dc32631ef5", "sighting_of_ref": "indicator--1af96838-e327-48c7-913f-c0f6dc55c0ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8413a748-feea-4658-a993-007b427b72d8", "sighting_of_ref": "indicator--f2ac40a4-bcaf-4946-a6e4-8236a64c8f2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9008f5-8673-4ec1-a7d3-35e7759d0ed4", "sighting_of_ref": "indicator--c4bac86f-ad29-4600-8e19-95ce6a320e57", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7be1334-e83b-44ef-a216-55ff3fa65610", "sighting_of_ref": "indicator--e11db530-ef2e-4749-8cbf-f8f0c5264816", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb40a2fd-ff6c-425b-9d3e-daf5788978b4", "sighting_of_ref": "indicator--67c4eb69-c1e1-4f56-b0e7-8a484d747e80", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3668275-610f-407d-bdd0-c686959b1550", "sighting_of_ref": "indicator--5a162758-0953-4d19-bb12-b6f19502d3b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbc1db7-aac9-4ac3-ae71-06244158a4b0", "sighting_of_ref": "indicator--d780a082-e68d-412c-80e2-eeedfbacb567", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0923f6dc-e4e4-4d75-a2a9-665d5374a493", "sighting_of_ref": "indicator--730c2456-6a84-43cd-9b62-e324bea004ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d771c948-d72a-4bc1-bb37-00a5710e5556", "sighting_of_ref": "indicator--d583248c-ce85-4bd2-b866-3357c3379148", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e450d1ad-f2d2-4cb9-9297-1e8f47c18f45", "sighting_of_ref": "indicator--c887f053-046f-45f1-a54c-5acf4aec8f69", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da854d7-5dbd-486a-8707-0679eafe9ec6", "sighting_of_ref": "indicator--5f77c173-19cf-45e8-a5b0-f5064ff9f432", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42a5920-8d48-484b-b063-39359e0f853f", "sighting_of_ref": "indicator--2f35acd7-5150-482a-849b-1a4d92ef24d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a500d4-d82e-47ba-ac46-bc233d40d538", "sighting_of_ref": "indicator--7a51abbe-3a5a-4f64-a8b3-0ccc834324e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389ee493-41ed-4753-9b24-4989c968b553", "sighting_of_ref": "indicator--c3cee334-e6c2-4b13-a00d-d6f0da8d94c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1874f923-ba94-4b6c-85df-c4a1c910add2", "sighting_of_ref": "indicator--a103e500-924f-4963-97c1-1ee5752432e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ad81e5-4216-484f-9c55-64306a6eefaa", "sighting_of_ref": "indicator--6df31ff7-883f-464f-9887-48542503d1f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ac4376-f40f-4c95-978b-4bafe9d16d52", "sighting_of_ref": "indicator--6df31ff7-883f-464f-9887-48542503d1f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa9bce8-d2bd-4a0a-9697-8d01b53d63d6", "sighting_of_ref": "indicator--1737b8c6-898a-45c6-bae3-303e4e354587", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34eeeba-4fd4-4057-80d6-7758c1a2b3a1", "sighting_of_ref": "indicator--130523ef-c25b-4588-a35f-97c86cc6fdd1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e7f69a-3782-4519-903f-3823ecde40f8", "sighting_of_ref": "indicator--f4d4cc8f-5c85-4248-a5d5-177fc0e0b6ac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92d0a66-35e7-4e68-af68-bc923f6d0e45", "sighting_of_ref": "indicator--9bdaf4bd-5f96-42a9-94b5-bb20e2d63a55", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a741b6-939f-4112-a3ff-17cd62c103d2", "sighting_of_ref": "indicator--634590bc-e7c9-4eae-8dae-22a29f1cf416", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e605a826-f6de-4e39-a059-7f90ea38cdac", "sighting_of_ref": "indicator--8b9c59e0-dc36-45d7-a76c-7899885b79c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d0689e-1dd7-4379-9ea2-9c9f231e8be4", "sighting_of_ref": "indicator--6d643fc8-83a3-4202-b8a6-f8f45a3039cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b170cca3-0b27-4ce2-b1dd-0d8a7be26c92", "sighting_of_ref": "indicator--1629e9d9-28b3-4064-9653-65b69af20102", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0df3fee-9109-4c9e-b4c6-4e5fd6c1db0f", "sighting_of_ref": "indicator--1c2f1be1-f08a-42ab-8847-c5f138a98f4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42094e57-2c8b-482d-a68d-18f4ff622f5e", "sighting_of_ref": "indicator--bf2a1f86-73ae-4d0e-bdb6-8b81af50b677", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aac3768-7ac0-4701-b28b-1a007976ac3a", "sighting_of_ref": "indicator--28e963c6-749b-44f4-ae83-580b1768805c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10082a3e-e4d7-4172-a166-bf81dafa801b", "sighting_of_ref": "indicator--28e963c6-749b-44f4-ae83-580b1768805c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed04f9cb-22ee-4a14-af78-621f07d85073", "sighting_of_ref": "indicator--a643cd59-1390-4f30-b1cf-9e437cd18d59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cfc86a-0a41-4ec1-8490-8dda53c7dccf", "sighting_of_ref": "indicator--347e9408-f041-4fe2-ac19-85f0b3ad4049", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377b5993-5f03-429a-b3fc-8b807b81f323", "sighting_of_ref": "indicator--dbce3c38-7b18-4182-b377-b720a21e78df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bb7253-7654-4311-9aed-a0bbc21bfe3b", "sighting_of_ref": "indicator--dbce3c38-7b18-4182-b377-b720a21e78df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f71537-d0bc-4c5c-835b-55e3b2e3a2aa", "sighting_of_ref": "indicator--6b514305-c513-40f7-b74a-ca0ae102f9ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8873dfd-7260-4f7a-89a0-968133911a1d", "sighting_of_ref": "indicator--fc6eb840-95f0-4087-8b1d-be8988cf7eb7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0da74e-3787-4311-8551-4099b2076df7", "sighting_of_ref": "indicator--b905ca0a-6702-4146-8658-31278731d3ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d6fbd0-e594-44f6-9662-81b5960cb6c0", "sighting_of_ref": "indicator--e5859ff0-a088-4ec0-8567-55cc083f8f7e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b0f812-4cd6-49fc-9989-7cde9f62689f", "sighting_of_ref": "indicator--cf50ade8-4572-40ee-8f53-bca0d8a6a0d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d30c39-e6a3-4927-81de-73219bb17c0c", "sighting_of_ref": "indicator--2892d21f-ffa2-4d24-952c-c39ed4f88fad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4b23ea-b320-4bdc-aa98-17581a2626d2", "sighting_of_ref": "indicator--d98c74a2-9a49-4951-875a-9c9e76310351", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f659f671-3a4c-48cb-b5e0-73a6c224706a", "sighting_of_ref": "indicator--d98c74a2-9a49-4951-875a-9c9e76310351", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcad799-0620-409b-ba2f-13c0bf5d18ec", "sighting_of_ref": "indicator--17862fb7-b798-49fc-9597-0654509273b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce8e25b-d357-45f7-b459-de8e5a85ab1b", "sighting_of_ref": "indicator--f5af1c1f-e303-43dc-8729-c227ee4e8d66", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd70d71-a2dc-44fa-8b3c-86aa0a8b78eb", "sighting_of_ref": "indicator--374c3a93-cc34-466d-9e00-22425e333e39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771f5cfa-3384-4226-bb76-13f669e9d810", "sighting_of_ref": "indicator--897e80d1-385a-4266-8dae-59c14a7cdd2e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcb0517-b804-47be-b8ce-ed7a87fc911b", "sighting_of_ref": "indicator--897e80d1-385a-4266-8dae-59c14a7cdd2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed8dcb7-93e8-4e72-b994-496c5c2291c1", "sighting_of_ref": "indicator--1a751243-f20f-4133-9873-d5bae618227a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03059c4f-f7b1-4fb2-8602-a34418a2a4b1", "sighting_of_ref": "indicator--8314eeb0-55cd-4516-891b-7e75d2364db8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be4955b-8a97-4665-b9e8-2d30cb3d18fc", "sighting_of_ref": "indicator--8314eeb0-55cd-4516-891b-7e75d2364db8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b6c776-9a50-41d3-9ce6-bc98f934fa4a", "sighting_of_ref": "indicator--d7aa46f7-0594-484e-a09b-18ba385dc152", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7960cc8-7284-4ccb-83f0-bb28802a3234", "sighting_of_ref": "indicator--d7aa46f7-0594-484e-a09b-18ba385dc152", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605f403a-8fab-4c7c-9a72-beace078b7a7", "sighting_of_ref": "indicator--6f573106-185f-481d-a68e-87425d4b9c4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1987d6-8fa3-4be8-87d4-d9e9862bc375", "sighting_of_ref": "indicator--535f56b0-b516-484d-8a90-3caef087f5b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942de6cd-739e-411c-8057-1028334b9912", "sighting_of_ref": "indicator--c7efd37a-28eb-4cea-a747-ebb8b58f97ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80a56ff-c4b0-44d8-8a09-782d9facb964", "sighting_of_ref": "indicator--8d2c61eb-4aaa-4040-a1a3-178a6cb3ff9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684e75c0-0202-4271-869e-fedf64d8a40c", "sighting_of_ref": "indicator--fcc682b7-a8f9-45c7-b7e9-e3db253391b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30353e07-9386-471f-8f2d-91d272e99129", "sighting_of_ref": "indicator--104ac52b-d301-484b-90bf-3f8a8cd79541", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2054ba-2837-4c58-bc2d-d73b18a6bdf7", "sighting_of_ref": "indicator--c2b502ba-d15e-4742-aeca-e84e45955cf7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60616437-74d2-47a1-9f15-44b92cda6d38", "sighting_of_ref": "indicator--c2b502ba-d15e-4742-aeca-e84e45955cf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43dc87a-3d29-4d4a-a79f-d24f21f7de6a", "sighting_of_ref": "indicator--ff561bae-cf58-4818-9758-29d766074494", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16821bf-fe82-4a23-8d6a-965208b24c5b", "sighting_of_ref": "indicator--78c6aabd-b6f9-4a73-9bf1-910d10fba8d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc64c8a2-264d-4f44-ba9d-64b4891a09e2", "sighting_of_ref": "indicator--78c6aabd-b6f9-4a73-9bf1-910d10fba8d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bee1d8-1525-4423-b851-701badbdd26d", "sighting_of_ref": "indicator--cf665315-dd8b-4af8-aff6-1d97d9404805", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d643b1-9a51-4898-989e-a5b5cd97a259", "sighting_of_ref": "indicator--b82239c3-57b7-4f89-951b-8c7f9bf66cea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b690bd1e-9a04-4b60-ae3e-886f577fe792", "sighting_of_ref": "indicator--edeca14b-31a5-4772-9ce7-501104745f54", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e823286b-010c-46bc-aec5-d634c8502446", "sighting_of_ref": "indicator--6433b618-e985-4684-afea-6e29c6e113c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d845e302-ee35-47d9-b81d-43ea1058b2fd", "sighting_of_ref": "indicator--9b9f12e0-08c3-457a-b3e9-37db37293862", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99568562-492e-4630-90aa-05a8197de01b", "sighting_of_ref": "indicator--65457e05-f99f-4c19-a6d0-011f1ea6e5eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa126934-1a97-4867-bd4b-dae33ee7e81e", "sighting_of_ref": "indicator--65457e05-f99f-4c19-a6d0-011f1ea6e5eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c7b836-e3cc-4428-a847-9ff395dea342", "sighting_of_ref": "indicator--b6080ce6-c3fa-4865-a4af-22115ef58fec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be819747-bddc-4c68-9982-7f4273ce12d8", "sighting_of_ref": "indicator--0b46f090-9976-4e89-bcaa-bfe7cd36dca4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4be4b94-1dc5-4951-bcbf-79c05a8bc1cf", "sighting_of_ref": "indicator--0b46f090-9976-4e89-bcaa-bfe7cd36dca4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520ec5e2-a0e4-431e-8e6f-cc3b94d50f2b", "sighting_of_ref": "indicator--9a0031ef-3e17-4c0c-b860-b885176a1889", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa35cf0e-4e2d-40a6-aaeb-88e7e3c020b7", "sighting_of_ref": "indicator--b2ab61f4-b2f3-453b-b9d6-b09e22b7acae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee3f456-679f-4f4d-bccf-530cba65f8cb", "sighting_of_ref": "indicator--b2ab61f4-b2f3-453b-b9d6-b09e22b7acae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a6da3a-a421-4cd8-ba5c-8b0cede58ab3", "sighting_of_ref": "indicator--c97bd055-60ba-4d17-8788-f49e7c22f61c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0606b22e-9c92-449e-ae55-6468c92c3770", "sighting_of_ref": "indicator--0ace1626-7733-4e7a-b9e2-2fe6fbf48bed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f80a47-6703-4766-a796-753dec6e629a", "sighting_of_ref": "indicator--5c4f9b45-dfb2-4fea-bf71-f0f26e441043", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a663c597-b3bc-49c8-8e2f-a728ee207f12", "sighting_of_ref": "indicator--1e0a8768-ce5a-4fe4-aa6d-94e88990e579", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeab0f23-1005-4827-8388-979450ae4031", "sighting_of_ref": "indicator--1e0a8768-ce5a-4fe4-aa6d-94e88990e579", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830c7821-1aeb-429c-a9b8-ce3771055092", "sighting_of_ref": "indicator--3aa48c48-be5d-42a3-8760-8b12f1724188", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed9580f-0cd8-4b5e-8e66-6958ba6cc7d5", "sighting_of_ref": "indicator--3aa48c48-be5d-42a3-8760-8b12f1724188", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d7cc20-a3bf-4ea2-a846-6aff2406ff78", "sighting_of_ref": "indicator--e6ab0953-5322-4628-b71b-7a4f483134a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed48f17f-d4d7-4e39-8094-ad642c34c2e1", "sighting_of_ref": "indicator--88ba49a5-c6c9-4f21-abf0-bbe7af50af7b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d7e7f6-e067-4463-83bd-5d677e4b05ae", "sighting_of_ref": "indicator--37268b88-5d06-4e9e-9f3e-1bddc00807be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bad304-0ced-4b81-af76-1b3389b187fb", "sighting_of_ref": "indicator--b080603e-9090-4e02-8a0d-5926352315f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138380ad-1365-48b9-83b1-3241fe24dfc3", "sighting_of_ref": "indicator--b080603e-9090-4e02-8a0d-5926352315f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c316af1-30c6-447a-b13b-ab7421888295", "sighting_of_ref": "indicator--b080603e-9090-4e02-8a0d-5926352315f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bd4985-7cd9-48f6-bd41-fec4da93bc61", "sighting_of_ref": "indicator--0c754c3b-8ee7-48a0-ab78-86cc7ac95ba3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6d3258-0eee-4ce1-96c7-5726467c8195", "sighting_of_ref": "indicator--b9566f30-5980-4486-a4f8-3f1d13e39239", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244a9a2a-94f5-41ed-acf1-5bc101ece583", "sighting_of_ref": "indicator--92dd8928-7c55-419c-9045-b362fbd5203c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06850373-9dc4-40e2-8481-b53253b1d677", "sighting_of_ref": "indicator--e26ca974-efcb-417b-84f2-4e26ec62df6f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93bb1fc-7323-4883-9889-e6422e2a4405", "sighting_of_ref": "indicator--95e2aaaa-fac6-443f-a5e8-fb6cf8e42855", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06068bc8-9170-4039-a612-6863735af3b3", "sighting_of_ref": "indicator--656912df-b7df-452b-b439-528a9b0bbf94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ac1f31-bd3d-422d-b8dc-4456e658c1b1", "sighting_of_ref": "indicator--5faed2af-7b21-484d-b09b-f8ac024ed872", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd19bda-89ee-407d-8948-61e9dbfe4736", "sighting_of_ref": "indicator--97411a73-3823-40fe-ab4e-fcb18ab6126f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a5dd12-9312-4ba8-a192-b08468207a78", "sighting_of_ref": "indicator--4e129640-380d-4230-8c41-0672638826dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870939ba-9dc7-47e3-afdf-5ff112f8238a", "sighting_of_ref": "indicator--4e129640-380d-4230-8c41-0672638826dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c925ea-117c-4fe6-a08b-ee1b9c93fe3c", "sighting_of_ref": "indicator--374fb0b1-7232-472f-8138-680ebab3665b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63933553-bbc9-4dec-8ff3-bf8bb6173378", "sighting_of_ref": "indicator--374fb0b1-7232-472f-8138-680ebab3665b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8218d38-5e32-4e8f-b104-ce15ff073d0c", "sighting_of_ref": "indicator--fc7e8635-48db-4380-b008-a659a58c63cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811281cb-1cbd-4186-bd4c-f564bdba0822", "sighting_of_ref": "indicator--fc7e8635-48db-4380-b008-a659a58c63cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a6d64f-f4f7-474c-a451-dc0d7498b824", "sighting_of_ref": "indicator--25a077e3-98d3-4489-844f-4eec01d21aec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86327221-2104-44f7-840e-396a9638fc05", "sighting_of_ref": "indicator--a1f0aa9d-5ec5-44bb-91ee-a5f13ede838f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7029a15f-0772-40a0-892c-0fb76f1adcda", "sighting_of_ref": "indicator--465075ea-90f0-431c-a468-e37211c80cf5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0fa176-cf80-433b-8681-b3df67c4d1f6", "sighting_of_ref": "indicator--57450a2f-941e-4157-86c4-1a791f971620", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d78520d-6f42-42df-8320-a80152a63164", "sighting_of_ref": "indicator--1c199b86-2bf1-41f6-aa95-2705243f6f02", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a14878-f448-462a-bfe9-5cd0a48ad004", "sighting_of_ref": "indicator--1c199b86-2bf1-41f6-aa95-2705243f6f02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458b61e6-d4a0-49cd-bfa0-3f2d2336fc2d", "sighting_of_ref": "indicator--18ada7b1-5175-49cc-be48-448911704316", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea3658-4f9e-4927-a204-366968e30007", "sighting_of_ref": "indicator--70f27b78-8dd1-47f9-9c3f-8e5c76239e32", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24c7de7-ba23-4a11-97b2-1da4f0ffc37c", "sighting_of_ref": "indicator--b5defdcc-48d3-48ed-84d5-4040e1712d24", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84542b8f-32a4-436e-a6ab-31248d5cd4a1", "sighting_of_ref": "indicator--2420b586-6403-41c8-aeec-46ec5262aab6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e769000-5a46-4f23-814c-91036b6874e3", "sighting_of_ref": "indicator--7081c7cc-4ac3-4a21-8d8c-b601225fa459", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c290a7cf-6153-46e3-b5e3-f33e198ed001", "sighting_of_ref": "indicator--4ce5c865-1e43-4d52-acac-36038bbc65d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f570a529-65c4-4dfa-add8-5fe0adb84378", "sighting_of_ref": "indicator--28e1cd56-f154-4a8c-b540-2b57166c3803", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58b24bd-cf27-44fe-95fb-ffcad28b0714", "sighting_of_ref": "indicator--d1ce7610-cbfd-4c8e-b052-689f50499b53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc61362c-f576-419c-894d-e3f9f7643aa7", "sighting_of_ref": "indicator--6e1d72e7-fc84-4fad-b086-eeacdc41a8ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1384a59-1f67-411a-8dbc-7b7eca8d1ca6", "sighting_of_ref": "indicator--223248ed-91a7-4bae-9e4e-7ff855b578eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0bb349-5754-4050-a9ed-d7eea754add5", "sighting_of_ref": "indicator--223248ed-91a7-4bae-9e4e-7ff855b578eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eae60e-f2b3-4db8-b353-5b2fede88502", "sighting_of_ref": "indicator--223248ed-91a7-4bae-9e4e-7ff855b578eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a886c70-97f8-4d02-96fc-544440e1b88a", "sighting_of_ref": "indicator--c71c5eb5-4f7d-4ecd-840a-c26358b12b45", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498631e7-1451-454b-8cd9-91954de01583", "sighting_of_ref": "indicator--c71c5eb5-4f7d-4ecd-840a-c26358b12b45", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fb9acc-a51c-4d9e-8cbf-b9313e2472fc", "sighting_of_ref": "indicator--154db0e3-275e-415c-855e-32cc9a4f6c4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b4713-86de-46e1-8f64-54a112e2497e", "sighting_of_ref": "indicator--c3c9167b-c0ed-4c77-b3f1-a8251eb2dd9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a714070-c6c1-4d48-82dd-558e8ebf7b65", "sighting_of_ref": "indicator--fa6d65b1-2abb-476e-aba7-892b52460e34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe2afd4-0a92-4b38-a007-0311caf060cf", "sighting_of_ref": "indicator--fa6d65b1-2abb-476e-aba7-892b52460e34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f728c7-6b25-4ad6-8045-e107a1487960", "sighting_of_ref": "indicator--794e804c-5d5e-40c5-a3ae-d5772c1e17f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d0dd09-4913-4cc3-b7cb-84218f7cd7f6", "sighting_of_ref": "indicator--e80d4e59-c6e3-4e25-beac-61dc0c041559", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6010e345-5bab-4fb0-95bb-a5cfc3088092", "sighting_of_ref": "indicator--c6396b4e-ed19-4e15-8aae-fd83d88adbdc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14dd543-86c0-43fe-afb5-11a9e8686e8c", "sighting_of_ref": "indicator--a7806db2-b5cc-402e-959d-19cb2379e237", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0590664b-827d-4dec-93b7-55e67941626d", "sighting_of_ref": "indicator--ae400dbf-b516-4561-9d0b-fa4b9a561f0f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cec6538-efcb-4bcf-9b19-5a2ade06338a", "sighting_of_ref": "indicator--8bbe6f48-6a9e-4ba6-b9ba-62c157d6243b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf5b22e-5c28-4224-957d-82dfbded1eda", "sighting_of_ref": "indicator--65a1fbc2-1b88-4d94-914a-090e6968647d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea749c35-e6d1-4807-983e-6bf92bf03a86", "sighting_of_ref": "indicator--3f99fad2-295d-4abb-8a60-7904d5dbf810", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a90e398-6d30-4b82-932b-1548ca8e577b", "sighting_of_ref": "indicator--c05ff53a-73fb-4d1f-b38d-5a57eee28a03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e9b315-2e5d-4e65-81e4-77f70ba207a9", "sighting_of_ref": "indicator--d2352c82-a038-4d3d-b108-b0dd8b52297b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b36f0ad-01d8-4e35-b441-0c9f53b152e2", "sighting_of_ref": "indicator--3e4e4dcb-b5aa-48d6-9f48-eac4120d73e9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579cb0b9-68a1-4a79-a65f-755fc1a2bab0", "sighting_of_ref": "indicator--a25f5c12-cd9a-4636-a676-e214eaaa0e93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142ae391-e874-4451-a4a3-c59338c3426d", "sighting_of_ref": "indicator--a22ea075-9a0d-4e14-8683-dc324b97a899", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04776ab-44d8-4e59-a9a2-253887662333", "sighting_of_ref": "indicator--a22ea075-9a0d-4e14-8683-dc324b97a899", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0d2c16-8af7-49c3-af26-da07c15b8e99", "sighting_of_ref": "indicator--2944e5de-a1ac-4749-9d45-bce26d347e29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bd66f6-6f0e-460f-84c1-884f32bf0714", "sighting_of_ref": "indicator--7e1206fe-989c-47df-98a8-1755474422fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f403b284-e0d1-48de-8515-ff762f3c6b50", "sighting_of_ref": "indicator--00f95093-659a-4501-86bf-5fe1f914b674", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea03361d-781e-4175-853e-8710bb57a478", "sighting_of_ref": "indicator--d22b7350-e248-4e8a-967a-263c48fb4cb2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ab31c8-8023-4387-bb86-280bc76f5e08", "sighting_of_ref": "indicator--d22b7350-e248-4e8a-967a-263c48fb4cb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87950c0-5478-4be6-b2b5-b297de801d97", "sighting_of_ref": "indicator--22651537-bafb-467e-9d60-ecfdcc30c9ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a414763c-df74-45a7-84cf-0c84d0ab69a5", "sighting_of_ref": "indicator--6e9504b4-af82-4c8b-9a44-0e35a5e455e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5f3c37-ac02-4ca5-abe5-e89093c704ab", "sighting_of_ref": "indicator--6e9504b4-af82-4c8b-9a44-0e35a5e455e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b905c0f1-dd51-47bd-9582-f9b9ad44ee4d", "sighting_of_ref": "indicator--c99b1b32-d328-41d7-8831-492f3ac9406c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0165455f-a135-4005-a52a-6e360776e9e0", "sighting_of_ref": "indicator--c99b1b32-d328-41d7-8831-492f3ac9406c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf544b1e-50dc-40cc-81a0-2696dea7512d", "sighting_of_ref": "indicator--5fd3349e-a137-4f15-98b8-c5a1a364388e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966584a2-80bc-457c-b811-1525f5cb7015", "sighting_of_ref": "indicator--5fd3349e-a137-4f15-98b8-c5a1a364388e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bfe308-abe8-4ff0-b77e-34e6d2f62e1f", "sighting_of_ref": "indicator--51fda84e-f5a4-44b0-b9d4-e2227e4fab50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efdd452-35c9-4e69-8d9a-e7de23f83c9f", "sighting_of_ref": "indicator--51fda84e-f5a4-44b0-b9d4-e2227e4fab50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4f13f5-c508-4a53-885d-5b5b3ef5003f", "sighting_of_ref": "indicator--8b4800cb-08cf-48f2-9363-197f41ebb90e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264c49a9-6e65-4ea8-883b-d526ebffbacc", "sighting_of_ref": "indicator--356bcd91-7069-4113-8e1e-9c3c60d2cab9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6260c10-8a1d-49f4-9f24-91a25a54168a", "sighting_of_ref": "indicator--18a9b897-640b-409b-8d16-e8c06a3bac7d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45e4e9d-d9b1-4053-89b0-4a820dbf6bf8", "sighting_of_ref": "indicator--73dd05a7-6fdd-45f7-9733-e65f3065b6e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cde2aaf-44bb-4178-8149-afe0e3cd10fe", "sighting_of_ref": "indicator--aa9c7785-6b60-461f-b249-1dc580bde10b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c307cbd-d6ce-45eb-a8fe-65e664a50d21", "sighting_of_ref": "indicator--01f3fd89-80c4-4e57-a111-f3db99dedb41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b4a4b9-dcb6-4dbf-9a71-2a988c5e08df", "sighting_of_ref": "indicator--a36ffbff-2a37-45a9-b7e0-b3aa10759af3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c3f644-b244-4c0e-8698-79a719bbbdf9", "sighting_of_ref": "indicator--bee3fa45-2ee2-4fb9-b3a7-aa8e167da115", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbc6142-ab39-43fa-9db2-a25e03a2f89b", "sighting_of_ref": "indicator--352699d7-1bba-4ef7-ac62-4b2206d3cad6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a22b20-d103-4cf7-81a9-2976e25f7e15", "sighting_of_ref": "indicator--352699d7-1bba-4ef7-ac62-4b2206d3cad6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fb82f6-89d8-42b6-971a-f2cbb99140b3", "sighting_of_ref": "indicator--1f8068ea-a20c-48b4-b825-20af4d40a2f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defd6cc9-77ae-4808-a94b-ba01249cbf49", "sighting_of_ref": "indicator--36734d4c-c2de-4bac-92d3-6cba423e7d32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4074939-64b4-440f-a5ff-c809f7015d10", "sighting_of_ref": "indicator--91e31a6c-a8eb-440d-a29f-ac0440022707", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2900a9c5-26ff-40c3-9f95-6cfa11d5f853", "sighting_of_ref": "indicator--427721cc-7e1e-4f21-aa0a-a17c8f0c1260", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27272f08-a6af-4ca8-b3fe-1216f6adeda1", "sighting_of_ref": "indicator--250eef27-49bb-42d4-880a-4bb2e645e5d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3061be-f2cb-4979-8065-6e0ffe467255", "sighting_of_ref": "indicator--250eef27-49bb-42d4-880a-4bb2e645e5d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d348f863-ae6b-4cc8-b252-d96058d64813", "sighting_of_ref": "indicator--bbb65152-a257-46f2-9604-07562e8fe4c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f382b43-f36e-4ac5-8580-6dbe198a6223", "sighting_of_ref": "indicator--311a58cf-e213-43d6-8f42-48ae587fab4e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b746909e-e77e-4d72-8dab-1d020c146ac9", "sighting_of_ref": "indicator--0fc777a5-f432-4ba7-b6c8-8f75f7e42074", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7c6703-f9d4-431c-b7c0-892f18a5e6b1", "sighting_of_ref": "indicator--46e723fa-e9f3-45b9-89fe-0b4c31acfd10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a966194e-9619-4ece-a86a-54a1cc77f11a", "sighting_of_ref": "indicator--8b2c028c-c04b-446a-b0ba-6d2f09309f1f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8726662-9f47-4f82-8ae0-ab30fbf3a7d6", "sighting_of_ref": "indicator--67744ae2-2916-415a-9d6e-fdae9fd178fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b304d-8d9f-4eee-8089-777e7f0bd536", "sighting_of_ref": "indicator--e36fedf8-49f0-4721-bd21-b3fd4a8e59c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5480a615-e957-469f-96f9-dca088889038", "sighting_of_ref": "indicator--68c69f74-a7c7-444d-bb71-525f967424f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f059d79-272f-468c-a9eb-1481ff6cfb0a", "sighting_of_ref": "indicator--50d88989-a23d-4e0e-bc8b-32772e384535", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9100af79-308a-4771-ac57-4abff26138f4", "sighting_of_ref": "indicator--8b751e8c-c5e7-454a-b0ba-45e84a9d02eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca19fe6-3020-4b16-8ba3-69fe0c9cfba6", "sighting_of_ref": "indicator--d3034edc-be28-4346-922f-79984e79bafd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea1cee5-a7e9-470b-b279-a8da0847d2e3", "sighting_of_ref": "indicator--ef4e6143-4e66-47d4-ac18-7dee90f23e8f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c893990-30ae-48f3-92a2-d0c81d6334b0", "sighting_of_ref": "indicator--557468ca-22d5-419d-a26d-0fd7d7a03120", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845f581d-14db-49ab-900b-4c6580777cfd", "sighting_of_ref": "indicator--a21ccd1e-d209-49c1-b77b-6f1330cfa4bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99066ff4-8c89-40b7-b837-ae99be64b972", "sighting_of_ref": "indicator--47db924e-828e-4359-9341-b30f6b7f7d83", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b2cb24-8576-467a-b087-b68f4d5ddf27", "sighting_of_ref": "indicator--cdc80a9f-ff81-4064-9244-d92e45728e96", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c66322-ddc6-4a02-9b2e-2890c85377f4", "sighting_of_ref": "indicator--0fa33aea-6370-465f-a087-60fb9e3d93e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d85ec77-3d52-42d6-bb96-33dc68da2363", "sighting_of_ref": "indicator--0fa33aea-6370-465f-a087-60fb9e3d93e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eceb863-856b-4de9-827e-bd5c6a2d5cae", "sighting_of_ref": "indicator--597e78c9-db29-477e-97ec-0a6e0f09e0fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c3bfca-9675-4440-b2ff-0d2cbe71a959", "sighting_of_ref": "indicator--c7e498e5-385f-457b-9ea5-a952b7a854ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f30417-fa0f-4f15-b874-7daf73c6ddae", "sighting_of_ref": "indicator--abea6da7-a84b-4fa0-a2d6-00586158aeda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a630b1-e010-45f1-81f6-322ba3c25ac0", "sighting_of_ref": "indicator--6e005ac0-c42d-4852-9da1-9635f61581f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ce711a-2f44-4086-accb-1a2383e1a058", "sighting_of_ref": "indicator--7db1f7ff-3d12-46f3-9130-d67280ef4309", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344fed8d-6b4a-4639-a2ef-4b8d71f396d8", "sighting_of_ref": "indicator--fe346c80-7fc1-480f-8ad5-c9548941044a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a324d298-87b3-44c7-a7c0-a2b3277e0072", "sighting_of_ref": "indicator--fe346c80-7fc1-480f-8ad5-c9548941044a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81997a2c-e908-4200-872e-8e760abef2d3", "sighting_of_ref": "indicator--da8122fb-7754-4b0a-9a73-623523873601", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e071d3-8035-4df6-ba06-1a54637eed2d", "sighting_of_ref": "indicator--da8122fb-7754-4b0a-9a73-623523873601", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28809d1d-84ad-4258-8813-2a3dc7b36c19", "sighting_of_ref": "indicator--359bbdc7-a089-462c-8a5f-96ef13768d37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9294353-2d3c-4541-a4fe-8002d7314833", "sighting_of_ref": "indicator--b96d5bf3-d979-4e70-b0bd-76eb8a637060", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee51056-bbc3-42fb-a607-f42f16813920", "sighting_of_ref": "indicator--15e4f1d0-246e-457b-a053-b745ced96486", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8473092-ea4e-4041-a7a1-29106fdbd901", "sighting_of_ref": "indicator--15e4f1d0-246e-457b-a053-b745ced96486", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45307a74-9154-4c53-8c45-43579a529e10", "sighting_of_ref": "indicator--cee70253-c3d4-4db4-8b50-af7b197c1549", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad0d217-bda6-40f2-aeb8-152645941de9", "sighting_of_ref": "indicator--42ff7916-7860-42b8-b9f7-0fd0d03c1e3f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9fc449-c1c2-4db6-a9aa-eadc2affb989", "sighting_of_ref": "indicator--6595c3be-bd73-4e41-8193-9c29ceb919cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72adca0-3bef-49cb-968d-991c6cbf61c8", "sighting_of_ref": "indicator--56fee575-b6fa-47a7-b5ca-82faf34280a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13848d00-9a77-44b0-87f6-bf647601c51a", "sighting_of_ref": "indicator--fe7119dc-c74a-4739-823f-51498a1d68cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741e3efd-f8e1-43f9-9bfa-e2999c0e23b6", "sighting_of_ref": "indicator--e17f1810-ba0f-439c-9eb7-1a5b435bb9f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9ea222-d764-4209-8cdd-5b5e12dce1f0", "sighting_of_ref": "indicator--0c085236-00f3-42ed-b01f-7053c27922bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2320a49-7e6a-4f55-ba51-c48215e08acf", "sighting_of_ref": "indicator--0c085236-00f3-42ed-b01f-7053c27922bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a0be0-d56d-42d0-86ce-d3e4d149cc22", "sighting_of_ref": "indicator--689de169-62f2-439f-9fc7-783bff43f961", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a406d323-eec0-4234-87c0-531559ca3c04", "sighting_of_ref": "indicator--f1af028f-8d33-4f04-8e47-c9ca3cc80e1a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f677d823-2922-433f-951c-75f2ae445966", "sighting_of_ref": "indicator--f1af028f-8d33-4f04-8e47-c9ca3cc80e1a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29047e6e-7ac0-4266-b826-33a4322f6d49", "sighting_of_ref": "indicator--f3cdb217-851a-4e36-8150-b73669bdd520", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a2abdf-0ae2-4b11-b2bd-aa03d77c9c9a", "sighting_of_ref": "indicator--fcd9c3fe-56b0-47ca-b937-1b8d79018d83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cbf2ab-925b-4948-9f8a-888c08d3dceb", "sighting_of_ref": "indicator--7a5a361b-f007-4291-bca2-baae8a29ae05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5897c5f8-d14d-4459-88e2-93f4002b16af", "sighting_of_ref": "indicator--ae090f51-f457-4f66-9a27-6e5a985325c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13361691-f387-4b8f-8506-f8c8e9996974", "sighting_of_ref": "indicator--f1b10d65-f47f-43e8-a527-0db2cd38d886", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1906ad1-7aa7-4343-8249-d4d986a2b189", "sighting_of_ref": "indicator--381c1f42-a4fe-44a5-b55b-93602f5fffd5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1a1812-b0cd-4156-b667-ce226b676e3b", "sighting_of_ref": "indicator--eb2f483f-08df-468c-82a7-a9797dd92418", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcf9fb5-105c-4ffe-ad4e-cbf77cab3650", "sighting_of_ref": "indicator--eb2f483f-08df-468c-82a7-a9797dd92418", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7792673-1aab-428c-b107-61f6b2c737cc", "sighting_of_ref": "indicator--4c3078ee-51f2-4355-91cd-9cd151900a1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c79c09e-711c-4da3-ae91-0820f52a9eca", "sighting_of_ref": "indicator--d4155952-54ff-42fa-a43f-3872689a26f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05847a2e-0d9a-4069-91ef-72709f3c27f7", "sighting_of_ref": "indicator--9c8d0de1-2c4d-45ac-91a6-872d851ae76a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8d31fc-3d02-4ace-a31c-e5cea28ceece", "sighting_of_ref": "indicator--ae2277d7-312a-4c04-9112-f36b9a2534ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e085483-b59b-4cdb-872f-12d464eb2d3d", "sighting_of_ref": "indicator--dc07323a-cdc8-4bfd-a544-e9d61c8e1dac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1ed82e-292b-44f6-898a-d4a3cda4dc4c", "sighting_of_ref": "indicator--dc07323a-cdc8-4bfd-a544-e9d61c8e1dac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6ad578-18e8-45db-a4af-7376959b9aeb", "sighting_of_ref": "indicator--5aeb12d9-4e63-43e6-8acb-18304c83321e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804c7081-5fe6-423d-a525-feff6e05563a", "sighting_of_ref": "indicator--e08134e8-00b9-4018-ba69-de0e4b40266e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a98654-329f-445a-82f4-239bc0ff9375", "sighting_of_ref": "indicator--e08134e8-00b9-4018-ba69-de0e4b40266e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7467ff-5e77-4c12-a745-a527ccd2e104", "sighting_of_ref": "indicator--342562ff-5e21-4352-8b15-4945810d7d95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9183844b-c592-4407-9531-1e18ec8a9077", "sighting_of_ref": "indicator--6ae3b3bd-e4b6-427d-8976-3c8c66c94589", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bfc396-42a8-4c97-add7-72130990ed13", "sighting_of_ref": "indicator--8d097f5c-d6a8-40de-a9b2-1189c6a0afa3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b8b037-1855-4788-9509-dd8936734923", "sighting_of_ref": "indicator--55f6e8c4-7527-4956-90cd-4a94b647380d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f475b4-2d0d-4ba3-9504-a794d09b9d86", "sighting_of_ref": "indicator--2b2c2dc5-b43d-4652-af7d-c4e645402705", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3ff52a-c80b-4c4c-8c8b-bab820bf3d98", "sighting_of_ref": "indicator--bbc695d8-5466-4471-bc63-5b7047713018", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6284adda-534d-4df1-be23-2ad37157cbcc", "sighting_of_ref": "indicator--a601c469-2983-4b70-8ca8-87cc13780605", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112fb769-bdcb-4b4d-9b5c-e336edf0ec45", "sighting_of_ref": "indicator--a601c469-2983-4b70-8ca8-87cc13780605", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d702cb63-6a11-453f-932a-7b2ebf9469c0", "sighting_of_ref": "indicator--6ac140a3-8c3d-4f36-8c7e-2e28513a97c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a27a070-09f6-4700-9bc8-18201e1bb1d6", "sighting_of_ref": "indicator--53bbe70a-f8ca-4b55-93d3-a5ef71e29993", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d59e8-82b9-4769-abf8-bb8feb4cc035", "sighting_of_ref": "indicator--53bbe70a-f8ca-4b55-93d3-a5ef71e29993", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f468a-72f9-4584-9df4-a7b14c41444b", "sighting_of_ref": "indicator--53bbe70a-f8ca-4b55-93d3-a5ef71e29993", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a275b1e-54e9-4884-976a-2b44c494ed05", "sighting_of_ref": "indicator--94fac633-9aeb-45b2-a669-974065805080", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647569db-9720-410f-8ae7-35cbd2112084", "sighting_of_ref": "indicator--8ebd1d80-df47-4853-93b6-a9054169b8e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d839c0b5-901d-4cef-95f3-f20a90113640", "sighting_of_ref": "indicator--3e15d27d-fb3b-43c5-8b46-ed88c021d454", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f8adf4-92be-419c-a9d7-e05021d02195", "sighting_of_ref": "indicator--01403f49-01ee-4a11-8555-9faed37ee05a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e27cb96-33a9-4edf-aef7-81ad8a50ccc7", "sighting_of_ref": "indicator--3058ca38-e9a9-4583-a17b-321cfcc5f57f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc611d0-6716-4982-9023-a6fe2f9408f6", "sighting_of_ref": "indicator--c44d86dd-558f-4bc9-856e-46934d3fa017", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2f6dda-7171-442f-9645-acebf6117633", "sighting_of_ref": "indicator--040ea58b-1410-42f1-b5e6-aa295d8a3afc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8b65a8-bf21-42e1-98c9-01843eff9168", "sighting_of_ref": "indicator--19602d51-07c5-44bc-8d9a-2b9bc1c5c24c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc6f52a-af76-4ad4-b5f9-7fb33477d03c", "sighting_of_ref": "indicator--db629ee5-bee0-4a7b-993e-3bdd63a220ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a6b80-38cd-403b-b673-2cd52998463c", "sighting_of_ref": "indicator--b6d3b085-da5d-463c-9105-04b32df0297d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fccad5a-6317-4222-ae27-1c42de781434", "sighting_of_ref": "indicator--7e000b0d-ef56-4d26-9ab7-5ecf2ae26497", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17713715-d9e0-415a-99fd-701b35dcb7a0", "sighting_of_ref": "indicator--91ea18cc-b4ac-4dec-9fe6-d6154acd3c94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f4c8da-be77-4717-b053-45e3093b6ca9", "sighting_of_ref": "indicator--23d723c6-7b03-4cc0-bc5b-c398b8b96739", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d568dc79-affd-4106-a4b5-83b247b3810e", "sighting_of_ref": "indicator--049fcde3-26ba-47d2-a890-bd2cc24bd6af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2e6654-de20-4289-8f57-8701babaa77a", "sighting_of_ref": "indicator--55271f8e-8f51-4b0a-93be-9d1cf370913d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841cf2f3-de6d-4069-816c-695434bd8d2a", "sighting_of_ref": "indicator--744a1c8e-770c-41d8-9e4b-9feafb1fc3d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2125e1f2-7f33-4038-aaac-a890e7829e96", "sighting_of_ref": "indicator--744a1c8e-770c-41d8-9e4b-9feafb1fc3d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fb5e9d-db9b-4f7f-87b9-a1f849f1671f", "sighting_of_ref": "indicator--257aa655-1692-4275-b415-f6fb050f2f75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d53b8ec-dda9-4f20-b465-5321536e2241", "sighting_of_ref": "indicator--257aa655-1692-4275-b415-f6fb050f2f75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56996668-7cd1-4d35-acf7-3086688dcf69", "sighting_of_ref": "indicator--8dce6022-ad72-4a48-8b4d-cbae9e368728", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c406e2ff-6f30-4598-bdd3-d4b7f7a1ee80", "sighting_of_ref": "indicator--2d17e659-c9c9-425e-9011-0b2a2a5af27e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fc4bfc-8a1b-48a1-8b4c-21049a7d04bb", "sighting_of_ref": "indicator--beb32a5b-a941-43ff-a5c9-8f74036c6ca7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0eff5f-a0bf-4d21-aeed-e61b1f06043a", "sighting_of_ref": "indicator--58f861db-df9a-4632-93d7-8edf2cdac81c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afeea17-c106-4cfa-82c8-22a870186104", "sighting_of_ref": "indicator--4121cb4b-eba1-4a93-a63a-c51cbc0eefd4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be96b464-9888-4ab3-9cd0-f6b95e301ad4", "sighting_of_ref": "indicator--26e4d39f-747e-4143-be3f-af5e40c3f708", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e172aa64-932a-4f9e-b4af-77616219df47", "sighting_of_ref": "indicator--26e4d39f-747e-4143-be3f-af5e40c3f708", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aac11c4-3bb0-41e2-8d7e-587000388e9c", "sighting_of_ref": "indicator--28379fd3-b0ac-4734-ba8d-c405401bff97", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b5f198-d831-47de-915f-750bc2561bc3", "sighting_of_ref": "indicator--28379fd3-b0ac-4734-ba8d-c405401bff97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bae37f-f69a-4681-89ff-5244fdcdd7ab", "sighting_of_ref": "indicator--28379fd3-b0ac-4734-ba8d-c405401bff97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b50de63-09b8-4ad3-ad9c-bb1b225ccad1", "sighting_of_ref": "indicator--82a76e1f-b8c9-435a-86cb-c01ab80cf229", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ec8a6c-5116-4f96-b6bf-41fdf30c149e", "sighting_of_ref": "indicator--798ada20-01df-40b1-8935-219c28855a21", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a624b5-1421-49a3-8718-2fbdc29e73cc", "sighting_of_ref": "indicator--553e38c4-4107-4b7f-af46-8ba284330ead", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b3cb4c-afe1-47bd-bb70-b1eed13a47f6", "sighting_of_ref": "indicator--89490e65-c154-4708-854b-b51aa1346b63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082a2d3d-0986-4741-b1ba-4e320463cceb", "sighting_of_ref": "indicator--65f22fe7-0190-4fe1-8ecf-a9f3d1131aa4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7230520e-bb81-43c7-8698-00a7892816fe", "sighting_of_ref": "indicator--65f22fe7-0190-4fe1-8ecf-a9f3d1131aa4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceb4ecf-1615-4dab-a49c-3db5cb762a9b", "sighting_of_ref": "indicator--650a00f4-eecc-4d9a-8cc0-6c791715e39c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4477d-df68-4d83-adfe-5f9e11d17778", "sighting_of_ref": "indicator--650a00f4-eecc-4d9a-8cc0-6c791715e39c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56c0c4b-2176-4959-904b-86a0664617e7", "sighting_of_ref": "indicator--3ffe349d-8981-46f3-9652-3c8284f9d929", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daf0e62-9ac2-434a-8618-9298a67b6fdd", "sighting_of_ref": "indicator--a2606d27-2533-409b-a833-6547132f9681", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6486c918-b6cc-40b9-9252-a3f59738b510", "sighting_of_ref": "indicator--a2606d27-2533-409b-a833-6547132f9681", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d35ffa7-0fda-4ddd-8d22-6f3381fce722", "sighting_of_ref": "indicator--d3475275-5b8a-423c-933c-b26966a1c9e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2519eec9-e1bf-4e27-af6f-a0c22b9b2b63", "sighting_of_ref": "indicator--f6444994-6408-449f-8106-998722a62644", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2cae24-79a3-4cd5-b845-d1aab805f88e", "sighting_of_ref": "indicator--7ce43805-8e4c-4bb1-a8fe-63fd34b81ea2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10feace-c4dc-4aaf-8dc6-7d78ac3cf0c4", "sighting_of_ref": "indicator--09989953-89d4-44ae-aafa-38e06e273ce4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4d28a6-5490-4c62-b79f-0b0d0744e7f9", "sighting_of_ref": "indicator--09989953-89d4-44ae-aafa-38e06e273ce4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed6024e-0391-4845-af60-fbff4da60f8b", "sighting_of_ref": "indicator--dda31869-f6d4-4186-9862-662eeaa8220b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6e602f-5918-4541-bb01-6404631468cc", "sighting_of_ref": "indicator--9a862122-1bcc-4a51-b36a-b40565091ac0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c45e29d-fc85-4178-b949-17033f380e9d", "sighting_of_ref": "indicator--fb1b9183-bf3c-40ac-9d2e-defbddcd7588", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b620b0-73bd-4868-8e02-e3e0d0915a45", "sighting_of_ref": "indicator--9202eab3-756d-45fc-a6a2-924d6e97fe7d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ccc395-22b7-4b2c-9db1-01c0107fe56e", "sighting_of_ref": "indicator--9202eab3-756d-45fc-a6a2-924d6e97fe7d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13b650a-6c17-42e9-9f3f-98a21f913809", "sighting_of_ref": "indicator--cae3629b-3abb-4a50-b9ff-38f14ff1a87b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b9859e-3d85-4a81-a6a6-245526a2b660", "sighting_of_ref": "indicator--cae3629b-3abb-4a50-b9ff-38f14ff1a87b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8814643e-cebd-46b5-a73f-22be6c6ec690", "sighting_of_ref": "indicator--d826333e-45f6-4beb-8304-f870039f3d61", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c036ccd4-f078-40c7-9399-436ba4943fee", "sighting_of_ref": "indicator--b077ff74-504c-4f31-a0df-97c16d155f8b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831ff6d9-bb20-4585-986c-256013dff7dc", "sighting_of_ref": "indicator--53ad2695-abd0-4f63-afeb-09ecf6030753", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30a535e-43d1-40b2-9dc8-eee92d6193a2", "sighting_of_ref": "indicator--5b30e28c-4991-435d-ac41-d7778b93e003", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dbf37e-f8f2-4078-90bf-ae6b61ea4658", "sighting_of_ref": "indicator--667ee94a-fcd8-4883-acd6-e3f4c7c3735d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e93f91-bd80-4f46-a747-bf33e6b2ebc5", "sighting_of_ref": "indicator--3053190b-ce09-483a-9876-5d5649656fe3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3600e61c-cf21-4db4-a250-24d0d393b977", "sighting_of_ref": "indicator--10ff2ef2-91b5-4664-bc65-c8a10948cba4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba110932-0e96-4966-bc05-4628b65c5a8f", "sighting_of_ref": "indicator--375ff7d0-fe05-4830-9db4-d472c04dd51b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51e6572-a1da-4a39-93dc-182c198b9dfc", "sighting_of_ref": "indicator--375ff7d0-fe05-4830-9db4-d472c04dd51b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc6eb3b-b29b-4536-a1db-d4d8633c4c65", "sighting_of_ref": "indicator--f897eed9-1259-43e5-ad67-97fdfb86c78f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3d532f-6d63-44e7-a2a9-bf832941b9a6", "sighting_of_ref": "indicator--3982809c-1adc-4c97-a967-6c6aca6890d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c14e179-f8bd-4855-b7c6-8060c14e8719", "sighting_of_ref": "indicator--8f8c567d-c289-4aea-8398-026562bd1cf0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905c1d0e-ce11-4855-a157-1caabc5cf83e", "sighting_of_ref": "indicator--8f8c567d-c289-4aea-8398-026562bd1cf0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280407df-5991-4a51-9104-844050dec3c5", "sighting_of_ref": "indicator--3a401ce4-ef66-4ed1-84b6-6f71a06a0ccc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3446cfd1-a571-4fab-9e74-c306243be493", "sighting_of_ref": "indicator--4775c20c-8c8d-48d1-872b-aa527f376215", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6439626-44c7-4120-b43b-89218f7ceba4", "sighting_of_ref": "indicator--4775c20c-8c8d-48d1-872b-aa527f376215", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e557a08-5b29-43b4-b6b7-bd28eef09f68", "sighting_of_ref": "indicator--17dfae98-1b4e-4bc4-9684-f0b0dedef47a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5c154a-0a61-42fe-93a4-d6da72608623", "sighting_of_ref": "indicator--786bec22-d304-4046-b34f-ca4045a67186", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8741bc6c-7518-4753-ab83-d4544bb850b7", "sighting_of_ref": "indicator--831215ca-98d2-4e52-8664-7f3a33a5b5cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82babee4-532a-434b-81e4-a2a28f782074", "sighting_of_ref": "indicator--8b15f0f3-7756-4ebd-9b56-e217f8ada8ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525372d8-7d1c-4c77-a16d-9222329d3870", "sighting_of_ref": "indicator--e8851e4a-c106-4e5e-b9d0-6d4bc4bd3009", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db91869-08d9-43f8-ad8c-edc5fb8ad74b", "sighting_of_ref": "indicator--e8851e4a-c106-4e5e-b9d0-6d4bc4bd3009", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12baac2-ba53-4c7c-bb18-aa4b9e3a6699", "sighting_of_ref": "indicator--15de1acf-56d9-4147-b3dc-f0b92acfdd02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50636742-f103-475d-8276-2ab5042b4e84", "sighting_of_ref": "indicator--d739e2d0-8e61-4654-8322-d0473276f37c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec76f298-ddc1-4728-bf20-f3185ec0196e", "sighting_of_ref": "indicator--4dc12a10-c1fc-4cec-a865-0e52da00ce35", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29fc636-143b-43f3-b4ee-d15a0d6580cf", "sighting_of_ref": "indicator--4dc12a10-c1fc-4cec-a865-0e52da00ce35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2165d3d1-5810-4c78-85e4-074535be9e4b", "sighting_of_ref": "indicator--4dc12a10-c1fc-4cec-a865-0e52da00ce35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f8d6ea-9efa-4b32-a0c1-3d472e68929d", "sighting_of_ref": "indicator--68875056-ee3c-4149-9cd6-97bef293cc46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aadb84-b90a-4e69-b48b-c450a38d1f0e", "sighting_of_ref": "indicator--00453e51-727b-4229-930b-7d96f7d76130", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58756fe0-d02d-4678-b3ee-ee7552ee04ad", "sighting_of_ref": "indicator--90ad711a-91fc-4e19-8d67-1b856c983897", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816a167e-ebc0-4d0f-9959-eb1be8a19d66", "sighting_of_ref": "indicator--3edcd637-d9a0-4d76-900d-10af8d5cc7de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80dab568-67d8-47b5-aa28-be5aac99f39f", "sighting_of_ref": "indicator--d2707bbc-a960-48d7-9fc6-5dffea44297e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7592974c-bad4-40c4-b2ef-92ca2ddaa67d", "sighting_of_ref": "indicator--6c5e34db-a69d-4c55-907e-0a92d6f71da9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1c12e9-1348-4990-9c3d-6b36b05e4036", "sighting_of_ref": "indicator--3442e023-806f-4f9b-862b-9de63d6c30cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2ab0ba-d417-4779-8424-60941c187551", "sighting_of_ref": "indicator--9b9fc1dd-87e8-4dce-8b45-7f9597cc4860", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dc3be1-6f01-47da-bd43-1be4dbefee84", "sighting_of_ref": "indicator--77e11365-b626-4476-9105-b63a8d476287", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7983cf-1f39-4db3-a246-4d12c2e937fb", "sighting_of_ref": "indicator--4516f81c-8d3e-4304-ad76-359d5dd9dfd0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b84ef9-6c51-4f78-8693-55abdb7675ec", "sighting_of_ref": "indicator--365cbda0-1cc9-44fa-813d-e5f7cae91f2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a282cd9b-e822-40ff-ae7e-9f4ad223b58e", "sighting_of_ref": "indicator--f57a73e1-fefb-4f83-8081-eb15fc62da21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f55eea-f996-4d95-9cb2-49cde4fbe9a4", "sighting_of_ref": "indicator--22b85935-ebd5-47ed-b7b5-ad06c03b1c94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ded1f8-fddf-42b6-b8db-0c770e69f8bd", "sighting_of_ref": "indicator--ef251ec3-4dd5-47a9-8f3d-85d50573ab8f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacedd72-ebee-47fa-8846-5dccf8beaa8a", "sighting_of_ref": "indicator--9f6149e0-8455-4864-8905-4c50cbe9bf2e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ed4e1a-a71d-412e-9b6e-754468911845", "sighting_of_ref": "indicator--9f6149e0-8455-4864-8905-4c50cbe9bf2e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f1c403-fa4f-4a15-b5d1-f7aea070a104", "sighting_of_ref": "indicator--9f6149e0-8455-4864-8905-4c50cbe9bf2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e934dc9-4391-4f20-b68e-aebde39ca671", "sighting_of_ref": "indicator--a06790aa-2a85-4eb1-80c1-bbfac809ddd0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e821ef-fbf6-4cd3-8edb-8bb670e9fcb8", "sighting_of_ref": "indicator--a2cae8ea-db57-4e92-a29b-ac9af1ce701e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872872ee-5a4f-4a1d-8907-b6e34c3774ee", "sighting_of_ref": "indicator--6637957f-1882-4f2e-ad30-f0dcf9162723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8820244-6402-4ea5-a188-20d5f77211e2", "sighting_of_ref": "indicator--66f179fc-edfb-4eb1-a77f-fadc5b02ae79", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29837d6a-b87a-439f-a11d-4e3f3dfea326", "sighting_of_ref": "indicator--c6713a08-983c-40d9-b02b-7235584e4b17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80f6ca1-edc7-4b8d-b31f-7b3bb70f0a99", "sighting_of_ref": "indicator--544d310f-5fa6-46fe-b635-95f08fb92c73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dad830c-3b4d-4520-b8b1-01730e77837a", "sighting_of_ref": "indicator--452a300e-b216-4c53-a563-a84682d5b84d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f135e93-8f5d-4da9-a12b-fa89b0ff6b8c", "sighting_of_ref": "indicator--b92cc0a9-82fe-4401-978b-b571aee974ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119b0047-7a85-4064-b478-abc1a56ac321", "sighting_of_ref": "indicator--fb3cde1d-050b-4cc8-afe0-829c4454d9b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703bf7cc-1c2f-44b8-9e3c-0a3774b91021", "sighting_of_ref": "indicator--3edb5373-0638-4350-b91d-9cb37f96007f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058d5da2-a0a2-49e9-8c3b-e50cb5365436", "sighting_of_ref": "indicator--d15daf3e-e933-443e-9fb1-8c48dd189334", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38debab-3835-4779-ba16-1290963a4886", "sighting_of_ref": "indicator--4a229038-552a-4418-b4d6-a97a69e8bdd4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5896c48-7f0e-4797-82c2-ef1f21ee219d", "sighting_of_ref": "indicator--1e51d2c1-1e86-4327-8b97-79dc1b43f0c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8bade4-0f46-49d2-b5bd-f59defdde259", "sighting_of_ref": "indicator--a97c1d9a-cf3b-4068-8f29-54ab6afe104c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eda986-4183-4039-85b0-d5ff94cef5df", "sighting_of_ref": "indicator--a97c1d9a-cf3b-4068-8f29-54ab6afe104c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44d8db8-b3e1-4c96-91b0-3e8819eb8f0b", "sighting_of_ref": "indicator--6475ce70-45b8-4b18-a1fc-c01a1586b05b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e5a4ea-cb55-4403-b083-c95b638bfeba", "sighting_of_ref": "indicator--6475ce70-45b8-4b18-a1fc-c01a1586b05b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad11681-7414-4c16-b419-c9f2d773f136", "sighting_of_ref": "indicator--6475ce70-45b8-4b18-a1fc-c01a1586b05b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59a8dec-4d54-41b9-934d-eb7a7abb9889", "sighting_of_ref": "indicator--7984b0c9-f041-48bc-8cd6-3954d33f99b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a775a1-87f1-42f6-ad88-d99a435ce45d", "sighting_of_ref": "indicator--77fbd85d-b137-4904-8e72-6b3576340bc3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53022c95-9912-4612-9a28-f6a67f29195a", "sighting_of_ref": "indicator--4aa737f6-bd29-4a80-9b22-29d01931efc6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9fff9b-38dc-4d1b-a264-76beb5398549", "sighting_of_ref": "indicator--172ccd16-098c-4f72-9590-6164ffcf0699", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dbda70-695b-4a03-a705-7056dfbce0d0", "sighting_of_ref": "indicator--05ab0ede-5aa4-4b15-ac07-31f6e0cf37bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbced01b-5251-4cdc-9e13-9997c19b12eb", "sighting_of_ref": "indicator--05ab0ede-5aa4-4b15-ac07-31f6e0cf37bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e013badf-9dc8-4e4d-a900-1933e76b3cd4", "sighting_of_ref": "indicator--05ab0ede-5aa4-4b15-ac07-31f6e0cf37bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10ade5b-e1dd-4cc0-b3e6-0c331597ab2e", "sighting_of_ref": "indicator--50700b0c-9c07-4513-bcc5-c99b4fafda60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c985871c-e24f-4826-bf87-97c479df4031", "sighting_of_ref": "indicator--67c0fb6b-a119-456c-9458-60281031c698", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d0061f-8e5e-44b6-b94a-64e631265319", "sighting_of_ref": "indicator--a9f13710-e210-483e-a56d-aab1332d913a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bf640d-63f0-47d7-9718-08f1bd5df1b5", "sighting_of_ref": "indicator--a9f13710-e210-483e-a56d-aab1332d913a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c745a671-bd6c-4d86-b961-1a4bbe812654", "sighting_of_ref": "indicator--60c799a2-17a4-4eab-ad63-3e03f01681cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259a5e89-5eb7-4d95-8d5a-b59781af56a0", "sighting_of_ref": "indicator--60c799a2-17a4-4eab-ad63-3e03f01681cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f040e85d-ac3a-4bbc-a5cc-e2b39930b68f", "sighting_of_ref": "indicator--7172d57e-992d-44e0-9dff-9aca04c62b63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44486097-0c74-4744-93b7-cb6c07ffa5ef", "sighting_of_ref": "indicator--d6fcdf97-d87c-4e76-8097-dd40b59ed176", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5740439-9fa2-48e7-9d3a-87973619dba5", "sighting_of_ref": "indicator--d6fcdf97-d87c-4e76-8097-dd40b59ed176", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87281848-f6fd-4f82-9f0d-0fba8458534d", "sighting_of_ref": "indicator--d18c3cc5-fa66-4140-941c-21706ff2da2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a736de-ec31-4df8-8879-45bfef60bdba", "sighting_of_ref": "indicator--d18c3cc5-fa66-4140-941c-21706ff2da2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a777f97c-8d47-459f-b0c6-2037a94d5071", "sighting_of_ref": "indicator--d18c3cc5-fa66-4140-941c-21706ff2da2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6e3dbd-3875-41ca-8aa2-7de6c1adbbb1", "sighting_of_ref": "indicator--e2db12ad-308c-4b09-a76e-7f4ce1eb33d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8d3047-a7b1-48c5-913d-bf23a2c7c5f1", "sighting_of_ref": "indicator--60e4ffde-41b7-452f-8160-e1c1957dca3e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dbf315-7552-43fb-b36c-16d986e44c4f", "sighting_of_ref": "indicator--60e4ffde-41b7-452f-8160-e1c1957dca3e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99c9dec-863b-4ffc-bfa8-31ba79e0290f", "sighting_of_ref": "indicator--3e44819f-1d67-4e70-8900-cea0d053ba9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ea9e7a-cc33-4783-8b9e-0ea29de6a4d2", "sighting_of_ref": "indicator--3e44819f-1d67-4e70-8900-cea0d053ba9f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b185d3-66e7-4cd1-bd71-a0b496646e92", "sighting_of_ref": "indicator--bc8cf043-531c-4e86-aed6-45c2cbc18b5d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782721c8-042d-41ea-9f6b-ae3257a074bd", "sighting_of_ref": "indicator--bc8cf043-531c-4e86-aed6-45c2cbc18b5d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b3aab-04c6-4c33-a668-c574fe0c2369", "sighting_of_ref": "indicator--e37881f6-d375-4680-b643-f40f0018d434", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07f4dd7-eb82-4d42-8f01-4b0030348a2d", "sighting_of_ref": "indicator--10f4734d-47d1-4daa-a5d2-39be756b822f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22534736-09b2-4420-b98a-bfd6f41cf2f6", "sighting_of_ref": "indicator--85c59942-4c10-4721-80ad-1e8d5f2bb354", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3eb2aa-3ce1-4a90-a5b9-08a9544ed8c7", "sighting_of_ref": "indicator--58192434-a14d-4cf4-a02e-9e00cb86af98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237a29cb-dd68-4954-80b9-e4249b64789b", "sighting_of_ref": "indicator--e8ae0da0-1e11-4645-a32a-2519573b0948", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b5438c-4861-4820-a2ad-e5945518ee2c", "sighting_of_ref": "indicator--23e273a6-3346-4be6-bd12-4c67631d97dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed92f07-c3b8-4c85-9739-a37d44242ba4", "sighting_of_ref": "indicator--23e273a6-3346-4be6-bd12-4c67631d97dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acc9cf7-93bb-4971-95e3-085ac6f01b41", "sighting_of_ref": "indicator--0f3d893b-56c4-4d49-8d04-5810dd4fbbd7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb50ce0e-a306-4692-b96e-9e80e34ee989", "sighting_of_ref": "indicator--efa31d47-8eaf-40cb-b657-9cfde729eaf4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389952c9-795a-454c-be4f-75eb49774ed1", "sighting_of_ref": "indicator--d736744f-e1a2-4648-b403-6898ea3c0b25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3519f6d3-ed28-43fc-8216-cefa33d11174", "sighting_of_ref": "indicator--220d4f07-64b1-4659-a4bf-7e9209202c34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d7f045-d1a3-4b46-bc04-341a9c475cdf", "sighting_of_ref": "indicator--2e07f577-058e-41f0-8e16-70c9e50f6a1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c14cd7-02bb-45d0-a685-c6765a1f6fd8", "sighting_of_ref": "indicator--ab7067df-66cd-4684-82f6-b93fea55a95a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a247d0-73cf-4d41-bbaa-92fb1a9f242f", "sighting_of_ref": "indicator--ab7067df-66cd-4684-82f6-b93fea55a95a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290c4e4d-2664-462f-b4ac-4d79e27648c7", "sighting_of_ref": "indicator--ab7067df-66cd-4684-82f6-b93fea55a95a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f70b73-dc69-4222-831e-ac2cab414eea", "sighting_of_ref": "indicator--ef656a70-66c2-4d97-8dff-4a3a7ab9d45d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9254379-273c-4ae2-8df0-2b86cbc10db1", "sighting_of_ref": "indicator--6cd7bb89-9519-44a3-b78b-4a73bea4997a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce939ad-f688-4faf-b2ff-f7629c584d44", "sighting_of_ref": "indicator--6cd7bb89-9519-44a3-b78b-4a73bea4997a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a37ceb-d891-4591-8267-529febb7c08c", "sighting_of_ref": "indicator--6cd7bb89-9519-44a3-b78b-4a73bea4997a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80335da4-b290-4186-8352-f042b8ff296a", "sighting_of_ref": "indicator--881bd793-64c0-41dd-99a3-25df2199baf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c799ad00-47f3-46e1-bb48-3968595cb1bc", "sighting_of_ref": "indicator--4ec25ad3-bc8c-4366-a4d6-c5459f183ba6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6a30d7-aab5-44ee-b65e-299c780f649e", "sighting_of_ref": "indicator--8076339b-7016-459b-9def-d540760fe6b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7e17d0-3dc3-4ffe-8d32-f7c9f5a577c1", "sighting_of_ref": "indicator--525d2aa9-3475-4fca-bdca-1d7e5196e9f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3451dc-ece0-4c89-9b42-fd4001c8e980", "sighting_of_ref": "indicator--525d2aa9-3475-4fca-bdca-1d7e5196e9f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d356b3ed-8957-4350-a36e-39dc9e261449", "sighting_of_ref": "indicator--cf709c43-fdc8-4c40-9729-e815403419f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0d934d-e200-4105-8e84-c74a6cc2e2a0", "sighting_of_ref": "indicator--cf709c43-fdc8-4c40-9729-e815403419f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1c7e36-421b-45cb-b321-4399249473ad", "sighting_of_ref": "indicator--6141cb26-ee85-4d33-9402-b8521321de6b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817196e8-9112-44bd-b274-f34a800a71f2", "sighting_of_ref": "indicator--3e16696a-b012-4c1c-8f66-2546546e04d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e80b7cc-1c55-4ead-9ed8-40ce15d5d62c", "sighting_of_ref": "indicator--fadb3e9b-d703-43f3-aa37-fd8fd2627e4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9a2087-1028-46d3-8b16-89b464d89cca", "sighting_of_ref": "indicator--b326351d-52a0-4bf3-97a1-059f23fef27c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b583ea-caa8-4995-a017-5ac5ac42557b", "sighting_of_ref": "indicator--09c36b92-5b23-4d7e-8ba2-47093ba31e77", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068f296b-7264-4afc-94cf-848b492a2ecf", "sighting_of_ref": "indicator--3ddfaf6d-3611-41c4-819d-2ee4841f7594", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66822631-2771-472f-b60d-c1bbcac0a991", "sighting_of_ref": "indicator--8062d962-ea51-4e97-a3de-c508af230ea6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e5517a-53ee-4d88-9018-394803f19697", "sighting_of_ref": "indicator--8062d962-ea51-4e97-a3de-c508af230ea6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406ac6ff-6691-49f1-8b77-64a4c1a8d207", "sighting_of_ref": "indicator--1b1969e3-05c8-4102-a432-56f6049d40a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ab83de-e1b6-499a-9694-c18706e3bb71", "sighting_of_ref": "indicator--1b1969e3-05c8-4102-a432-56f6049d40a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6def5fb5-95f6-4e98-9e31-cd94a6480b50", "sighting_of_ref": "indicator--1b1969e3-05c8-4102-a432-56f6049d40a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbf0b04-0f42-47bb-a677-b67c1f2cad94", "sighting_of_ref": "indicator--a004237d-fd8d-4929-8a27-462da6501e9c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d9cbe7-fc99-41d3-ae6b-7f4aa59f2a34", "sighting_of_ref": "indicator--a004237d-fd8d-4929-8a27-462da6501e9c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8b0619-1ed5-4030-af53-5b7911c5896b", "sighting_of_ref": "indicator--17320d17-3f3e-422d-b38e-b5b7d13d96c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294a8357-20cd-4f0d-9ea9-ab5885ba186b", "sighting_of_ref": "indicator--9d7d0275-edc8-43af-ae91-59e15e884308", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eef2d3-780f-421b-9635-f0d9c137a4e2", "sighting_of_ref": "indicator--9d7d0275-edc8-43af-ae91-59e15e884308", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41418a11-4e2c-495c-8ce5-f486679c9f7f", "sighting_of_ref": "indicator--30ba6664-542a-44c8-9257-96703163febd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162ba425-b8b2-4260-9af4-91ad7566a296", "sighting_of_ref": "indicator--9cc74a25-917a-4f6e-9e47-891ec37f3aaa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a05096e-bc22-482e-8c18-58dd71966e7f", "sighting_of_ref": "indicator--9cc74a25-917a-4f6e-9e47-891ec37f3aaa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eba0f6-4080-43db-8d53-da69dfde0238", "sighting_of_ref": "indicator--e30557ab-9122-4b28-8079-e7f7d4ea2b93", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1a8da5-8caf-4f82-85fc-a015c935ba13", "sighting_of_ref": "indicator--fae3ece1-0cc7-42ff-9c41-f81576358e1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c525d2de-5842-473a-93c5-865c391de211", "sighting_of_ref": "indicator--9c230546-8ad7-41bd-ac12-0a6a63122c9c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4431ac33-e874-462e-90e7-2d6829883777", "sighting_of_ref": "indicator--7ea4f148-fe36-4a27-90a3-f72b6fd6da71", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cd7f95-092c-4cd0-90f8-bb3c6b3603a3", "sighting_of_ref": "indicator--7ea4f148-fe36-4a27-90a3-f72b6fd6da71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168c79ce-3167-41d2-8669-eaf38d39eca7", "sighting_of_ref": "indicator--d746f3bf-8bca-457f-ae50-b4ffa07b2ee5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af81745-a16d-4329-a62e-b118ad011bcc", "sighting_of_ref": "indicator--74a17f41-c7b2-4c86-8b38-dc7c2cfcae57", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb2525b-13b5-4d6a-9dc9-e33681b584f4", "sighting_of_ref": "indicator--f396d4cd-ad8e-4087-993b-46feeed3f052", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274a9cca-a417-4e1e-b050-962a2507e06e", "sighting_of_ref": "indicator--f396d4cd-ad8e-4087-993b-46feeed3f052", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92740401-1ddf-4dfe-a3dc-ff83b524a906", "sighting_of_ref": "indicator--9cdb9c24-d356-485a-8653-174f4cb0e562", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1fe06c-c31c-4366-8dc1-2633d232b4c8", "sighting_of_ref": "indicator--9cdb9c24-d356-485a-8653-174f4cb0e562", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa2423d-e721-439c-8e8b-e61550d441b7", "sighting_of_ref": "indicator--6e55eed8-eda7-45ac-9918-62cd54569e6b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a5a586-6efb-4492-a704-e64e35866c9a", "sighting_of_ref": "indicator--6e55eed8-eda7-45ac-9918-62cd54569e6b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17e750e-a729-4f7a-a353-724878d9559b", "sighting_of_ref": "indicator--d4cb985e-89d1-4c9e-bc70-42dc03f91ef8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58be94c4-b175-414f-8036-0e10dc043144", "sighting_of_ref": "indicator--ce2cd566-baed-4451-b372-3c12c970ddf8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49bf647-2ba8-482c-b738-cf77208a6a07", "sighting_of_ref": "indicator--ce2cd566-baed-4451-b372-3c12c970ddf8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad63bee2-ce5f-4116-9f4a-b3205299d0f2", "sighting_of_ref": "indicator--ce2cd566-baed-4451-b372-3c12c970ddf8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a8acc6-cd78-4b22-b757-210551bb758a", "sighting_of_ref": "indicator--77ca7cc6-9e70-4681-b263-ea96b110a33a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa72f73-a39c-4bf4-a603-ad41420bced8", "sighting_of_ref": "indicator--272d6726-a23c-4536-a996-e663353c473e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be455702-c614-4a51-9ee3-a61a83c89bbf", "sighting_of_ref": "indicator--a4c67ec3-f3ad-4f63-907e-ded3c1b02fc3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a39577-0db8-4af4-b958-56d0d99cbbcb", "sighting_of_ref": "indicator--a4c67ec3-f3ad-4f63-907e-ded3c1b02fc3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1724b2-2c79-4f7c-b651-2ca973fc823c", "sighting_of_ref": "indicator--a4c67ec3-f3ad-4f63-907e-ded3c1b02fc3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd33524-8c85-4bcb-a1ab-5168e1ccc87e", "sighting_of_ref": "indicator--647f3108-e9ea-4821-a673-a8059c5a90a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a53152-8183-409d-9c63-5554e9149432", "sighting_of_ref": "indicator--647f3108-e9ea-4821-a673-a8059c5a90a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00f84c5-ced6-4ad8-9b1a-1c3d56d4587e", "sighting_of_ref": "indicator--647f3108-e9ea-4821-a673-a8059c5a90a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a2251c-2f98-44bb-be31-d748393aa198", "sighting_of_ref": "indicator--f3b01c40-920d-41a9-addd-c1b81df88afd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60413d1-7550-461c-ba03-3f9dcfda6e1d", "sighting_of_ref": "indicator--f3b01c40-920d-41a9-addd-c1b81df88afd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adb5bdf-1efe-4af7-a04e-4cbf3ef92592", "sighting_of_ref": "indicator--f3b01c40-920d-41a9-addd-c1b81df88afd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76019ee-f9e6-484c-a324-3b07e511b577", "sighting_of_ref": "indicator--f9f9442a-9534-42ea-9a0c-98822380f321", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeeda48-61fd-4163-a792-386d74883f90", "sighting_of_ref": "indicator--29b877d6-c879-443f-8ed1-a5f057d318ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e5d107-f5f9-4910-ba32-1cf494ad5afd", "sighting_of_ref": "indicator--8c0bfc32-24d2-4ded-8e12-8ccccd7c38e3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32a2c1a-e6d6-4161-b43d-ea59ef0a8b42", "sighting_of_ref": "indicator--c15ac441-c844-4da0-94a2-da9c87266577", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cd2446-5883-4be7-bdb3-66cf7e2c4595", "sighting_of_ref": "indicator--ec3c7b1e-e709-4d1a-a0ce-e51885598cc5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becc2ecf-c9d0-4a15-a18b-8d1d64df8cf8", "sighting_of_ref": "indicator--72b3c81f-1242-4bb1-993a-ade7592ccdd2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc71152-22ac-433b-87a8-a43869a8852e", "sighting_of_ref": "indicator--4e0b96d4-2bd0-4cd4-88d9-3e4fb9022bbe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3450d3ba-b311-474f-a0a8-429c12abb10f", "sighting_of_ref": "indicator--e937817d-149a-4f9b-8da6-71013bf99e1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93e27ea-8f31-4347-95ec-b4a5f7223c95", "sighting_of_ref": "indicator--e937817d-149a-4f9b-8da6-71013bf99e1d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094030c0-749d-4fe9-9584-d09e9b224441", "sighting_of_ref": "indicator--27cce535-5738-4b50-9d0f-c9d12a149d7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae473a05-5aff-4ef7-abda-2b5a43187479", "sighting_of_ref": "indicator--f0e80db6-65a8-4437-b2b2-805d43bae434", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80599894-9b88-46a0-bd3e-934d046ac9e6", "sighting_of_ref": "indicator--f0e80db6-65a8-4437-b2b2-805d43bae434", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4ab868-f2ab-4c11-9be8-d8cc4dd55fe0", "sighting_of_ref": "indicator--78c17927-bf16-40b1-ba63-b358d4039ec7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1f62e4-fcb1-4103-a6d1-55ba7e9ad645", "sighting_of_ref": "indicator--6a96d8c6-d6eb-4e2c-8044-a6222ad9f89c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966d2419-8c36-4ddd-90cd-031d7f1557b7", "sighting_of_ref": "indicator--6a96d8c6-d6eb-4e2c-8044-a6222ad9f89c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce8d6ef-4c81-4d7f-80d3-e014041bc1e3", "sighting_of_ref": "indicator--3d71aac8-cc0f-47ec-8b06-3e50d24e2d6a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8b8a3f-7f47-4cc4-ae60-2eda4c33adea", "sighting_of_ref": "indicator--3d71aac8-cc0f-47ec-8b06-3e50d24e2d6a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50448368-03ad-4d69-87bc-bc776e3fc4ff", "sighting_of_ref": "indicator--2243d614-9f83-43c8-86d6-887102793b21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda5de08-2d5b-40a2-a867-70319ae3d1e1", "sighting_of_ref": "indicator--eb01fb58-76ec-47b1-9de9-60d97e8f0762", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daef18e7-6079-4c33-8a11-7fd02b8b8078", "sighting_of_ref": "indicator--eb01fb58-76ec-47b1-9de9-60d97e8f0762", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6de3281-293b-46aa-ad6a-0eaa38b3a14f", "sighting_of_ref": "indicator--89fbf7a7-b86a-4e6a-aded-6a9be13acaea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154ebb38-ddae-4d6f-8c79-f91c458c52af", "sighting_of_ref": "indicator--e5252329-578b-4b5f-a5d6-d260d3f4729e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08903e65-9768-44ee-ae5b-fd7612c92ec5", "sighting_of_ref": "indicator--4984957b-ca34-4d58-886d-9c9629f3a8d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cb362f-24bb-45f2-a94b-fff0ef6ffbe3", "sighting_of_ref": "indicator--74336062-bf7b-44a4-b9fd-c070c2802c5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1183edb-5ae7-486c-93a3-f66c3e53eed5", "sighting_of_ref": "indicator--74336062-bf7b-44a4-b9fd-c070c2802c5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57b342d-8fa5-4f27-baea-221e383c5adc", "sighting_of_ref": "indicator--74336062-bf7b-44a4-b9fd-c070c2802c5b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a09d40f-899f-4159-87f7-1303e774c0cf", "sighting_of_ref": "indicator--b7b4a612-1e77-466b-928c-dc5ef5e85be3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5ccf32-9f5c-42f2-b217-bfc5bd557e67", "sighting_of_ref": "indicator--b01315b9-b35f-41a4-9db9-2eadade8def7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7fdae2-e67f-406c-8090-be8d3429eb17", "sighting_of_ref": "indicator--afef46d6-79de-4835-83c8-65424dbaa02c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b570d157-15e2-4153-8bf9-e5d65192c4dd", "sighting_of_ref": "indicator--f2691f99-523a-4d81-b8ec-52a00b394f5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df91850-9a0b-434c-96b7-2ced88587667", "sighting_of_ref": "indicator--06464c15-a428-4de8-8dd4-d531259b3a89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae28d04-6f67-47be-81d0-3e33e8fd0f84", "sighting_of_ref": "indicator--b5edb9d2-8345-43cc-8f82-2ecc800d439c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34978e87-5393-4b68-9520-4cd68649fc98", "sighting_of_ref": "indicator--1e92b733-4ce6-461b-9ca3-02a8e10c07c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b2f3e1-cf3d-44cb-9f0c-d395ba7f5355", "sighting_of_ref": "indicator--07bc8631-b525-403b-8cdf-f3289f1c820b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f8ef33-ca98-460c-9b2b-11f5e6380f0f", "sighting_of_ref": "indicator--04562419-e76e-4b3d-9e70-561670cfcbcd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3139c64-6af2-490b-a78f-8727b50e1870", "sighting_of_ref": "indicator--ae266136-1344-42c0-a4dd-b1ace4f67926", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f71b319-ab98-4486-be03-f59dcdf2f459", "sighting_of_ref": "indicator--36a99cff-3376-4d08-b8ee-d81ec0b9890c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cf8734-fb17-485c-8176-865c9a4c28b1", "sighting_of_ref": "indicator--2e820f54-d180-4cc5-b45d-ec144fe155e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bfd316-4eb3-444d-81ed-e8d2ce5ab401", "sighting_of_ref": "indicator--8dda1034-2596-4689-bda8-d1a325905320", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711fc654-e3f3-46d3-9503-73517fde883c", "sighting_of_ref": "indicator--805a3f7a-beaa-4d95-b416-b1622237d8d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c352586-31e4-4536-9d57-ca262604148b", "sighting_of_ref": "indicator--805a3f7a-beaa-4d95-b416-b1622237d8d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac5ab6e-b512-443b-9375-cf7a3f612b79", "sighting_of_ref": "indicator--c7abbe19-c286-4847-9efd-ead234217573", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f071c3-431f-4b17-af83-89fd68891d99", "sighting_of_ref": "indicator--fe50a52f-93ba-4f72-af77-5eaef71ccb59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c175d3-894d-409d-a8bd-ba4ed88a6096", "sighting_of_ref": "indicator--7a1604e8-7abc-46bc-9187-cc951f365247", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16790d5-3595-4581-8d49-90195c594500", "sighting_of_ref": "indicator--a9c37098-53e2-4145-8145-b0ac37aeaa22", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772d6eae-ec0c-4376-bff2-3fcc4836dbd1", "sighting_of_ref": "indicator--b2e4f036-e57c-462b-a25e-f67ee006736c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd932706-4e3c-4d57-925f-728614d31230", "sighting_of_ref": "indicator--a74fe080-645a-42fe-b6ef-abec1c9e7aca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032686a3-6f68-4301-bf34-5b4e738490b7", "sighting_of_ref": "indicator--44033c40-ea8f-409e-af12-bbe73755bc6a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c6ac83-b328-41fc-8155-5edb9d384a41", "sighting_of_ref": "indicator--f57f2be0-82b3-48d7-af55-eeca51384aad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc803393-c369-47ce-8157-492e0b2b65cb", "sighting_of_ref": "indicator--f57f2be0-82b3-48d7-af55-eeca51384aad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62efb43c-60a6-47a4-b125-275ed2cabacc", "sighting_of_ref": "indicator--f57f2be0-82b3-48d7-af55-eeca51384aad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6289d07-9f74-4dd8-9ea3-ff76e7973cf6", "sighting_of_ref": "indicator--ad68d14f-0e43-4ee6-8803-96813af6488b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e676a88e-a83a-4a59-b84a-237cb69e02ee", "sighting_of_ref": "indicator--28303c4f-9729-4a72-a387-d79cef1f036e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1785c99b-9cc6-45a8-88cc-baae9d2cb3d7", "sighting_of_ref": "indicator--28303c4f-9729-4a72-a387-d79cef1f036e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731e6f15-4684-45cd-8e8e-021311091d9c", "sighting_of_ref": "indicator--28303c4f-9729-4a72-a387-d79cef1f036e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d99d061-f418-43f2-9755-bb65feb68fb7", "sighting_of_ref": "indicator--87232e17-d9cb-4629-a4f6-348d0146a1c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b64b1a-0aab-469f-8daa-39f084536e55", "sighting_of_ref": "indicator--87232e17-d9cb-4629-a4f6-348d0146a1c9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7148d1-683f-4f69-81b1-3144ba336d43", "sighting_of_ref": "indicator--f411d9dd-8e15-461f-850f-8c0e6790c0c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f42f3a5-4dfe-4eb2-977a-8af54d4fb886", "sighting_of_ref": "indicator--f411d9dd-8e15-461f-850f-8c0e6790c0c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512db7fd-55e4-420f-9d2a-52f79656155d", "sighting_of_ref": "indicator--23b53dc7-bbab-4fc3-a52d-c933e3c37149", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ed85f7-f6d9-462e-909b-345941d09609", "sighting_of_ref": "indicator--41bfe4ef-3b61-4b9d-bfee-0d9bf68dbd2b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781a8f10-d25e-427a-9b1e-221afc0cb341", "sighting_of_ref": "indicator--e9360b24-3875-465c-9e26-941cbcb6fc84", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5b7c74-aad7-48d3-a9c9-f62761bda231", "sighting_of_ref": "indicator--2038f74d-1d68-48e6-ab77-1bf6cc682f15", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bb9b28-9e72-454f-b71c-9d7edbdeb0a0", "sighting_of_ref": "indicator--1b780ca6-7145-456d-b570-a89f26cffc2e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746cdbed-7063-4920-a309-bdfb0a104ed9", "sighting_of_ref": "indicator--34357c4a-5e90-476b-84fd-3afd183e0ca3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2127f52-66d8-4cbc-95e5-14e382bb8a67", "sighting_of_ref": "indicator--4c63795d-1f22-41f4-bf2c-d0b533199177", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d94ead-24f8-4d0b-9f53-1dc16f2f0872", "sighting_of_ref": "indicator--3f2fbdcb-4ecd-43c4-a6bd-4204a7fd4c31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824ec1bc-fa99-48e7-8628-b473819bf20b", "sighting_of_ref": "indicator--902b57be-702e-4224-9ddb-fdfa7084b96d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e89b75-87db-4004-83e8-32b3bedb3e2a", "sighting_of_ref": "indicator--902b57be-702e-4224-9ddb-fdfa7084b96d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4444513-65a2-4dcc-ac79-7ebf2576f1b2", "sighting_of_ref": "indicator--4a5e66ea-4cb2-49e4-bede-3a36857fc573", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463426ad-163c-4298-b1d9-c9f24ecf0de8", "sighting_of_ref": "indicator--4a5e66ea-4cb2-49e4-bede-3a36857fc573", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d33f8b4-d025-4e1a-82bd-4c1fc08e73e7", "sighting_of_ref": "indicator--4a5e66ea-4cb2-49e4-bede-3a36857fc573", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9120703b-e968-4564-9d0f-e9fd08d20e0a", "sighting_of_ref": "indicator--ea6af921-8b9d-4df7-8fdb-1920d2efc6ae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe46e7f0-0d9e-4acc-bfeb-0c1e1ba84284", "sighting_of_ref": "indicator--edc18991-8fcd-471c-9443-c03cfcface29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb05d07d-0f9e-4fcb-a6ed-158d0828fa90", "sighting_of_ref": "indicator--75867f82-0e74-4400-a79d-22423b128c89", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ad98e-4b23-4a38-bc70-05b74d3398c6", "sighting_of_ref": "indicator--75867f82-0e74-4400-a79d-22423b128c89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d79dd42-93c5-4d54-815b-397d0c0615d1", "sighting_of_ref": "indicator--1eb75e47-bfec-47cc-840f-d4eda452ac3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c64db4-7ade-4f81-85d3-2f7f063a5a01", "sighting_of_ref": "indicator--1eb75e47-bfec-47cc-840f-d4eda452ac3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1fb145-6cb6-430a-8997-5261b5a1c185", "sighting_of_ref": "indicator--f2227c1e-5a45-40ba-911a-07aeb2cc2303", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a64a70-6883-494e-8dc5-fbcd37fa8948", "sighting_of_ref": "indicator--828c77b0-27aa-48e7-abd8-b7f20a9cbb41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3374022e-9ffa-4f7e-9626-565d5f543afb", "sighting_of_ref": "indicator--828c77b0-27aa-48e7-abd8-b7f20a9cbb41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4eca4f-f9f0-4f99-858c-7697b1176cf4", "sighting_of_ref": "indicator--1a534fc9-e6a0-4ffa-8f16-c93debaf6403", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d63f14d-a6ba-45e6-af7b-7519b40eb7aa", "sighting_of_ref": "indicator--c580ca09-cb3c-4928-a55c-df34ddbfceb8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc54563-8460-4b44-9aee-c5bfb0ddc891", "sighting_of_ref": "indicator--d0e36225-ca70-4197-a1fd-58d262ecec33", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75918ed5-a38e-49e2-9699-3b95fc394afe", "sighting_of_ref": "indicator--b17e9681-b719-43c4-989a-4f8ba7fa4210", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23842511-8cf1-4b3e-ad94-ecbd3bdc6634", "sighting_of_ref": "indicator--4301d06e-407e-4488-ad7f-8fffc1b4b2f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e233c0e5-307f-478c-bf51-a9043b8b7afb", "sighting_of_ref": "indicator--a6fa0471-d48c-4d0b-9a52-f17a3f26a071", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b5fbea-6878-4ad6-8c95-d0cd96544bdd", "sighting_of_ref": "indicator--a6fa0471-d48c-4d0b-9a52-f17a3f26a071", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37e4384-eef6-4234-af77-0693e1615d03", "sighting_of_ref": "indicator--7c700104-d3a3-4000-817e-ed65ddcc7e85", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907370c3-9e10-43d8-a80d-ce6b75fc81f4", "sighting_of_ref": "indicator--c5d56c24-3cd1-4627-a86d-53903837b8b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc030724-ced2-43a1-92a8-6596a852a8a5", "sighting_of_ref": "indicator--c5d56c24-3cd1-4627-a86d-53903837b8b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7c769c-6ecf-46cf-935b-e234bbda49e9", "sighting_of_ref": "indicator--d0084633-3260-4926-82da-57f4ac048eb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c21783-0443-4fca-a5c3-7a82153c68c3", "sighting_of_ref": "indicator--3376dd3f-ef67-4bbb-8cdc-0e90ee518ef3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e9e277-c2f5-418b-bea2-870c84498dd2", "sighting_of_ref": "indicator--37b3b50f-da26-4517-9887-f56e72d28596", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5095fff-92b6-4670-854c-6c47c323a683", "sighting_of_ref": "indicator--37b3b50f-da26-4517-9887-f56e72d28596", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b06878-06a4-4be5-99f9-75ed3699acf5", "sighting_of_ref": "indicator--2c6be90b-b63b-4a92-af0e-357cc1631a95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d78d0ce-0cfd-4570-a841-d19047b3c4fb", "sighting_of_ref": "indicator--2c6be90b-b63b-4a92-af0e-357cc1631a95", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0541638-05c0-4e03-86c8-22048e81d8e3", "sighting_of_ref": "indicator--d051c06a-41bf-41c6-815a-0156edc26dfc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e14765-80f9-4a25-b327-a9199cbab392", "sighting_of_ref": "indicator--d051c06a-41bf-41c6-815a-0156edc26dfc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27dabd88-35a1-4e91-9050-47ed67fd2151", "sighting_of_ref": "indicator--8e8db124-7869-482f-ab84-045758116ccf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9002191-82df-4311-8797-85b46f177b49", "sighting_of_ref": "indicator--a921b308-946a-401c-9105-62a918e4ac7f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c09ae6-2fac-4966-bfe8-374b08ae16f5", "sighting_of_ref": "indicator--a921b308-946a-401c-9105-62a918e4ac7f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bb5d48-0e0b-4ad6-9fab-4149a0f4ed5b", "sighting_of_ref": "indicator--4b87d5b1-4d98-4161-9381-218c44e036bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901ef834-1391-4136-93d7-3f6c309c66d4", "sighting_of_ref": "indicator--8d7bdc93-8c1a-42d0-a9c4-01b7d94e3b0d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81bcff6-6d03-407e-89a9-d7ba4dc0f1f3", "sighting_of_ref": "indicator--8d7bdc93-8c1a-42d0-a9c4-01b7d94e3b0d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a080e55-42be-4786-98c7-efebece6cff8", "sighting_of_ref": "indicator--21a2b6a9-baf7-47ef-a1de-51ed2fdacad8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ac9812-e3d7-4a30-9617-a99ab1794366", "sighting_of_ref": "indicator--21a2b6a9-baf7-47ef-a1de-51ed2fdacad8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b693ec9-ad5a-4f2c-a14b-9a66d5fec5b0", "sighting_of_ref": "indicator--21a2b6a9-baf7-47ef-a1de-51ed2fdacad8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e7f06d-a31e-4112-92ea-03b229650afe", "sighting_of_ref": "indicator--458ffc55-57d0-4464-b21f-5b26ddc903d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc312c77-929b-4284-9d00-12d12f57b218", "sighting_of_ref": "indicator--458ffc55-57d0-4464-b21f-5b26ddc903d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf453cd7-cfee-437b-a465-faf20376aaa7", "sighting_of_ref": "indicator--458ffc55-57d0-4464-b21f-5b26ddc903d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9082a068-7c66-42c3-8cd4-66991da1edcc", "sighting_of_ref": "indicator--26eb7c0c-5434-468c-8aa6-171030d9fb79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac65c507-8b27-47ab-8278-750dc2da613e", "sighting_of_ref": "indicator--d43a9589-a2c6-4ef5-827e-90b3000e133e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42aab51-68a2-491f-9968-52c6dcc4643c", "sighting_of_ref": "indicator--ba4d26e8-329a-48cc-b399-50c4bd9ed115", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee4b71a-a412-44d2-a215-58a34451b0b2", "sighting_of_ref": "indicator--ba8d21ff-eecb-4a15-b94c-ffee70c111e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e55307-1fef-4918-8250-81cbadb94311", "sighting_of_ref": "indicator--ba8d21ff-eecb-4a15-b94c-ffee70c111e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee032aa3-6823-460e-ba46-0f13ddc7d131", "sighting_of_ref": "indicator--ba8d21ff-eecb-4a15-b94c-ffee70c111e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ab9b97-7ea3-408f-a9f9-b85bf2fa0208", "sighting_of_ref": "indicator--64895639-6dc7-4833-a87d-d1316298998a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d5e8a-32af-47ce-b321-28567fc93000", "sighting_of_ref": "indicator--69ae1970-097f-495a-95c0-a0af8902b8f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919e99b4-c360-496d-9298-3ae7d46c8526", "sighting_of_ref": "indicator--69ae1970-097f-495a-95c0-a0af8902b8f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721afba-5547-4346-baf9-d63f486b2f2b", "sighting_of_ref": "indicator--69ae1970-097f-495a-95c0-a0af8902b8f7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a759a0ad-5f9d-4c86-bfe1-1276555dbe2b", "sighting_of_ref": "indicator--cb311d74-cd94-4f53-a86b-5483e4f9513a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbd90ad-8084-4eb2-8331-7eae636b4fcd", "sighting_of_ref": "indicator--4796aea8-03eb-43c0-9081-e3903b61b0cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29357794-af20-4ce7-9830-e0ff52bda57a", "sighting_of_ref": "indicator--4796aea8-03eb-43c0-9081-e3903b61b0cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9477c9-ca0c-4f0f-8332-12042af911e3", "sighting_of_ref": "indicator--458a2292-c868-44cf-a352-39922142a0bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7888a551-82c6-479d-ae9b-43f1e0ee3993", "sighting_of_ref": "indicator--e67cf82b-22da-475c-b957-652f5f848af2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683d4d0f-e5c7-4919-91ae-72069fdb43b5", "sighting_of_ref": "indicator--e67cf82b-22da-475c-b957-652f5f848af2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ae91f2-46bb-4d02-a3a1-1ba673d75cf4", "sighting_of_ref": "indicator--47890c3e-8414-4e55-9a10-cbff1ee56941", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d28cb37-c100-41f5-8f4f-b0965cb1cedd", "sighting_of_ref": "indicator--6c7c63a4-de32-4066-a5b4-b33bc60b2b3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf952b47-7d61-4f1d-8874-41b0eb25b321", "sighting_of_ref": "indicator--4e62a545-0985-4fd4-9c90-34a051784506", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc7706a-3f3b-4400-8fc6-87824777c4c9", "sighting_of_ref": "indicator--4e62a545-0985-4fd4-9c90-34a051784506", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d4929c-f0b7-4470-b80f-86ee78a881b1", "sighting_of_ref": "indicator--4e62a545-0985-4fd4-9c90-34a051784506", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecda3b61-8f2b-430c-88a2-acc42fe5d9bd", "sighting_of_ref": "indicator--5aa6357e-bb5b-4ea7-86ce-b2c77890a065", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca78f57-86ec-4738-95d3-c3f8fa92a3d7", "sighting_of_ref": "indicator--9a4de676-1bda-41d1-9643-9b2c76567a5a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c3eaec-ea7d-48d5-ab9c-557ab5d3dee8", "sighting_of_ref": "indicator--aaa366d5-8e65-4b20-a0ca-6e8acbc13c4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e427e7-edd5-4434-8a74-f34cb4d2a938", "sighting_of_ref": "indicator--aaa366d5-8e65-4b20-a0ca-6e8acbc13c4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef25b539-8923-474d-80f0-4f01ee042ac1", "sighting_of_ref": "indicator--aaa366d5-8e65-4b20-a0ca-6e8acbc13c4f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efe42a5-624b-45cd-b371-a425ebd8a929", "sighting_of_ref": "indicator--07e3c7c5-41ac-4aaa-81e5-b2dbcac466d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b7c2ed-9c93-45d2-952e-6f50829c9bff", "sighting_of_ref": "indicator--67f1c1b2-a0c3-468e-9ef8-c250d0ddb528", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4545cf18-b1e2-4caf-8f07-8657da7e705b", "sighting_of_ref": "indicator--67f1c1b2-a0c3-468e-9ef8-c250d0ddb528", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068cc5af-5d95-45c6-8819-ab5598e27226", "sighting_of_ref": "indicator--67f1c1b2-a0c3-468e-9ef8-c250d0ddb528", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39d852b-ab03-4d8a-99b4-15fdfa069097", "sighting_of_ref": "indicator--138f9609-1ac0-4820-84bd-7563749e7f3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec64c49d-890e-4e5b-87bc-e0e62d39ea86", "sighting_of_ref": "indicator--c803c175-7d5e-421f-afd3-f8d09e4f081e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed636b7-d92f-4998-b4ff-beed900b590e", "sighting_of_ref": "indicator--c803c175-7d5e-421f-afd3-f8d09e4f081e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadad2e0-d9ba-4d9d-bfc0-b69d3f3edaa6", "sighting_of_ref": "indicator--74849fc7-519a-4737-be1c-f98cb9f99913", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13d62da-1099-4f6e-b245-8ae4da847eec", "sighting_of_ref": "indicator--2da449cf-bb19-4c2c-a8f1-22dfe45a68ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e426c23-e5ff-44a8-a2b3-0ad86c17275b", "sighting_of_ref": "indicator--2da449cf-bb19-4c2c-a8f1-22dfe45a68ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcf5908-aff8-497f-9a73-39f484e1bf1a", "sighting_of_ref": "indicator--96c5f18b-3f6d-45c5-acb3-cb227a85ae8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39db4892-f062-40d4-9e7c-5e1afea8a2de", "sighting_of_ref": "indicator--96c5f18b-3f6d-45c5-acb3-cb227a85ae8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175a6256-098e-42b3-8fe6-f150d9234171", "sighting_of_ref": "indicator--905d436f-6a5c-48ca-aaa4-0ffd50afa1b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530aff81-1938-4ae7-b7f4-c7900ceaa6f5", "sighting_of_ref": "indicator--905d436f-6a5c-48ca-aaa4-0ffd50afa1b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b939bdd0-3d2c-460d-8b02-c690fab995fe", "sighting_of_ref": "indicator--db3661ea-07b5-4cd2-8c40-f6a03dc15ebc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a67ca8-e432-48d4-8e5c-ad82affd2dee", "sighting_of_ref": "indicator--4b7e74b1-d3e5-47cf-be47-8139d899425d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ab59b3-960e-4378-ad0c-74f225fda102", "sighting_of_ref": "indicator--a4ee45f7-8698-422f-a7c8-91383b9274ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc0c437-d0d5-463f-9398-0a7bad757300", "sighting_of_ref": "indicator--a4ee45f7-8698-422f-a7c8-91383b9274ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd23d97-50ff-422e-b874-cc0e7cd6170c", "sighting_of_ref": "indicator--43aee06a-c227-4e7b-8108-8238e9256290", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f30a9a-a8df-4134-83a4-4bd8ec9adb0b", "sighting_of_ref": "indicator--051f5581-7a59-4292-b062-03adba79b92d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446fdab6-caee-46d3-8cdb-085c4d1315d8", "sighting_of_ref": "indicator--27b95d3d-f274-4611-82c1-d8e61674b9b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6ec430-ab13-4131-b228-abd74f3b53bc", "sighting_of_ref": "indicator--27b95d3d-f274-4611-82c1-d8e61674b9b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92656535-f016-46e7-a5f3-5dbadbd972a1", "sighting_of_ref": "indicator--27b95d3d-f274-4611-82c1-d8e61674b9b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec14db01-d866-4e02-b68a-1f05619b2020", "sighting_of_ref": "indicator--8fd295a4-c9cc-4e7b-bd18-a738da96c890", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c9276d-b8bd-495f-9ca2-45ff417a6937", "sighting_of_ref": "indicator--8fd295a4-c9cc-4e7b-bd18-a738da96c890", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1e4db0-4b54-4cf6-ac05-8a85a2e107d6", "sighting_of_ref": "indicator--cbc4cbd4-9739-4f25-934c-1dd9da46a155", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc3e1de-5c89-4a70-bbfc-ff9e81a7e4f5", "sighting_of_ref": "indicator--cbc4cbd4-9739-4f25-934c-1dd9da46a155", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679167e3-0af0-4d00-ac07-44efea43a61a", "sighting_of_ref": "indicator--0225900c-b234-46d7-9855-1d75dc08775c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009029ed-d78b-4592-bd3f-418d84b33448", "sighting_of_ref": "indicator--63232a70-5c93-47b2-942b-b967ceeb9442", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--face0ca8-0510-4094-99b7-71963108c97f", "sighting_of_ref": "indicator--01796587-de0f-4292-ae2f-6f6dfb40d84d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e82604-2851-4dca-9c54-b269d4f52be8", "sighting_of_ref": "indicator--01796587-de0f-4292-ae2f-6f6dfb40d84d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95576a64-c951-4145-94b6-d1adb4570fba", "sighting_of_ref": "indicator--01796587-de0f-4292-ae2f-6f6dfb40d84d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28191218-46a3-4c64-999a-cc6a37ed10c7", "sighting_of_ref": "indicator--32102501-3578-40dc-8ebd-82040a651185", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66208510-238f-4844-82ce-1aa04ee40ffe", "sighting_of_ref": "indicator--62186c65-62e0-40ff-afae-b8774ca66bae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621efb9e-68e4-46e0-ad9c-0365c00815c6", "sighting_of_ref": "indicator--220d7514-66a2-43c7-8433-ac207d8c8aca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738f686e-40a1-48a7-b1b3-e390921cf02b", "sighting_of_ref": "indicator--7e05ff11-954f-4f9d-bd34-02e3256731ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ce0af7-b489-4d05-b590-de68b8b68ea1", "sighting_of_ref": "indicator--3ddf6e23-89cd-44e7-901b-ed2446c18e31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a42a89c-fccb-4f94-9bfd-230e847f1db9", "sighting_of_ref": "indicator--3ddf6e23-89cd-44e7-901b-ed2446c18e31", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0b7da3-a20a-4cb8-bc9c-04bc93f56c5a", "sighting_of_ref": "indicator--940b7846-2226-40ef-a30a-b1896b943934", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad26b6f-701f-4a1e-9e72-a84e29517cfd", "sighting_of_ref": "indicator--940b7846-2226-40ef-a30a-b1896b943934", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f67103-7ae7-4e3a-8412-ca7e05c01791", "sighting_of_ref": "indicator--9c6e156c-8be4-4cbf-bca2-9e529af93393", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071b404b-c2de-485e-9ec6-f7f26d53904c", "sighting_of_ref": "indicator--9c6e156c-8be4-4cbf-bca2-9e529af93393", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166c7416-197f-4ae2-a971-d7db70a961f6", "sighting_of_ref": "indicator--9c6e156c-8be4-4cbf-bca2-9e529af93393", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c587e96-b750-4780-8bee-48aef64e2416", "sighting_of_ref": "indicator--41244c92-3e67-44fc-ab58-5ced134574d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c3344c-9309-41da-b830-b341a4131240", "sighting_of_ref": "indicator--bed12776-34dc-4b12-afca-57217e04cc77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ebab6f-56da-4399-8b48-af7079f6f657", "sighting_of_ref": "indicator--997aaef8-15b2-467a-96f3-7f833e02efc0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f35ae4-89c5-40ec-9c25-88352ff1dcfa", "sighting_of_ref": "indicator--433835b2-549e-40fe-87f7-2b8bd061397e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec56772-c50e-43c7-92fb-0a86778b2526", "sighting_of_ref": "indicator--433835b2-549e-40fe-87f7-2b8bd061397e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6229b043-8b9e-4bac-8463-67eed35f06a4", "sighting_of_ref": "indicator--46de581e-9ae8-460d-99fd-98bfc613cb86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85792b4-2fad-49eb-9b84-3e8ae70bdb92", "sighting_of_ref": "indicator--59cfd6d8-becd-4191-a04e-9e1416093fd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ee4951-48e2-4c56-8b8c-f99849cbaac1", "sighting_of_ref": "indicator--59cfd6d8-becd-4191-a04e-9e1416093fd3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b264b2-ab47-44af-b968-0070c021d873", "sighting_of_ref": "indicator--ed61b812-af29-4440-88d7-532ed41932ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba1e2c-ba98-4318-a7ea-258a5fc87e9c", "sighting_of_ref": "indicator--ed61b812-af29-4440-88d7-532ed41932ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5d1db9-385f-4e26-b8e1-5c4913a4fa42", "sighting_of_ref": "indicator--5097dc34-9f90-4994-ab07-25da0b1e438e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc9d6f1-fe0b-43bf-9fb4-56f49634ecd9", "sighting_of_ref": "indicator--5eb86a18-6b06-4702-a526-8eba96eebc72", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218e0473-e2c9-4e26-82c0-15545b9b0e89", "sighting_of_ref": "indicator--ddd6278e-5bd8-4d80-95ca-7d554a9766db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e8f002-767a-46b3-92cf-5f2b825f2aac", "sighting_of_ref": "indicator--ddd6278e-5bd8-4d80-95ca-7d554a9766db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3591c417-5fad-4cc2-88fe-445705a277b0", "sighting_of_ref": "indicator--0de61511-17c2-4bab-9623-c8c58330b158", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58817c43-e6c7-41c9-9766-393ff0c55f75", "sighting_of_ref": "indicator--e7f6fec3-6e8f-4987-a500-f352455f8877", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1c4aa3-726d-4c57-9d60-e488c8447fb6", "sighting_of_ref": "indicator--1df2bf08-fbd1-4ab3-a0cb-07df7d61d2ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cefaff-04f5-4019-b573-903dd564833d", "sighting_of_ref": "indicator--57d5f254-3db1-46fb-aa4a-186f7398e2a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3919c8-e1a6-4371-a0f1-5281ccd3e958", "sighting_of_ref": "indicator--57d5f254-3db1-46fb-aa4a-186f7398e2a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3e47f5-88eb-439d-bdde-b22ffe9e92a0", "sighting_of_ref": "indicator--2e6782f1-410f-4d67-b5d9-286aa3ff889e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a94642-3149-4beb-8849-791b84ac410e", "sighting_of_ref": "indicator--c6933c7d-62ee-4a69-a671-74c82194ffcf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d956b0-8f61-4ef6-b99d-10c6164f4eee", "sighting_of_ref": "indicator--e0194275-22e2-48bd-9f1c-551029b80d19", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afed0014-77db-4fa0-8cd2-4784e3836d97", "sighting_of_ref": "indicator--e0194275-22e2-48bd-9f1c-551029b80d19", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0964d54d-cfe4-4a31-846b-e15aeba45aec", "sighting_of_ref": "indicator--21e09d39-6fbb-4031-ad73-629701562242", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb6326b-65a8-4830-a78a-283f80ce03e0", "sighting_of_ref": "indicator--8f572283-ac34-4430-923f-202e24c3cd8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d1f2b5-6225-4d45-a0cd-31a175e3fca8", "sighting_of_ref": "indicator--c1f64ddb-3c47-46f5-ab74-d10465d20e29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e27810-5648-4482-a026-58f2e26a25e9", "sighting_of_ref": "indicator--baf63486-cbdb-474c-808e-a4ad15bb9b71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d085bacd-033f-47cc-95f6-22dd4e41d115", "sighting_of_ref": "indicator--535b23dc-836d-4b77-84bd-0ab35cdeccb9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7644f66e-3d74-42aa-9590-7b7489441381", "sighting_of_ref": "indicator--73efc7af-843f-4c7e-967f-ea561efac9d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2489bc2c-1e1f-484f-b63b-1a6276ea026e", "sighting_of_ref": "indicator--73efc7af-843f-4c7e-967f-ea561efac9d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa5ee3-78f2-4530-8074-1200d799e21c", "sighting_of_ref": "indicator--1cf7440d-b23e-4de6-afde-14026c82644b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16709f66-ec46-401c-b09f-fb1d9ffabfb6", "sighting_of_ref": "indicator--72447a38-871b-4a32-876f-002b28c9f4c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906a5b56-caa8-41bc-a446-5d510c2a7965", "sighting_of_ref": "indicator--46f2f8df-8ae0-45a9-b768-c679381d583f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8f1832-fea3-42cf-b437-7bd15d70bb19", "sighting_of_ref": "indicator--46f2f8df-8ae0-45a9-b768-c679381d583f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce72f713-e0ef-4158-a837-ad4197cf66cf", "sighting_of_ref": "indicator--2efbdcb1-17c9-4120-b1aa-c43a4f805df5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b183894-5d82-4b81-8cf1-701bca28d9af", "sighting_of_ref": "indicator--2efbdcb1-17c9-4120-b1aa-c43a4f805df5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b66168-e76b-4202-a992-fcc20d00f286", "sighting_of_ref": "indicator--2efbdcb1-17c9-4120-b1aa-c43a4f805df5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f77028-bd74-4046-a652-4d6b18a01896", "sighting_of_ref": "indicator--f57c1348-919d-48ef-980a-b0e9600bf840", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b316c8d-cc45-44ec-ae7a-50ecb1004e07", "sighting_of_ref": "indicator--f57c1348-919d-48ef-980a-b0e9600bf840", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97243cfa-0b3e-4be2-b416-a527ef6464c6", "sighting_of_ref": "indicator--f57c1348-919d-48ef-980a-b0e9600bf840", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068a7c50-88dc-482e-bc31-41e889b3a03e", "sighting_of_ref": "indicator--5a9b0f34-172f-412c-8110-69d431cd86f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82590283-e54c-4599-877b-e069b211e5fc", "sighting_of_ref": "indicator--ff5fa921-c7ce-45d0-a088-a9418c1d97dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21e0e86-d421-445c-a75e-51853165247e", "sighting_of_ref": "indicator--66cb7ed4-2510-4e33-9487-7a521a11fa3f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45ef190-cc7f-49e9-ad56-254b32d258f0", "sighting_of_ref": "indicator--793ad71a-41fb-4916-98d0-bdf2be616cb5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571af8de-cf2b-465a-9a18-e65250d366b3", "sighting_of_ref": "indicator--793ad71a-41fb-4916-98d0-bdf2be616cb5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89a916b-d48b-4f56-9a6c-2578246ab018", "sighting_of_ref": "indicator--cc0e4599-530c-471d-8e17-b0b86dbcef72", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c74c5a-b798-45f5-902a-5888eba12506", "sighting_of_ref": "indicator--cc0e4599-530c-471d-8e17-b0b86dbcef72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d56692b-d08f-4185-8c02-2d9c930825bd", "sighting_of_ref": "indicator--cc0e4599-530c-471d-8e17-b0b86dbcef72", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd43edeb-20f8-47ff-b860-5b07eb7d1af0", "sighting_of_ref": "indicator--d2e39509-5808-480d-ad8c-a03fea051017", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e93d8d-12b5-4935-a619-180e6fe0487a", "sighting_of_ref": "indicator--d2e39509-5808-480d-ad8c-a03fea051017", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a3a76c-9f2e-4715-a07f-fc8ef8dd9a66", "sighting_of_ref": "indicator--d6e68ae2-f701-40c6-be13-ff06cad5e220", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cddafd9-9d18-4482-8321-2b99923cea2a", "sighting_of_ref": "indicator--d6e68ae2-f701-40c6-be13-ff06cad5e220", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2118255d-3f68-4c07-9d24-610d9899fa0b", "sighting_of_ref": "indicator--d6e68ae2-f701-40c6-be13-ff06cad5e220", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd17ec23-3eb9-45bc-bf7f-6fbc8c6e1d9a", "sighting_of_ref": "indicator--0330c63c-b8ff-439f-a4c5-d58847265096", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896ce49a-e437-48d2-b2b0-4ef26b0e4f7d", "sighting_of_ref": "indicator--0330c63c-b8ff-439f-a4c5-d58847265096", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca86881-d0d6-4584-aba0-3fc26517b0ee", "sighting_of_ref": "indicator--6c19dc7c-16f9-4196-a218-21a2d804f888", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02412292-93ab-45b5-a9c7-a86f0c8c0f52", "sighting_of_ref": "indicator--e41110b3-0634-4e88-9dcf-ae79f3f9902e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5da308f-eee1-4212-89ba-1a383a15dc95", "sighting_of_ref": "indicator--4436136e-fe7c-4c4c-9386-02a2a246862a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c023496-0a04-4170-9441-6507b4eb7ebd", "sighting_of_ref": "indicator--4436136e-fe7c-4c4c-9386-02a2a246862a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9728956d-2111-49a3-a63c-79485d3f1302", "sighting_of_ref": "indicator--f9a57b0e-5ac9-498f-936b-bf62ffac04ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8869e19-bf75-4b81-b1c2-72bd03b6f915", "sighting_of_ref": "indicator--27101feb-3442-4315-a286-031d1b7d4fb0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730c79cd-4179-49b9-b2f5-180be2535162", "sighting_of_ref": "indicator--27101feb-3442-4315-a286-031d1b7d4fb0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf03c869-1f3d-4325-9c82-99d94baa9c8e", "sighting_of_ref": "indicator--27101feb-3442-4315-a286-031d1b7d4fb0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043b3869-5cfb-437c-9f12-3c720bf9cbf2", "sighting_of_ref": "indicator--41d10002-3db9-4c6b-a55a-43b913dbcac3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ed17c8-4dea-49f8-bc43-d73a3050ae1f", "sighting_of_ref": "indicator--2d61d2b2-4036-4ddd-a87c-4ab4d349082b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706d0c9-426d-48c1-a7e6-a66afc58f380", "sighting_of_ref": "indicator--a14ade18-826e-44b9-b311-646554abc4df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce87259-898e-4a46-8433-944b680ee92a", "sighting_of_ref": "indicator--a14ade18-826e-44b9-b311-646554abc4df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0783d064-bb0f-46c1-8074-3d45e0ecd29d", "sighting_of_ref": "indicator--496186fd-5ef2-4f30-9911-b0ce5992e304", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e96316a-a3e6-4f60-9111-adce7f4220a2", "sighting_of_ref": "indicator--a560605d-f660-4b9e-8227-361eb673f0dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfcee73-4302-4088-989a-cf077ac7356f", "sighting_of_ref": "indicator--a560605d-f660-4b9e-8227-361eb673f0dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7602ff81-4fe4-4af1-8c77-1a24c71f87f8", "sighting_of_ref": "indicator--195f9675-da41-4ffc-871e-2449e30d731e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced5d753-a565-47fe-970c-df68aec070ad", "sighting_of_ref": "indicator--7db03ce1-e9cc-4b78-b9eb-68902577a359", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ddd3e7-ddf1-4948-8a60-f49abfa5af39", "sighting_of_ref": "indicator--7db03ce1-e9cc-4b78-b9eb-68902577a359", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9992b9f1-9863-48a6-862e-44ce70647411", "sighting_of_ref": "indicator--686f6a9d-30e8-410c-a3bd-6f0bca10dd68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d225a68e-6e2c-43fc-96a7-20a533ef3caf", "sighting_of_ref": "indicator--686f6a9d-30e8-410c-a3bd-6f0bca10dd68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b979e955-bcac-4d64-b1c7-c84a6fe8ce6e", "sighting_of_ref": "indicator--c6da68e8-352c-4232-91d4-0e5aee5d45e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fda482f-3d58-409e-9a00-9152a4f2704a", "sighting_of_ref": "indicator--68141e35-c827-422d-b5c3-c81eb232ef5e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33575149-fda0-45ba-8f5c-0779ac9b14c1", "sighting_of_ref": "indicator--68141e35-c827-422d-b5c3-c81eb232ef5e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcee8288-8969-42a3-987a-d5f90b8f13e0", "sighting_of_ref": "indicator--f69444fe-4996-4fe0-88c0-5f9f33921a7a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17335ce-16fe-46eb-b050-efcabd71a095", "sighting_of_ref": "indicator--50175ad1-45ff-49f0-959c-7009adb433e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b238e0a-95b4-4f7e-abb3-f1e48362a6e2", "sighting_of_ref": "indicator--fe4c0932-0720-4963-9c53-8691148b0013", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4645b756-5576-455f-bbe8-e03873c630ac", "sighting_of_ref": "indicator--fe4c0932-0720-4963-9c53-8691148b0013", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6436f98e-d65c-492f-88fd-13f244087336", "sighting_of_ref": "indicator--42f3de01-b531-42c9-b0b0-64e44a691ec9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c19677-0770-447d-92f8-0918d9fcf85c", "sighting_of_ref": "indicator--42f3de01-b531-42c9-b0b0-64e44a691ec9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c3effd-9a48-4c95-b0c6-242a7e3cbf38", "sighting_of_ref": "indicator--50e848c9-774a-41af-882d-8980497a17e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc380f0-9372-4baf-b8a5-f40513783523", "sighting_of_ref": "indicator--dd5c6539-c751-4a11-a226-f5c7f0a96ecb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1348cad-f69b-4bda-9881-b21d59b2d1ca", "sighting_of_ref": "indicator--83ce6b31-8767-4acd-a081-ffc527c2bc1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e864a484-8ce2-48e6-a62d-cde6854fd8f8", "sighting_of_ref": "indicator--b8f9658a-d3c9-4ba6-9d2f-54601620848e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c820bc2c-167d-461c-9906-e1308f88e6cb", "sighting_of_ref": "indicator--b8f9658a-d3c9-4ba6-9d2f-54601620848e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4040d89f-3368-4981-99c5-8677c0111641", "sighting_of_ref": "indicator--1962313c-488d-4994-9162-50e72bb7ca73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c02116f-fd06-47e2-8414-8b6aab0a82ab", "sighting_of_ref": "indicator--1962313c-488d-4994-9162-50e72bb7ca73", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fa7444-5177-4bc8-9f13-04c451820f48", "sighting_of_ref": "indicator--1962313c-488d-4994-9162-50e72bb7ca73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c054af-e7e3-48f6-9c5c-99489b21a212", "sighting_of_ref": "indicator--a69386db-42f5-475b-baca-17d5fbcbe2b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee5ccc1-75ac-4cb8-95be-3d029e3f5677", "sighting_of_ref": "indicator--a69386db-42f5-475b-baca-17d5fbcbe2b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2e7b15-3bb2-43b7-bbb1-38b73b14401e", "sighting_of_ref": "indicator--a8f0a413-e150-4521-840d-5fb34141e0b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b221b8-2040-41f6-a9bf-b6c679bc49e3", "sighting_of_ref": "indicator--a8f0a413-e150-4521-840d-5fb34141e0b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e277397e-9f24-4442-a2ec-a594552b33e0", "sighting_of_ref": "indicator--e55084b2-a05b-4830-ad5f-04ed78342d98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d78b86-6eb5-47dd-800c-7ab8e4c007be", "sighting_of_ref": "indicator--e55084b2-a05b-4830-ad5f-04ed78342d98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82f0d0-5381-41c3-9942-36bce8ce5568", "sighting_of_ref": "indicator--e55084b2-a05b-4830-ad5f-04ed78342d98", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c687b63d-09c6-4449-bfb1-dff021137388", "sighting_of_ref": "indicator--352d728b-5607-43ef-81af-521906f1eb31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f083ed17-e41d-4b50-a1b8-7ce5c2a390df", "sighting_of_ref": "indicator--352d728b-5607-43ef-81af-521906f1eb31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bab97c6-5092-4d23-9685-4e0d697d5d13", "sighting_of_ref": "indicator--352d728b-5607-43ef-81af-521906f1eb31", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4003a91-91c4-483e-92ce-641847883d5e", "sighting_of_ref": "indicator--d55cdb1c-d995-4436-beb8-bbd6ac6250ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba00b0a-f694-4f69-b7c5-3b51331a9ca6", "sighting_of_ref": "indicator--d55cdb1c-d995-4436-beb8-bbd6ac6250ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad16dd8-8855-4a7f-bfdf-dfe88e7bf7e1", "sighting_of_ref": "indicator--c7c779f2-6f93-4d23-ada0-f98a18420c44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65db8df7-8e7b-4c6a-95e5-724d8cb5adb7", "sighting_of_ref": "indicator--c7c779f2-6f93-4d23-ada0-f98a18420c44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6bcb80-a76f-4ab7-bd6a-2527c0053842", "sighting_of_ref": "indicator--f74e92c3-db83-4751-af59-37071fd45e7d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ac548b-f0d5-4c03-95e5-2f0f33ee7143", "sighting_of_ref": "indicator--7856e5a0-67a2-4e93-93c0-0ed47bb0c317", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3faebbb-1889-4c9c-936f-a1339107925b", "sighting_of_ref": "indicator--7856e5a0-67a2-4e93-93c0-0ed47bb0c317", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c410105-9064-49ea-b3d9-f83b100979c9", "sighting_of_ref": "indicator--dbcd27c1-00f4-4276-913e-89b95909119d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49ad8c2-5dd0-47dc-affc-c5e3f532285f", "sighting_of_ref": "indicator--dbcd27c1-00f4-4276-913e-89b95909119d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88412286-be72-41d8-8641-762ad1d69da5", "sighting_of_ref": "indicator--3c8549ad-c97e-48d7-8d99-5f251543f5b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c82c9a-4433-45a0-9484-cb9f684f1eb0", "sighting_of_ref": "indicator--3c8549ad-c97e-48d7-8d99-5f251543f5b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512bc40f-b5cd-4186-8985-060e210a3571", "sighting_of_ref": "indicator--3c8549ad-c97e-48d7-8d99-5f251543f5b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fddd925-ae3e-42de-911c-b2dbe60f8186", "sighting_of_ref": "indicator--13d837f8-1c90-4029-b81a-39e1246d7f22", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38134036-6b6e-48da-8d1e-d849598885ab", "sighting_of_ref": "indicator--1c0afd63-e7e4-4365-b0b5-a88d5ffa08a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e0d01a-43c8-4a58-97f4-020477df8f46", "sighting_of_ref": "indicator--b7ed4710-5eb5-4b71-8e1f-aefade90e5b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d31efec-c0d3-4504-8d51-a1a045cf05e5", "sighting_of_ref": "indicator--ac28f152-a8a7-4ce2-847c-b6f02f2bad5f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ecd18c-292d-4036-9847-d98e55b0c652", "sighting_of_ref": "indicator--07660088-2e1f-4024-85d3-52ddded33e4d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ca14b8-481c-4d4c-b322-d9fdba7ea8fa", "sighting_of_ref": "indicator--07660088-2e1f-4024-85d3-52ddded33e4d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b90c476-7f4c-4c77-92ce-3a48aed35ae5", "sighting_of_ref": "indicator--560bee51-93d9-4190-9ad9-2ff41d4bc898", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08bc536-3fdc-4ce6-9655-13768248bdf3", "sighting_of_ref": "indicator--560bee51-93d9-4190-9ad9-2ff41d4bc898", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dd53d2-8591-4550-9d4b-0e1f02ddd529", "sighting_of_ref": "indicator--f9eaeb2b-6eb8-48d2-9151-e07297429ec9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fbdbd5-172f-496f-ac3d-e9abd9034dd3", "sighting_of_ref": "indicator--f9eaeb2b-6eb8-48d2-9151-e07297429ec9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae7292f-983f-4ce0-ab2c-6640ace4e94a", "sighting_of_ref": "indicator--f9eaeb2b-6eb8-48d2-9151-e07297429ec9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfa78dc-5e31-43e4-bcfd-bfb973512aa5", "sighting_of_ref": "indicator--d135ff9f-e164-4e4e-9551-234821640cc7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbbd7ba-6b6f-4414-b83d-e64699e2e02f", "sighting_of_ref": "indicator--bbeba8dc-30a3-469b-bac0-7baae512ad96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ea34b0-d763-408d-bef2-7ee0e190ba60", "sighting_of_ref": "indicator--c1edce49-0d5d-4649-9c93-f4c8e4fefb20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96faa943-22fe-4a8a-a4f6-e4faa80b0976", "sighting_of_ref": "indicator--5743b847-e000-46ad-914f-3ce28668ccc5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82de1507-7287-4f70-8842-4bab9ebbc684", "sighting_of_ref": "indicator--15d436f8-bae6-4643-af0a-cbc3614e0ec5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5862ce-eee2-42c0-baf2-cb628bb7eb9d", "sighting_of_ref": "indicator--e39a9e37-9773-4e2f-801c-bc18d54f8ccb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10941391-7efb-4c44-8571-8fffd6a0e0c2", "sighting_of_ref": "indicator--e39a9e37-9773-4e2f-801c-bc18d54f8ccb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0fa3a9-a194-45d2-9754-be68e53618f0", "sighting_of_ref": "indicator--8860e4d8-b3b2-4ac9-b2ef-24d18757ce59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c0aeec-afef-4c08-b975-53ce2187d7b6", "sighting_of_ref": "indicator--4d3f417f-1d2d-4ce5-9fb8-5d49b1ed2664", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e94b592-fe1e-460d-9f69-19914bb57ea1", "sighting_of_ref": "indicator--531360d0-04a6-499c-a03c-f32250e0fc18", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c02096-a081-4ab3-8c16-3ff609f640da", "sighting_of_ref": "indicator--531360d0-04a6-499c-a03c-f32250e0fc18", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46e475c-b268-44a6-86c1-75830b33eb76", "sighting_of_ref": "indicator--7f19f026-020a-4db5-b16c-90b8aa93a23b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b88f81-1440-407c-9990-cd14e1f9a017", "sighting_of_ref": "indicator--4b7c2cad-23fa-4364-bede-e2f1c6600e8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026d5586-d9e6-46eb-94c0-e5fd63ea5227", "sighting_of_ref": "indicator--abff44c0-9410-41df-b4a7-ab51b6d6dc82", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b726d3b-7a46-4923-8bc2-32a6cf7a1f4e", "sighting_of_ref": "indicator--0287a6c6-1588-43b1-afb5-a3609dd14cc9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040896b4-f16c-4053-a075-f4773d40a368", "sighting_of_ref": "indicator--a922eb74-287b-49e3-b970-715a2ad75798", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a9c14e-c5b6-4a36-9d9c-4a51f4a8093f", "sighting_of_ref": "indicator--eb46efb2-00de-470f-a3a5-29f677eaea72", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3c3e5c-61da-40b6-9156-8d1b823a3a18", "sighting_of_ref": "indicator--3e197229-d2a4-4b77-90c5-3cfd6cb9c3bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1f2c37-634d-4413-871c-a2c391741701", "sighting_of_ref": "indicator--669ba271-8ccf-4245-9532-5cdaa3860ff2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11d58d1-6208-4832-9b4f-8f004e625ea9", "sighting_of_ref": "indicator--aa0b6263-6b2f-4275-bd9e-b0067f6a1ebd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545c50aa-7b09-4b13-8d3a-8a85bc12db22", "sighting_of_ref": "indicator--11358002-3d30-4105-9ff1-54d7f3f8a6cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dec2b0-0c26-4e21-a851-a3059b82015a", "sighting_of_ref": "indicator--930cba65-4e24-489e-bc49-2df39aff49ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7a1c1f-4d7c-4673-9055-835a8f74a720", "sighting_of_ref": "indicator--3fb33d26-10b8-42dc-9e8e-d6fae57aeb26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e892b1c0-0b54-4692-b6f5-d62ff62e1cbe", "sighting_of_ref": "indicator--f5d5a2be-a524-4f1a-a21d-626833ec2cc4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81927e7e-39be-455e-8f59-a79896732d54", "sighting_of_ref": "indicator--3c65ec26-96be-4766-af7d-a289bc580ef2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e53515f-646f-489f-8635-e912f7d7ea9c", "sighting_of_ref": "indicator--9d7ff325-f55e-4a45-9aa0-49e1ac6941ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ea4133-c460-4bcf-8e50-1d08f29f05ac", "sighting_of_ref": "indicator--76673a22-a37e-485b-98eb-c619e5c00101", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fa6895-8e5f-4bbd-b535-faa71f3df644", "sighting_of_ref": "indicator--a535d233-c0c7-45c4-b607-233a69a60f2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc59434-e17b-4431-886a-167fa8107fa2", "sighting_of_ref": "indicator--14524536-a63c-46bb-9858-b08180e4b75f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3e28c3-3efb-4a46-a81d-73e350e2f5e0", "sighting_of_ref": "indicator--4018c94d-9002-4fb2-af30-14c05f42e467", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273bb799-1c52-4ca4-aa72-4e7a0dc4a226", "sighting_of_ref": "indicator--1d71c39d-76d0-4ba3-b523-dc31343d660f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bf00cf-69de-4155-bdae-3bd046f755fe", "sighting_of_ref": "indicator--fd740f47-ca11-42b1-92aa-0e8b07b0772c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f1d8af-bb61-4dca-9f71-a5cb2a80f047", "sighting_of_ref": "indicator--842339d4-c4d1-4a28-a628-c111d12abc61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc1958-bacb-4a4a-ab52-e5ef6c888aa2", "sighting_of_ref": "indicator--bd414a71-00fd-4dfa-9e53-e80315d32aef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3be0e7-3f27-43ad-b882-0ddf2014b213", "sighting_of_ref": "indicator--00497233-83f3-4fb0-99fe-f9a8be42d0f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b33a3c-f371-48fc-9f31-56a552c6e5cb", "sighting_of_ref": "indicator--30748c57-9dc5-428a-9521-7787aea7e630", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32783b1d-dde4-4450-8ca5-e60f78ef3547", "sighting_of_ref": "indicator--08601e7a-b7c8-4bd0-95a4-2047d54cee01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121c9e2e-118a-43cc-a623-2e9e17a7283a", "sighting_of_ref": "indicator--7b5332e9-2292-410d-8afa-13f0dfd1c692", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431cfdfe-5825-49e4-ad77-579111d76880", "sighting_of_ref": "indicator--7b5332e9-2292-410d-8afa-13f0dfd1c692", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2538e681-12a8-4aa4-8fea-45df3195c624", "sighting_of_ref": "indicator--7b5332e9-2292-410d-8afa-13f0dfd1c692", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d719710e-1ae8-46b9-aae5-74dacc20f0c6", "sighting_of_ref": "indicator--8618d6a7-0908-4a5c-9d33-f60edd81c843", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2900483b-7717-4f39-8f05-8af44a755c1c", "sighting_of_ref": "indicator--3c5f8ca8-b497-401d-ba11-dc880ae6dbe7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d6ec37-248e-4ccc-bb74-9eb5d90a38f5", "sighting_of_ref": "indicator--3a569a6d-8208-4d88-9dc5-c0b14dafb917", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af9fdae-e263-46c4-94c3-d85830bf684a", "sighting_of_ref": "indicator--3a569a6d-8208-4d88-9dc5-c0b14dafb917", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2d1577-edf8-47d5-a7e0-aa06311774d2", "sighting_of_ref": "indicator--3a569a6d-8208-4d88-9dc5-c0b14dafb917", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d67b35b-86d0-4ffb-89e7-e73d9f30beb5", "sighting_of_ref": "indicator--1f181e01-d77e-4cb3-bcef-604170b5bcb9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bdc2a2-5cd3-46a1-b4b6-1e8527701cb4", "sighting_of_ref": "indicator--1f181e01-d77e-4cb3-bcef-604170b5bcb9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7862877-c5fe-4d39-8ab3-265bf5dba48d", "sighting_of_ref": "indicator--56620b5e-dfe3-4838-808d-a2bbb72e0dc5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c7dcef-03bd-427a-b469-329744ca5de0", "sighting_of_ref": "indicator--f346d560-fd3b-40e2-b6b4-400d5a440625", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbc23ac-e408-4736-816e-fa74e10b48f5", "sighting_of_ref": "indicator--7e816e3c-88a3-4b14-98f9-3e0e3b8c38eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27210213-d333-4bbf-a19d-04467b865d89", "sighting_of_ref": "indicator--7e816e3c-88a3-4b14-98f9-3e0e3b8c38eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0355d8-e311-45c4-a7fc-9b4cec0f3f27", "sighting_of_ref": "indicator--7e816e3c-88a3-4b14-98f9-3e0e3b8c38eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f98f80c-8781-4b5f-a89c-3e0cbfe6377f", "sighting_of_ref": "indicator--df0998e4-9632-4c26-b6a3-17a5ef472826", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5e5fbf-d54b-4aa3-9d06-a1abf440ad94", "sighting_of_ref": "indicator--df0998e4-9632-4c26-b6a3-17a5ef472826", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8f3e90-0f18-43b0-b69a-161496454168", "sighting_of_ref": "indicator--df0998e4-9632-4c26-b6a3-17a5ef472826", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cfeddd-33bc-4420-9daf-c20d226444e6", "sighting_of_ref": "indicator--3a01854a-aff4-4e39-9677-185a3d88ca90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e850e011-c8ac-44d8-874f-fc5054f25423", "sighting_of_ref": "indicator--3a01854a-aff4-4e39-9677-185a3d88ca90", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e35f68-a3c2-45da-bb19-91818324a0aa", "sighting_of_ref": "indicator--3a01854a-aff4-4e39-9677-185a3d88ca90", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ec483a-215e-480e-8cc2-912a1c9c4922", "sighting_of_ref": "indicator--52cef2d6-9ee9-41fb-8db5-d25f1c99c387", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9084b8f-e90c-495e-9178-179e0a225ae4", "sighting_of_ref": "indicator--52cef2d6-9ee9-41fb-8db5-d25f1c99c387", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d09b2f0-0b08-4bca-9a62-ace5184044e9", "sighting_of_ref": "indicator--b8a8c9dd-6e8b-4b36-90f9-afc13bab2d76", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e83923-b19f-4b00-91cf-2278053c24ae", "sighting_of_ref": "indicator--b8a8c9dd-6e8b-4b36-90f9-afc13bab2d76", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fef868-2607-407c-afcd-fedf15d99563", "sighting_of_ref": "indicator--b8a8c9dd-6e8b-4b36-90f9-afc13bab2d76", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e836e5-85c2-4381-8585-34b0ddd8b057", "sighting_of_ref": "indicator--615ede92-cc1f-4a95-893b-02bf97315fcd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679660e5-870b-42ad-8272-6d20920bfa0d", "sighting_of_ref": "indicator--615ede92-cc1f-4a95-893b-02bf97315fcd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e41a95-4c78-43fb-9652-86f32dc98db7", "sighting_of_ref": "indicator--615ede92-cc1f-4a95-893b-02bf97315fcd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368355b1-294e-44fb-94e9-297371392bf8", "sighting_of_ref": "indicator--dc97bce3-d792-4ec2-9cbf-5bd3084b542e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c026497-6fae-4b11-ac2e-a4ed773f5eca", "sighting_of_ref": "indicator--dc97bce3-d792-4ec2-9cbf-5bd3084b542e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94d10eb-ba54-4208-b0e2-8eb416ca0d9f", "sighting_of_ref": "indicator--dc97bce3-d792-4ec2-9cbf-5bd3084b542e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f8b089-7c2b-4deb-8f7d-1e393263b158", "sighting_of_ref": "indicator--da263371-e8c1-4e86-9c00-2e743dcfae2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95beec99-e567-4e56-b4b0-e5c1bb0c661a", "sighting_of_ref": "indicator--da263371-e8c1-4e86-9c00-2e743dcfae2f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a44a31f-9460-4623-8fcd-2af5355e3e46", "sighting_of_ref": "indicator--da263371-e8c1-4e86-9c00-2e743dcfae2f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f387666a-174a-4da8-a51c-e94cfbf3ce8a", "sighting_of_ref": "indicator--9d0054f3-5c37-46ab-966d-bbb30349c307", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2b4f56-bdd3-465b-951c-f3f4574eb5a2", "sighting_of_ref": "indicator--9d0054f3-5c37-46ab-966d-bbb30349c307", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97df1884-5523-44db-a0c0-c10099bf6509", "sighting_of_ref": "indicator--9d0054f3-5c37-46ab-966d-bbb30349c307", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3585acd-ee22-4c41-a036-7e3d905da6d4", "sighting_of_ref": "indicator--c474e6e3-d692-44f6-9ae6-de835599cb78", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e992491-6726-4266-bd56-e614e84546b1", "sighting_of_ref": "indicator--c474e6e3-d692-44f6-9ae6-de835599cb78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260385c0-578b-4405-bb75-8360bafb9e8d", "sighting_of_ref": "indicator--c474e6e3-d692-44f6-9ae6-de835599cb78", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210cc4e5-d924-40a9-a684-6e7cc909bfce", "sighting_of_ref": "indicator--d11c06a7-fd1b-48ad-8d33-6b854c918bda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5baec16-7411-463a-95c4-3e6936407506", "sighting_of_ref": "indicator--d11c06a7-fd1b-48ad-8d33-6b854c918bda", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad25b1d-3b7c-4af7-ad5f-9bdcef8033b6", "sighting_of_ref": "indicator--d11c06a7-fd1b-48ad-8d33-6b854c918bda", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58aa72af-14f8-404a-afdc-34970d97f56d", "sighting_of_ref": "indicator--c188ac5a-39e4-4ddb-aa1d-3eb22a89d437", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69213a8-4ed4-490e-b88a-be98e74f825e", "sighting_of_ref": "indicator--c188ac5a-39e4-4ddb-aa1d-3eb22a89d437", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f859b1-72bf-46a9-8abc-35f65643ae04", "sighting_of_ref": "indicator--c188ac5a-39e4-4ddb-aa1d-3eb22a89d437", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00091db5-8fa9-47e4-82c5-891af56632bf", "sighting_of_ref": "indicator--c4b72fda-5f99-405c-a1e0-c0492c084057", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa581241-5b39-491d-9c93-89204da65f38", "sighting_of_ref": "indicator--c4b72fda-5f99-405c-a1e0-c0492c084057", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4829395c-efd4-42f3-96b9-6587dff437a9", "sighting_of_ref": "indicator--c4b72fda-5f99-405c-a1e0-c0492c084057", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f672a839-532c-4dbd-a33b-7823f9fd58b7", "sighting_of_ref": "indicator--3b75a91e-0279-40e1-b2d9-7e12780736c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c9077d-c2f2-45c3-89f4-805cbdead8ea", "sighting_of_ref": "indicator--3b75a91e-0279-40e1-b2d9-7e12780736c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7ce1a0-d4dc-4867-99f9-8964a353095b", "sighting_of_ref": "indicator--4c882545-42f1-4187-90e9-e57dd687bf4e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7354545-6222-43a0-80bc-01cf585444ba", "sighting_of_ref": "indicator--4c882545-42f1-4187-90e9-e57dd687bf4e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1684b1fa-23ce-41b8-b3d5-019cd15a1483", "sighting_of_ref": "indicator--4c882545-42f1-4187-90e9-e57dd687bf4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ba452d-650a-4488-aa64-8557b9619eee", "sighting_of_ref": "indicator--6a77b2f4-9561-4fd7-b600-d4f3d3730060", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48702193-a4d4-46d9-b621-b827197ea202", "sighting_of_ref": "indicator--6a77b2f4-9561-4fd7-b600-d4f3d3730060", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fda6139-3c8e-405b-b708-994b7b5947b6", "sighting_of_ref": "indicator--6a77b2f4-9561-4fd7-b600-d4f3d3730060", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646a9a46-fb7b-4cea-8a53-d30b196137e9", "sighting_of_ref": "indicator--b94cd9b5-1432-413c-97ca-2cf514058b2f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abf9109-c663-47e5-8e78-90e5a876e851", "sighting_of_ref": "indicator--3778349b-db18-47a1-9b63-5888dd080ed3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8cc95b-1f1e-46f7-9b11-d0b273ab61ca", "sighting_of_ref": "indicator--c0c6befa-c0c8-44c6-9db8-bf220e4a2442", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f2f6f6-62a7-4c93-98b8-084c2eab3f78", "sighting_of_ref": "indicator--0607965f-5d95-4cb9-ba9b-6579735e96ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad318987-5fb1-4e68-8806-fb47b4771727", "sighting_of_ref": "indicator--6f4aeff3-fb39-4cda-adf2-2def73cde26d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0c9d07-ac6f-4bba-b44f-49e147f5b312", "sighting_of_ref": "indicator--785c8419-66ef-4a34-a6d9-1c37a9852edb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a51fcc-5003-4cb1-ad4a-33b3420f2c1e", "sighting_of_ref": "indicator--e2e3e95c-b686-4980-b072-c31ef33d8759", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd17b91d-a648-47e1-8ed8-cee38814b603", "sighting_of_ref": "indicator--7c11d578-1779-401c-a418-7db24a010e1b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ac28c8-ffb3-42aa-895e-1bfd5ca7efaa", "sighting_of_ref": "indicator--033cee23-b275-4927-a93d-422cae81c59a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6dd7a8-37fc-4330-85d6-6b4162ac3b68", "sighting_of_ref": "indicator--cfcd3aed-4b26-4858-a0eb-e7ca0bdb7679", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3548933b-c5fe-4869-9ff7-4bd54c75b67b", "sighting_of_ref": "indicator--0a806a77-9072-4e60-8141-83bf03671298", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14122d11-6e7b-49ec-b02d-17a8f1e3d037", "sighting_of_ref": "indicator--53e8814b-1959-45ed-8d92-8d7d527c224b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99786ef6-bb5c-4764-84b6-49047e689bda", "sighting_of_ref": "indicator--c6844941-e178-4e39-aa32-53158b68e0e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3011c179-9846-4cba-94f3-5fdb9914e275", "sighting_of_ref": "indicator--316cb7bf-eb2b-4956-8a47-a1dac30c7381", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d58e4fe-a694-4732-a0ea-67374d88571a", "sighting_of_ref": "indicator--bb55f51a-756f-43a4-96c7-0dd3ba97e738", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fbb796-dc43-46b4-94ee-a637a7fab5d2", "sighting_of_ref": "indicator--9aa97985-7df4-475f-8653-ea852ad29f10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa84545a-924b-4b84-a229-ca1519d0775c", "sighting_of_ref": "indicator--e378b246-7c20-4ea2-91f5-ee6ee80e6b32", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc07541c-150a-4fbf-a4ab-9b9db13dfdae", "sighting_of_ref": "indicator--b8228421-e3b4-49bc-bf0f-b31c3302d196", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc8934a-1051-4be1-8240-c7fc384525a2", "sighting_of_ref": "indicator--00daa4cf-f2ff-4110-aeaf-da27d101594b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2098b9aa-3c3e-4ab4-91cc-968152548b09", "sighting_of_ref": "indicator--00daa4cf-f2ff-4110-aeaf-da27d101594b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630c8278-6bf1-4d77-8fdf-43f5c8139aa4", "sighting_of_ref": "indicator--7cb046af-6921-4e7a-81c3-b6c604ec215a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ed4897-e406-4e2a-8207-7a15d1d3a1f7", "sighting_of_ref": "indicator--7cb046af-6921-4e7a-81c3-b6c604ec215a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d4baab-dd08-4dc1-aa27-77c328c55dc7", "sighting_of_ref": "indicator--3623d655-2127-4ac8-b18c-780d840f36c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daab3cc-3ec1-432f-9dcc-86168dd15f6f", "sighting_of_ref": "indicator--3623d655-2127-4ac8-b18c-780d840f36c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e905b96-95fd-4cf7-a303-391c28aee3a7", "sighting_of_ref": "indicator--a85bd34b-84c5-49e4-b3df-0a3e266d6a5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fc1c65-a4e1-4f04-9f81-7d462646ca41", "sighting_of_ref": "indicator--a85bd34b-84c5-49e4-b3df-0a3e266d6a5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cc48ac-fccd-47ae-b33c-c911f52ae3ec", "sighting_of_ref": "indicator--88dac8b6-a0e3-4dc4-b844-82866a6ccff8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eca57b-2f1d-4f46-b4ff-e26531af9b8c", "sighting_of_ref": "indicator--03a30282-f7ff-4c54-8025-fe120705fded", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6504029-93b8-45e4-bbf2-e1cd0842c516", "sighting_of_ref": "indicator--7ed1526b-1fb2-4671-b35e-9a3337d5cd7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6f8be5-ed66-4bf0-8420-9f29a0cfd381", "sighting_of_ref": "indicator--ef3a172e-1aa9-496c-a287-1b3e1fb0718b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9aa5fe-d7a6-4098-917c-bcc1702ccf07", "sighting_of_ref": "indicator--1793c5c8-8d41-40e9-8893-ba6a0821d79e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016e0ea8-0649-4d40-8329-3c88e8deadb4", "sighting_of_ref": "indicator--1793c5c8-8d41-40e9-8893-ba6a0821d79e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5c8420-af22-4ec5-bd89-6ac84ed5a528", "sighting_of_ref": "indicator--1793c5c8-8d41-40e9-8893-ba6a0821d79e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae65207-0d35-43eb-9af4-2d95f77023cc", "sighting_of_ref": "indicator--99653fcb-2ef8-4223-b067-5ac3b0e6e72b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e0c7d9-3f35-432b-9803-b578532063c0", "sighting_of_ref": "indicator--e6723742-1b0f-46a9-a112-5fc4758e7601", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec6cc26-e90a-4120-95c1-3b86bbcd1c41", "sighting_of_ref": "indicator--e6723742-1b0f-46a9-a112-5fc4758e7601", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb47a3b-f657-43df-85dd-03a4f1b9eee3", "sighting_of_ref": "indicator--521358fa-0a5b-47c0-bc7f-82f7c8d64791", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e191fe-0411-430e-9535-b72ebfd200da", "sighting_of_ref": "indicator--521358fa-0a5b-47c0-bc7f-82f7c8d64791", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33012027-261b-4b4d-ac67-6157a20d52b8", "sighting_of_ref": "indicator--521358fa-0a5b-47c0-bc7f-82f7c8d64791", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447104ad-9f6f-433b-a7a9-4aee92e4b3be", "sighting_of_ref": "indicator--e44bc020-9377-4ad1-a34e-605d4b46cb95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb17703-d656-4cc5-ab93-3ba44e5dbeec", "sighting_of_ref": "indicator--e44bc020-9377-4ad1-a34e-605d4b46cb95", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329a3023-384a-4bf1-b5bf-28bdc52977ad", "sighting_of_ref": "indicator--e44bc020-9377-4ad1-a34e-605d4b46cb95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6953980-1d27-42a8-820d-a8fe6d1674c1", "sighting_of_ref": "indicator--f2c52722-e14c-4730-a80c-afa02029d302", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f85d364-48c6-413d-b477-4cfd0c7e14fb", "sighting_of_ref": "indicator--1746dc06-7a88-48c0-bbe5-00d6d0163538", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d996efd-26e5-41d3-9670-755e431f3863", "sighting_of_ref": "indicator--703571e1-3f88-44bb-909f-6d49c6fb56b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8581a946-cd68-4e2a-9af3-134a3de97e1d", "sighting_of_ref": "indicator--703571e1-3f88-44bb-909f-6d49c6fb56b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db68d97c-370c-465f-8e5e-d514643628df", "sighting_of_ref": "indicator--703571e1-3f88-44bb-909f-6d49c6fb56b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85717007-3024-42b4-8e1a-b6b4ada26b85", "sighting_of_ref": "indicator--cc1eeed5-a54b-4b43-9c3c-9e568114c927", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0a4751-dc1b-44e1-8539-b913a87109c7", "sighting_of_ref": "indicator--9380b520-ee11-4dc9-8ea4-85945c6a1f79", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e2b3a-5b5f-4173-a63b-53a61cd37193", "sighting_of_ref": "indicator--e5b93c20-8761-4105-aa7a-725554e81178", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46047e10-d639-4882-9557-cf039ef2f93c", "sighting_of_ref": "indicator--aeff8532-3231-4faf-bb5c-6454b469c0a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3e5671-17d6-4200-b8f9-ad5138901aee", "sighting_of_ref": "indicator--aeff8532-3231-4faf-bb5c-6454b469c0a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971680ff-c1e2-4a10-85bb-1b250dc1df2c", "sighting_of_ref": "indicator--ed41b922-884e-4f0b-a906-3d60f6797661", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f70262-2224-4957-825e-ca22fe603d35", "sighting_of_ref": "indicator--757be3ff-2fd7-4dc9-8672-67974413ef1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50590426-8de4-4373-a960-ef6522147807", "sighting_of_ref": "indicator--757be3ff-2fd7-4dc9-8672-67974413ef1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cefa6d4-6e4f-47fe-97cb-27442cdb1d8d", "sighting_of_ref": "indicator--91c6e38a-915d-4f4a-b0ba-31ef880fd1d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd023be6-abe8-4d0a-b18e-a823328d83f2", "sighting_of_ref": "indicator--b8616548-da30-41e0-b2fa-60bff51b67a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eb0cab-2619-4933-85cb-404909cc6046", "sighting_of_ref": "indicator--b8616548-da30-41e0-b2fa-60bff51b67a6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac700bc5-caf2-408a-b5f0-5d3be0f018ed", "sighting_of_ref": "indicator--dbbac9e5-2241-41c8-bb0d-a22f13784dff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83106717-941c-43e3-8671-923c29750ee4", "sighting_of_ref": "indicator--dbbac9e5-2241-41c8-bb0d-a22f13784dff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32cff76-a414-4573-ba28-f94253a09088", "sighting_of_ref": "indicator--626af175-969e-46a5-a8d2-d24e2518a3d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cdf30f-873a-410c-a0ec-1620e460cd33", "sighting_of_ref": "indicator--a0fb9547-c4dd-4683-8fb9-8ed9ed642c8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9097177d-4aed-4aad-97cb-acafef9cc19d", "sighting_of_ref": "indicator--a0fb9547-c4dd-4683-8fb9-8ed9ed642c8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af54bf96-a0b5-443c-a450-96ba5da666e5", "sighting_of_ref": "indicator--a0fb9547-c4dd-4683-8fb9-8ed9ed642c8e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1ec1da-1e0c-4701-8dec-d0b95c4dca3c", "sighting_of_ref": "indicator--6ff0d160-629c-4fed-bd3e-c4d67932674f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4d96f6-b712-4abd-9ed0-311259525978", "sighting_of_ref": "indicator--14b86ff0-5422-4ee6-9744-a874e38ae1d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e026e81-87e1-49f6-9872-cdc8854b435b", "sighting_of_ref": "indicator--8ea03aee-48d3-4c44-aff2-a8f847116ca2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfc2ab7-6d22-4fe8-a5d9-8aa5599fe7a0", "sighting_of_ref": "indicator--2673b78c-7e4c-4b34-a958-83fbe39cbe8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c3868-32b8-45a7-b4f6-ce542a11792f", "sighting_of_ref": "indicator--4d9cc29b-5ff5-4ac1-bf69-dfc8494d5381", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a950af69-dd23-4bbc-a30e-804ecc11ebc9", "sighting_of_ref": "indicator--4d9cc29b-5ff5-4ac1-bf69-dfc8494d5381", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f30a8fc-dc6a-4432-ae33-b1a71e831c1d", "sighting_of_ref": "indicator--86681767-7ff6-4279-9b5a-1ed8c56a5f13", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f63128-900d-4a34-b9f9-79c9acde53e9", "sighting_of_ref": "indicator--d502008d-9319-436d-87bc-47486932f52d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296822c7-ccf2-4578-9337-3a5f0a4adec8", "sighting_of_ref": "indicator--15dd0f78-9ae1-445e-8dcc-31f26ececce6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f782358-2461-4da9-841a-58f5a60ad65e", "sighting_of_ref": "indicator--a9dabb47-ad09-4e2e-9759-52c0e022b9bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f28f3a-453a-44c8-895f-3392448e256b", "sighting_of_ref": "indicator--c7213d47-1bf8-4ad8-add6-fb38dd558418", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298f7f8a-e3f9-4559-a2c6-34920fa5e077", "sighting_of_ref": "indicator--c6fa1c34-1d2d-4b40-8438-9bae20f9fb83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95255fb5-04dd-4a6a-af64-aecff256f2ab", "sighting_of_ref": "indicator--c6fa1c34-1d2d-4b40-8438-9bae20f9fb83", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f721f2cd-1b80-49d5-a790-57670e4f779e", "sighting_of_ref": "indicator--3ff861c2-3c8e-4dae-bd98-1a72117f43ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6661dfa7-3c5f-4a9c-a6aa-f368780c3127", "sighting_of_ref": "indicator--a26ed99e-8579-4f3b-8fce-e120b956551d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d21e8c-3d2d-4a4c-aa60-7b2f069c03c1", "sighting_of_ref": "indicator--50b71da9-40c1-46d4-b9e9-ba9f918e7f19", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8694e5-9837-4259-838a-5fcb4aa7b7aa", "sighting_of_ref": "indicator--6a68fe9c-574c-45cd-84c2-14424e82fa35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4a19a8-1238-4a49-b877-ce7dc2634328", "sighting_of_ref": "indicator--b52fe188-f300-4242-8960-215d2d6776ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69364b7-0460-44cb-b081-60be9b4fe33a", "sighting_of_ref": "indicator--fe0ee0f6-d168-4074-90a7-91f1e2b12f47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d379cd-57b3-4587-b624-1ac3492b8333", "sighting_of_ref": "indicator--44bfd593-eecb-475f-a1e3-465b9d4c4bdd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c16e54-10bd-42af-9dc8-561f533fed9d", "sighting_of_ref": "indicator--61091aa4-cfab-4d70-aa9c-b0d3bfa55108", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2dc364-109d-4690-b4eb-423db6668b87", "sighting_of_ref": "indicator--814b74e2-c19d-426d-b03a-3276535e5e28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014a35f7-6fc3-4a7f-b82f-0c1b88ca0017", "sighting_of_ref": "indicator--814b74e2-c19d-426d-b03a-3276535e5e28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6d0864-ec8a-4aa8-9fb9-754f1a94ecd8", "sighting_of_ref": "indicator--069d3409-740d-4c95-8599-0ebd6874e21d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36aba617-67aa-4b46-8ca2-63687fcbeebf", "sighting_of_ref": "indicator--d2231350-69cd-4983-8e35-e82b75cefc28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74511830-4283-483b-b9c9-dcf7ff7bfa30", "sighting_of_ref": "indicator--cac79e14-ebd6-48ee-a65f-2ef16849200e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa868b57-f927-4acd-9d5f-4d29096245f0", "sighting_of_ref": "indicator--14486fbd-df18-4ff8-9285-87ddc1cfa2d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a384ac-d99f-4156-8aa7-13fe9280253a", "sighting_of_ref": "indicator--14486fbd-df18-4ff8-9285-87ddc1cfa2d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903b9d07-d012-42e1-96cb-00ca13ba7ad4", "sighting_of_ref": "indicator--14486fbd-df18-4ff8-9285-87ddc1cfa2d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e70188a-d32f-4c6b-948a-d7ba498fac89", "sighting_of_ref": "indicator--5c468e81-e8e3-4890-a374-cf5d6658374f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa584d40-1308-4cab-9165-d1d171658874", "sighting_of_ref": "indicator--5c468e81-e8e3-4890-a374-cf5d6658374f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23384187-4b9c-41a4-9280-a931a6fb6b6f", "sighting_of_ref": "indicator--5c468e81-e8e3-4890-a374-cf5d6658374f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b974001-98fb-42a5-a11b-84799394a0db", "sighting_of_ref": "indicator--064af5d0-a900-4b85-962e-df56c74aec0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cbca87-2de6-4d85-b4a1-40e7a9a1c63e", "sighting_of_ref": "indicator--064af5d0-a900-4b85-962e-df56c74aec0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0858a1-ff5d-477d-98ff-a23f8dc1ef37", "sighting_of_ref": "indicator--064af5d0-a900-4b85-962e-df56c74aec0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bc2951-1f7c-4e8c-ac4d-9a37366c6e0b", "sighting_of_ref": "indicator--1159e895-cf6f-4e9a-8954-99b3c3bed9a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81715558-bfeb-4c45-810c-2a7c5792a8ad", "sighting_of_ref": "indicator--1159e895-cf6f-4e9a-8954-99b3c3bed9a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4692929b-2d79-42b6-9f81-0b556b3f7fc7", "sighting_of_ref": "indicator--1159e895-cf6f-4e9a-8954-99b3c3bed9a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844bd9c7-1029-454e-bb3c-6e09e3df8b11", "sighting_of_ref": "indicator--4a64d47f-224c-4f0b-abd1-a0ee191ff7bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05cd43e-05bd-43ef-9462-243c22ac37a4", "sighting_of_ref": "indicator--4a64d47f-224c-4f0b-abd1-a0ee191ff7bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8112cebe-e84a-41d6-b4c0-24f818676912", "sighting_of_ref": "indicator--4a64d47f-224c-4f0b-abd1-a0ee191ff7bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a7f650-6eeb-4ae6-8117-9e2a5b37aa4e", "sighting_of_ref": "indicator--750ff906-ced4-4691-9cb9-ce77aeea1639", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870564fc-afdd-4bc2-be65-f77b9a5c0df4", "sighting_of_ref": "indicator--750ff906-ced4-4691-9cb9-ce77aeea1639", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895cc43a-2a79-449d-b79d-7acf5d872910", "sighting_of_ref": "indicator--750ff906-ced4-4691-9cb9-ce77aeea1639", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0432f12-e9c6-41db-986a-16b5d8821af0", "sighting_of_ref": "indicator--629c1873-725f-4908-86ea-7ae4c5329457", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effdc950-2408-480d-99ef-ae63cbffa69d", "sighting_of_ref": "indicator--629c1873-725f-4908-86ea-7ae4c5329457", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192bceb6-e1e2-4f68-addd-379d7c8f7da8", "sighting_of_ref": "indicator--629c1873-725f-4908-86ea-7ae4c5329457", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912eadad-693d-4c67-897c-dff1aa502a4b", "sighting_of_ref": "indicator--776553bf-a8e0-4cdb-9da1-56d95903e302", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311b23fb-8fa8-4851-a883-40067a0d4e08", "sighting_of_ref": "indicator--776553bf-a8e0-4cdb-9da1-56d95903e302", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c1841c-c20c-44cd-a67a-fe766a1e6f62", "sighting_of_ref": "indicator--776553bf-a8e0-4cdb-9da1-56d95903e302", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba2aa53-c51b-4ddc-aab4-03971cdb9bf6", "sighting_of_ref": "indicator--835b68ac-efdd-4d37-b4f7-04969c6d2861", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b858d62d-8766-4a3b-9f36-cdc8f26b0171", "sighting_of_ref": "indicator--5472cc3c-a9d6-4d8b-8562-fbc90d08e136", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f3d24a-8c00-4696-ae2d-71e31f1d3dbf", "sighting_of_ref": "indicator--db43f7b1-2b27-4c4c-9e78-0d1dbdc52969", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b99135-202f-4c9f-8ff0-f36b5204ecb1", "sighting_of_ref": "indicator--c042559d-a827-4634-94cf-3c22b832af95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74d44bf-c049-4262-8a60-20c552e5a686", "sighting_of_ref": "indicator--c042559d-a827-4634-94cf-3c22b832af95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e07575-946a-401d-bbcb-58bc82bf1e8d", "sighting_of_ref": "indicator--1166a4a7-82dd-4baa-a8de-e529c2f97abc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d335aa-3f24-47db-8780-5a5081360661", "sighting_of_ref": "indicator--0867e4ee-7491-458e-80bb-8968eae75a0c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58897d90-4cc2-4862-8fb8-0cac45c9f2ab", "sighting_of_ref": "indicator--0b4161d6-b2d1-4f37-bd6f-590ece4bc58d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933d7db9-ed07-4526-936f-982da1e81ad8", "sighting_of_ref": "indicator--598306a4-6773-474d-95b4-b34777283339", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529ba3ea-a1e1-4098-9d9b-a344e99756df", "sighting_of_ref": "indicator--adba6544-7a33-4afa-8be3-ce20f1667089", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3305daac-bd9b-4914-bf63-9e33bbba549d", "sighting_of_ref": "indicator--3acb692c-f98b-42e4-b032-5a52f5592bd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf8ba0-f3df-4083-b3f6-3d13cc51a71f", "sighting_of_ref": "indicator--2cfc9655-6d2e-405d-8411-4844ef79f647", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a3082-e176-438f-91f2-8530e7cbbbd4", "sighting_of_ref": "indicator--7217fabc-4ed6-4ef8-a782-46421a366bd2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd38434-d989-4468-a9d1-eab27807d244", "sighting_of_ref": "indicator--6904018e-4660-48f5-8906-bd5009ff1c6a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe3097f-c588-411e-b9ed-9ffcb5a9388e", "sighting_of_ref": "indicator--6904018e-4660-48f5-8906-bd5009ff1c6a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdc3d99-fe4a-4a73-b24c-db4456d24519", "sighting_of_ref": "indicator--d6857bbb-ff78-4dd1-86e6-aa0b303bd393", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5e453f-b662-488f-82c3-03ab103ee51b", "sighting_of_ref": "indicator--466e2a34-6b51-4b37-b344-013ad88329bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3e5b4f-741f-4fc1-88c2-692ec90ed086", "sighting_of_ref": "indicator--b065a58b-1bce-4caa-98bb-d04dd608dcf4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463315bd-5e44-4365-872a-729b03fc6834", "sighting_of_ref": "indicator--0c745942-59b0-4eb0-9c32-604a67096be8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05679c67-47d8-4312-8680-681cca9bbd60", "sighting_of_ref": "indicator--1e64754c-8de2-4c0c-889c-3fda40875ef1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd47d303-9e61-489e-a0c4-54d614a6e6fd", "sighting_of_ref": "indicator--b690ced2-4e1e-461d-9e89-f95a6465d916", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88048be-1e8e-4b62-9a0e-f574ecab13e2", "sighting_of_ref": "indicator--b8e21c86-3f86-41ce-a258-0481e1a90ab3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b9222c-095d-44bd-9c59-95f00236c333", "sighting_of_ref": "indicator--b4cfb867-be4d-48de-9562-8d5193887706", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304a7a4b-5e75-42b1-b584-4c6a591a771b", "sighting_of_ref": "indicator--b4cfb867-be4d-48de-9562-8d5193887706", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12667368-f545-4f15-89d7-a33573cb1cd1", "sighting_of_ref": "indicator--851ac744-d796-485a-b787-869e5fcf0548", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60db7b3c-7873-43f8-aaf2-6e4810c9f563", "sighting_of_ref": "indicator--851ac744-d796-485a-b787-869e5fcf0548", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7682794a-3376-42e7-b3e9-a55c0957380a", "sighting_of_ref": "indicator--851ac744-d796-485a-b787-869e5fcf0548", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941c87a3-f252-4337-9890-170b1535f2b6", "sighting_of_ref": "indicator--166205a0-e624-4bf9-9e55-96f491722fff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea544771-76c8-436b-936c-3e79ee6b6ea1", "sighting_of_ref": "indicator--ace23bbd-3069-4e33-b7bf-ccb1480cc220", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8335079d-c21e-4be4-a6d6-66e655db24a3", "sighting_of_ref": "indicator--89211e36-a640-454f-8b63-440fe2cda497", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9120a4-197f-49b6-a3e3-8e51993715a5", "sighting_of_ref": "indicator--89211e36-a640-454f-8b63-440fe2cda497", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fa0dbf-0143-494c-b267-1f88ff70ac04", "sighting_of_ref": "indicator--89211e36-a640-454f-8b63-440fe2cda497", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263e12a8-23f1-44dd-ad84-6578760760ba", "sighting_of_ref": "indicator--e351cecd-da0f-40bd-a13e-a925d782ca05", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eff7969-81a5-4ed7-9411-187b42715708", "sighting_of_ref": "indicator--38d4d211-748b-4919-aa53-2816faab2a10", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a810d64f-47c3-4b94-bfbb-cf86ced924ad", "sighting_of_ref": "indicator--38d4d211-748b-4919-aa53-2816faab2a10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a944f55-f44d-4526-a3bd-bfff4fb7a5f2", "sighting_of_ref": "indicator--5e2a04a9-d857-4136-af49-c71692d858a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b9bf50-adba-4788-a0ce-acf4d2b0eacb", "sighting_of_ref": "indicator--5e2a04a9-d857-4136-af49-c71692d858a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6c5128-9363-4820-8383-b0eae31aa12b", "sighting_of_ref": "indicator--a207a5b5-7762-488c-a6c7-f53f460be8c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859e0565-ff2e-4d2a-81c3-1b05be33fa2b", "sighting_of_ref": "indicator--8a5610d4-95bb-4673-9c32-21b395d2ea8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a165bd7-0303-4904-a2ac-371fdae726f9", "sighting_of_ref": "indicator--ad328bd4-4c5e-4ff3-aead-90babb21dfd9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0af210-46bc-44b3-a47e-6696c22c6de9", "sighting_of_ref": "indicator--51f14a5f-7b44-4f41-946d-1127172571c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc57d17-39a3-4079-8ff5-b1ddcd51f17a", "sighting_of_ref": "indicator--46c75a0c-ba20-4ce1-8df8-f7dab4bd8828", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56828eb-18f5-4461-9796-c77c930f9aef", "sighting_of_ref": "indicator--46c75a0c-ba20-4ce1-8df8-f7dab4bd8828", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf7392d-ec6a-4596-8da5-6dccbaf8852a", "sighting_of_ref": "indicator--baf6a6fb-6057-44df-ad05-b957cadda29b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48977ea0-cdce-47c5-9d61-ca2f607b2dfb", "sighting_of_ref": "indicator--026b1b8d-ebf0-4584-b750-234f758e47bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5be9e7-2917-481c-a374-6d7934bfe0ee", "sighting_of_ref": "indicator--a46a5d65-a29b-4c86-86a1-0c5caea509f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e242952-75f2-4171-8c8d-5590b48abbed", "sighting_of_ref": "indicator--89d22cd8-177e-4fc8-8c2c-45ffd25d3d5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac6a844-0815-40a7-b464-ab4a0b05478c", "sighting_of_ref": "indicator--9746390a-70d8-409e-bacb-7af49648bdb8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8741ba8b-a9a9-4c02-97d2-49b25445b330", "sighting_of_ref": "indicator--f065d774-82c1-4864-b583-7801da108b31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482c6da2-01ff-4a21-a266-6727a3293024", "sighting_of_ref": "indicator--d667d23e-5889-4a7b-9130-6233ff6f3f6a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c83d180-cc52-4194-a396-8b114e051ab0", "sighting_of_ref": "indicator--d667d23e-5889-4a7b-9130-6233ff6f3f6a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beee7cae-0bb4-4572-98da-28f503d7bda5", "sighting_of_ref": "indicator--d667d23e-5889-4a7b-9130-6233ff6f3f6a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e97b0e-dc0a-4282-8419-a0a358b12a26", "sighting_of_ref": "indicator--f4144137-5181-45f5-b62c-1ef8c1778d7f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88b0c29-5c05-40ee-b2f6-272ce3305e2b", "sighting_of_ref": "indicator--76f910d9-5d6c-4e90-a41d-8dd14b698f09", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62f4924-8024-42fc-9e6a-b8254f5a414a", "sighting_of_ref": "indicator--76f910d9-5d6c-4e90-a41d-8dd14b698f09", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cf7074-b621-46d7-b2e0-997b3db18f53", "sighting_of_ref": "indicator--32728d39-664b-4f2d-8dc0-22a82b42e744", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2468911-6534-4c88-ae3b-f3056b524359", "sighting_of_ref": "indicator--32728d39-664b-4f2d-8dc0-22a82b42e744", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64231830-ca00-4aa3-b948-04b9cb63892c", "sighting_of_ref": "indicator--32728d39-664b-4f2d-8dc0-22a82b42e744", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5f7247-d8a6-49ba-9731-807aa97d918c", "sighting_of_ref": "indicator--7167690d-f9f7-4c3b-b0b6-13ddb7fb9d03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce24180-45ba-4d2e-8047-02771f2e938a", "sighting_of_ref": "indicator--df97eddf-b949-4bd2-8b76-aa1e1651705f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ea4e3f-a0cb-4f90-b1e4-c93565e82473", "sighting_of_ref": "indicator--b27b4292-b77a-4361-a706-7294cf663740", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae344a4c-89cc-4032-8aae-02cf7bc4bdc8", "sighting_of_ref": "indicator--b27b4292-b77a-4361-a706-7294cf663740", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88a9ee8-e72b-4c40-8115-bd6df643560c", "sighting_of_ref": "indicator--cae982cc-6fa8-4338-8a4a-66fc87709068", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48643a5-2309-4233-a5a2-d8d57a00c0e9", "sighting_of_ref": "indicator--ae9c9a6b-4ec4-4c4f-a07c-0c2aa272af15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ebe4f0-4d49-41b1-9890-8e52f1863fd1", "sighting_of_ref": "indicator--71f55e12-944d-4ee4-84e2-894305f3ab0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a31c97-0950-4c02-b558-2f70f586d62d", "sighting_of_ref": "indicator--71f55e12-944d-4ee4-84e2-894305f3ab0d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7418f8-f9f7-4b63-b94b-4315775390a1", "sighting_of_ref": "indicator--a455cb07-192a-42e6-b6d0-004733b0ac03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abe6ffb-dbc5-4406-9f96-f0d798c3b08e", "sighting_of_ref": "indicator--a455cb07-192a-42e6-b6d0-004733b0ac03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9518a90-7b96-4f53-b440-cb42841ec385", "sighting_of_ref": "indicator--2b3fed92-9727-4cea-b947-da371c744f9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1fd4e4-c239-4f7b-a04b-c8d6086c411c", "sighting_of_ref": "indicator--fba3e129-6945-4a50-a62b-026a6f559847", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc06a07-1b37-449f-b23b-59b437a5a85b", "sighting_of_ref": "indicator--fba3e129-6945-4a50-a62b-026a6f559847", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3207372f-5b73-4c90-80ea-3501c5eaeb7d", "sighting_of_ref": "indicator--fba3e129-6945-4a50-a62b-026a6f559847", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857bb680-ee29-4ab8-8d42-25a73fd0d57e", "sighting_of_ref": "indicator--949e6628-2511-425a-b221-6d5c5aa46a34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ce95a5-43c1-4453-83a0-1bd8fb258e37", "sighting_of_ref": "indicator--e80badf8-e69c-4a12-9404-7c0759a9d167", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee89f169-524f-4020-9424-8e7d90c080ed", "sighting_of_ref": "indicator--5aa3359f-db31-460f-8d63-771667096516", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec61ffe-5341-464f-9a1e-8213dadad223", "sighting_of_ref": "indicator--0ee2c6e7-a60a-452d-9503-a609fe1285ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e85ca0-6214-4423-9c7e-0f9f5e44a557", "sighting_of_ref": "indicator--bc759e7a-9156-4015-87c3-6d0412e44f44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dc34ee-d68c-4274-88b1-df41679e070d", "sighting_of_ref": "indicator--ada449da-3c92-443c-a02f-0c14e09a1846", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b7bd87-048e-49fb-8128-d779372f3890", "sighting_of_ref": "indicator--31efe0f7-c4f0-47c0-96a1-b954fe48b3ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f9eaf5-eee5-43d7-bab5-8035f52c8f92", "sighting_of_ref": "indicator--5b426ab6-3b40-44ad-8a0e-c2f459b1d5f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0059a43-9a69-4cb5-ba40-e269f189729a", "sighting_of_ref": "indicator--d49003bd-1f2b-44f6-9d1e-ac6a1a63aaf4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e3056a-7f90-4ab7-ba7c-89b8956d9a8f", "sighting_of_ref": "indicator--41032e9c-8370-4554-a330-9177203b338b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08df532-12ff-43e2-83a5-226dabf3017b", "sighting_of_ref": "indicator--d9173c16-73bb-487e-b17b-361991fcfde1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980ea365-5d59-417b-9600-8197fc04c487", "sighting_of_ref": "indicator--7b954173-73e8-4001-ae7f-6ba95ef2c369", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e082d604-afe1-4481-8ac7-5ffecf28bf96", "sighting_of_ref": "indicator--87424114-76d7-4620-892f-3573adbc76c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ac2cdb-f411-4006-a434-9707473163e8", "sighting_of_ref": "indicator--dde1e137-4938-487b-b3a7-d1ea8d96a2c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b29f3c5-a1ac-486b-a371-88939852ece1", "sighting_of_ref": "indicator--14455e24-eb20-4924-91b1-323ae0903dbf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aceda1b-4731-4130-8a28-a3cd6c82204f", "sighting_of_ref": "indicator--03f0d183-a20f-46e8-b540-4bfaf118b640", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1beb57d-b60f-43b6-84f8-c0dcc50faf95", "sighting_of_ref": "indicator--4beac4b4-d2a5-4d2d-8242-8a8e235245ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848f0014-d5ad-4b8b-85c0-dd4c79bd0856", "sighting_of_ref": "indicator--9db40612-d52f-409b-8303-6f2119fcc5f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689a4b4e-8332-4648-8ce8-d9407a4b5a48", "sighting_of_ref": "indicator--9db40612-d52f-409b-8303-6f2119fcc5f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbb1fb5-67e2-45e6-955c-1938e34509d0", "sighting_of_ref": "indicator--151a17ce-dff2-436e-96db-80382488b235", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993a2691-a0dd-4442-abee-d507b4d11d06", "sighting_of_ref": "indicator--8e1c20c5-8835-4d9e-b262-2d1b8bb0cbdd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4a83bc-9010-4b29-8816-91d7b87b663b", "sighting_of_ref": "indicator--8429ba28-07a3-4e2e-b2e3-0aeaf280693e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418d5893-be20-4f55-a105-031808d1637a", "sighting_of_ref": "indicator--def4ba61-764c-4833-bcde-fc1d17ca0b53", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3d6454-073f-4e6b-af4c-09c55387d343", "sighting_of_ref": "indicator--def4ba61-764c-4833-bcde-fc1d17ca0b53", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0deb516c-9b81-44ae-8f01-c1e09bb1e717", "sighting_of_ref": "indicator--6adf3281-3cb5-4ee7-a6bc-43c94455da87", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599b16e5-c6ef-4f25-9029-77e207c5ee1e", "sighting_of_ref": "indicator--41607efa-c4dc-4957-9c2a-be5de110fd59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e551bfc-0bc6-4fb6-9af0-3927bff6426c", "sighting_of_ref": "indicator--41607efa-c4dc-4957-9c2a-be5de110fd59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47426651-fbcf-4f05-9fc5-496dd508bf53", "sighting_of_ref": "indicator--6a70c312-82d8-47e3-9621-3717b27e3451", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6f8208-3020-4400-97e4-0e0e2761ae8a", "sighting_of_ref": "indicator--60dc25ad-551f-4217-a457-ade3f8ef22d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4fe4eb-7fa1-42e8-9a99-12f8b48cc285", "sighting_of_ref": "indicator--8b1c4548-5055-4734-9dd1-7117ea41aa3f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4076ea4-37e5-4739-bc50-560c4fc9de13", "sighting_of_ref": "indicator--2144a581-b1e2-4cc3-9e05-917748ad4770", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4596d9c-5604-478e-9f3c-5612dd7cbd27", "sighting_of_ref": "indicator--f4f06b87-8c13-415a-91eb-5562eb9f9d82", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9449c8e-9793-4f6a-9350-ba8295b90c5d", "sighting_of_ref": "indicator--70ebe9b1-f5f0-4b03-ae07-d88dfc257329", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87239856-55d1-4802-b94e-31221f28ed71", "sighting_of_ref": "indicator--4659fd23-9027-4b42-b9d4-370a8c2ea049", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1addc84-5c2b-4249-b270-4d9bd24cbbc5", "sighting_of_ref": "indicator--f0ec2c24-04f3-4afc-a668-38b512c5611e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7a69b2-7644-4ca0-a4f8-c97167ac287c", "sighting_of_ref": "indicator--3d7d1da9-f65c-4388-8646-a200117dad49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7fe88d-98c2-48be-bb92-7dcd380c9d60", "sighting_of_ref": "indicator--8de7c561-e5fc-44c5-a762-4e950ba8124e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763ba229-3b0d-4e46-9d07-349e6163a7fb", "sighting_of_ref": "indicator--40a2715e-a574-4ba9-b855-d728cbbcdae1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516a5df6-fdad-4ebe-bbe5-7c2566e68366", "sighting_of_ref": "indicator--ec2e819f-f345-4ec3-b59e-12e276b34ca1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3542d3d8-e972-4255-8e9b-8ad19a38937e", "sighting_of_ref": "indicator--e47cc3b0-a881-4f28-843c-55f344fff21d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c91f70-1cd4-4018-94df-441065c56d61", "sighting_of_ref": "indicator--f4029521-236d-472a-a221-bfb5e399c171", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f8cb35-bd95-4617-90ca-c7db37dd8995", "sighting_of_ref": "indicator--4ce777c8-31fa-4fe3-a2ca-ad3626c2b4d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a41150-4efa-4c12-bbb8-aac9f0f60d86", "sighting_of_ref": "indicator--417e1028-8e34-4bc5-b31e-bb60dc537de3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73675f24-fb8b-4fa8-b2e8-a0f8f02573ee", "sighting_of_ref": "indicator--417e1028-8e34-4bc5-b31e-bb60dc537de3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8718bf-4193-4495-840b-de353bb8b3a1", "sighting_of_ref": "indicator--5a68d3a1-ef9d-4339-9dad-00515d20f13a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9b9b3a-667f-454a-9819-714efe44e19e", "sighting_of_ref": "indicator--e4cba851-5077-4fc9-90e7-ac985fc4dcec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c39159-02d4-4956-8e88-c93ebd912edd", "sighting_of_ref": "indicator--e3541022-89fc-4e38-86d3-1006054a1cdf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e79ca2e-2215-4e8d-85af-f9bbcf06da18", "sighting_of_ref": "indicator--4c6d8361-1d85-4fa8-b3f3-fe8a4bb81fa1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5307730-13ac-4f78-b1f2-b700c5346413", "sighting_of_ref": "indicator--c6af099f-1496-4821-b0e0-9a39337e5baf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cb983b-e821-4a31-9cd0-f5448758a4d9", "sighting_of_ref": "indicator--d08cfba8-a711-4f77-ad0a-c465f164e6e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366947a1-bb78-4329-9c6c-f67e5f4c8a32", "sighting_of_ref": "indicator--efbf91ef-fcd1-4631-9f26-78262e5701a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835ffbe7-59d3-41e3-b6c8-9a3772052b0d", "sighting_of_ref": "indicator--6899a338-8586-4e84-8019-6b4b845a17f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507d4605-7d24-421c-a98f-62adb3f72efb", "sighting_of_ref": "indicator--71b09c4b-9817-4f86-b8d5-2743c98b7e06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6992b600-0dfa-47fd-b16b-f55c03ff2af5", "sighting_of_ref": "indicator--55aa3047-837e-43ec-97d2-553eab88a5cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1522a22-14bd-47a9-90ba-166ad11b1d26", "sighting_of_ref": "indicator--ffa435e6-afd5-4382-b177-6a4d68ee72be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ab0807-6b34-40be-93fd-4b2e8eb954f2", "sighting_of_ref": "indicator--39559dde-8825-442e-9e68-51071c5211ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1efa66-a225-4744-9e62-34895b79530a", "sighting_of_ref": "indicator--fdd5f914-807e-4da3-9822-fc327fa08d74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d25d220-712c-4aa7-9a89-a745d0b1d2fa", "sighting_of_ref": "indicator--e3fe9162-7c50-4df8-8fad-f8f3c8c060f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ae3a6a-2489-4f46-bf0b-3334e8900841", "sighting_of_ref": "indicator--3c86b3cb-a586-426b-aa77-54e29656546e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c9e717-d222-43f4-a2be-35d21c089c4c", "sighting_of_ref": "indicator--3c86b3cb-a586-426b-aa77-54e29656546e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bdb7ba-a274-4de5-b3ce-59071137f7aa", "sighting_of_ref": "indicator--940ac1fc-84c4-4e7a-9033-d5d556bd1918", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412d97a-9255-49ee-841f-d7d3e67aae19", "sighting_of_ref": "indicator--0e26b317-b7c3-4da9-89ad-436f96bda736", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33808993-d1f6-4b2f-882e-29bf1e2e11c7", "sighting_of_ref": "indicator--0e26b317-b7c3-4da9-89ad-436f96bda736", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d241878e-ee62-4eda-af47-07c2ba59e9e8", "sighting_of_ref": "indicator--52f3d2e1-ee16-4834-a61d-5708b61bfc2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d5124-bb65-4c76-9b3c-e5375aa39927", "sighting_of_ref": "indicator--52f3d2e1-ee16-4834-a61d-5708b61bfc2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97627ba-b056-4328-886e-1af7fd5278fd", "sighting_of_ref": "indicator--52f3d2e1-ee16-4834-a61d-5708b61bfc2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e251f62-88dd-47c6-9449-ab91487c3461", "sighting_of_ref": "indicator--3f86c24a-9c8d-4921-bbd4-5d6224b38d78", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22eaa66e-f961-45eb-a15a-82a3ad9724ce", "sighting_of_ref": "indicator--3f86c24a-9c8d-4921-bbd4-5d6224b38d78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b30f58a-8431-470c-8105-6e8f89e04473", "sighting_of_ref": "indicator--3f86c24a-9c8d-4921-bbd4-5d6224b38d78", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2f3bf2-faa2-4d8a-8b80-6d76ccd28be5", "sighting_of_ref": "indicator--fa04fac5-f9f9-473a-8fd3-e14357d5a384", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f7574e-87e5-4335-87f1-d4e9a0e9dc01", "sighting_of_ref": "indicator--fa04fac5-f9f9-473a-8fd3-e14357d5a384", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c55cd2-ffcf-4d09-bea8-67fccc42b664", "sighting_of_ref": "indicator--6f221767-28fc-494f-a9ae-dc56ec802a9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da46467d-49ee-43c8-a3d7-eec1735c7af8", "sighting_of_ref": "indicator--6f221767-28fc-494f-a9ae-dc56ec802a9a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c5ea09-4533-4f5d-89ea-cdf4f291f724", "sighting_of_ref": "indicator--6f221767-28fc-494f-a9ae-dc56ec802a9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d33b397-10f1-4f23-a661-901f92ccace0", "sighting_of_ref": "indicator--b90399dc-5446-4a4c-b8cd-fad673f063de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5bd08a-7b5d-488c-8ab9-787ec21b4946", "sighting_of_ref": "indicator--b90399dc-5446-4a4c-b8cd-fad673f063de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb0b270-e203-44a5-a98d-a670555b3c9f", "sighting_of_ref": "indicator--b90399dc-5446-4a4c-b8cd-fad673f063de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c9ba0c-e080-485e-82bb-e46f7f6dab4a", "sighting_of_ref": "indicator--e32b2154-08c2-4315-9061-e8a4aff71e12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a0e268-03f2-4f11-97a5-3b6968a342f5", "sighting_of_ref": "indicator--e32b2154-08c2-4315-9061-e8a4aff71e12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3790f8-a15c-4386-854b-3ae02ee90839", "sighting_of_ref": "indicator--e32b2154-08c2-4315-9061-e8a4aff71e12", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83be37ad-7ef1-4ea6-bc58-4f1b80464861", "sighting_of_ref": "indicator--019cd511-45db-4e2d-8d32-a85b1a8d0645", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3a28ff-077c-4fcc-93e2-a6e5e881d262", "sighting_of_ref": "indicator--c095dd69-30ba-4ef4-ad4e-fa54a5cfbaad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfed5e59-cf72-48f8-a392-972ba23d226a", "sighting_of_ref": "indicator--c095dd69-30ba-4ef4-ad4e-fa54a5cfbaad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3515b687-cfa0-4e28-b05f-28b7d701cb46", "sighting_of_ref": "indicator--c095dd69-30ba-4ef4-ad4e-fa54a5cfbaad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11e3992-611f-4cef-8af6-be22c88ee8d6", "sighting_of_ref": "indicator--84dd9f12-dff8-4bf2-8601-ec3a8fc8dfae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db1b29c-476a-4916-977d-280f753763a1", "sighting_of_ref": "indicator--84dd9f12-dff8-4bf2-8601-ec3a8fc8dfae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b03bcbc-8b06-4772-b3c1-32da35c34790", "sighting_of_ref": "indicator--84dd9f12-dff8-4bf2-8601-ec3a8fc8dfae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f176174f-591d-46fc-8960-2a3ad61a9bd9", "sighting_of_ref": "indicator--45edc7cb-89de-45b0-a510-e228f3f254da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e7882-dbc7-4e04-ad6e-aea6a9932780", "sighting_of_ref": "indicator--45edc7cb-89de-45b0-a510-e228f3f254da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ac30ea-79c8-4f9d-95a6-891464b480b9", "sighting_of_ref": "indicator--63cf6134-3a31-4d08-9682-f6aec774a226", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd1608-4053-47a4-b009-2c7bc0d4f486", "sighting_of_ref": "indicator--63cf6134-3a31-4d08-9682-f6aec774a226", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ebdde-6407-4326-80e1-4dba719edbfa", "sighting_of_ref": "indicator--63cf6134-3a31-4d08-9682-f6aec774a226", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c03a1ab-388d-4be8-b8c8-0bea4ab66f0a", "sighting_of_ref": "indicator--365340cf-e495-4a29-ae27-1fba6e47d54a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f04b1e-2a3c-4d10-b0f8-984b5d468aaf", "sighting_of_ref": "indicator--365340cf-e495-4a29-ae27-1fba6e47d54a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6eb03dd-1ec3-40e9-a158-648dbbdeb212", "sighting_of_ref": "indicator--365340cf-e495-4a29-ae27-1fba6e47d54a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaea4bde-4e93-4a3d-9a97-8d782b131211", "sighting_of_ref": "indicator--2ceec511-7b1c-4166-bcaa-269882628d6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97780c89-538b-415b-861a-54a4346c451d", "sighting_of_ref": "indicator--2ceec511-7b1c-4166-bcaa-269882628d6b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1947853c-f1a7-4e54-9428-ac7383638420", "sighting_of_ref": "indicator--2ceec511-7b1c-4166-bcaa-269882628d6b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75217da9-f8cb-4e7e-ae99-b0e2a8532fb3", "sighting_of_ref": "indicator--e15d3846-8281-4cfb-9745-42a898a223e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2fd4ab-7083-4e3e-a4e8-cf9428f0e503", "sighting_of_ref": "indicator--e15d3846-8281-4cfb-9745-42a898a223e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed10eecd-e8e6-47c5-90ef-0e1974542587", "sighting_of_ref": "indicator--e15d3846-8281-4cfb-9745-42a898a223e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15451290-bee5-4e8a-8a94-fb86f83a2d25", "sighting_of_ref": "indicator--bcac7a12-4696-4f46-addb-bcff027b366a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e442c11e-485d-49af-8eee-9315b3a9279c", "sighting_of_ref": "indicator--46fa1096-5c73-42e2-878c-5ae05aa61df1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e427dc-3ba4-49a8-b708-d492c5edbf5e", "sighting_of_ref": "indicator--46fa1096-5c73-42e2-878c-5ae05aa61df1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500532a7-f905-4b86-94bc-d4de6e6e9f42", "sighting_of_ref": "indicator--46fa1096-5c73-42e2-878c-5ae05aa61df1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3574699-81ab-4bb2-b39e-57dc3e1a9126", "sighting_of_ref": "indicator--4dce6ba9-3ece-45ad-933e-539e3bd61d0a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586cbec9-7342-4d8c-9e93-f999f43bcb81", "sighting_of_ref": "indicator--4dce6ba9-3ece-45ad-933e-539e3bd61d0a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37868faf-2eb3-4b1d-9919-fbf37b743100", "sighting_of_ref": "indicator--4dce6ba9-3ece-45ad-933e-539e3bd61d0a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4868a465-5a35-4aed-a7a6-a14bca65b45c", "sighting_of_ref": "indicator--51188a6f-8b4d-4ff2-adde-6031e4d432a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbd3b73-b382-4270-8566-59021bb1f4be", "sighting_of_ref": "indicator--51188a6f-8b4d-4ff2-adde-6031e4d432a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e88074b-869d-449a-8950-5d544da1152a", "sighting_of_ref": "indicator--51188a6f-8b4d-4ff2-adde-6031e4d432a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec0d5a1-c819-46aa-9f49-feecd60403fe", "sighting_of_ref": "indicator--e80c84f6-bae5-4c70-8476-b56445962b2e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5e7db7-09a7-4260-8b39-910b0166269d", "sighting_of_ref": "indicator--e80c84f6-bae5-4c70-8476-b56445962b2e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3fb2d0-8245-4342-8344-f568fef52d08", "sighting_of_ref": "indicator--e80c84f6-bae5-4c70-8476-b56445962b2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaafbeb-2689-4d39-b195-2a617016c9a5", "sighting_of_ref": "indicator--db507f25-3119-4275-afac-78f79695a2c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f5c12d-ecc1-4e5c-9abc-a24229a950c9", "sighting_of_ref": "indicator--db507f25-3119-4275-afac-78f79695a2c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9aab46-564b-4553-9a3a-ad8e0c55a0ef", "sighting_of_ref": "indicator--db507f25-3119-4275-afac-78f79695a2c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fcfcd7-5e91-446f-9e2c-7603e0615361", "sighting_of_ref": "indicator--85d1359a-11cf-426b-ac2a-b5107ac7a7ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32b101c-4626-4e6a-ac3d-ea395e661fe1", "sighting_of_ref": "indicator--a09225d4-6997-414d-bc11-4046e3271579", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd91fad7-63e0-41e2-833c-244db3896aa8", "sighting_of_ref": "indicator--a09225d4-6997-414d-bc11-4046e3271579", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41c7712-99c6-4ccd-a579-b06ce7a75779", "sighting_of_ref": "indicator--a09225d4-6997-414d-bc11-4046e3271579", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4b718f-5dfa-4546-84b8-506f46510f15", "sighting_of_ref": "indicator--8ed01490-f7a3-4a42-ace1-7bada5f75d60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a63bf62-4658-4b0b-a030-7b2fa29990a2", "sighting_of_ref": "indicator--bd9d654f-3af6-4b18-a96d-afd2fb47bd66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94205a1-f124-4892-a9a5-ad21ceb38663", "sighting_of_ref": "indicator--bd9d654f-3af6-4b18-a96d-afd2fb47bd66", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f52380-8e49-49c6-9e4e-0e92e8c72142", "sighting_of_ref": "indicator--bd9d654f-3af6-4b18-a96d-afd2fb47bd66", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213b72c9-388c-49ff-8816-ce271c9d1220", "sighting_of_ref": "indicator--74ec1a41-1903-4f96-a477-db1b960dc6e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf106c41-c0a5-4c81-8c8a-8cd6ff17895b", "sighting_of_ref": "indicator--74ec1a41-1903-4f96-a477-db1b960dc6e3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ff5e6a-a7cb-4d99-9155-b4041a2b2ea9", "sighting_of_ref": "indicator--74ec1a41-1903-4f96-a477-db1b960dc6e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69119801-64f7-449c-a307-7b9932def3b1", "sighting_of_ref": "indicator--f8296b42-9642-4276-a16c-4dd257348b67", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d5771e-6e7a-4de0-9609-30657edebf87", "sighting_of_ref": "indicator--f8296b42-9642-4276-a16c-4dd257348b67", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239c3396-0d0c-4d12-856b-6adea0e7b9b7", "sighting_of_ref": "indicator--f8296b42-9642-4276-a16c-4dd257348b67", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88c8883-b8a9-468a-a9c9-a2a67345024e", "sighting_of_ref": "indicator--17d38347-e6c5-475f-be0b-d1f4d7b17a59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2d31a7-e663-4411-b0e9-fd8144bb9b8d", "sighting_of_ref": "indicator--17d38347-e6c5-475f-be0b-d1f4d7b17a59", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07d009f-d419-44d4-bf5f-fbdb2e4c49b3", "sighting_of_ref": "indicator--17d38347-e6c5-475f-be0b-d1f4d7b17a59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13b2a40-e95b-4554-9a31-dfd5da04d563", "sighting_of_ref": "indicator--0627c121-35f7-4438-b947-9df4459dc0fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aee5617-9601-44bd-99da-3ba0eca81310", "sighting_of_ref": "indicator--0627c121-35f7-4438-b947-9df4459dc0fa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc16972c-67cc-409e-bffd-2802aa7186a1", "sighting_of_ref": "indicator--0627c121-35f7-4438-b947-9df4459dc0fa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2116728-a94a-4109-acde-6834480ecf73", "sighting_of_ref": "indicator--f1a05f5e-ade4-47d0-802b-7b2fb0975d3c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdac944f-5242-4b63-91ca-33ed36e20ecd", "sighting_of_ref": "indicator--21d907a4-2a10-4bce-877d-b4635079c5f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d5c860-c97a-4c26-86ba-8d7901cac4ee", "sighting_of_ref": "indicator--21d907a4-2a10-4bce-877d-b4635079c5f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9928fff4-cad0-4f9e-aebb-fa5617dfdc98", "sighting_of_ref": "indicator--21d907a4-2a10-4bce-877d-b4635079c5f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba05e78-acf6-4d7a-93cf-ecec371a33cb", "sighting_of_ref": "indicator--252d3638-e84f-4428-b182-903c17dbe87d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a6fa7e-cea5-4774-820f-5a395d320781", "sighting_of_ref": "indicator--252d3638-e84f-4428-b182-903c17dbe87d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848c0cff-674b-4684-97f4-74e2a7ca2420", "sighting_of_ref": "indicator--252d3638-e84f-4428-b182-903c17dbe87d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a893e69-5698-4b23-a926-4679a41549e1", "sighting_of_ref": "indicator--b5aefd08-0e5d-43b5-a117-e2b562d9f097", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343cca8d-87be-4aed-88ad-cc88b2dc5856", "sighting_of_ref": "indicator--b5aefd08-0e5d-43b5-a117-e2b562d9f097", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701ee93-00ec-426c-9b4d-55967347e0ff", "sighting_of_ref": "indicator--b5aefd08-0e5d-43b5-a117-e2b562d9f097", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb925b78-fa55-4359-9883-182d4d4034ab", "sighting_of_ref": "indicator--43bddbe6-88a9-41ad-8ef0-0f3784902330", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc12334-69b3-4b9f-b0f8-aecaabe13492", "sighting_of_ref": "indicator--43bddbe6-88a9-41ad-8ef0-0f3784902330", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aade17df-3ef1-401f-ab30-41f1923d2b97", "sighting_of_ref": "indicator--43bddbe6-88a9-41ad-8ef0-0f3784902330", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c515c5ea-c604-4a0a-a351-b733598cfeb3", "sighting_of_ref": "indicator--041df810-b775-442e-a666-cac219071ad8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342b2d8e-405c-4cc0-b3ca-09191dc25132", "sighting_of_ref": "indicator--041df810-b775-442e-a666-cac219071ad8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc875fe8-e4ba-4992-a362-ef1edd2dbb25", "sighting_of_ref": "indicator--041df810-b775-442e-a666-cac219071ad8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9869bbe4-fdad-4b48-945a-d2502d840156", "sighting_of_ref": "indicator--23ee3ce2-fdd4-42c8-b80a-12191099e5e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9ecb29-fa7d-4b0f-b292-adbbfbc4e46d", "sighting_of_ref": "indicator--23ee3ce2-fdd4-42c8-b80a-12191099e5e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375f0ce9-f5ff-4d80-93e4-7b19f3cc52bf", "sighting_of_ref": "indicator--23ee3ce2-fdd4-42c8-b80a-12191099e5e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f67780-69bf-4a7d-aa00-ec800aeb8e3b", "sighting_of_ref": "indicator--a52134fd-5b22-4441-82d7-6fa4c9f5d5d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4440bbd-9c1a-46d8-b1d2-2313c66aa749", "sighting_of_ref": "indicator--a52134fd-5b22-4441-82d7-6fa4c9f5d5d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc822d01-7491-4eba-b7e1-e6003e16bede", "sighting_of_ref": "indicator--a52134fd-5b22-4441-82d7-6fa4c9f5d5d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a576cf-dde4-4892-a6af-e8cffdb03dde", "sighting_of_ref": "indicator--186dcc8a-bf36-4d95-a59b-5df4542450db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7ba6d-7df4-4c8a-a329-ed72bda838c6", "sighting_of_ref": "indicator--186dcc8a-bf36-4d95-a59b-5df4542450db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeaa947-3e3c-4d8c-b908-ab94282131bf", "sighting_of_ref": "indicator--186dcc8a-bf36-4d95-a59b-5df4542450db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563851f8-273b-4c23-b610-d94748f6b339", "sighting_of_ref": "indicator--bf3c640c-32cd-4a5b-8919-49f448bdc684", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1874480b-bcf5-4e1d-b105-cc80e1c16503", "sighting_of_ref": "indicator--990b3633-cf7d-4fd4-ae08-c35e54fa3206", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e53367-4342-4b0a-a196-8b686453809b", "sighting_of_ref": "indicator--67985dff-f9d0-42ad-a6c9-18e1cf68a3ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d3e3df-e6c9-48f4-abe9-a6b28951b231", "sighting_of_ref": "indicator--b81fb5cf-9896-4f4a-baea-048deb04d03c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5672bcb4-a678-49db-b6d9-f02d32d8cdb9", "sighting_of_ref": "indicator--c7344cd0-e0b3-43ea-a83e-243c88e4a8f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b06d10-5fd0-45e6-b47b-2ae51227631d", "sighting_of_ref": "indicator--c7344cd0-e0b3-43ea-a83e-243c88e4a8f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee8a215-62b5-49ee-b626-d8ae0d7d54af", "sighting_of_ref": "indicator--c7344cd0-e0b3-43ea-a83e-243c88e4a8f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2bfe81-73b4-4a44-8f27-e5b33d3d4928", "sighting_of_ref": "indicator--127ee514-b169-4057-8986-a64445d3d3d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc1cf29-5bc3-44b6-bae1-49059638791f", "sighting_of_ref": "indicator--127ee514-b169-4057-8986-a64445d3d3d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4518325b-9a8e-4a48-a433-e3cf5d004cc1", "sighting_of_ref": "indicator--127ee514-b169-4057-8986-a64445d3d3d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c84c36-580c-4098-ad2a-4c3bbb0d3d0e", "sighting_of_ref": "indicator--1d34925e-b1cc-4ecc-b7f6-13293a5ea58e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc611965-8346-4957-9152-47248f6222f1", "sighting_of_ref": "indicator--1d34925e-b1cc-4ecc-b7f6-13293a5ea58e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7bf4d-7572-40b4-830f-460f7a567aef", "sighting_of_ref": "indicator--1d34925e-b1cc-4ecc-b7f6-13293a5ea58e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f33fbf-f293-4f3f-b2fe-78dd0a289684", "sighting_of_ref": "indicator--dce32b34-102f-4bf3-8470-775ee4746f0c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6aa78f-0648-4e58-9798-2973add4079f", "sighting_of_ref": "indicator--dce32b34-102f-4bf3-8470-775ee4746f0c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6840e6cf-8549-420a-88b9-120db0775efc", "sighting_of_ref": "indicator--dce32b34-102f-4bf3-8470-775ee4746f0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9317d20c-722b-49de-87cf-7a93927f05d5", "sighting_of_ref": "indicator--e4e442f3-e93d-427f-aedf-25d1ade215fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00470975-eb72-403a-a8c7-ca4d565fa6b2", "sighting_of_ref": "indicator--e4e442f3-e93d-427f-aedf-25d1ade215fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814c012d-54b0-4df0-adbd-002c45d186d5", "sighting_of_ref": "indicator--e4e442f3-e93d-427f-aedf-25d1ade215fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cfd835-355e-4851-8c59-6dcf4837ff1c", "sighting_of_ref": "indicator--703df276-8630-4b38-afe9-97024a7ca689", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f8e6b8-8957-48c3-b6fe-1c8ff2fcb2ca", "sighting_of_ref": "indicator--703df276-8630-4b38-afe9-97024a7ca689", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79fbfbf-00bb-4f50-95b7-a7e43dc62442", "sighting_of_ref": "indicator--703df276-8630-4b38-afe9-97024a7ca689", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52ec0d8-642f-48e1-b7ff-85a5c085ee1e", "sighting_of_ref": "indicator--cf20f06a-7996-4e1d-b87a-3d05b5fc799a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38da24c5-cb94-4d3f-b0b4-e8084decc9a1", "sighting_of_ref": "indicator--cf20f06a-7996-4e1d-b87a-3d05b5fc799a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7e2c25-c1fd-4b40-bd16-14354ba49a25", "sighting_of_ref": "indicator--cf20f06a-7996-4e1d-b87a-3d05b5fc799a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c31e11e-763e-4dfa-98d5-36274b760189", "sighting_of_ref": "indicator--9ce35c80-f3c7-452d-8011-65492a27d59a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ffed28-b0f3-4e37-ae34-4b8b85bced45", "sighting_of_ref": "indicator--9ce35c80-f3c7-452d-8011-65492a27d59a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfba577-9f1c-431f-b1f3-4b605a079a7b", "sighting_of_ref": "indicator--9ce35c80-f3c7-452d-8011-65492a27d59a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68078693-f5e0-417d-abbb-46b8fc9eb7d7", "sighting_of_ref": "indicator--c9ff8791-bac0-44e7-88c9-79621638d411", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3115fc-93bd-4035-8c7c-2917ca4e9452", "sighting_of_ref": "indicator--c9ff8791-bac0-44e7-88c9-79621638d411", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1c549c-0c9f-4fc6-bd55-b0ce49f6d722", "sighting_of_ref": "indicator--c9ff8791-bac0-44e7-88c9-79621638d411", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d7cb95-0899-4eda-9a33-2b9ffe1baf06", "sighting_of_ref": "indicator--fdb1b48a-62c4-4c27-a0ba-958550c4219d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9beff8-c764-4a4d-b130-923329df7013", "sighting_of_ref": "indicator--fdb1b48a-62c4-4c27-a0ba-958550c4219d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f698d5-981b-4047-bf43-2074ae71eed7", "sighting_of_ref": "indicator--fdb1b48a-62c4-4c27-a0ba-958550c4219d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70774688-1d30-4ad0-8c6a-b861da98c83c", "sighting_of_ref": "indicator--cb35c894-2b2c-4d88-9ded-50cd7a92bb38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6249489-2a37-40d2-9015-2e0f1b66f13a", "sighting_of_ref": "indicator--cb35c894-2b2c-4d88-9ded-50cd7a92bb38", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8133de-ee83-401f-998b-498df5aaa9bb", "sighting_of_ref": "indicator--cb35c894-2b2c-4d88-9ded-50cd7a92bb38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65a630d-89b7-4f15-9863-3a38b1074473", "sighting_of_ref": "indicator--cfa2b8d7-f049-48f0-bd88-5f6c77e3ad31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bd51ee-d637-48b8-81f4-3146b92046b7", "sighting_of_ref": "indicator--cfa2b8d7-f049-48f0-bd88-5f6c77e3ad31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6848c5-0979-4886-971f-d33e4ffb78f4", "sighting_of_ref": "indicator--cfa2b8d7-f049-48f0-bd88-5f6c77e3ad31", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9337a2e2-14d5-4bc2-a952-cd17a59c0af6", "sighting_of_ref": "indicator--7b3eb245-5bfe-478b-bff7-c87109ac1417", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789698a8-e5a8-48b9-a56d-5bf9929b933f", "sighting_of_ref": "indicator--7b3eb245-5bfe-478b-bff7-c87109ac1417", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09c111a-4aa8-4364-8c67-b64a3dd6529f", "sighting_of_ref": "indicator--7b3eb245-5bfe-478b-bff7-c87109ac1417", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacfc3d2-9e2b-4897-a865-4de9deec6a4e", "sighting_of_ref": "indicator--521aec8c-5829-4c0c-a7f6-4a43760fcec0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a42fe9-2681-4611-b28e-04b9cf13b4fe", "sighting_of_ref": "indicator--521aec8c-5829-4c0c-a7f6-4a43760fcec0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4746b043-d7a1-409a-88d1-97dde2aceb25", "sighting_of_ref": "indicator--521aec8c-5829-4c0c-a7f6-4a43760fcec0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edeba79e-c701-45a1-8e4d-6c166ad6ccfa", "sighting_of_ref": "indicator--9f6d1813-29b8-4069-8487-8099373079db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a29544-7d24-45d4-8644-7d319ef0bd5a", "sighting_of_ref": "indicator--9f6d1813-29b8-4069-8487-8099373079db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0bbd96-bba1-4d18-a399-32ae08b4cae0", "sighting_of_ref": "indicator--9f6d1813-29b8-4069-8487-8099373079db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3bbc4d-ef79-473f-9772-efcd9c821596", "sighting_of_ref": "indicator--c423214b-7814-4b14-a3b4-3b32c99f9ae3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163bbf97-e69e-43da-9c72-4e639d64e03e", "sighting_of_ref": "indicator--c423214b-7814-4b14-a3b4-3b32c99f9ae3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193d84ea-2e94-4418-b57c-daa4d6158c91", "sighting_of_ref": "indicator--c423214b-7814-4b14-a3b4-3b32c99f9ae3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf45962-04ac-49f1-b211-cc24ebe5429b", "sighting_of_ref": "indicator--827ddc47-ef24-4640-b5e1-964c8bc71ea5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6d651b-c421-4b1f-98b0-7a4ea8411926", "sighting_of_ref": "indicator--8833d6e9-c4eb-4c96-9ab8-10c2ce820557", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f73bce0-d383-426b-b735-a10bb4fce475", "sighting_of_ref": "indicator--27af5c71-67cd-49d5-a6f7-c1e5fa066073", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b11969-cb13-45e0-8700-5ebf9b328747", "sighting_of_ref": "indicator--4dcff4ef-3415-475a-a511-ac53565318c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bfc467-c24f-4c46-b5ad-ede99229c6fb", "sighting_of_ref": "indicator--4dcff4ef-3415-475a-a511-ac53565318c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333ddb76-39e0-49a6-b462-fa0e70b3bd24", "sighting_of_ref": "indicator--efc1448a-f735-4bc5-bd87-477fc9e4b667", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c909833-0678-4cfe-b19d-e1defb18910a", "sighting_of_ref": "indicator--0e7c2567-3b20-4173-8bb2-05262bfdabf2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69a422e-973e-40f1-8fe5-cd99d79e8ab6", "sighting_of_ref": "indicator--0e7c2567-3b20-4173-8bb2-05262bfdabf2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346de3e3-5efe-4b47-af00-c22a3cd835d1", "sighting_of_ref": "indicator--d2a4c77d-d0c9-47f7-b3b2-7835af79bbf6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a4a334-b81a-4d61-aabd-ebc9139b380d", "sighting_of_ref": "indicator--d2a4c77d-d0c9-47f7-b3b2-7835af79bbf6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51c628a-733c-4a5d-834a-c35e23aa6758", "sighting_of_ref": "indicator--d2a4c77d-d0c9-47f7-b3b2-7835af79bbf6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9352352b-b707-4bf2-bf29-e6ce7461608b", "sighting_of_ref": "indicator--58736bd4-8294-4e5e-82dc-08cd2259c09c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12e622c-fb95-4d73-bdcb-b9661096b6ab", "sighting_of_ref": "indicator--89a47247-f622-48cb-9e23-f1cdfc7f3f8e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb544e7-3350-4a1b-9f8b-18480e45ad3a", "sighting_of_ref": "indicator--015a7ecc-1187-4cce-a6fa-21565c5305d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fc6d9c-ccb7-40a3-94e3-a03f3d80b06d", "sighting_of_ref": "indicator--015a7ecc-1187-4cce-a6fa-21565c5305d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44f1042-f3e7-4e63-8fc5-183befd8523a", "sighting_of_ref": "indicator--015a7ecc-1187-4cce-a6fa-21565c5305d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a971b1c4-ef64-4cc5-9b85-423ebefbaeb1", "sighting_of_ref": "indicator--34dc86ba-377e-45b3-b6af-8684f1f6bb28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf96bca-4f0d-4412-a750-24b0de4e2de7", "sighting_of_ref": "indicator--9920da2c-2fff-443d-8391-fd0ee7355f03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb9ab75-0b0c-40e3-b259-ac9e30f490b4", "sighting_of_ref": "indicator--8afd8a11-8712-4de1-88b5-bf8a2d43947a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638f1179-abcf-4142-8874-07f34df75ed5", "sighting_of_ref": "indicator--8afd8a11-8712-4de1-88b5-bf8a2d43947a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc54c2a5-7c1a-40b5-9410-c81105aa6e05", "sighting_of_ref": "indicator--07ec1e6c-cfb8-45e3-91cd-75c6b96af8cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d0a21d-989a-40b3-a131-3b5d463666db", "sighting_of_ref": "indicator--4514af2b-9b93-43dd-8d72-c904337c7782", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf370ea-fb9a-471b-a988-51161bf5a166", "sighting_of_ref": "indicator--5e7fef20-ff55-4c20-be4a-d114b836b050", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564334fb-cdcc-4bea-a69c-8fb78cc9dbb0", "sighting_of_ref": "indicator--5e7fef20-ff55-4c20-be4a-d114b836b050", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2f1244-62cf-459a-83d0-a68344e4af4b", "sighting_of_ref": "indicator--5e7fef20-ff55-4c20-be4a-d114b836b050", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0b81a3-b5d4-4376-bd01-7f0cc2c0cbf0", "sighting_of_ref": "indicator--638a807c-6c47-4eb7-81fa-50687ba29073", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585e50a4-51bb-4ad5-91da-ad094452d0fa", "sighting_of_ref": "indicator--d561f0fc-f4db-4f4b-850a-56da7c3d3901", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e541fe4-419b-40ad-9f36-4f82afda1b00", "sighting_of_ref": "indicator--d561f0fc-f4db-4f4b-850a-56da7c3d3901", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27df4439-3015-4aef-b172-3d75a7089337", "sighting_of_ref": "indicator--d561f0fc-f4db-4f4b-850a-56da7c3d3901", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d0353f-f8fd-434d-b656-63d41b727e07", "sighting_of_ref": "indicator--3d894733-419e-4581-a1a5-b019eb734969", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e5c489-7af2-4671-9001-54d1931dde27", "sighting_of_ref": "indicator--3d894733-419e-4581-a1a5-b019eb734969", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3272f814-ba45-4685-8654-c95f35d2f278", "sighting_of_ref": "indicator--54634480-755d-4b2a-b983-bd50565b257b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f92ced-dd19-47f0-9cef-33b25ca6385b", "sighting_of_ref": "indicator--54634480-755d-4b2a-b983-bd50565b257b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70727b21-0953-4fd2-beb8-9d59f5be340f", "sighting_of_ref": "indicator--54634480-755d-4b2a-b983-bd50565b257b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1362f8c1-bea1-4811-8007-f7d370fd809f", "sighting_of_ref": "indicator--ce9cf7ed-a269-4dab-9fd7-ad582cf8dc60", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894632c-03fe-48a6-8d10-62756d6c23bb", "sighting_of_ref": "indicator--ce9cf7ed-a269-4dab-9fd7-ad582cf8dc60", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4d99e9-3855-48c3-9db7-e7a7cc7441e2", "sighting_of_ref": "indicator--ce9cf7ed-a269-4dab-9fd7-ad582cf8dc60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b9846d-83b5-49a5-8378-4286209063f6", "sighting_of_ref": "indicator--1b6182ad-d69c-4175-aa48-2ae35cf5e32b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c947a5-b2a7-485d-a838-4a7ddd6bfae7", "sighting_of_ref": "indicator--1b6182ad-d69c-4175-aa48-2ae35cf5e32b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8274e751-c252-4b1e-8efe-360bf3ad5c7f", "sighting_of_ref": "indicator--1b6182ad-d69c-4175-aa48-2ae35cf5e32b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b07071-c536-42a4-8b00-befb3e42bf01", "sighting_of_ref": "indicator--f8ee3371-83e3-4dbe-9fd1-db4e0779e1b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1de95b-6c89-4c7a-a3bd-6204814858ed", "sighting_of_ref": "indicator--f8ee3371-83e3-4dbe-9fd1-db4e0779e1b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b281fa90-64ce-4616-9571-24f6707e816d", "sighting_of_ref": "indicator--f8ee3371-83e3-4dbe-9fd1-db4e0779e1b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b051d17-b11d-4d5a-8006-f3423ec2298c", "sighting_of_ref": "indicator--7c900dd3-01d3-4049-8dde-9a67d2b3c74f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23431502-88c3-40d9-a9c7-8e0354c04b17", "sighting_of_ref": "indicator--7c900dd3-01d3-4049-8dde-9a67d2b3c74f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cdf36d-abd3-4316-8124-ff2deb7f54b1", "sighting_of_ref": "indicator--7c900dd3-01d3-4049-8dde-9a67d2b3c74f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1a8516-f986-47fd-b207-9b454fdd5114", "sighting_of_ref": "indicator--4ca838e6-6e32-404f-8d20-bb255587af08", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1143b9d6-bab8-4850-8087-daa83b3f4fb1", "sighting_of_ref": "indicator--4ca838e6-6e32-404f-8d20-bb255587af08", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a12c716-20ab-4a32-8fde-e8a3058267c5", "sighting_of_ref": "indicator--4ca838e6-6e32-404f-8d20-bb255587af08", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aaac4f-154b-41e3-a3ba-2b10217f2f21", "sighting_of_ref": "indicator--83a9f930-1853-4579-bd66-ad4c5a9cc8c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9701726f-6281-4c26-8704-287ef924c52e", "sighting_of_ref": "indicator--83a9f930-1853-4579-bd66-ad4c5a9cc8c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d05e370-4746-4258-8852-07cdb211e263", "sighting_of_ref": "indicator--83a9f930-1853-4579-bd66-ad4c5a9cc8c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf3389-c54c-49bf-a4ee-3169827f716e", "sighting_of_ref": "indicator--211ee587-073d-4cdc-ad10-96487a83fb34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45fbffb-a379-41f4-9f60-a7f1d7cab371", "sighting_of_ref": "indicator--211ee587-073d-4cdc-ad10-96487a83fb34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bba192-82fb-4ee9-9475-863091e4dc07", "sighting_of_ref": "indicator--211ee587-073d-4cdc-ad10-96487a83fb34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e166e38-8ba6-48ad-a5ae-349b2c29e314", "sighting_of_ref": "indicator--5012246b-1c88-4c4b-beee-217511312cf1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce68079-62ef-4a48-a09b-acf790ec3a05", "sighting_of_ref": "indicator--5012246b-1c88-4c4b-beee-217511312cf1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6533b0f7-ae51-4c02-8785-97775d470f81", "sighting_of_ref": "indicator--5012246b-1c88-4c4b-beee-217511312cf1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6ee8a3-d64e-4591-a072-5f9764ca4f10", "sighting_of_ref": "indicator--5f2c6337-8e42-4c1c-af45-822f1d816436", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d82947-ad36-4639-a75a-8dede53f8283", "sighting_of_ref": "indicator--5f2c6337-8e42-4c1c-af45-822f1d816436", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0ba2b5-049b-4377-9431-62b4300e6882", "sighting_of_ref": "indicator--5f2c6337-8e42-4c1c-af45-822f1d816436", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc20818-8824-472c-b84d-6feefae280fc", "sighting_of_ref": "indicator--0aa9b1a5-ec00-426e-b0d9-c6ab4678bed0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec4b2be-0202-4b44-8c9e-f6d89e616dbd", "sighting_of_ref": "indicator--0aa9b1a5-ec00-426e-b0d9-c6ab4678bed0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c307d758-ec4b-4930-9b14-506dc72ca04d", "sighting_of_ref": "indicator--0aa9b1a5-ec00-426e-b0d9-c6ab4678bed0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351cae34-69ce-4dc7-b9b2-4815d8aac1f0", "sighting_of_ref": "indicator--816597af-4784-441f-94ce-3c66141cd6e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bac9bd-d50e-4d73-a1b4-6ea44acdd721", "sighting_of_ref": "indicator--bf832ae8-3832-4974-8b7a-5b3fa9b29628", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccb8d22-c664-449f-be98-239236fa7a33", "sighting_of_ref": "indicator--bf832ae8-3832-4974-8b7a-5b3fa9b29628", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f898304-30c4-4a71-ba1b-45ee53b79e24", "sighting_of_ref": "indicator--743639a4-722c-4100-8fe5-f9f412a39c8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403bbf9a-dadd-48ff-8d4a-f48c450aafee", "sighting_of_ref": "indicator--743639a4-722c-4100-8fe5-f9f412a39c8a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66ab7c5-9d1b-46de-becd-b23f0720682f", "sighting_of_ref": "indicator--065581fd-5ffb-4b08-928f-cd2ddabdaa84", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac888960-622e-4509-a00e-25bd177c2f51", "sighting_of_ref": "indicator--464ab512-3535-4bdb-a309-4869b889a713", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accb96f2-9fa8-4916-bcfa-f38ad15661a0", "sighting_of_ref": "indicator--464ab512-3535-4bdb-a309-4869b889a713", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c640b05-3497-4b51-a84e-11e7b51aaac9", "sighting_of_ref": "indicator--f75f6f34-693b-4a2a-a984-e59e32ccc117", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5c9927-5553-48ed-961f-90319c38fdd0", "sighting_of_ref": "indicator--f75f6f34-693b-4a2a-a984-e59e32ccc117", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79504d40-6fbe-4587-a16e-1e79894af0d5", "sighting_of_ref": "indicator--a853eee5-ac09-4829-8617-33e45e594c9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29180bf-6984-4bf0-b4f6-47ddbd24cc68", "sighting_of_ref": "indicator--a853eee5-ac09-4829-8617-33e45e594c9a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c8fbd9-8734-426e-af86-2b47d2442459", "sighting_of_ref": "indicator--c4473b99-dfa3-4f56-b9fe-c3212d438758", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d9641a-5a70-44bd-99e6-f65aa52cf7ff", "sighting_of_ref": "indicator--7cc8bd6f-c361-4be7-9f76-de915007547b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9315904f-2082-48b2-aa79-b9a6a73628b9", "sighting_of_ref": "indicator--7cc8bd6f-c361-4be7-9f76-de915007547b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b96cc7-a663-44fe-bfbe-d781c41c3a62", "sighting_of_ref": "indicator--2201dda2-f5aa-4ad7-9b7a-c7dbd53e33f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5fa136-3168-4a8f-a54e-e47b21ad723b", "sighting_of_ref": "indicator--2201dda2-f5aa-4ad7-9b7a-c7dbd53e33f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6465affd-b3ad-4f0a-8280-ed2c0338f1d8", "sighting_of_ref": "indicator--e0641324-0c32-46f4-8a59-6f07b9ae3ec6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e1ecb3-97bb-4bf5-9657-68b54ebcebd8", "sighting_of_ref": "indicator--7a593ad3-5d57-4bdb-99fc-08ba4d3b73e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8eeb678-eca8-4f65-996f-44d5ba3b6057", "sighting_of_ref": "indicator--7a593ad3-5d57-4bdb-99fc-08ba4d3b73e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f1c6b1-a799-4162-9946-479c43a41fe6", "sighting_of_ref": "indicator--7a593ad3-5d57-4bdb-99fc-08ba4d3b73e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fba3568-400e-4fe2-aafc-1ed98d57f853", "sighting_of_ref": "indicator--d64c22c5-6c8e-4935-bef9-6b2b30ec0ce3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93706b52-4364-4fab-9031-8122fb57760a", "sighting_of_ref": "indicator--d64c22c5-6c8e-4935-bef9-6b2b30ec0ce3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d02781-402a-46c9-a628-fbf439d681f6", "sighting_of_ref": "indicator--d64c22c5-6c8e-4935-bef9-6b2b30ec0ce3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8417a2f-0d7b-4142-aa1b-584eeff6e3a8", "sighting_of_ref": "indicator--a16246c3-bb41-445f-b48d-3cfbdbda7d93", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae403e3f-f426-4ee7-9e7f-97dd53e372e0", "sighting_of_ref": "indicator--a16246c3-bb41-445f-b48d-3cfbdbda7d93", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e2ae75-13ac-41c0-a701-b0f2640a683c", "sighting_of_ref": "indicator--a16246c3-bb41-445f-b48d-3cfbdbda7d93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b41fde2-4e57-48fb-aa36-4f7ca4013816", "sighting_of_ref": "indicator--1ae8fd1e-e533-49e6-b3ab-2ceb1bc7c4dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8174f6dd-71aa-4527-870c-55e06ac867dc", "sighting_of_ref": "indicator--db259d36-b902-4767-b840-234daa62a779", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9464ecb7-3c51-4bb6-b9ef-5bcea690406e", "sighting_of_ref": "indicator--83686a3e-4ab5-434d-958b-cf99d7a17190", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c41a53-2e3a-4ab9-9af8-bd56eb4f4090", "sighting_of_ref": "indicator--8bfd7d41-2b8d-4482-b3cd-07d89a12c63b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46068cac-6837-4130-be41-fdd50121233d", "sighting_of_ref": "indicator--65aeec2f-a5d0-4afe-9e8f-0115a155409e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6546c68d-d38b-406d-ac1d-463aa1c05e61", "sighting_of_ref": "indicator--43551f38-3068-4332-97b8-2bfd3bbb2f62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39a7c86-a4a2-4c72-a7b7-645511f1b488", "sighting_of_ref": "indicator--7aaed31e-0d58-4130-9e34-a128a4cd438c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1f6bb2-f20a-4109-b01c-501108a67215", "sighting_of_ref": "indicator--bbfebc77-9e4d-49cc-bfc1-094dbb628e58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad743f8-c5de-41db-82df-a90547c9ca38", "sighting_of_ref": "indicator--6396334d-5cd3-4995-b422-842692f7b4a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e49c0b-9379-4117-9941-76df2aefd9a9", "sighting_of_ref": "indicator--b14c86c5-028a-4ebb-a265-5ffcfb343d86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d60b6c-6501-4b38-8040-184aee38e7a5", "sighting_of_ref": "indicator--9e919207-c85b-4925-8c82-56dfaf1ee1cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc997dcc-6c9e-42bf-b436-629eb3a31d0d", "sighting_of_ref": "indicator--1a375df6-83ca-4364-b2aa-32dd1a4b9420", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f275943b-01bc-498a-9d9c-5266e39c3c8c", "sighting_of_ref": "indicator--ad97bf6e-55e2-4774-898b-57a6b6db9508", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda4b4b2-60f0-4691-97d5-33de2bfa5f6c", "sighting_of_ref": "indicator--69b3deca-a701-451a-bd95-c779171b9d56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0182eabb-519c-4bdf-a65e-c81fee6d9871", "sighting_of_ref": "indicator--e73f7f77-798b-47a8-b5c6-132cb52af8bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2db23e9-04d8-47d5-96f4-d89708143dda", "sighting_of_ref": "indicator--93151b9e-0beb-468d-b164-ee1d55ff31a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80fc960-b85d-41b9-b5b2-d095c26ab0f0", "sighting_of_ref": "indicator--770e50b1-4c2c-411c-a180-efca8ff554c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5071354e-3bd9-4a4e-ab4d-19725d4d2c2d", "sighting_of_ref": "indicator--e2c9b862-9448-4528-8fb1-7341079ab851", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c02cd1-5c71-4260-869e-375d3e060424", "sighting_of_ref": "indicator--22d7a22f-e31d-4e59-9cc3-a29e5de777b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873e230e-061c-4099-b7d2-efecfaa57f51", "sighting_of_ref": "indicator--22d7a22f-e31d-4e59-9cc3-a29e5de777b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1013e393-422e-492b-b576-06d8f4791a2a", "sighting_of_ref": "indicator--7023818f-6b4f-4ac2-8ba1-60ab13a6e984", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b0f0c3-6f4e-46af-a673-03e68421e3e5", "sighting_of_ref": "indicator--7023818f-6b4f-4ac2-8ba1-60ab13a6e984", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bc5af3-1c34-4f70-b5cc-ec1de1c23ab7", "sighting_of_ref": "indicator--7023818f-6b4f-4ac2-8ba1-60ab13a6e984", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212760b5-774b-417d-9cbd-1b5beb377040", "sighting_of_ref": "indicator--27d32f6c-b6e4-4f8c-b5ba-483171acfa31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb96fe13-4c12-421e-81bf-60af912024be", "sighting_of_ref": "indicator--27d32f6c-b6e4-4f8c-b5ba-483171acfa31", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1231f90-7b2b-4131-b8d4-3838703bf341", "sighting_of_ref": "indicator--368ebe76-f97e-4ecd-a1d8-ead55107c3d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b604bad-2d24-4ba1-a6ff-c06003289df5", "sighting_of_ref": "indicator--368ebe76-f97e-4ecd-a1d8-ead55107c3d2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b93896-e93b-4d50-b59c-fc60833d82ed", "sighting_of_ref": "indicator--368ebe76-f97e-4ecd-a1d8-ead55107c3d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96e91cb-50ed-4d6d-8197-3f044dfad8ad", "sighting_of_ref": "indicator--77332965-8a0a-4afb-8b6b-b539fa685809", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1c5683-c7c4-4cee-a772-cfdbbfeb9650", "sighting_of_ref": "indicator--8f0efe41-2dbc-4a2e-8ae3-9e77b348939d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c888a02-ba13-4deb-86d3-0b54f5694826", "sighting_of_ref": "indicator--8f0efe41-2dbc-4a2e-8ae3-9e77b348939d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f67143-0299-4c41-83c3-921051f5b673", "sighting_of_ref": "indicator--8f0efe41-2dbc-4a2e-8ae3-9e77b348939d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd4b0f8-0fa7-40c7-837e-3f54aef809da", "sighting_of_ref": "indicator--e4b1dcff-a518-4c45-bd00-d5aa8f09c563", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294949e8-ddbc-4c01-9301-f6c31e6800a2", "sighting_of_ref": "indicator--e4b1dcff-a518-4c45-bd00-d5aa8f09c563", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc1b4f8-ae5a-4aa2-9cd2-f10328084ca2", "sighting_of_ref": "indicator--4eb67ec7-7221-4bcf-9520-0a426441882d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffba14c1-63c3-47a8-86fb-745473ebeeac", "sighting_of_ref": "indicator--4eb67ec7-7221-4bcf-9520-0a426441882d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec8f3e4-a30f-44dd-b9f7-11d7fb1fe7c5", "sighting_of_ref": "indicator--fb3e5848-a702-4b9c-9ccc-7e71add290e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f088b1b-7ff6-4117-b462-d7135a3a0b78", "sighting_of_ref": "indicator--2792da51-aea1-45e7-8091-2d2e08637f8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9cb4b5-ac0b-4d90-92d0-b5c279110d55", "sighting_of_ref": "indicator--ec501f94-7cba-4a61-b246-383be834ac48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eca239-db30-49c0-91c6-77e283d64dc9", "sighting_of_ref": "indicator--821b15fa-7a9f-4171-92ad-b50099adcd3a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935a2ebd-be3c-44ca-9a4f-47610d5f8bf7", "sighting_of_ref": "indicator--5e61b9ea-7759-494a-b5d5-b27bf553357a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a40e96-8156-486c-a1a1-5a87d7a95734", "sighting_of_ref": "indicator--5e61b9ea-7759-494a-b5d5-b27bf553357a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52737a4d-8954-4015-a7c3-60a82441e7a1", "sighting_of_ref": "indicator--9fe517cf-6bbe-49ba-bdae-f4290a8b4ef2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa923a6-a930-43c5-87ff-8e8cc12d14c0", "sighting_of_ref": "indicator--9fe517cf-6bbe-49ba-bdae-f4290a8b4ef2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f473bf91-e449-43ce-89ce-04047638e929", "sighting_of_ref": "indicator--9fe517cf-6bbe-49ba-bdae-f4290a8b4ef2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772f8e37-992d-4ce0-854a-62e7d97fe68a", "sighting_of_ref": "indicator--3025386c-9970-428c-978d-28529f82352e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86736134-4748-4af5-888c-abb5cc75270f", "sighting_of_ref": "indicator--3025386c-9970-428c-978d-28529f82352e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fd4b8b-ed4e-435b-aa38-cd0c56c33710", "sighting_of_ref": "indicator--3025386c-9970-428c-978d-28529f82352e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f8bc6d-f789-4a16-bfed-aa4a45a26408", "sighting_of_ref": "indicator--93283c4d-0df8-4e70-b066-47535f8268bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1489103d-34e9-45f3-9858-228143a0f998", "sighting_of_ref": "indicator--93283c4d-0df8-4e70-b066-47535f8268bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b25c671-fa95-4711-8ceb-c62083e32f24", "sighting_of_ref": "indicator--93283c4d-0df8-4e70-b066-47535f8268bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06325468-82db-4300-84af-dc4a67b3c1c0", "sighting_of_ref": "indicator--93283c4d-0df8-4e70-b066-47535f8268bf", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55871d4e-86c9-4f85-89a3-8aead0e3f34f", "sighting_of_ref": "indicator--3f1103cc-0712-48b1-9220-91b8551261bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cb90ac-1c96-426a-9ae2-955ce9e2cdb7", "sighting_of_ref": "indicator--3f1103cc-0712-48b1-9220-91b8551261bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d91878-5319-4d49-90de-21aea97dfc0d", "sighting_of_ref": "indicator--3f1103cc-0712-48b1-9220-91b8551261bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73045c5-edc4-4594-a476-afccfa23ce0a", "sighting_of_ref": "indicator--00e2b0a8-cecd-4d13-be87-45c94aea097c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8e517c-544b-49c1-aef2-f34363f5d6e9", "sighting_of_ref": "indicator--dea24b63-d65e-4299-88a4-69eef26225d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc61a71c-b47c-4cf7-83d4-6ad9be20564a", "sighting_of_ref": "indicator--dea24b63-d65e-4299-88a4-69eef26225d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175b766c-e40c-472e-aced-c59ce9466445", "sighting_of_ref": "indicator--7f51bbbe-470e-47a2-8ae0-86b5b846f2bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c05ff7-20f3-486b-96eb-511a125f3f25", "sighting_of_ref": "indicator--e4f4cbd6-ba08-416e-b034-b245f095856f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a32c7a-14ee-4c95-b44d-c493c7354a98", "sighting_of_ref": "indicator--52b100f8-eb90-45cd-a0dd-7994578aa852", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d448a910-a6ec-4b5b-bffa-5615793fd8fd", "sighting_of_ref": "indicator--305178c8-833b-4702-88fb-59f351daeb31", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb93e18f-9b0e-474a-9ce6-b67857b8b140", "sighting_of_ref": "indicator--29ffc107-82a4-45f7-9e4f-b548208e00b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab75ed6-28fb-41e0-a3b1-1ba3a4bd6469", "sighting_of_ref": "indicator--29ffc107-82a4-45f7-9e4f-b548208e00b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f75784f-6126-47fb-8093-644c651ac77f", "sighting_of_ref": "indicator--29ffc107-82a4-45f7-9e4f-b548208e00b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d7875-9503-4c33-a859-1d5d758b6dd5", "sighting_of_ref": "indicator--4e6df4a7-2960-4078-ba5d-76bc67d146a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fa9a87-1947-405d-8921-390b022e1f88", "sighting_of_ref": "indicator--4e6df4a7-2960-4078-ba5d-76bc67d146a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e10a2a-84f3-4c93-ad8f-c74b10e0a504", "sighting_of_ref": "indicator--4e6df4a7-2960-4078-ba5d-76bc67d146a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3768a7d-96c8-4fb1-9be2-6ce829e692cc", "sighting_of_ref": "indicator--94176eca-3eb3-4a11-853f-c900c4ed25e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd7892f-d7f8-4e84-8dec-5ff16766dfa6", "sighting_of_ref": "indicator--94176eca-3eb3-4a11-853f-c900c4ed25e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714bcd58-388d-4417-bd85-012607159b26", "sighting_of_ref": "indicator--94176eca-3eb3-4a11-853f-c900c4ed25e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce7eb3f-b7ab-435c-86cd-bb515ce1bbf1", "sighting_of_ref": "indicator--96488fa8-b1ec-4f9f-bc8b-243072e7c036", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7f9694-a5a9-4799-aae6-77bd4840251e", "sighting_of_ref": "indicator--96488fa8-b1ec-4f9f-bc8b-243072e7c036", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40ecd7a-e33d-4f21-88a3-4fad7a19ced0", "sighting_of_ref": "indicator--96488fa8-b1ec-4f9f-bc8b-243072e7c036", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedd3ec4-41c7-4bca-8604-61f2e7f851ff", "sighting_of_ref": "indicator--47ea4c21-f0a4-4e71-bdad-f84bcfd70633", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f75c2ba-1cfe-41ac-9119-74155cf47d32", "sighting_of_ref": "indicator--0352e95d-6e86-4705-938f-e4dc39bfece8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fa36ac-af92-459c-822a-5b16c6818574", "sighting_of_ref": "indicator--0352e95d-6e86-4705-938f-e4dc39bfece8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a20c2-9f01-4474-a0ad-43eb44f43e8f", "sighting_of_ref": "indicator--0352e95d-6e86-4705-938f-e4dc39bfece8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52f9772-45b0-41c7-8f16-06217edf3a71", "sighting_of_ref": "indicator--69f7045b-6cd3-49ae-98a8-b881e7d0296f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a75af6-f927-455d-a60a-c59e33ce21aa", "sighting_of_ref": "indicator--69f7045b-6cd3-49ae-98a8-b881e7d0296f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2609ca8-abed-4e48-a48d-906bee743061", "sighting_of_ref": "indicator--69f7045b-6cd3-49ae-98a8-b881e7d0296f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530e77a3-4692-49be-8f50-16c7cca5e837", "sighting_of_ref": "indicator--b1eecc41-04f7-42d1-85c0-047b33e89cec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9831af84-3db1-4dd2-8220-e2862650e6b1", "sighting_of_ref": "indicator--b1eecc41-04f7-42d1-85c0-047b33e89cec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3039fd9-c568-40b8-87b8-ee9a71db6272", "sighting_of_ref": "indicator--b1eecc41-04f7-42d1-85c0-047b33e89cec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7248e655-7425-48a6-be8e-a6d23b28f17f", "sighting_of_ref": "indicator--2cf67286-2aa8-42ce-a0f8-d482b4fcbe4b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a958255-9bad-4214-a84f-107d46fe148f", "sighting_of_ref": "indicator--2cf67286-2aa8-42ce-a0f8-d482b4fcbe4b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1582de2-b652-4df2-8742-1c4f646b619a", "sighting_of_ref": "indicator--2cf67286-2aa8-42ce-a0f8-d482b4fcbe4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95594264-50d4-4740-8e39-4e628053c374", "sighting_of_ref": "indicator--723fb47b-3eb3-41d5-9b8e-04e1e06e2919", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ad488f-c275-4d28-952a-63cc642ae59c", "sighting_of_ref": "indicator--723fb47b-3eb3-41d5-9b8e-04e1e06e2919", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf0cd89-b1a5-41e5-a443-f4482bcb1741", "sighting_of_ref": "indicator--723fb47b-3eb3-41d5-9b8e-04e1e06e2919", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441ef99a-2498-4056-9df7-966c1f59726e", "sighting_of_ref": "indicator--d36019b7-a6ba-49df-bfbe-5235535d6aa0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f2d51f-b468-4b1d-b7ef-c6855511f08a", "sighting_of_ref": "indicator--d36019b7-a6ba-49df-bfbe-5235535d6aa0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e632f6a-bb3b-46d2-b3d2-4c63273612ff", "sighting_of_ref": "indicator--d36019b7-a6ba-49df-bfbe-5235535d6aa0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda1b15e-2bc5-406a-82d1-6a8f04153b43", "sighting_of_ref": "indicator--6e729499-c2e8-4274-aa35-1d47ba01b931", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc196e75-664c-4af0-89c6-49e3b9a8e9fa", "sighting_of_ref": "indicator--6e729499-c2e8-4274-aa35-1d47ba01b931", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f98ce07-04e8-4886-a5b6-0f06501d05b1", "sighting_of_ref": "indicator--6e729499-c2e8-4274-aa35-1d47ba01b931", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65cf57e-8f00-492b-90cb-123b2736f485", "sighting_of_ref": "indicator--28967f52-72be-497f-8ed3-919853d51579", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccc45c3-f903-4a04-89f1-c8d8c7129dab", "sighting_of_ref": "indicator--28967f52-72be-497f-8ed3-919853d51579", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf23aa3-98c6-4246-8448-a3f146efe54e", "sighting_of_ref": "indicator--28967f52-72be-497f-8ed3-919853d51579", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a4bf99-999c-4b15-83d2-e3f915c4a6a8", "sighting_of_ref": "indicator--b6cb7fea-7ed3-4af9-99ae-78c3aa06b85b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb5aed5-8e80-4080-925d-64579733301f", "sighting_of_ref": "indicator--933c7cf2-2639-40f7-9d15-ba0bf1ccf733", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e1bf49-062d-4dd3-b5da-4b04add68c45", "sighting_of_ref": "indicator--933c7cf2-2639-40f7-9d15-ba0bf1ccf733", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d8e7d3-8411-442f-811e-33427c0e499b", "sighting_of_ref": "indicator--933c7cf2-2639-40f7-9d15-ba0bf1ccf733", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab56df-3b88-4db9-8117-8745d3d90309", "sighting_of_ref": "indicator--d5838332-d0bb-49f9-a243-b0c6da23b985", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd5df6f-feb4-4e62-ba0b-68765066e2d7", "sighting_of_ref": "indicator--d5838332-d0bb-49f9-a243-b0c6da23b985", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b5bd7f-d8b6-4118-a6ea-10dccc17b0e5", "sighting_of_ref": "indicator--d5838332-d0bb-49f9-a243-b0c6da23b985", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96092dbb-d509-421b-95c6-8c56b027f122", "sighting_of_ref": "indicator--7389caf0-b8c2-4cba-a382-d675710ac644", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bd4f4e-987a-47a4-a3ad-c6294f0de53c", "sighting_of_ref": "indicator--2226aa0f-b999-4e1b-86d1-f4c21121a4e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81cdde8-69f3-4e23-9eea-508dbc9ca525", "sighting_of_ref": "indicator--2226aa0f-b999-4e1b-86d1-f4c21121a4e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc695092-6160-4204-8249-b0a9f65e6eff", "sighting_of_ref": "indicator--db0bbbc9-f28b-4487-8c2e-d97a5f7194c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8620460a-2c6a-41d3-ab27-d119889a76d1", "sighting_of_ref": "indicator--db0bbbc9-f28b-4487-8c2e-d97a5f7194c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356d1e21-84af-43b7-a6a5-bbb995d11c64", "sighting_of_ref": "indicator--db0bbbc9-f28b-4487-8c2e-d97a5f7194c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4fea10-1343-42e7-8896-9b3a2e8b6edb", "sighting_of_ref": "indicator--fa379b36-e158-4a51-b365-a89a79026799", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d9f9d3-93f8-41b1-8d9c-f8d13b236ecf", "sighting_of_ref": "indicator--fa379b36-e158-4a51-b365-a89a79026799", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e358e897-6289-4da5-8bb6-da1dec1c8d84", "sighting_of_ref": "indicator--fa379b36-e158-4a51-b365-a89a79026799", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c211e41-3f8e-4424-ab90-bb739427e503", "sighting_of_ref": "indicator--52e89406-6056-4acf-8e22-d8b05cf81dd2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84bf084-ef6d-49c0-951c-a70eae1f6541", "sighting_of_ref": "indicator--52e89406-6056-4acf-8e22-d8b05cf81dd2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef251da7-416f-4a94-a70c-9dd13e232fa6", "sighting_of_ref": "indicator--52e89406-6056-4acf-8e22-d8b05cf81dd2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8797144e-30fb-489d-9ceb-af21127865d3", "sighting_of_ref": "indicator--9ea567b8-257b-45ee-bfe3-0e1c69574cb3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314b5fb8-ba2e-4dfa-bd0b-89286b3900f5", "sighting_of_ref": "indicator--9ea567b8-257b-45ee-bfe3-0e1c69574cb3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af455e6-e865-4763-93f4-72627b2c3d2f", "sighting_of_ref": "indicator--d9a355e8-3d43-49d0-a119-c05c809854c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0ed897-5729-4a6f-b33f-ce779612e90e", "sighting_of_ref": "indicator--6d3ba100-2535-4d0e-9df7-550b08038563", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bffb1f1-e6f6-4f3f-ae8b-63b44f199854", "sighting_of_ref": "indicator--72c450ab-ff78-4ad2-b61d-e238b1c6b1f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bbddbd-847c-4e9a-b8a1-e597d11e358b", "sighting_of_ref": "indicator--72c450ab-ff78-4ad2-b61d-e238b1c6b1f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b5cdeb-a255-45a4-83e0-41cebf684cf8", "sighting_of_ref": "indicator--72c450ab-ff78-4ad2-b61d-e238b1c6b1f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d5abd0-3de8-442c-a50a-b5de171d340c", "sighting_of_ref": "indicator--dad8a00e-7684-4abe-88d4-69036626dded", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dcb401-837a-42fb-a047-4fd540957257", "sighting_of_ref": "indicator--dad8a00e-7684-4abe-88d4-69036626dded", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e37f92-2cb7-4311-9b2d-27b15ae966cc", "sighting_of_ref": "indicator--dad8a00e-7684-4abe-88d4-69036626dded", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0f9c0f-ad05-4f62-a5e0-ea9d7535a6be", "sighting_of_ref": "indicator--1ef6fe67-08bc-4b5c-99b5-402477daa05f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832605e0-5140-4c6a-b85a-bcfdc3049868", "sighting_of_ref": "indicator--86d82399-7141-438b-a2bd-967a92e37ba4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3325559a-d68d-4c89-8d94-129bd994c4d8", "sighting_of_ref": "indicator--86d82399-7141-438b-a2bd-967a92e37ba4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c36660-c270-4522-a2c5-c6fef7e9100c", "sighting_of_ref": "indicator--5f662813-d0fa-4985-b080-f3a2e78b5da6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626a2374-4455-4ba7-a893-6fd19673b6cc", "sighting_of_ref": "indicator--5f662813-d0fa-4985-b080-f3a2e78b5da6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8105358-985d-42a8-96a6-d4404c3eff6f", "sighting_of_ref": "indicator--5f662813-d0fa-4985-b080-f3a2e78b5da6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591e651e-cc45-4984-988d-065c564ed649", "sighting_of_ref": "indicator--8eb4322e-a0a4-4c20-9be1-fe58883d2571", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7b4cd6-844f-46ea-badc-14c37beec096", "sighting_of_ref": "indicator--8eb4322e-a0a4-4c20-9be1-fe58883d2571", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc82675-82f7-4615-bf7e-af688b08c53c", "sighting_of_ref": "indicator--5730067f-c64b-45ff-b02a-e2c978ef861a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d791f538-e3ea-4c05-a112-1b5269532161", "sighting_of_ref": "indicator--5730067f-c64b-45ff-b02a-e2c978ef861a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a62bf5-6e1e-40b7-8800-61f4fef99195", "sighting_of_ref": "indicator--5730067f-c64b-45ff-b02a-e2c978ef861a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d30f96-a0f5-41f4-80d4-a9c49dc0e082", "sighting_of_ref": "indicator--e27f5f20-bd9e-4992-99bd-4c92ca510951", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cab4cb-d264-42af-b71f-992fc0a29d68", "sighting_of_ref": "indicator--e27f5f20-bd9e-4992-99bd-4c92ca510951", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6beac66-8197-4a8a-b628-ca58b2411396", "sighting_of_ref": "indicator--e27f5f20-bd9e-4992-99bd-4c92ca510951", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf47653-dea5-48da-b05f-659a61333bc8", "sighting_of_ref": "indicator--b06a0752-1547-4dd4-b781-0356d4e0aaac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67eddfe-e131-4b46-afca-eda4269b4605", "sighting_of_ref": "indicator--b06a0752-1547-4dd4-b781-0356d4e0aaac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40824602-5fd8-41bd-b464-b0da3ef54b41", "sighting_of_ref": "indicator--fd75e085-39a9-40da-b0f9-d13e8e00357d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a725a6-dbed-4b4a-862a-b746ba3f52d5", "sighting_of_ref": "indicator--fd75e085-39a9-40da-b0f9-d13e8e00357d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8e51b8-1e92-4a75-a78b-319456b544ff", "sighting_of_ref": "indicator--9e402b80-76bf-45d4-952f-8f2f6159d0a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70065a50-fc6b-4ccb-8241-4d827a34be95", "sighting_of_ref": "indicator--9e402b80-76bf-45d4-952f-8f2f6159d0a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c54ce3-363d-42ee-837e-e6cb3b35d98e", "sighting_of_ref": "indicator--9e402b80-76bf-45d4-952f-8f2f6159d0a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38f4bcb-8316-48db-ac05-efa4325591f0", "sighting_of_ref": "indicator--a3c14c1a-fe86-4b82-aa1a-d7e6fb2e2c0a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f30d79-52a2-4d3c-a5a7-581675b0cee9", "sighting_of_ref": "indicator--e4256127-1486-49b3-ad1e-d76184309513", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a2d3ed-b57d-4ecc-959e-58617a907040", "sighting_of_ref": "indicator--b90c80ec-ecef-488e-aac6-ee9986c25f9b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722f6a3e-e589-4099-94c5-673a9e5ed474", "sighting_of_ref": "indicator--3a6041c8-dded-4028-9b9c-4d39997c6b86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d590e7-67fe-4093-8693-b842805ba5d7", "sighting_of_ref": "indicator--3835d48a-47cd-41bf-b6f3-3767983766da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906b0e04-9469-4a3e-b856-e1aa564a3e91", "sighting_of_ref": "indicator--3835d48a-47cd-41bf-b6f3-3767983766da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4b8006-6360-4116-844b-fd42229333e4", "sighting_of_ref": "indicator--3835d48a-47cd-41bf-b6f3-3767983766da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb659fc-9dc1-4550-b938-60f09a518e10", "sighting_of_ref": "indicator--313649f0-e02b-40d4-8f29-502eac0c1ed7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968c7e42-e9fb-45bf-8d32-0eeb439c4d6a", "sighting_of_ref": "indicator--b4d54396-c23f-4532-8540-acbd182d6f14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5d5060-3cc0-4f00-92bc-a83363955161", "sighting_of_ref": "indicator--a8b0092c-21eb-44c5-9558-c3c08b4e7e9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e880b364-75da-4eb6-abdc-cf89c5a2329e", "sighting_of_ref": "indicator--eb91421d-fcfa-4ddc-abad-6b1acb91e9b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986fe19e-3d69-45bb-bfd2-1f52de0cc189", "sighting_of_ref": "indicator--b138f36f-6f5f-452c-8f56-1dcf6e56704d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759df104-93fc-4e7b-9099-242da2b5b928", "sighting_of_ref": "indicator--6571c906-29c8-4246-b8fe-171cf323926d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10623e9-0ba4-46e7-a7ac-802ebf3d02bc", "sighting_of_ref": "indicator--7a9a26d1-2cb8-426b-9580-696363a811dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14cffcb-fe84-4b0b-80ab-17abf52c45cc", "sighting_of_ref": "indicator--3688310c-77e4-41d5-bf28-cd4461252213", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba79578-27bb-4e82-9c12-8bcb2ad328ff", "sighting_of_ref": "indicator--1dd79577-4dd6-46ec-88c3-8bb9f36f549d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bf13b2-557b-4345-baac-24be65ab89e1", "sighting_of_ref": "indicator--dabae1dc-5822-4325-947a-66b6dc1ef333", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94df57a0-4969-4e5c-8171-226a0d468e9f", "sighting_of_ref": "indicator--dabae1dc-5822-4325-947a-66b6dc1ef333", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675c86d1-0a46-4de9-b535-c056e852b60a", "sighting_of_ref": "indicator--4671a3c6-a1d5-4f20-803c-8b06a22bef75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699990dd-5cb7-4217-830f-6053309fd6a9", "sighting_of_ref": "indicator--317d1c1f-5582-4e54-8e5e-6ac00a053aee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cf10c9-1c1f-4b89-931b-098ff812d7b2", "sighting_of_ref": "indicator--52dde1fb-09ed-4657-a5ff-5e9dfaae4ea5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b2fd07-75e3-44ca-9874-bfdd4ad8e0ac", "sighting_of_ref": "indicator--d0bf6be5-9821-46c4-ba3a-a9dab546e654", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6626cab9-56b2-4a84-81ca-522b5fc56ffc", "sighting_of_ref": "indicator--09b2d761-38f7-469b-ad8d-253ae5e3af07", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d29fc4-19b9-4c8f-89c2-feca239db443", "sighting_of_ref": "indicator--09b2d761-38f7-469b-ad8d-253ae5e3af07", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19527698-8102-4d2c-9353-d2f009afd852", "sighting_of_ref": "indicator--09b2d761-38f7-469b-ad8d-253ae5e3af07", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984c7cb-6cf6-4bdd-bbc9-13f20bfae805", "sighting_of_ref": "indicator--a0d003c0-6842-44f6-a9c3-6470562d55a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc46c15-5365-4fcc-bcfc-1d29fed34595", "sighting_of_ref": "indicator--b3656460-ea05-48f7-b21b-0589f779377a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7327c5b-504c-43ba-a13e-46bad88063e2", "sighting_of_ref": "indicator--a4ff1283-008c-47ef-845c-076522dc940c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5205e0bd-abe0-46d0-84e5-7930bce7aa79", "sighting_of_ref": "indicator--a4ff1283-008c-47ef-845c-076522dc940c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1ab1ea-7a23-420f-b504-183689bf043d", "sighting_of_ref": "indicator--a4ff1283-008c-47ef-845c-076522dc940c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42919373-8393-49af-a65b-afd936c2a91e", "sighting_of_ref": "indicator--860290b5-8b15-4aaa-9c0e-84523eb8b8d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885d64b9-e222-4a40-aa9c-6b701e28d6be", "sighting_of_ref": "indicator--860290b5-8b15-4aaa-9c0e-84523eb8b8d6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a722fdb0-f587-46e2-9e2a-850e6349ed33", "sighting_of_ref": "indicator--860290b5-8b15-4aaa-9c0e-84523eb8b8d6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000a2cdb-94a1-496b-bb7c-faed09ddc3c5", "sighting_of_ref": "indicator--74b70d6d-7867-4735-8668-8ccb2a5811c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8273d809-d47a-47ff-856b-d1b885864ea2", "sighting_of_ref": "indicator--74b70d6d-7867-4735-8668-8ccb2a5811c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc499ba9-f5ff-4d95-ad09-7775a44dc1de", "sighting_of_ref": "indicator--74b70d6d-7867-4735-8668-8ccb2a5811c5", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012d6862-3865-4d89-a4b5-9adf479fbf66", "sighting_of_ref": "indicator--9f80ee0e-bec2-4593-b1c6-2a45f14c77fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e42fd60-ee70-45d6-ad26-d0ff147b0a0a", "sighting_of_ref": "indicator--9a4fc233-d3df-40ba-8ac6-0784626a19ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd820082-9852-4194-8179-e4ddf6bac31d", "sighting_of_ref": "indicator--46d7a12f-d607-469d-adb3-5749050948d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f9939b-b236-4949-93ae-1e2a9654136e", "sighting_of_ref": "indicator--46d7a12f-d607-469d-adb3-5749050948d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a60c5c1-0a59-489b-a250-1b8a97dac34e", "sighting_of_ref": "indicator--4895fcb4-ebc5-4d0a-8043-d973d9d37511", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bec1ee-6247-4470-8c84-7bcceed66b5c", "sighting_of_ref": "indicator--4895fcb4-ebc5-4d0a-8043-d973d9d37511", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e1de18-979a-4a07-a5c2-cba8274ceedb", "sighting_of_ref": "indicator--4895fcb4-ebc5-4d0a-8043-d973d9d37511", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879a41ed-64b9-4c70-8ead-0584d6b22945", "sighting_of_ref": "indicator--4427bba0-7347-47b6-adca-840f26ba210a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6930560-8cea-48af-9088-98a3b5617f59", "sighting_of_ref": "indicator--9b65c907-1568-4f75-9961-73b746cb2b20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41afd51a-8a35-4431-b4a3-c2b589c823d8", "sighting_of_ref": "indicator--af1c0682-7496-453e-ba45-0362292ce779", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc66834-0950-47d3-99ff-00583314f65e", "sighting_of_ref": "indicator--d8c33712-ba62-428c-9ff2-6f8150a60b42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7339b4-048e-4fb6-8b91-3c43df78fea7", "sighting_of_ref": "indicator--9443a943-90d7-4789-93b6-b932722f1700", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1f29aa-9e1d-4a99-9dea-22852c2418d4", "sighting_of_ref": "indicator--1ad8c55d-57a3-4b71-97e5-d595447af7ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7477de-bcd0-4fd8-815d-7571c17bb7dc", "sighting_of_ref": "indicator--4b640337-ab4d-44f4-a85d-190eca44b0e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5d06a6-286e-4026-bff9-6356a4403719", "sighting_of_ref": "indicator--34720f0e-748c-485a-ac3c-724fdaa9de8f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c44473a-8f15-4725-b9d8-ad5e0415334a", "sighting_of_ref": "indicator--2da48e1f-e371-4f90-ae2e-ccb67fe56708", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bd598b-8c1e-4f93-9694-92878ad65453", "sighting_of_ref": "indicator--add62379-5036-428d-b42a-8e4c43119d2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e81158-2906-4c47-a81a-be26fa266da1", "sighting_of_ref": "indicator--2002d7f0-c45f-40f1-93c4-cf5179040acf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405261a6-6706-4ca6-a3e5-c87d86149cfa", "sighting_of_ref": "indicator--e44caef4-fc98-43c7-9700-450bb991d946", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fcb767-98b3-4f41-b257-53f7890111e4", "sighting_of_ref": "indicator--bbf874a2-a7e2-4571-8b4a-d025da22e2cf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd4e888-68d9-4a05-9811-7329be3c0bd3", "sighting_of_ref": "indicator--e8682073-e752-4afa-bdad-cabf363e13bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445b37cb-509d-4082-a406-e78e36b9c4a0", "sighting_of_ref": "indicator--126cb1c2-9cbc-4169-9532-af89ba3e981e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f934ee0-8a50-4fd3-8fc9-6c9864c4ef16", "sighting_of_ref": "indicator--c5c2865f-bb08-48d4-bb3e-8111cebf48a9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b0d64a-98c7-4072-8d8f-4c7c994c1e95", "sighting_of_ref": "indicator--3ab891a3-242a-4291-8d4f-b9e5a90e458c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e898c5-334d-47e7-81e6-91e3ef0a7fe0", "sighting_of_ref": "indicator--10b69485-57df-4860-973b-549d6b4cd448", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4444861-e7f1-4078-b143-e12ef2b2c0fc", "sighting_of_ref": "indicator--2121643e-7b88-4862-bb95-4cf2782cd1fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be63034-dc90-4903-8ba3-a903cae55ab8", "sighting_of_ref": "indicator--2121643e-7b88-4862-bb95-4cf2782cd1fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ffa02e-a09b-424c-91a3-ef8f69eb128c", "sighting_of_ref": "indicator--2121643e-7b88-4862-bb95-4cf2782cd1fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f56d504-9424-4f55-8bd2-396e00ef64f6", "sighting_of_ref": "indicator--f712fd34-c36b-4c96-914b-c581f257cf51", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f6c0d8-f9cf-47d2-8ee3-d0d2148a84ce", "sighting_of_ref": "indicator--f712fd34-c36b-4c96-914b-c581f257cf51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98a031b-ee1e-4661-8907-0e14be5bcf96", "sighting_of_ref": "indicator--f712fd34-c36b-4c96-914b-c581f257cf51", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14b2535-0841-4ffa-913a-94b1d0e5b8a0", "sighting_of_ref": "indicator--85473fde-d714-4dfc-bec2-85b05be40653", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4be6e28-e864-4b10-858e-dcbaafe9b6bb", "sighting_of_ref": "indicator--85473fde-d714-4dfc-bec2-85b05be40653", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a83ed34-31fa-413d-9814-f2a415b10586", "sighting_of_ref": "indicator--85473fde-d714-4dfc-bec2-85b05be40653", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6706de-2b83-4eec-bf3c-3c4825a91c45", "sighting_of_ref": "indicator--5ba43ce9-70e1-400e-8ad2-e4768c5904bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0129aad6-3b76-43aa-b3ad-e054e28e2e1c", "sighting_of_ref": "indicator--57490c85-8a4a-4fe2-9914-91835df47f9b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3681d58b-e248-48ed-add3-8e0380ea3a14", "sighting_of_ref": "indicator--ed039208-dbbd-4419-ab8e-f142078abbc2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc60d419-1ccb-40ef-a90b-6ee41ea3b64e", "sighting_of_ref": "indicator--5cb48c21-cbb9-4f46-9e96-75d8ed1fb560", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50794a92-6fa8-4426-89c0-f84f89073a2e", "sighting_of_ref": "indicator--5cb48c21-cbb9-4f46-9e96-75d8ed1fb560", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfb01bb-8d26-4649-89bf-472551994e43", "sighting_of_ref": "indicator--5cb48c21-cbb9-4f46-9e96-75d8ed1fb560", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bf3cba-f395-4665-9971-31a9873eca81", "sighting_of_ref": "indicator--8a7117e9-fedb-45ae-9d4c-c8f1a58d6b0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cc6d2f-6fae-4991-8f92-7435d5089b9d", "sighting_of_ref": "indicator--91df85bc-ca98-4743-b45d-06ac5cbb6f18", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd649b20-e393-4458-9ed4-623e8efc1e41", "sighting_of_ref": "indicator--03116766-cb01-47cd-af45-7f718d6482a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2671c9-81d2-413d-b014-b630b7dec9eb", "sighting_of_ref": "indicator--48dc1cab-8154-4232-872f-dccf68ce4e98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520ad712-4fe7-4793-ae3c-e169debaaffa", "sighting_of_ref": "indicator--48dc1cab-8154-4232-872f-dccf68ce4e98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e198ca2-5138-473a-8327-37f93411b282", "sighting_of_ref": "indicator--48dc1cab-8154-4232-872f-dccf68ce4e98", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c741a605-fd86-4deb-a49f-523060870e9f", "sighting_of_ref": "indicator--6b8cdd73-7452-4c3a-b509-1bed80fd43b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776adef0-52a3-481e-a382-b4a193ecfc86", "sighting_of_ref": "indicator--6b8cdd73-7452-4c3a-b509-1bed80fd43b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c4b452-34d6-439a-91e0-0623d68f0078", "sighting_of_ref": "indicator--6b8cdd73-7452-4c3a-b509-1bed80fd43b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd23a27-3173-4fee-8cee-aeac6d31ff91", "sighting_of_ref": "indicator--2830e4bb-8b04-4e5c-bd1c-cd83f8422094", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3878b9b-b0fb-4638-bfbd-b31e362235cd", "sighting_of_ref": "indicator--f7b7ac87-c194-4bf3-a452-3b44131352e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a69cc33-3649-4de4-82d6-dc6c14deddcd", "sighting_of_ref": "indicator--40d82057-5447-437b-b4ac-322e64f9e761", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f099cb2-a62a-4e22-bf16-43c6d81dc8e7", "sighting_of_ref": "indicator--40d82057-5447-437b-b4ac-322e64f9e761", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ebdce9-a730-4055-bc97-31cf0d67a6c6", "sighting_of_ref": "indicator--40d82057-5447-437b-b4ac-322e64f9e761", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa704c7-2aaa-4de5-89f2-798f093f85e9", "sighting_of_ref": "indicator--646f15b2-fd19-45a1-8b2d-3eeb6bea1612", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6393b7c7-9824-4972-814e-6c1bbc0e6f1b", "sighting_of_ref": "indicator--646f15b2-fd19-45a1-8b2d-3eeb6bea1612", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2911c62a-1637-448f-a8c4-f0e5606e36de", "sighting_of_ref": "indicator--cdff270f-c422-4907-b7eb-1743a8d7cfdd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f011516e-cc8b-491f-ac6c-384395ce41a8", "sighting_of_ref": "indicator--cdff270f-c422-4907-b7eb-1743a8d7cfdd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f40d8a2-03e2-475a-844b-f524d401698a", "sighting_of_ref": "indicator--44b0f225-5bef-4efe-bcac-9e38f1954a32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031e9f78-6189-4e26-bd1b-60c45e9df01a", "sighting_of_ref": "indicator--9f6a362a-b7ca-456d-a3d6-c8e69e7e79d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc507c2-a6f3-45df-b001-3c69344a1f26", "sighting_of_ref": "indicator--f3fc7b58-35f0-4acb-89de-a109c9eee287", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c332da08-81eb-43e7-b0d0-f82955b47f53", "sighting_of_ref": "indicator--87ad3da1-b8dd-4ea5-a4f2-ac001e78f4b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c653a42-2dfe-4f20-8f0c-e6dcb7b6c3d7", "sighting_of_ref": "indicator--87ad3da1-b8dd-4ea5-a4f2-ac001e78f4b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb26de6-869d-48de-aad7-6bac87516759", "sighting_of_ref": "indicator--87ad3da1-b8dd-4ea5-a4f2-ac001e78f4b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf70e24a-e848-4ee3-a2c2-7bd3b5db76bc", "sighting_of_ref": "indicator--8bb36e2b-d39d-462e-9caa-c18dca5dec6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4eb084-5299-4d71-a0f9-05359e225c44", "sighting_of_ref": "indicator--765ade75-c203-45a4-96af-ac923ef40f47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09b16b7-e556-497b-b6f9-64420da2d183", "sighting_of_ref": "indicator--b0730a49-3ca3-4a0d-84b4-09667c61cc1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd50bf9a-8ff3-49a8-96e4-e456b7524148", "sighting_of_ref": "indicator--c715283a-4a47-4d3b-8c57-60ecb357e5ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783d57af-07ca-40ca-84d7-44f60161878b", "sighting_of_ref": "indicator--c715283a-4a47-4d3b-8c57-60ecb357e5ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b1a386-3a14-4522-842e-45bae22454bf", "sighting_of_ref": "indicator--c1fda85b-c1a1-4295-a36a-0abbae19ff80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4d8319-fa48-4a3a-9e01-27b42e3beaf4", "sighting_of_ref": "indicator--99f82a26-d446-4ee2-bbb9-a9aeae316be1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7382b11b-2c94-4e56-babe-022103c6d030", "sighting_of_ref": "indicator--f707b315-d612-4a32-b03b-443562533db3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963c1054-c4db-49cb-ae36-5b6d3eac0653", "sighting_of_ref": "indicator--39987fe5-7691-4992-aeeb-1a71a462de6e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0eedaa7-c592-4d6c-9e62-92d4be393a04", "sighting_of_ref": "indicator--0c822886-dd1e-42e4-939d-3b96845ebfdb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5716ec6-9eb3-4b7d-a231-262e4afeecc6", "sighting_of_ref": "indicator--6943e27d-4d33-454b-a5e3-9ac6e43badf2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f5c479-d617-4ffc-a38e-409eed5c11ca", "sighting_of_ref": "indicator--6943e27d-4d33-454b-a5e3-9ac6e43badf2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2a9b78-7660-4319-8b2f-87841d6b7e92", "sighting_of_ref": "indicator--6943e27d-4d33-454b-a5e3-9ac6e43badf2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55b5ee9-017c-464a-a5ea-964db49d93e1", "sighting_of_ref": "indicator--057c6095-e3c7-4b3e-91e3-658523450866", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7722772c-e081-40ed-a984-8fc409069b1b", "sighting_of_ref": "indicator--057c6095-e3c7-4b3e-91e3-658523450866", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cb0688-1950-4d95-b083-04c89d177506", "sighting_of_ref": "indicator--057c6095-e3c7-4b3e-91e3-658523450866", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c308ea87-a531-4636-8687-96af4f59cd91", "sighting_of_ref": "indicator--3a064351-16ed-40e7-a690-a5b4b60a270c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd19d56-8555-4250-9d14-4e4474e71ec6", "sighting_of_ref": "indicator--b9a1f712-0cee-4251-b7c3-b8d01196e80a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cee437-d9dc-4973-b3bb-da69c7ffc0ca", "sighting_of_ref": "indicator--030e5dac-7807-4eb0-96b8-f359a13efb9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e60683-bfde-4f7c-9e22-cb482152cb1f", "sighting_of_ref": "indicator--030e5dac-7807-4eb0-96b8-f359a13efb9d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61936b2-f704-49a8-aaae-d90ed447f7c5", "sighting_of_ref": "indicator--de9ab101-a83f-42c0-a563-413af281845a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b98655f-b890-4c4c-9bb8-b9360d46caaa", "sighting_of_ref": "indicator--580add64-4269-430f-9909-ef79e0500968", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54160cf8-c337-48c9-a878-db0e23120ef0", "sighting_of_ref": "indicator--fd84f250-c549-4225-8403-4f6aca056ede", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86397554-0485-4a4a-b480-0ef855a670e3", "sighting_of_ref": "indicator--b64c9bef-0f59-4a5d-b190-5fc417eadf28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f85d830-9428-4182-bd58-8137d59bd1d9", "sighting_of_ref": "indicator--050ce547-3038-4baa-9363-1b22e0b2c1d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f72fcfb-cc3d-4332-9d6b-04da44dfda7e", "sighting_of_ref": "indicator--0e9318f4-a060-494b-9015-bcb52076bc13", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46415104-0d6f-44de-9f97-641bfaa12314", "sighting_of_ref": "indicator--383947d6-8fa9-4297-980a-2dcff5ef6897", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1853c9-25b3-4e70-9659-6279c8cc1d49", "sighting_of_ref": "indicator--2cd2ed12-032c-4468-8bd3-8c8d9ef6a092", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a42f178-1861-4117-951f-5ac03852b0d6", "sighting_of_ref": "indicator--5345dde3-f0ba-4462-8ac4-31daeddd1cc5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5503053-0861-416f-97e2-14928b013ac9", "sighting_of_ref": "indicator--d7a4614b-60cd-4c93-b3bd-c1bf8465b6ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e35990-00ba-46b1-800f-dc8760d2b822", "sighting_of_ref": "indicator--564832ad-609b-4552-aff3-8bdbec09dbe1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d41988-2857-4da8-89d0-79798103d163", "sighting_of_ref": "indicator--c1bb6277-de1e-4401-bb5a-26229423aaae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ba536b-617d-4e15-b6b4-9986e22a21f3", "sighting_of_ref": "indicator--3de76734-299b-4fc1-8012-6d804f5f789f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15e267c-2a64-43ee-b089-02ca9400d722", "sighting_of_ref": "indicator--e5049fb5-8b76-4f09-9e3e-02d2ca939c62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8c9028-2338-423b-9242-1c9b9e77c01b", "sighting_of_ref": "indicator--5ca1521d-c7d8-4d49-a662-07d0f5f47d22", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850771aa-7752-4f89-bc25-eb2c31839a4f", "sighting_of_ref": "indicator--5e48bceb-5cb4-4696-ad46-a34b9f8b76b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b756ba2-2dfb-4fef-b2ff-21239bf549f1", "sighting_of_ref": "indicator--5e48bceb-5cb4-4696-ad46-a34b9f8b76b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4256859-ba7b-4889-8cad-5d94eb3fa5c7", "sighting_of_ref": "indicator--5e48bceb-5cb4-4696-ad46-a34b9f8b76b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a64f8ec-ef60-4ea6-8df4-fa4fd12dc01c", "sighting_of_ref": "indicator--bbdf7fd5-c069-45af-ab84-ff8e0b869ec0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee4870e-330d-4a8d-a786-2afa67263bfe", "sighting_of_ref": "indicator--94b1dca2-3037-4c75-93c9-9dc034c1a3f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b69e6c3-fe96-4faa-a59d-e85162d6657d", "sighting_of_ref": "indicator--bb2630e1-9345-4828-ae42-d3fb74745bff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9131d5-735c-4f64-a8ed-ce0d7fd4763b", "sighting_of_ref": "indicator--22fb9451-3b16-4c84-a0e9-9d0cb62dc87b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5abbca3-da40-4636-a4a3-dbd821c440db", "sighting_of_ref": "indicator--95212981-e685-4b18-8f76-a1d9c1c8ae7f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6121ad-0f7a-430c-a2d4-937d7a295994", "sighting_of_ref": "indicator--e33ce461-4343-4f47-bd58-04e205f6daae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672c8732-7a08-4761-80f0-f6fab125c2da", "sighting_of_ref": "indicator--ce522d72-6388-4ce4-bcd6-70f5c5c3d634", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b2964e-964d-4eb2-913c-87285acf9eb8", "sighting_of_ref": "indicator--8ff1df6d-79d2-48b9-98ab-3888f731efc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f677f05-d217-4740-8e3c-c1606f60d2e0", "sighting_of_ref": "indicator--647d0b0a-9009-4a50-b90e-1764787ce156", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5d8899-daef-40f4-9aee-2a49a6df258b", "sighting_of_ref": "indicator--faadf8fe-5ee1-44da-aaeb-fd231822c2b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a150539-cedf-461c-9954-226de926241c", "sighting_of_ref": "indicator--6eef7ce4-9e4f-4276-b3e2-335b4ff1bbac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e266984b-4897-44e8-81aa-087b4a2fa32b", "sighting_of_ref": "indicator--6780ce8e-e621-47e3-aa26-08e38afdccd3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fcb813-e636-40ec-9205-d5eaa8d56fdd", "sighting_of_ref": "indicator--39590d76-6e14-4656-96fa-4f218b0a678d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd124e9c-856e-4cd7-8d40-2b92f8cf0748", "sighting_of_ref": "indicator--b664b577-413f-47ab-9efe-2ab0a98bf888", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68ed326-e35c-43f5-a762-997f854b628e", "sighting_of_ref": "indicator--3293ba2f-5830-417a-8cc2-ce67f3ce0ad2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6aa331-36ca-4d66-813f-e144549bc7d9", "sighting_of_ref": "indicator--f5edcaad-ebec-42f5-8496-08c02ce0844d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4199586e-5844-4b90-a793-9425b4496f25", "sighting_of_ref": "indicator--c3965fc8-0318-4a97-8b2a-953db6d465fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16be86d-dbb6-4edf-b6c1-728c5f185dc7", "sighting_of_ref": "indicator--64bf164d-0995-46cf-84c8-104669eb53fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd390c65-ab6c-4831-871c-a624e65768b2", "sighting_of_ref": "indicator--72917e46-ae65-4a18-a99b-fe40afc5d206", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e1c68d-c323-45e9-9eab-34b791a87671", "sighting_of_ref": "indicator--25c364cc-d080-49b6-b288-f1768c5dc274", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dc318e-9a9e-4d9a-9784-824bf1252538", "sighting_of_ref": "indicator--017ca285-29ac-48ba-9e9f-ceb06baa8302", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c915f2c7-c676-4bb1-a4a6-8cdf72d9e2f1", "sighting_of_ref": "indicator--f5700c08-03f3-473d-b8c9-7e5192ada896", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ea630c-11e6-4eef-9b59-8db9c5cb9b19", "sighting_of_ref": "indicator--a355394c-10f1-4dcc-b040-0a1c069e7846", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bffbaa-be96-4d55-89c6-c2158414aaec", "sighting_of_ref": "indicator--79949f72-e57a-402b-9f2d-3ff275884509", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74b91ae-05e9-4422-b8f8-cfb50adb1bb3", "sighting_of_ref": "indicator--1784df3b-a5dd-45c2-bae1-bc3c82ae07b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64350b8c-a970-41e6-9d38-70cf0fbfe055", "sighting_of_ref": "indicator--ec716b45-c6af-4e9b-8686-475bff5638d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924279e5-3052-42e4-b9e7-168f5ad54c06", "sighting_of_ref": "indicator--6d25f78a-b739-4e41-8ff8-f3f569586633", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f7031c-2a1d-4dac-870f-46f48e6239a6", "sighting_of_ref": "indicator--9707ee96-7524-4b53-ba2c-9156633a666a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befd7f39-dd74-4908-802c-1bcddb150ab4", "sighting_of_ref": "indicator--bf02a9a9-884e-4da5-aaf3-9fe2701a602a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4517fb10-7fd4-4ed9-be2d-9b7afc62bc51", "sighting_of_ref": "indicator--e513ad3d-0877-4d3f-a6a8-737ce8fa7346", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78816973-757a-4148-a637-af02bae9cdf8", "sighting_of_ref": "indicator--e513ad3d-0877-4d3f-a6a8-737ce8fa7346", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b35e012-af06-45f0-9b56-c7f2ce93df37", "sighting_of_ref": "indicator--5593280d-6fc5-4b2b-9b70-ff8be497740a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7802d1d8-9df7-4f98-87aa-9b320fc510dd", "sighting_of_ref": "indicator--5593280d-6fc5-4b2b-9b70-ff8be497740a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2c4fab-bc6e-4b80-907f-a3adeb04d0a7", "sighting_of_ref": "indicator--5593280d-6fc5-4b2b-9b70-ff8be497740a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9abd64e-e52a-4aff-b54e-62041022d140", "sighting_of_ref": "indicator--948d767c-55c1-46bd-8f21-16cc05e5ef2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90797afc-536d-4915-9af0-57a5b8b20e10", "sighting_of_ref": "indicator--f0c545f5-2b0a-415f-bf6a-5b39ab1b84ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117c8278-bda5-4453-9ede-2a7129fbf1bb", "sighting_of_ref": "indicator--f0c545f5-2b0a-415f-bf6a-5b39ab1b84ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e9554c-ac73-4ba7-9321-ef6198cd012e", "sighting_of_ref": "indicator--cef2f3f4-2655-40e0-8d85-f410d28da57a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bfc3d4-ad42-40da-9003-538dd2ec0736", "sighting_of_ref": "indicator--b6b78225-adf3-4586-944b-ccfef16927d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb183e9-9f8a-4a86-9c9d-afe1b3875dc3", "sighting_of_ref": "indicator--709919c6-c20a-4b0e-920d-8784d6071372", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb098f4b-c203-4847-962c-565b653d846a", "sighting_of_ref": "indicator--b5d99440-7a2b-4dc5-870b-ba6d29660ff8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac4b725-71ee-4e83-9c84-ea89a81abc66", "sighting_of_ref": "indicator--b5d99440-7a2b-4dc5-870b-ba6d29660ff8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305c8a3f-cb35-4941-adc8-b8dcbecfc647", "sighting_of_ref": "indicator--b5d99440-7a2b-4dc5-870b-ba6d29660ff8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4240f17c-fb0f-4f93-98b3-6c9be46e5fe9", "sighting_of_ref": "indicator--e4736b9b-775b-4662-a386-89098855fe2b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa1e877-3648-4625-9ab0-48a77e27a44c", "sighting_of_ref": "indicator--c6b9911e-3a38-4d8c-9a87-cf8248179d03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e6c443-f1eb-4302-85c9-d8f35c812af3", "sighting_of_ref": "indicator--22d19e56-8154-437c-bb32-a04494d47aef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4571096-a1e5-44a5-800a-d39e9a854d01", "sighting_of_ref": "indicator--22d19e56-8154-437c-bb32-a04494d47aef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76da544d-ef20-44c9-9190-89bf52c04da0", "sighting_of_ref": "indicator--b142403f-70a4-4d45-b402-132cbd9ed0d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f0ad5-b349-404a-b74c-f4705c251430", "sighting_of_ref": "indicator--c89a23cc-369e-4b36-9abc-4bda40d75686", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e44a7f9-ea9f-4759-9d20-0af4598e6c03", "sighting_of_ref": "indicator--4347aefa-5fbe-43aa-9822-1298552c5b3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96f6236-ea9b-4b68-a1e8-d8b5625d5249", "sighting_of_ref": "indicator--b686ea42-85b8-41d6-9eb0-0a743952b674", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c8881d-ab47-4795-958f-50ac55fed672", "sighting_of_ref": "indicator--effbe603-4337-4b36-a8ac-622893e9904e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0f3d0b-20f4-4b94-813c-9577e87e1fef", "sighting_of_ref": "indicator--bf459a09-dd1f-4bbf-9487-448790eb4b3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4851ce-88c7-4228-b2ad-9c6347a75277", "sighting_of_ref": "indicator--e5525fe8-bf34-4508-8d60-22c697915a32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996a97df-b58a-4662-8596-b72391ee0418", "sighting_of_ref": "indicator--e5525fe8-bf34-4508-8d60-22c697915a32", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a750004a-adf4-4f94-8867-058537b71ee1", "sighting_of_ref": "indicator--ab4ece2e-2986-477c-b4f5-778c4ff4b4a9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea3e33-fdd2-4420-991a-ed9a0277207c", "sighting_of_ref": "indicator--c247bfce-56a2-468a-943b-32ea4476fd54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14682d1-77fb-42b3-ab6b-b8b9613d6813", "sighting_of_ref": "indicator--1cf6c318-738d-4fcb-af1f-a4f6304e9c4e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f0e97e-78a1-4f0e-9791-14fe8fa0c30c", "sighting_of_ref": "indicator--3204b763-bfcb-47c2-95d5-597f2b5c92c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df23453-b5de-4ec6-a2f4-87828d893b42", "sighting_of_ref": "indicator--d2d4fa17-9497-4c46-92e4-f0f6e4f95f60", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e0ef70-4940-45f2-9550-944ab8cbf8ff", "sighting_of_ref": "indicator--6258884d-36fd-4dfd-b94e-f6e57fbbd78b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ac911a-6e81-4616-a5de-6e1785046e27", "sighting_of_ref": "indicator--95a2830b-def6-4a38-8b3b-29454edf843a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59424a74-5d9f-4b00-bbd6-b2849ca14313", "sighting_of_ref": "indicator--bce66c1c-6c15-4ea9-a9d1-7646df280b39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a04e6-0247-4a96-8502-8aa50e2bee96", "sighting_of_ref": "indicator--5b8d0722-c765-4692-8551-c40be1834dea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4b3488-22ea-4148-a376-f6645a629473", "sighting_of_ref": "indicator--5b8d0722-c765-4692-8551-c40be1834dea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b80687-c24a-4d04-a63a-f384023e6220", "sighting_of_ref": "indicator--5eb3cc50-bdea-40d4-b9e1-6cd9394036dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8c3436-e95d-440c-8c65-5916a3792528", "sighting_of_ref": "indicator--5eb3cc50-bdea-40d4-b9e1-6cd9394036dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6a0531-eed8-40bd-8fd9-7d4eea4bb519", "sighting_of_ref": "indicator--f1588dca-d8d8-49d7-bfa2-885fc169b65b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec14b5a9-aa6c-4645-a2bd-85b36fde3ef5", "sighting_of_ref": "indicator--8d8e74b1-03da-4418-a41d-d0dec2e44edc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329ca152-04dd-4256-ba75-986be4a116b8", "sighting_of_ref": "indicator--3b770be5-0f1b-439d-8787-235e59119573", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20231e20-4245-4591-bde9-30bf2cd70539", "sighting_of_ref": "indicator--8dd6bee9-a689-4b31-a534-04b05c636925", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4734c22-7c21-44a9-9c1a-2690eff667e3", "sighting_of_ref": "indicator--cdc3f1c7-31ef-4942-9c05-8725cd371bb9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c24451-8b4a-4163-a04c-10e7fa89153c", "sighting_of_ref": "indicator--cdc3f1c7-31ef-4942-9c05-8725cd371bb9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d4a652-be61-4311-8e11-0c71307c88a0", "sighting_of_ref": "indicator--f597fb8a-f6db-40de-8be8-b955f5b965c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009d6a10-33b2-4e3d-b8ae-bb3dbc2049ea", "sighting_of_ref": "indicator--30af48a3-fded-459d-9dd8-fe50a6a6316e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a5325a-8d89-4085-825a-703854dead25", "sighting_of_ref": "indicator--214241c2-5e18-41f7-a645-6839d2afe8af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d71618e-fb63-49fb-b1d2-5e3437e8e278", "sighting_of_ref": "indicator--52a205a4-7ba3-4e64-a315-37887d21b845", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f01de-c8c1-44f4-a033-b1b0658dc150", "sighting_of_ref": "indicator--1af7241c-6bce-45f9-94b8-c00404c2b1cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3ec614-7e2f-4467-b079-75105f04739f", "sighting_of_ref": "indicator--bc89f337-c956-4e4e-ae03-916de747a551", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50768fdf-99fe-4d86-9316-fe5c9796f115", "sighting_of_ref": "indicator--4cf4cc39-0604-46b7-9350-784c1c25cbb0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de2887c-ee68-4166-ad9c-bdafbc162b37", "sighting_of_ref": "indicator--32d75ee8-7c7c-4a0d-81ee-81507c04f1ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7f785a-4156-48e0-adfd-c72f83db8e5a", "sighting_of_ref": "indicator--9f45d40f-720b-4513-85d0-ec2a979d8e35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b639ce-5966-4eb5-985c-0b0f386c9666", "sighting_of_ref": "indicator--fc481b53-424c-4b98-94f1-5ce9b19c51e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3751fb6c-8aec-4069-959a-5376069f34e0", "sighting_of_ref": "indicator--fc481b53-424c-4b98-94f1-5ce9b19c51e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2d31ed-e195-449a-b39f-6d395c79eb92", "sighting_of_ref": "indicator--fc481b53-424c-4b98-94f1-5ce9b19c51e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b19d71a-23e6-405c-8edc-5076a98b6bf9", "sighting_of_ref": "indicator--f4ab5cc4-4d7d-4ba3-8bf2-483d59ff8d2f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962a17e5-2738-46bf-9d09-d731d549a547", "sighting_of_ref": "indicator--f4ab5cc4-4d7d-4ba3-8bf2-483d59ff8d2f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab86691-063d-48e8-b66e-c8b942e1cfdc", "sighting_of_ref": "indicator--8c464812-eb9d-4f6b-97ac-e7301de3f2f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e413ab0-5bc6-4a90-b4c3-afd9aca59dec", "sighting_of_ref": "indicator--d6e79275-5613-45a5-b38d-4650e26b4fa0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4741a4a9-8732-4ff5-9f7c-719848f4ca3c", "sighting_of_ref": "indicator--df5bb643-6687-48fc-b1a9-56671cadd41f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3bda63-9ccd-465c-95ef-b920db3e5882", "sighting_of_ref": "indicator--b7a3f538-9d74-4e86-8f9a-092a526bbcc0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadc5ccd-7c7b-4b29-b8fe-82b9bbf9c3f6", "sighting_of_ref": "indicator--b7a3f538-9d74-4e86-8f9a-092a526bbcc0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c04331-4029-4119-8c46-e991f324d3b8", "sighting_of_ref": "indicator--717f6e37-99a8-4ee1-b892-2f175d4d05d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c33633-9c15-4dae-8969-e7dec7bcea82", "sighting_of_ref": "indicator--4371915a-409f-4720-bd5d-eb83b4183480", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17ae7bf-6549-4244-98eb-59a46d18f4c2", "sighting_of_ref": "indicator--4371915a-409f-4720-bd5d-eb83b4183480", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42973210-fcad-4370-8a54-a6792375d4a8", "sighting_of_ref": "indicator--4371915a-409f-4720-bd5d-eb83b4183480", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfe9687-98ba-426f-b9a9-13ca76db6cca", "sighting_of_ref": "indicator--2eb36acf-f50c-4221-b13c-fa80007636d6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1428a581-0dae-4b09-9b41-29370c1069f5", "sighting_of_ref": "indicator--d7eff3ba-c882-4151-bc40-2f89e1c57b88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5492598-d477-40c8-8cf2-113900da8c7f", "sighting_of_ref": "indicator--24e3c202-2c0a-4566-a3bc-626de368bea8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c4bb3f-4309-4b07-a31a-96c939802311", "sighting_of_ref": "indicator--6a9cd35a-a417-4450-b91f-76935a5ba665", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95401f2-f773-43f1-ac74-15f2eb6f8303", "sighting_of_ref": "indicator--d1833f5a-e645-4658-a5ae-607957361df1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba2ef2a-e9e6-43c1-91fd-df7409abb81b", "sighting_of_ref": "indicator--d1833f5a-e645-4658-a5ae-607957361df1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b1d9e6-0d02-473d-a6dd-42ce8bc8eafc", "sighting_of_ref": "indicator--8f9e2d7c-efda-4522-8016-736a86bc7b5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ee5e47-68dc-42e2-b282-e48f055ca84a", "sighting_of_ref": "indicator--c23e4a36-7159-4218-90ef-32755569c56f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2fede6-d587-450c-a79b-b4218f447581", "sighting_of_ref": "indicator--c23e4a36-7159-4218-90ef-32755569c56f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d7c485-515c-4ce6-9a13-616bd942da13", "sighting_of_ref": "indicator--6ca9206b-21e1-4391-b9e9-661995177981", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5a7ca3-b98d-4069-b8cd-e9ecdfe1112a", "sighting_of_ref": "indicator--7dc58c4c-bf35-4c16-94ca-ee2a1d825489", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa73b14-7934-4a3b-a3e8-fd9b33537eda", "sighting_of_ref": "indicator--5c89aa91-1e9b-424a-aa5c-de004f4098b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ab9724-c656-4a8a-92a9-98ef49524cc7", "sighting_of_ref": "indicator--f67a6697-8beb-4bbf-92cf-05c182541cc5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069d2a42-9b56-482f-b04a-9afed5d8211e", "sighting_of_ref": "indicator--760c67ce-743d-460c-99b2-d1f47df6c8b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccb0f15-0ee5-4c6b-8b42-3325ff791e6b", "sighting_of_ref": "indicator--760c67ce-743d-460c-99b2-d1f47df6c8b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed19fe6-95e3-41a8-92da-b6ff1d2eb944", "sighting_of_ref": "indicator--1196cdd6-7691-4a8f-a3bd-28ddb8ea426b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36db4a5b-b41a-40cb-a9c7-7bceb23c7cb2", "sighting_of_ref": "indicator--16210db3-1676-4598-b225-101f5018fe1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e25259d-d343-4a2f-ac6a-e5c08155ccba", "sighting_of_ref": "indicator--16210db3-1676-4598-b225-101f5018fe1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a578271-3d99-4a34-bd2a-9100c09a7640", "sighting_of_ref": "indicator--9c8fb211-a91e-4436-bf91-bbadaf722baf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52bff31-8ea1-48ca-b8b0-79cba2370afd", "sighting_of_ref": "indicator--9c8fb211-a91e-4436-bf91-bbadaf722baf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28094049-263e-4b0b-81ed-1810dac2be03", "sighting_of_ref": "indicator--9c8fb211-a91e-4436-bf91-bbadaf722baf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d976c764-73c8-4589-a48d-650320af63f7", "sighting_of_ref": "indicator--b336f087-68f3-4272-b703-8646f65e4522", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd37a6b-e481-4299-848f-d2992fb4d3cd", "sighting_of_ref": "indicator--3c2d7e2f-8b6c-4482-bacc-2acfddeb0309", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af131fb3-eb5e-4073-a86b-38717a7f77c7", "sighting_of_ref": "indicator--0e232899-a29d-4466-8aa2-81310daa737e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276fc8c6-a8e6-41a4-ad41-0f5bbac11360", "sighting_of_ref": "indicator--36ae0571-e2e5-4ff4-8a0b-a4bc614d1f14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b27f0a-beec-4501-8a77-1bf12e29784a", "sighting_of_ref": "indicator--36ae0571-e2e5-4ff4-8a0b-a4bc614d1f14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a458a0-ac56-4615-8b0c-c3e2ed7fdc8e", "sighting_of_ref": "indicator--84327d4a-6117-4d25-90e6-168d7c794870", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c24f4e-6078-4b0e-9649-bd6410d1ea27", "sighting_of_ref": "indicator--b1b9939b-c277-469a-b320-e7b63e9eb1b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2174ad0d-4877-4f15-ae48-8dfe63a1cc4a", "sighting_of_ref": "indicator--b1b9939b-c277-469a-b320-e7b63e9eb1b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b26c17a-c81c-4f77-bfb3-f943586b6331", "sighting_of_ref": "indicator--b1b9939b-c277-469a-b320-e7b63e9eb1b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98af48cf-612c-4219-a325-4ed7938fa214", "sighting_of_ref": "indicator--ce03e1fe-d9f7-4961-a030-6ea83d099874", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93b46f5-c145-4019-ae25-7fdc95bf727a", "sighting_of_ref": "indicator--32ce3bdb-bebf-40da-9e56-89bd113b3a9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d068af6-d61a-4370-95ee-f9600185ddb8", "sighting_of_ref": "indicator--32ce3bdb-bebf-40da-9e56-89bd113b3a9d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6eeb45e-59d5-4d81-b2ce-ceb42378e14a", "sighting_of_ref": "indicator--4d035fa6-ef5d-4bcc-9b1c-99b6937529f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c171f7e7-21bb-47df-b268-e26ea4c5aae5", "sighting_of_ref": "indicator--6a468436-d46b-4fd5-887e-6faafd841ff4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6659a988-5094-4c30-aa39-23d84eda3459", "sighting_of_ref": "indicator--7e6c0ef1-987e-4c88-b7d5-352490b2c046", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d3dcd5-a307-40fe-97fc-afd05fd8e8bf", "sighting_of_ref": "indicator--d3608a23-d077-43db-bcf4-a125750a645e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b028e567-a4bd-48bf-887f-d9f023b43c6c", "sighting_of_ref": "indicator--d3608a23-d077-43db-bcf4-a125750a645e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646e9d40-9b95-4b96-80c6-0c7645da2ad9", "sighting_of_ref": "indicator--a3c47392-56ec-4cea-b291-b1f3859e13e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b526b22-3fb6-404f-acef-d173d57673cd", "sighting_of_ref": "indicator--c393f23d-bb65-4a2f-96ed-3b33ea1fcca6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7513290d-954e-420f-83c7-a3e999744c1d", "sighting_of_ref": "indicator--c393f23d-bb65-4a2f-96ed-3b33ea1fcca6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc28754f-6eab-4f40-9b6b-ca714f7470b2", "sighting_of_ref": "indicator--c393f23d-bb65-4a2f-96ed-3b33ea1fcca6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc91b235-2bae-4eec-b95d-86d6b31e0dd3", "sighting_of_ref": "indicator--dbe69b85-410f-4c81-a170-b9c3120c65de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42c6ac0-575d-4ba0-9225-b97c73c0342e", "sighting_of_ref": "indicator--dbe69b85-410f-4c81-a170-b9c3120c65de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53359027-6e8b-4cae-b76e-d6aae8e0fd19", "sighting_of_ref": "indicator--dbe69b85-410f-4c81-a170-b9c3120c65de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757c1a07-902d-40c6-a501-b1b902fdd605", "sighting_of_ref": "indicator--f141ec24-ffe4-4c43-8e96-1bacb5adf87a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bd0a86-ff57-4332-8fd4-e9f92b6e6f7f", "sighting_of_ref": "indicator--f141ec24-ffe4-4c43-8e96-1bacb5adf87a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e705870-cee5-458e-9f03-24b61202ec4f", "sighting_of_ref": "indicator--f141ec24-ffe4-4c43-8e96-1bacb5adf87a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1a95e3-f1dd-49f0-adf1-13bbb0fb1496", "sighting_of_ref": "indicator--24f39b6f-3f3f-45ea-b1ac-ae45705448ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9679745b-fe79-4e9c-bf9b-974acdaea240", "sighting_of_ref": "indicator--a59a1b8e-3e6f-47c5-99d7-8b7bdd0c77fb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64023d9b-68bb-47ca-98b0-3791faae42ab", "sighting_of_ref": "indicator--a59a1b8e-3e6f-47c5-99d7-8b7bdd0c77fb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cab8b9f-85ca-4bcb-a955-b5719afcae89", "sighting_of_ref": "indicator--fd41607f-8325-4cc2-b30d-e42a7207076a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5da577-0d52-4ba9-bf57-753e3b6bc509", "sighting_of_ref": "indicator--fd41607f-8325-4cc2-b30d-e42a7207076a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d01cdc9-e281-4797-82c1-1a641da2cb1d", "sighting_of_ref": "indicator--fd41607f-8325-4cc2-b30d-e42a7207076a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e724a244-b53c-4b40-97d8-7d7dc5db4db6", "sighting_of_ref": "indicator--1be8184e-e0d7-44fc-bb74-a4291c97c8b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7733be-377d-427a-afcb-4b449edf303e", "sighting_of_ref": "indicator--b7426854-a4a4-4435-8451-84aba4190973", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd90b20-3310-4ca1-acd6-5ed5adbd2f56", "sighting_of_ref": "indicator--7ce626d3-a023-4926-8722-7739c7eca336", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbf8787-d2c7-4754-97ae-f9f204d14de3", "sighting_of_ref": "indicator--e40d958e-81f4-4f3d-bf12-3397c9316d4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842c6e43-0801-482e-981b-dfed9bcdfe09", "sighting_of_ref": "indicator--e40d958e-81f4-4f3d-bf12-3397c9316d4a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3844582-e08e-48bf-bccd-983675f04362", "sighting_of_ref": "indicator--e40d958e-81f4-4f3d-bf12-3397c9316d4a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3f8782-46e3-4a52-bb28-6b3fe137bc3f", "sighting_of_ref": "indicator--d370de68-6565-488c-b32d-9b18a5548f29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cb2aa1-3e86-4d2f-af78-67ab395a0531", "sighting_of_ref": "indicator--d370de68-6565-488c-b32d-9b18a5548f29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1bf581-c410-48e8-840c-21896a76830a", "sighting_of_ref": "indicator--d370de68-6565-488c-b32d-9b18a5548f29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bfce7d-9aa2-49f0-a99f-743532a189a1", "sighting_of_ref": "indicator--b38c98ad-9a80-4819-a2ed-c1a38bb38a9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a117f6d-718c-498d-b720-b5ee3b927aed", "sighting_of_ref": "indicator--b38c98ad-9a80-4819-a2ed-c1a38bb38a9c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bda9d15-82da-4f66-88b8-425557d7c85b", "sighting_of_ref": "indicator--b38c98ad-9a80-4819-a2ed-c1a38bb38a9c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662a9eaa-b712-4d10-8313-184ea4b07ced", "sighting_of_ref": "indicator--0fa67ea9-f8e9-4f93-af4b-23fc5201cb97", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e352db-3739-4234-9c68-3bbfc27c3c47", "sighting_of_ref": "indicator--0fa67ea9-f8e9-4f93-af4b-23fc5201cb97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a2d5d7-bc03-4b9e-8e88-372860bd08c7", "sighting_of_ref": "indicator--0fa67ea9-f8e9-4f93-af4b-23fc5201cb97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20787473-f87d-4f3a-8759-efab01bf579b", "sighting_of_ref": "indicator--7aa0813e-cce0-4c96-8c0a-27927b0a3d2b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d58849-b00b-4026-8353-610f058db034", "sighting_of_ref": "indicator--6b19c969-9d13-49d6-9d52-3a1ad09c8c4a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b590a8e1-bb53-43ff-8d74-5832a4f37d0f", "sighting_of_ref": "indicator--5cd910e3-c87c-47a2-8029-4d673422c099", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cba177-73e0-40a6-a616-60a49632d8be", "sighting_of_ref": "indicator--9034c6f4-ea47-4cd7-9c6d-a29ceb1523cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56515ed-c54b-4e8f-a7af-7f3bc4f892fb", "sighting_of_ref": "indicator--d24f69c4-097f-43cb-86fb-8df0bb8f9ad6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e2540a-28ec-483b-b4ec-4a75b2794219", "sighting_of_ref": "indicator--2df83a22-983e-43f2-8490-9e2df26f04ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f06a9de-216c-4809-ad53-7f8034c8ac83", "sighting_of_ref": "indicator--6c1fe544-d05c-4fb2-8129-517389b898bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8dd65c-3605-4f16-ada7-7c1b1422dd75", "sighting_of_ref": "indicator--9d883153-b177-409a-a7b6-18ea428ede64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7871da6d-11a6-4bdc-bfd5-db6727cf9cb9", "sighting_of_ref": "indicator--98680e7d-5b51-4f47-a9d5-3760a9c61e0b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38923491-bea8-41b1-be12-dcc1d86ea4c4", "sighting_of_ref": "indicator--b1cebcd5-72ab-4f3f-9ccd-3f089762f605", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cba60b9-fa87-47e2-9862-3d020008d2e7", "sighting_of_ref": "indicator--64fd9815-34ff-4e46-b788-5b4835bb0de5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee6997f-da03-49e8-83e1-ae7ac4ae052c", "sighting_of_ref": "indicator--3c43760c-0be7-4e7c-8648-0855a975e466", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eca402f-aba8-460c-b3d2-fac2b18f833c", "sighting_of_ref": "indicator--45279236-26d6-4bfc-b7ac-dbcdd332792e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869a4c76-d55c-4757-ab83-a7beb00dc3bd", "sighting_of_ref": "indicator--8164af04-4726-4b6c-b0cd-c0d291970f2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb5f651-5a9a-481f-b3cc-fee47e5e8e22", "sighting_of_ref": "indicator--48242adc-949b-4765-af26-ff8eb779f740", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5856d8a7-62d9-4ed3-a2dc-30f9971fab74", "sighting_of_ref": "indicator--2cd1bd72-e2fe-4216-a7c7-c6b0287927d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d92b355-4688-4ef1-86f5-bc64724ad2d5", "sighting_of_ref": "indicator--b85e29af-fb24-40e7-88a6-01e18f60288f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c986f2-71b2-4514-aa44-c4e725cf8dd0", "sighting_of_ref": "indicator--5f2c9a94-452e-4879-a39b-6eb8aa6b236f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9222d1-7ffc-4c5c-afe1-8e1d8b1d0d25", "sighting_of_ref": "indicator--2e705f5d-803b-48de-b80d-3bd8a666d80b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f76c2d-1d61-4c9e-a96a-8b1dfd652369", "sighting_of_ref": "indicator--aa6a967a-9597-4799-8d7d-f715fc9170f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5e2b51-d970-4cac-b35b-6297291d2a58", "sighting_of_ref": "indicator--2919c449-19a6-4836-bc1a-8f02a78340ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8ce6f6-2607-4117-a3e8-b3b5512ea06f", "sighting_of_ref": "indicator--b4e2688d-a111-424c-bb51-a953f79575b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449f16c9-592b-4cef-b917-50ef960cd93f", "sighting_of_ref": "indicator--8d535b37-aa4e-4495-b805-fae602b3a92c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c6d17a-4fbf-4a79-8bb6-7d991688840c", "sighting_of_ref": "indicator--502649e2-59eb-4209-aeb6-580436c26505", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70edbdb4-e564-4d31-964a-083e0b12cf35", "sighting_of_ref": "indicator--a77f398b-e250-4ece-ab0c-21b143911188", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731edaa4-e1f9-401b-8bd8-07aa5b2dc12f", "sighting_of_ref": "indicator--f1d84d33-6143-4262-89d1-c4225bc7a767", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3569d2f6-abb3-4861-b4c1-0c7e4b6d276d", "sighting_of_ref": "indicator--06792fab-4464-4138-ac73-46aee5f56d64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42441d35-873a-45ca-8806-e6f686476ede", "sighting_of_ref": "indicator--08598660-45b0-40ad-aaad-78a5e5e9b741", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec82ab29-4f4d-4ccc-8452-404023563baa", "sighting_of_ref": "indicator--72a2f9d0-bab7-450f-aa68-aac70d8a3920", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db61cd1-d065-44a0-8413-94bbfd686b27", "sighting_of_ref": "indicator--eae2c191-ef84-4885-bbb1-ce003e9392ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886a4b2e-0cea-4dc8-bc4b-f7a6860ad3d6", "sighting_of_ref": "indicator--65b762b6-0df8-4229-b3ba-3ea7cda770b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa4950a-9989-47eb-9d09-e3dc4dd02361", "sighting_of_ref": "indicator--6807dbcf-b971-4bd5-97bc-93dbd13d626d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348c19d8-ca52-4eff-89cb-ceb659cc0f7f", "sighting_of_ref": "indicator--fdb9123a-51b4-43f5-ad7d-879050119e57", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6916506-a9dc-487c-aaba-a2248c728890", "sighting_of_ref": "indicator--e9018e49-6fa2-43cc-b5e2-c9028bf35f56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ef5857-1e30-42dd-807f-a2f0f130a3fa", "sighting_of_ref": "indicator--82a43218-5e7b-47f7-b06c-77d656dee28f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a78af9-8773-42a7-8da2-c503e9c721ec", "sighting_of_ref": "indicator--29676bf8-a044-46ab-9bf1-f0d3dc6df7a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ea9cbc-00a4-4505-bb5d-dd709519f930", "sighting_of_ref": "indicator--6ddb4f68-e342-4cd4-888e-a70919ac04af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86c5229-6940-41b7-aede-057913d94b33", "sighting_of_ref": "indicator--baf77c12-7a7a-4f0e-afaa-a56e98151c2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553252c7-5324-4bf0-b64f-845e44d2a79b", "sighting_of_ref": "indicator--2f051d7b-eeea-4097-8fd7-6538792e36f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2658a09b-adf9-4b71-9518-8e9ed7a960fa", "sighting_of_ref": "indicator--ede2ca03-0571-4e3a-b54a-004659df81b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026899aa-8d23-4c66-955e-578ea342156c", "sighting_of_ref": "indicator--9b89f632-f9eb-4a85-aa7a-68795f84b2ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ab1d6d-fcf5-4595-aecc-458198121b4e", "sighting_of_ref": "indicator--85abab68-fb8e-43a0-91b0-3ca30de0d556", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba91e60d-87eb-4ca5-8ee3-afa072be3cd2", "sighting_of_ref": "indicator--ffd14fae-bebe-42bc-b95e-b6c8bd6aba88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f8aec9-5a80-451b-bb2c-4b1928347ea4", "sighting_of_ref": "indicator--d7385b78-edb9-4df7-bf4b-9ade830937b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22222b56-6430-4c5a-93ce-a9540477a8ae", "sighting_of_ref": "indicator--6bd55017-b87b-42be-87be-f311bdaf9946", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74efd79-3ad1-4894-b9a4-ac1183bcf2b8", "sighting_of_ref": "indicator--4e808591-9f51-4745-9e56-36e0d59d02e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8999f4ab-f349-4a4a-b76d-d1f1b8ff1532", "sighting_of_ref": "indicator--2f00e6cf-c075-4d3d-b719-8d2f24f66d34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de10fcd0-731d-4535-b2db-40e060303312", "sighting_of_ref": "indicator--6a328517-f01e-41e1-afd8-b5b598048f54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218de5e0-81dc-4e7c-96b3-c0b339ef9567", "sighting_of_ref": "indicator--f6b4f34e-b178-4840-b02c-3f243fb87513", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db27834-1f87-4d5d-b3a7-f08dd71c6591", "sighting_of_ref": "indicator--14e63752-c1f0-4cc2-b357-8061f7d3620e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399102f9-fe34-4474-b043-74d657640080", "sighting_of_ref": "indicator--10dc620d-896b-4fc3-8f1f-ed7f1aa14bed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2798dac8-cec1-4e69-aae1-4bbf5aa717c1", "sighting_of_ref": "indicator--c47a5e05-f018-4b17-86d8-167fbe64c9c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5042c67-df2a-4bbb-a6d3-98f5e52e2e02", "sighting_of_ref": "indicator--a4b48e4d-6582-4462-b14e-3e39c2c4809c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52ee3c9-df25-4a74-bd40-9761629729ff", "sighting_of_ref": "indicator--b75b17e4-3b10-47d3-9b27-c8b33ac0c2e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb04920-7316-49f6-9824-7215e83d23c0", "sighting_of_ref": "indicator--fc558d57-3b3a-4b92-a6dd-4d9d021e3c5a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c016af11-7ec8-4fe9-9688-9f4740469a52", "sighting_of_ref": "indicator--871bd7ca-b1bc-4468-baff-5ce5af529c08", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920b1f4d-628d-47ca-a702-e2f6273edad1", "sighting_of_ref": "indicator--1ff3edf4-8c8b-43eb-a88f-a142400bfb29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99437fb-4cb9-44bf-b4ed-d37aa4c94469", "sighting_of_ref": "indicator--edab0c4e-0171-4e67-84cb-4ae0c0dd8384", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced5b7f3-7486-4c0b-9087-ee6917130034", "sighting_of_ref": "indicator--7d99f7e4-1294-43d1-8901-947f9a1dc92e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8a6bb6-7fc6-4b53-ac18-1d6ea7f31c51", "sighting_of_ref": "indicator--7129b5da-c4f8-4e29-ac2d-f4a1bfe9c653", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7819d6-a47c-4151-a659-971f337479b5", "sighting_of_ref": "indicator--d8b57cee-abec-494e-9302-4e3b382dafae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3901f21-c943-4fa7-825b-f358a061e9eb", "sighting_of_ref": "indicator--08f59f8c-31fd-4f48-8739-7f1c60a6fd06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a12f88-e780-4e91-b8be-164702fe3455", "sighting_of_ref": "indicator--527411fb-f835-4887-90ec-8482eadaa6a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eeb515-bc84-4282-ac5b-cef63a5a7a1a", "sighting_of_ref": "indicator--ddf793ed-b44a-443f-994d-782e8835a919", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbd0234-00ca-49c4-bc4d-024f7aaa7f80", "sighting_of_ref": "indicator--b811cfb3-59ec-4949-ae72-b59fb5502eec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25663f28-074b-4fe0-ae80-7985fa5713a1", "sighting_of_ref": "indicator--b6af9a2d-898f-4391-a26d-6ed39fc5d339", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96dedde-9900-48f3-8bd1-fb9faabc6b72", "sighting_of_ref": "indicator--19ca86d6-5677-462d-9e18-3e4012da114b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee014de-14c2-452e-9c65-74868c0078b6", "sighting_of_ref": "indicator--782a4ff8-3146-4a18-aec7-3101f3b43f6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a672a20-cb3f-4b7f-8185-30ed239851a5", "sighting_of_ref": "indicator--d1bb87e0-ab91-4735-b9d2-d8afe8d4c397", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bec114e-1467-4cab-b410-c9a26668e768", "sighting_of_ref": "indicator--62759c94-8ff3-48d8-b1ef-3ac748f6dcf9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd71ea00-cb2d-4f14-b0bb-1a0bc0ea7bce", "sighting_of_ref": "indicator--862d8e11-2cca-4164-880d-a2fb3b80ecce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a217d16-e578-4ce9-8022-716c37991915", "sighting_of_ref": "indicator--7f33003e-638f-4b21-bbbe-973a8f6696ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaac0c0-7491-4e90-8716-02dd4a42ecd9", "sighting_of_ref": "indicator--064712da-6cb6-4127-b3a2-dd4d02ac2b45", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56311d31-8646-4d5c-9b75-d0538794ca91", "sighting_of_ref": "indicator--66571d1e-d2cc-4c42-9ec5-b50987638843", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d871e867-22b2-4316-848f-08c51cd25a2d", "sighting_of_ref": "indicator--dac34004-eeb0-4d7a-af59-993e2ed96b34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4840aac5-9cb2-48e5-922b-da3e31e26def", "sighting_of_ref": "indicator--5091e200-a929-47c3-b94c-f0e55a9af2f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9487ab59-fa09-4ae2-8359-92850bb1ccdd", "sighting_of_ref": "indicator--4743dc58-3e78-4ee4-862b-5f9fdfa45aba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707f5f23-f193-45db-a69e-f3de51940a82", "sighting_of_ref": "indicator--84802131-2ef6-4d2f-8210-27bc51a2e7ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad19d7b-abd1-4a61-8ab4-788300254a47", "sighting_of_ref": "indicator--4cfe8182-4f37-4466-bd6c-1226f758194b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a309e470-645d-45ed-9ee8-03c2a6be8eb2", "sighting_of_ref": "indicator--99372cb1-32cc-4cf3-98ab-635d21d153d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996c4327-0ba1-4553-bc48-86d086e158e4", "sighting_of_ref": "indicator--68f26684-c44e-4ed3-836e-0c056ab7b3ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6261885e-6c73-4203-91c9-3eeee8ba9f3e", "sighting_of_ref": "indicator--3aa0446f-1ec5-48b5-a8ab-801d92aca575", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed4bcd-d8fc-417f-8a2f-438a1cdf420b", "sighting_of_ref": "indicator--33faab4a-6107-4e63-a210-ad218cdcec2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023a201b-093b-4b68-854f-57ebe3a4ad00", "sighting_of_ref": "indicator--9fd6da3e-6d7a-405b-8043-6f9ef0104cf2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17006b7-7872-4d66-92f5-a63a122de2b3", "sighting_of_ref": "indicator--c422a0aa-ea97-4cc1-9dd7-f63586bde3f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6604e159-5453-4d03-8a19-f7283a9a0eac", "sighting_of_ref": "indicator--ecbdd912-a7e6-4302-956c-73e9525f8e74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff46d08-5d71-49f7-b14a-4678ccc51172", "sighting_of_ref": "indicator--18b8a940-ffcc-4b0f-a877-29fe3e07d8c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f647b72e-8aee-47d9-a64f-5310281c0acf", "sighting_of_ref": "indicator--a8ff30a7-90a1-4372-8744-052bee196530", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9591aab3-706b-483f-9240-e1b8740374b4", "sighting_of_ref": "indicator--5f43c254-2aab-4b28-a95a-bedee2210c2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755f0455-9fd4-424e-9ee5-525709cac1aa", "sighting_of_ref": "indicator--4fb7222e-599e-4132-a1d3-b58d9ffb7ea6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66c27a8-f607-4675-88bf-1da4e139a7b9", "sighting_of_ref": "indicator--1caeaeff-d79a-4d28-beec-042ced5adec6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8778d1ae-ff86-45f0-abe7-6f69daec9ce2", "sighting_of_ref": "indicator--9b528dfa-00f3-4581-acd7-521cb15c00ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5e77ca-0f08-4698-84f1-6e4905447029", "sighting_of_ref": "indicator--51b6d3f5-b2ad-4b33-8396-ce66c5dd2c29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682522ef-dc93-446f-83a9-950ab4e5586b", "sighting_of_ref": "indicator--69f56fad-13c2-4a93-9a08-2b794b161fcf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f967bc-607e-4db6-a5d8-674b2d90c438", "sighting_of_ref": "indicator--14452abe-800c-4acd-b096-89dd88e45fd0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb737d03-9052-4f47-8fff-41d4bd7a8d2a", "sighting_of_ref": "indicator--7744f707-e845-472f-9fc3-b6f64e041238", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7155504-c8d6-42b0-9a6a-8a935d38722e", "sighting_of_ref": "indicator--f8927e5f-3c39-4869-8eb0-7ea5c59f7d78", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa270e1-2fe3-4353-a9dd-b487e3e5ced8", "sighting_of_ref": "indicator--086ec2b1-1e8a-492f-a922-71030b5de0a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27b5bdc-9e71-48a9-9ac3-faa0b6c63c3c", "sighting_of_ref": "indicator--47b3b31f-7dcc-4c07-b022-056b0363148d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee31b44-a3ea-4a4f-bf3e-72e091d2eeaa", "sighting_of_ref": "indicator--97ef735d-0e77-4460-977f-7da5001b5950", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2639d8f-3939-440d-a6f4-bbda14d88133", "sighting_of_ref": "indicator--3eb9d984-3e9e-4251-94b3-6df6a66e21ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544f653d-2577-466e-8caf-0b5ecff18298", "sighting_of_ref": "indicator--bbee2dc8-00bb-43a2-8ac2-e076ac213ea1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8777546-521d-4347-9f71-9661899104c9", "sighting_of_ref": "indicator--ce2d9ec0-a106-4a4d-bac4-21d5f7b3d9ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229fc62d-3e84-4047-9aa3-992660ed3a2f", "sighting_of_ref": "indicator--9e269e15-a81a-4464-9c2b-5ace881f46c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1852e376-0895-452d-8e20-d87b56ce46cb", "sighting_of_ref": "indicator--a947ac5b-e166-463b-a1d3-140dd22c32c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d21d8d-42fd-41c1-be3d-81f721329c73", "sighting_of_ref": "indicator--add7a8a3-171c-4ebf-a800-7c1aad9c0809", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539f9ac9-962d-4c47-ad5f-658dd0b80d52", "sighting_of_ref": "indicator--467359cd-cd13-4bf9-8fdb-aad0311a2e01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf84d0d-976e-4f18-99a5-20f965da0ccf", "sighting_of_ref": "indicator--73b851f4-4eb1-4f92-b60c-53a4d0ed6281", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77fee9f-482e-4241-a319-44ffe7062bed", "sighting_of_ref": "indicator--7412c01c-72e8-421a-ac2c-64cff17bfd3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12adbe95-b155-4264-90f9-cd7e0de245ad", "sighting_of_ref": "indicator--0dfed361-be33-4213-b20a-47ccb05ace5c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1d57b7-9df4-4e45-8a4c-c27e64e23b28", "sighting_of_ref": "indicator--b5e9c985-d672-424f-93bc-44bebcbf4e80", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e4c8e2-36ed-4b0d-b890-b5f89009d5b4", "sighting_of_ref": "indicator--d8495618-9879-4a69-bbdf-37417d723d31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4097c6-fd53-4ac9-a699-3f4c82b3df1d", "sighting_of_ref": "indicator--6969b3fe-3497-4835-b409-e28a19345a01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91662d7a-2866-4da8-8955-6c430da2ae60", "sighting_of_ref": "indicator--49cc1a53-01b1-448b-9a34-c4358fb7430e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b6da67-5626-49d5-9d0b-798d582efacb", "sighting_of_ref": "indicator--b44dd93e-186e-4cf8-82aa-7828596c93f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f929b3-19f5-4a22-9181-9ea56a37e6c6", "sighting_of_ref": "indicator--1b84b040-69c2-412a-b62e-3b0121577b53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914fc155-42f1-46ac-92ad-036aa210424c", "sighting_of_ref": "indicator--01e976b3-01ba-4449-b8b7-bf8da7cba84e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a054a54-c708-47a9-9e80-948acea21e7d", "sighting_of_ref": "indicator--616a3753-93b2-48ea-ba50-164fe7319c4b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dc6f09-4ad2-48b4-94aa-95f91655b168", "sighting_of_ref": "indicator--f032e603-204a-494c-8284-b5b84eb3a457", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fc8cdb-2788-459d-97a1-e73ddfb46f4b", "sighting_of_ref": "indicator--96f76dd7-99ea-4c28-a1b0-b808e0350dd0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816a4fb5-8da9-4311-8d19-465c1a39fe5e", "sighting_of_ref": "indicator--2a42c2a8-0c23-4bc0-8d66-12ed73cbb1e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709fd913-4632-4fa1-a98a-b4f38ebd9d2b", "sighting_of_ref": "indicator--5398e32e-f66e-43e5-b0bb-f157763f6a10", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c335819-d716-491d-a871-7c8223601582", "sighting_of_ref": "indicator--40ce49e8-740d-4458-b3e0-121f92d35aac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc2707e-59d4-40e7-8201-5a1000afe9b1", "sighting_of_ref": "indicator--80c7b722-6aec-4150-a4e7-1d9b0159c5ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b442e3-1e10-468e-bf47-5f98bee2659f", "sighting_of_ref": "indicator--b08f3083-004b-4c30-8581-448f52d5db76", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963559bb-d998-4de3-a60e-97632e87f107", "sighting_of_ref": "indicator--bee45ca7-73c5-4adc-8c40-4e0b27ed500e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bcd591-b327-49aa-a8a5-5bc7496ee766", "sighting_of_ref": "indicator--da45c2c3-7a39-4449-97e7-64c73161f2a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca665064-c446-47cb-9c6c-dd25712a2c48", "sighting_of_ref": "indicator--77821fbc-3c14-46ca-a865-e976f448431a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772ed162-8d96-4dab-9226-1244a1f215d4", "sighting_of_ref": "indicator--df535164-adf8-4b86-baed-9d35ae4d7201", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dabc89-4824-4f7f-83c0-130d34f5186b", "sighting_of_ref": "indicator--2ea48637-2873-4649-8b45-0c8a690de71a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb89b740-df24-4e3d-80a4-236c8f1a85ce", "sighting_of_ref": "indicator--4935e356-446c-4688-a1d7-32570031f0f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47cc287-38b0-4b73-80e1-54432411ac5e", "sighting_of_ref": "indicator--04e6dfe6-3806-4f7b-bcf6-fe7bd22f599f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ec0443-3321-403f-90cf-bcb5bb8be228", "sighting_of_ref": "indicator--a144810c-4439-419a-b4f9-cf4e93dee13c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceca1329-3c88-4f76-9251-9a60fc4766c4", "sighting_of_ref": "indicator--0f643822-b58e-4e0b-8272-b6a5f1dc81f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d2592a-f2b5-43ae-8da5-e19d5553fb7e", "sighting_of_ref": "indicator--d038f4dc-fdb4-42ff-b990-e5cbd85799ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5a15f2-1145-48f6-af83-109e39cd7b18", "sighting_of_ref": "indicator--31a17f4f-da55-4ec7-8d1b-b06c5cb1ff90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e674e86-10cf-4711-b870-af429275e060", "sighting_of_ref": "indicator--dae41700-c975-494d-b9e3-44e71e4a13c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76206dd-ecdb-4032-8403-91a5106142dc", "sighting_of_ref": "indicator--6206454e-23ac-4226-9a51-a46c51218cd0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9f5d32-8d10-4f2d-ba9f-4022a6bb54cf", "sighting_of_ref": "indicator--8de99502-7f40-4669-8d1d-33dff6868c3f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e4d996-5eaf-423d-aeca-b0dd287cb6bf", "sighting_of_ref": "indicator--3e72e096-3fad-4632-bf92-6bd6e09a7f52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b969616b-b618-4926-a625-0c0c0975f77d", "sighting_of_ref": "indicator--338c5672-9e88-4fc7-97db-2de27a09446d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6add4624-dfc2-40d9-b2c1-c8329db9f5f4", "sighting_of_ref": "indicator--f901c2e6-8129-45ca-a638-8258c6f3f22e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bd5aed-a2ae-403c-a0b8-4e6b30f5cbe8", "sighting_of_ref": "indicator--b86f4858-acf2-4a35-a90a-ee720c519877", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8caa20-f6f9-44c0-ae17-a8cf8ba670f5", "sighting_of_ref": "indicator--f918dc14-a7b6-4a9f-9838-ecd732abc00e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19df4156-c357-4d51-9c8d-b957a823ea74", "sighting_of_ref": "indicator--323d2f0d-6db3-4c3a-bc9e-6d1efc57cf45", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0591ce58-e16e-4052-a010-56b38f01cf72", "sighting_of_ref": "indicator--e7b0f24c-52ee-4a6f-a102-5f8913993cf8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd092cf8-7d0b-4168-80cc-f3fbe06eb4b4", "sighting_of_ref": "indicator--a4179bcf-78f6-42c4-af52-7322e62ede2e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8446f87-f4d2-4be1-9370-23608286dcf6", "sighting_of_ref": "indicator--3a378839-1051-49df-a5e6-2262791d0dc7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce43d42-4038-478f-8453-93a30aef9245", "sighting_of_ref": "indicator--4f55272d-18b1-481d-96a2-80d3142d6f4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb85752e-2d10-4b41-88ab-7919c9dff6ea", "sighting_of_ref": "indicator--a0f5a999-9ce5-4ac7-af85-39e4ae9a74e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aede958c-e96c-4df3-878e-1219eabbeb93", "sighting_of_ref": "indicator--87981e42-ee0e-43bc-9e3f-fe19b9ea5e9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14208c2b-c12a-4211-b7f2-ea8128e4106d", "sighting_of_ref": "indicator--178265dc-813d-4cb8-b206-e7df9c2fad14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359dcb95-31fd-4c55-ae6e-98475340d050", "sighting_of_ref": "indicator--f72ef728-5381-4a13-95b1-72162565d864", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac65148-3dd3-4a41-bc37-22f6114cadf1", "sighting_of_ref": "indicator--5e14fe0d-9ad1-405d-bdbc-99e60f4c1f09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cc6b24-c2b3-45b8-a352-3bbc2604fbd0", "sighting_of_ref": "indicator--05091392-8f45-4eb7-be9f-df746ace8a81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79cac05-ea56-4f7d-b98b-0f1259fffb17", "sighting_of_ref": "indicator--407f47ca-a76b-4e1a-9571-312ef84af679", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d45199-1ecc-40a4-814a-1fa2e9934233", "sighting_of_ref": "indicator--4271a3d6-8c61-48c1-b51b-bbd6fda255f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f610a5-fd78-4314-b399-4c3d9fe67f17", "sighting_of_ref": "indicator--e428e2b6-f355-42a0-b970-f4fab38c599e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c315070-1f6f-4b94-9af2-69789014e5d3", "sighting_of_ref": "indicator--5cdfafb9-18fe-49cf-b970-5ea721add4a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5a776a-f347-4734-abc9-a74326474e90", "sighting_of_ref": "indicator--f64146f2-9983-4f18-871d-071b8c65b31e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e581bd3f-b6ee-4714-99d7-75bf785512ae", "sighting_of_ref": "indicator--9023e32f-7790-4223-a311-f8a1a0ea40ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc563c6-817e-4f0b-80db-a533d70f4512", "sighting_of_ref": "indicator--cebe7c72-f50b-4732-92b8-734433ab89b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1902631-fb00-4110-a1c2-53a55b0b5531", "sighting_of_ref": "indicator--b501ca27-07e8-4729-a070-6264c72120e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bddd66-8b9e-4ffe-a7e1-4b49401a3bb8", "sighting_of_ref": "indicator--4197ca69-b808-479c-9ee3-d5ecfdb08831", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d60bffd-51d9-4c28-ae29-b7547b217d6d", "sighting_of_ref": "indicator--df1b6e86-102c-4a40-9748-5e7e27ae545f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d82e35e-e2ff-42fb-9d09-cfc0314565a3", "sighting_of_ref": "indicator--b54faa9c-4e09-4f5b-b7ae-e01a5c8dad05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e93d55c-93c4-4cf5-85b2-1ba0edb99a2b", "sighting_of_ref": "indicator--2ac4ca20-d260-4930-a0ca-fac7a0bf960f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e030a4f-87b2-4940-9dbf-674ba625d83a", "sighting_of_ref": "indicator--b3726ccf-fc83-4b07-971b-103233ce2aa5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a662d7-1bd2-4bd8-b6ba-cb4e66bf056d", "sighting_of_ref": "indicator--69354ae7-d397-4f96-9589-3221a3c3d6c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c10a67e-b209-4474-9c1a-9755f2cda6f8", "sighting_of_ref": "indicator--d384b9ce-a00a-40d0-aadd-705440b93abc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed8b9e-ebae-448a-92da-e360a8536a78", "sighting_of_ref": "indicator--6bbe7000-46a9-400d-9e87-fa88f0b9a2e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa7953d-ad4f-44aa-82c1-edf58b0ee121", "sighting_of_ref": "indicator--0b05da15-1cab-40e8-b29e-133d1ecf112d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac14938-ef73-4dde-a941-bdd2b031391d", "sighting_of_ref": "indicator--d475fc5a-5e65-45fd-9437-28e5d6f23932", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68045ec-617a-49f3-8dba-456f96928373", "sighting_of_ref": "indicator--d0dcfe72-5603-4cc9-a914-641dc8854d9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2dc2db-1bd6-4b69-9f4f-110afdcee3aa", "sighting_of_ref": "indicator--36de9741-4920-427c-b356-47b56fd0d12b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92219cb-963e-4200-8abd-d7233b8d0b45", "sighting_of_ref": "indicator--27d69ec8-7508-42ed-af6a-0b09f808a77a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00696962-872b-47d9-bab5-469ffb43104e", "sighting_of_ref": "indicator--eef4a94d-15c6-40f1-b293-93bd5296e165", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c96f383-7172-412c-902f-38b044c79fb2", "sighting_of_ref": "indicator--da16b4cc-4b72-4b4a-af6c-6ad7544d2f65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4e8a71-5489-4a01-a811-191a620df5e3", "sighting_of_ref": "indicator--9d425c2f-2cd5-493b-a603-9024982d0b40", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5a82dd-f459-437a-9d10-0cd81b657dfa", "sighting_of_ref": "indicator--8b2fbe21-6cd2-4cfc-89fe-aab9ecca562d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3752be-e6c5-44da-bfef-92de4675b6fb", "sighting_of_ref": "indicator--81dee544-e224-4fc5-b93f-0f008fb1d2ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633b9d43-5d6b-4221-a8ea-ecd72f9819ee", "sighting_of_ref": "indicator--8b49681f-3df9-4c87-9ce2-93c5447c0307", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1114161b-4468-48bb-8359-fbed3dd77a22", "sighting_of_ref": "indicator--a9b0c9c6-025b-4677-b921-600a9b3ba6bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc3802b-0ffd-4f11-881e-c928e650425b", "sighting_of_ref": "indicator--d93186aa-c4ab-4ae5-9186-7a1f3153b2f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84804ec-43bb-4462-8f0e-96d58ec848c7", "sighting_of_ref": "indicator--d93186aa-c4ab-4ae5-9186-7a1f3153b2f7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4aaa8e-11a0-471c-b506-0e504da1e89c", "sighting_of_ref": "indicator--d821465c-9c19-471f-84a2-2ea432b4f8a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a1e436-60dc-4aab-98a9-f6608a075665", "sighting_of_ref": "indicator--bb197c24-eb7f-48f6-a705-dec52c45dae6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02453ca-f9ff-4788-960e-9ea803734dba", "sighting_of_ref": "indicator--5f825485-8a18-4574-afd6-6b34e6641e31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0637c67e-7673-405f-a098-42a590d60eb3", "sighting_of_ref": "indicator--5f825485-8a18-4574-afd6-6b34e6641e31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599da854-2960-4328-a052-403fbe037c26", "sighting_of_ref": "indicator--82fb79d7-1905-4aa6-b803-1ecf2f2b59d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ac81d6-5195-4605-9678-ddb905d88ed8", "sighting_of_ref": "indicator--4303f504-bc1d-436d-abe1-25611ac5568a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c43004a-3dcb-469e-bf31-69792adaaf49", "sighting_of_ref": "indicator--31076602-9b01-4135-9348-ffca75fe043d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ed6d30-e5fc-49ef-942c-f5479522994e", "sighting_of_ref": "indicator--7fabd5cd-2c21-4a90-8df5-b8efac27c223", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faea3385-de56-4797-86c9-b6b2785c142b", "sighting_of_ref": "indicator--5266a2f1-af07-472a-a8d2-81fa963bfe68", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e00d4c-3056-4db7-8579-cd5ce33d685c", "sighting_of_ref": "indicator--a57122eb-625a-41c5-894b-80e832e20bb0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986d9a2e-908e-4f2a-ad61-1b774b40d5b8", "sighting_of_ref": "indicator--102ce19f-cef4-47cb-8d1f-5ee11bf300b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77968e05-4d4c-44f4-ad0b-c853dca08ba5", "sighting_of_ref": "indicator--102ce19f-cef4-47cb-8d1f-5ee11bf300b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9e666d-c880-42bf-8bb4-408892b3b6d2", "sighting_of_ref": "indicator--a6bfb5ae-ee0e-4058-87cb-34d4f2d74e7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b48af05-6e1e-4f44-a986-e8ef42eba7d2", "sighting_of_ref": "indicator--0ce5a72f-0fe4-4f84-b16b-6d27499a0c75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6ce1f1-c054-4103-99c4-3b65498e3809", "sighting_of_ref": "indicator--9a594c2a-513c-4c3e-b563-037b0a835fcf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dc2b78-8fd6-45db-ad3f-a10b8c6ec24b", "sighting_of_ref": "indicator--e70f2222-d465-4763-a334-72c9db359dd7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04db313f-b6c0-4ad0-b26a-7d4351dcaa66", "sighting_of_ref": "indicator--a5c3d7d4-b70f-46b8-971e-c42f326b4a73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06150718-3ca9-4658-8a1a-578c2a17b4c7", "sighting_of_ref": "indicator--a5c3d7d4-b70f-46b8-971e-c42f326b4a73", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1153b709-d656-47f6-9776-59abe96cacaf", "sighting_of_ref": "indicator--a5c3d7d4-b70f-46b8-971e-c42f326b4a73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10db110-8477-4f3f-984a-53aec50de9a0", "sighting_of_ref": "indicator--e7002864-509d-4a5d-9f85-feb193462d36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcbff83-e48d-4624-833c-0b31e007e032", "sighting_of_ref": "indicator--e7002864-509d-4a5d-9f85-feb193462d36", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdfd04a-3f4b-435e-9ba3-747e234e481c", "sighting_of_ref": "indicator--e7002864-509d-4a5d-9f85-feb193462d36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6b3d56-bcfc-45a5-b3e9-8d4713a9f064", "sighting_of_ref": "indicator--2e4e51fb-4290-4f41-83f6-58a0b89c8495", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5e1a42-ea23-4330-a69a-28bd76db7452", "sighting_of_ref": "indicator--92392c8a-33cd-4444-a428-35ac7c04b54e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2ceb9f-f123-42b9-8507-0916f0a56676", "sighting_of_ref": "indicator--3aaec044-34fd-431a-9527-2093ed61d9b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c20ba5-f8c6-4f64-9754-a550c820e4ce", "sighting_of_ref": "indicator--d8888db7-0b7d-49d5-9350-d71008e9ca93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9228cb1a-4268-480f-9137-9976908635d7", "sighting_of_ref": "indicator--49fba5e1-7680-4286-866b-47199f90b07c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f17a817-99dc-491a-8c94-6c1140b317ec", "sighting_of_ref": "indicator--60d73bfd-9ba2-48e6-94a5-d1ed226531a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fa401a-b5fa-4339-b8c2-660d9253def3", "sighting_of_ref": "indicator--86abfa80-0fb9-4568-98d6-53644eb8af7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e1988-f404-4694-b0fd-02261ec67144", "sighting_of_ref": "indicator--ced51e11-2c10-4201-94fa-bccc74830a7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703dad3b-cc76-46ed-9491-38c9f4f5d236", "sighting_of_ref": "indicator--5f516647-c41f-45bb-9e5a-402eb5e80ba5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ab5955-9e98-47d7-930a-c1ab58416fbd", "sighting_of_ref": "indicator--cf57ac94-8eee-4479-8874-e15ec01bd3d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7ebbcb-57ba-4fcd-b2c2-5bd6bd9682a1", "sighting_of_ref": "indicator--dfbf343c-4999-45fe-a182-ef6930f7d33e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b264d8-9f8c-4df2-b2cb-649d63569db1", "sighting_of_ref": "indicator--3168362d-161a-4136-8508-b413bd6e958e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946a3e3f-265a-411c-a358-8e551c17e438", "sighting_of_ref": "indicator--10164c3d-4b6a-4ae5-ab14-3744c655b081", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391b5a45-421f-47bb-a9fb-b4637ac25a6a", "sighting_of_ref": "indicator--993a008f-d7bd-4c28-a5bf-29abfc183cac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee1e3b8-14cd-407e-a4e7-f8651b0706bb", "sighting_of_ref": "indicator--c88c7e01-3a54-4c55-98f2-2850dfcd92c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9b1c3a-b406-49ef-aa52-8c44831759fc", "sighting_of_ref": "indicator--a08ee64e-e3e9-4f78-9abd-928e595f44d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f5abc3-aa7a-4e3a-881f-9e06a29f2853", "sighting_of_ref": "indicator--1c570fbd-0809-4238-82d4-09861d7c699e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24460727-2100-4422-a3b8-7b69fab68f1b", "sighting_of_ref": "indicator--0df8776d-2e0f-4efa-9aad-7f6a8f848423", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2379a5dd-5dd2-4507-948c-ec4a140d315d", "sighting_of_ref": "indicator--1b8ed2b4-9294-476b-9e7f-900ddf3c8203", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae8e037-a6ef-4d58-8984-dbcfa73a00d1", "sighting_of_ref": "indicator--bbcb2174-425e-4681-94a3-775ab77ffd33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabb5243-2b84-4d8c-afb3-137cf9788a59", "sighting_of_ref": "indicator--937c663f-abe8-493f-b579-afd4c050b580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d48fcf-5c31-46ea-befb-1da51db5ff78", "sighting_of_ref": "indicator--fc6dfc4b-2b22-4419-8198-20468b55fc82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5d9ac3-51e3-4bdc-896a-b2fac89dafec", "sighting_of_ref": "indicator--69225764-65e7-4238-8170-5b368aa4bcf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffecfe8a-059c-49e3-af8a-f18a58d77d85", "sighting_of_ref": "indicator--cd979012-6220-4542-ae61-366f9a915de1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d2b1c2-7958-49b9-b573-bc9e1ec3fe30", "sighting_of_ref": "indicator--cd979012-6220-4542-ae61-366f9a915de1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc417455-0e4b-40c6-9980-d2bc9f8b7c92", "sighting_of_ref": "indicator--cd979012-6220-4542-ae61-366f9a915de1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec759510-c1e3-494d-a91c-dec4fbfac2b0", "sighting_of_ref": "indicator--b7721592-af44-43e7-83da-ec5e1d0f82b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b06aac-062c-4762-9375-9053bcc58bbe", "sighting_of_ref": "indicator--b7721592-af44-43e7-83da-ec5e1d0f82b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c72f6c-95f9-4e0e-920e-a01c9d36e7c5", "sighting_of_ref": "indicator--b7721592-af44-43e7-83da-ec5e1d0f82b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc05f4c-d5da-4ce0-a524-8ef16ede4c7c", "sighting_of_ref": "indicator--d64ce22c-a5c4-48d9-ad3a-de4fa3b72a29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed68314-6241-4ac7-b45d-86ff3cde1eb7", "sighting_of_ref": "indicator--d64ce22c-a5c4-48d9-ad3a-de4fa3b72a29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111d92a1-c078-4ada-af19-ad046b110dcb", "sighting_of_ref": "indicator--d64ce22c-a5c4-48d9-ad3a-de4fa3b72a29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51fcc3c-07ea-4bbf-92fe-aba0ccbe6555", "sighting_of_ref": "indicator--5593d6b0-b9f8-424a-b9a2-488603c357f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bddd194-6b26-4e5e-bc98-295b892956e9", "sighting_of_ref": "indicator--5593d6b0-b9f8-424a-b9a2-488603c357f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e573d1c8-e55b-4f7f-97d5-d623f60f62ee", "sighting_of_ref": "indicator--5593d6b0-b9f8-424a-b9a2-488603c357f5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a30a62b-a9a0-48b2-a8e0-68aa873964a2", "sighting_of_ref": "indicator--72033ad6-4bd1-4ab8-8ae3-ab9c75e88ae5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf93c8e-d78f-47b6-af03-dd43c53ceec9", "sighting_of_ref": "indicator--72033ad6-4bd1-4ab8-8ae3-ab9c75e88ae5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a09d62-e464-410c-a8bc-54f69cfd409a", "sighting_of_ref": "indicator--72033ad6-4bd1-4ab8-8ae3-ab9c75e88ae5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6346d079-7d2a-4e01-9ec6-6e24aaa85a33", "sighting_of_ref": "indicator--e1f3b484-ff0a-42d4-919a-31fc65d459c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f4264a-134f-4d71-8737-4fae8d6fe80b", "sighting_of_ref": "indicator--e1f3b484-ff0a-42d4-919a-31fc65d459c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156c6959-be64-43c7-839e-ef67e1bbc4d4", "sighting_of_ref": "indicator--328b514a-eb84-487b-99cb-b960ee87da86", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d6eb8a-31b2-42f0-93b7-81c811e70e88", "sighting_of_ref": "indicator--9b0dd9ca-88d7-4387-952f-609943a3e020", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7152a1b-4e19-4a29-9dec-4ca82a41a24e", "sighting_of_ref": "indicator--96319902-6f66-4626-9d36-b984ef0821f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf72805-ac64-4de4-bbd5-748da5d22241", "sighting_of_ref": "indicator--18d81cdf-95bf-4c9d-bfbd-b4c7ded4d157", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30acdf09-140a-4856-825c-999c799e592e", "sighting_of_ref": "indicator--e11b5d7c-c8fc-4262-b20e-fd5144de8a41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff8c58c-1b99-4ac2-b746-80c9148b6778", "sighting_of_ref": "indicator--bba517cd-7a9c-4b21-8b38-cd7d4d329d01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e01de1-1006-4b13-a2b9-2efd42ae8c36", "sighting_of_ref": "indicator--bba517cd-7a9c-4b21-8b38-cd7d4d329d01", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0e03e9-108c-4fba-bc5e-47b2763f85a7", "sighting_of_ref": "indicator--bba517cd-7a9c-4b21-8b38-cd7d4d329d01", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af3ae8f-bd7d-4011-99c9-deadf81a705c", "sighting_of_ref": "indicator--182a9fbf-2e62-4abc-a913-48baa99a8402", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ef0f47-c390-4ee4-8203-5d10a1720e1e", "sighting_of_ref": "indicator--b7500dfd-b6a1-4c26-b2ac-f70f2addcbbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cd1caa-89bc-419d-903a-4b17ae4f50f4", "sighting_of_ref": "indicator--3f383cbd-8f68-4983-9893-2c4264927907", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5b1b7b-ea35-41e8-b681-ae3561e448ed", "sighting_of_ref": "indicator--b21ee782-6f33-4603-8ae7-13efd4c3af4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8cd960-02d0-44a4-8821-bc37fa25bfc4", "sighting_of_ref": "indicator--781adf7b-ac28-4dc9-ae44-e2d12abc3362", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d58fcc0-5c09-4201-ae91-e6d50d4b29c4", "sighting_of_ref": "indicator--4931d394-c652-4049-ad41-d8645691e8f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a84145-d239-4346-82b1-e100e67dc5b6", "sighting_of_ref": "indicator--9fe89e50-3dd9-4ca3-8d3d-8913565563f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db21f0a-38c5-431b-8489-b2c2d5d2013b", "sighting_of_ref": "indicator--bf828d69-5307-4953-a9b1-f0d0139f60f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2634539e-f196-413b-90ad-6ab4204e9697", "sighting_of_ref": "indicator--bf828d69-5307-4953-a9b1-f0d0139f60f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582c29a0-8c69-4096-a454-5399eb996d1f", "sighting_of_ref": "indicator--bf828d69-5307-4953-a9b1-f0d0139f60f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf08d4a6-1d2c-4eec-af96-96b3372dc6ba", "sighting_of_ref": "indicator--99e5099c-0174-4a2f-b067-e5af317f2c3d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f599f948-216c-431f-89e4-fd534d38e782", "sighting_of_ref": "indicator--b0d97159-dd5e-4b4b-ade1-30abac5850d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bb3d01-fb3a-4528-8b73-dc3443f99179", "sighting_of_ref": "indicator--bb5fdba5-d80c-44d0-bde5-71f7cef7920b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb064235-8780-415e-8db9-2b59e8fafc65", "sighting_of_ref": "indicator--66e87ff8-6f39-4fa2-9076-3a4e1324cbde", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7df552f-5848-4460-aa52-7aa1ea33bc3a", "sighting_of_ref": "indicator--089226ca-096f-450c-8ef7-3a3966bc0bfe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c4e612-dd4c-4c16-b8a3-a908abd5451d", "sighting_of_ref": "indicator--42f2cf84-512a-40d4-a23f-e29117aeea49", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ab93e4-8e6a-4314-b8a4-40e1fe9a7615", "sighting_of_ref": "indicator--e18332ad-80ed-4f31-b4c0-b8d1d25de9e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3436def7-e66d-4849-bc65-88271e750317", "sighting_of_ref": "indicator--521708d4-29b2-4bfb-9b62-97f54f1dadce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2d64fa-f42e-492a-bcd7-e52eb5a216e5", "sighting_of_ref": "indicator--521708d4-29b2-4bfb-9b62-97f54f1dadce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ed513c-a9b0-40a4-b93c-8d3c745e3d86", "sighting_of_ref": "indicator--521708d4-29b2-4bfb-9b62-97f54f1dadce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84679d79-3c76-4e66-a1f6-e330cb90b094", "sighting_of_ref": "indicator--4c26a93f-c5b9-48f7-aea7-4a30e27b9506", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309288b1-9a77-4be1-bc2e-0e1048500e7f", "sighting_of_ref": "indicator--4c26a93f-c5b9-48f7-aea7-4a30e27b9506", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f137414-7953-439f-ae75-45e81d3edf02", "sighting_of_ref": "indicator--4c26a93f-c5b9-48f7-aea7-4a30e27b9506", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4290efb-1e30-4d74-b91f-2dd96199208c", "sighting_of_ref": "indicator--54b9cbf7-5b23-4c30-872f-cde5b6055a86", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099ae0ee-238f-476c-ac03-aa353ce13cd9", "sighting_of_ref": "indicator--05ddba86-a889-4815-b1fa-16a0a2d63536", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e29ba6-0d4d-4bda-ba52-0e7e2125d743", "sighting_of_ref": "indicator--05ddba86-a889-4815-b1fa-16a0a2d63536", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc603a24-ea58-4742-8d8b-4ccc967df45e", "sighting_of_ref": "indicator--b1611313-2d47-4955-85c2-82918d58b4fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac9c9fb-c3e9-4b25-9b23-f264d8e85a67", "sighting_of_ref": "indicator--4d1e611d-742c-4843-80a0-e3fb097f1a11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b8d872-f590-47df-8b57-57338938b3bb", "sighting_of_ref": "indicator--4d1e611d-742c-4843-80a0-e3fb097f1a11", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db7c246-05ba-487c-a182-5504a1b596aa", "sighting_of_ref": "indicator--e7a19022-9331-41f6-92d2-5a4b152bb0e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e87e91-7adc-490b-a6fd-b1c3bb673ae7", "sighting_of_ref": "indicator--e1cb1a3f-1258-4f49-bb1c-d04029472a51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c4579d-986e-4083-b870-e2bb8b97be2d", "sighting_of_ref": "indicator--e1cb1a3f-1258-4f49-bb1c-d04029472a51", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678b1895-f53f-4d18-93be-3682dc152f98", "sighting_of_ref": "indicator--276cbc3b-b63e-4daf-95f8-705412112350", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cde88c-4a95-4f25-95a4-c2aafad151a1", "sighting_of_ref": "indicator--276cbc3b-b63e-4daf-95f8-705412112350", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a92617-c543-448d-b8fe-d26840822cea", "sighting_of_ref": "indicator--276cbc3b-b63e-4daf-95f8-705412112350", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648ac8e4-0326-4fd8-bb9e-ee3db5855bf2", "sighting_of_ref": "indicator--2ce28a05-68f7-401e-9fbc-71547696dd1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706d455c-a59d-40db-a31f-d3febae41753", "sighting_of_ref": "indicator--2ce28a05-68f7-401e-9fbc-71547696dd1b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9599b38-a289-4396-9173-badd0716e80b", "sighting_of_ref": "indicator--2ce28a05-68f7-401e-9fbc-71547696dd1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d008808-c508-4c75-9381-a2727911beae", "sighting_of_ref": "indicator--bd64fcc8-17ad-4eb1-9a07-5a580764698c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddf3824-6e15-4a21-b309-cddc5757c636", "sighting_of_ref": "indicator--22ebd792-29ac-4244-8a41-b75af72f1bf2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1335524-f69d-4d75-8404-06cc11778e75", "sighting_of_ref": "indicator--a1a940db-b7d2-4a25-8ea2-ad7de95d3664", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bb6359-290e-4e8d-8233-6e8074f8dc2c", "sighting_of_ref": "indicator--2b2f9c15-21c6-4180-8083-480c68639238", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf30ebf-a999-4521-8323-4c9fd3c21eaa", "sighting_of_ref": "indicator--2b2f9c15-21c6-4180-8083-480c68639238", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202c09f8-493a-4976-8931-5c1fa6a585c6", "sighting_of_ref": "indicator--d1c458db-6765-48db-8235-e8d1081f0a22", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa95d669-c0a2-4026-aee1-b4428fa7920d", "sighting_of_ref": "indicator--d1c458db-6765-48db-8235-e8d1081f0a22", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07aa39a6-d301-444d-85a5-f3c77073ad97", "sighting_of_ref": "indicator--d1c458db-6765-48db-8235-e8d1081f0a22", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9109e5-1a22-4cfd-a41c-fc32f8355903", "sighting_of_ref": "indicator--a6482473-097e-40d5-97c3-aa624a3d1cdf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2737c7-1ff4-40ee-a066-0324ece17b01", "sighting_of_ref": "indicator--7cd2ec89-1b14-477f-b921-b11e45d4ea9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d4b2ee-bbab-4d94-9bbe-66e274edbf0e", "sighting_of_ref": "indicator--7cd2ec89-1b14-477f-b921-b11e45d4ea9d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff11682a-c4b6-42bf-a01f-ed4d31dbe4a8", "sighting_of_ref": "indicator--a37a407c-0017-4df9-9db7-208258fd9bd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fac0dfd-4a30-49d6-a592-20e0554ff42a", "sighting_of_ref": "indicator--a37a407c-0017-4df9-9db7-208258fd9bd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051c4b57-a013-4a0a-8c4c-312c79390e9c", "sighting_of_ref": "indicator--a37a407c-0017-4df9-9db7-208258fd9bd3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6f6c68-a2f2-4d44-8e2e-f6430940d015", "sighting_of_ref": "indicator--3e959fa6-4c2a-4142-8524-360c1724477c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec11bef3-4c65-47d6-9ba5-f7bd26071222", "sighting_of_ref": "indicator--3e959fa6-4c2a-4142-8524-360c1724477c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3ead3e-e069-40c8-8aaf-4174b0246b36", "sighting_of_ref": "indicator--3e959fa6-4c2a-4142-8524-360c1724477c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c92020-4d78-49c4-a7e1-fdb714c8e288", "sighting_of_ref": "indicator--823dbd53-356e-4b13-80df-3ddab2043b42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091562f3-2257-4688-a7bf-9d04a6e97958", "sighting_of_ref": "indicator--823dbd53-356e-4b13-80df-3ddab2043b42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86da95e2-d238-4018-a00d-670d8d5a1f87", "sighting_of_ref": "indicator--823dbd53-356e-4b13-80df-3ddab2043b42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d7330a-926f-4a4e-9958-7d06827f5e6e", "sighting_of_ref": "indicator--0903e97e-693d-4f15-ac07-21885ebca8da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3af8c8f-b718-4bc1-a371-cb659ba344f7", "sighting_of_ref": "indicator--0903e97e-693d-4f15-ac07-21885ebca8da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2bdfcb-0b38-42f6-8672-8309529202b0", "sighting_of_ref": "indicator--b7bf25e8-66f0-4a75-a1f1-a75f3118f835", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1426829-8486-49cd-abcd-314584823261", "sighting_of_ref": "indicator--b7bf25e8-66f0-4a75-a1f1-a75f3118f835", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a40647-f2b1-4c83-a478-7180cdc443d5", "sighting_of_ref": "indicator--943319a8-7dcf-4955-a258-7c6082cecb30", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1021f28e-ab0d-493f-902a-0a4c6967dbb1", "sighting_of_ref": "indicator--8b4ed265-9a81-469c-9d33-79b49961e31e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4712275-d16a-47b0-bc82-4fc31c7f2b3a", "sighting_of_ref": "indicator--1ae066f4-4472-4e38-9e6c-bb360bca4779", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b1273d-7ae0-40ad-936d-133938ec6204", "sighting_of_ref": "indicator--1ae066f4-4472-4e38-9e6c-bb360bca4779", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ce55ca-bb05-4321-aa70-37945b731f2e", "sighting_of_ref": "indicator--1ae066f4-4472-4e38-9e6c-bb360bca4779", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739b85e2-9aa9-4da2-acc0-b890735d4a2b", "sighting_of_ref": "indicator--8d1fc856-8610-4694-95cd-fe10267f66fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bd080a-9273-45d6-ac02-582551a8f52a", "sighting_of_ref": "indicator--8d1fc856-8610-4694-95cd-fe10267f66fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1ec8e5-3b38-4810-a49b-7b9158d171ee", "sighting_of_ref": "indicator--655e0037-0c7b-41bc-9024-69c9e700741b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4a5e10-93c2-4d57-8b2f-0c9261b526eb", "sighting_of_ref": "indicator--b81e2d97-f0e2-4fde-b313-9ce2a1384b78", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99dbbcc-03b5-4934-91ba-3af67760cbf7", "sighting_of_ref": "indicator--ceccde81-1f08-4ec2-bd1e-bae9b839787b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39c902f-2802-4274-b0c0-bfefd996eb15", "sighting_of_ref": "indicator--ceccde81-1f08-4ec2-bd1e-bae9b839787b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494e5797-76f9-41ed-9786-9bd6a0bc13a5", "sighting_of_ref": "indicator--ceccde81-1f08-4ec2-bd1e-bae9b839787b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c812c8-e651-4463-bef9-036621f226ca", "sighting_of_ref": "indicator--d056cb47-f26a-4336-9a15-987266e532de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45b000e-4452-47b0-810a-84603130189d", "sighting_of_ref": "indicator--d056cb47-f26a-4336-9a15-987266e532de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07f2ab6-7dbd-450e-83af-784cd61026e4", "sighting_of_ref": "indicator--d056cb47-f26a-4336-9a15-987266e532de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f623167e-a7c4-45d6-8988-9282aad5c098", "sighting_of_ref": "indicator--85f1ca47-960c-45ef-8b35-bc0ec6d604e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6afa8d-4052-43e8-b862-3fc2390c014e", "sighting_of_ref": "indicator--54f97662-5720-4170-8e86-173886b4fff0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0242280a-88ed-4b3b-adb7-c0b7c9a6985c", "sighting_of_ref": "indicator--4fc41c73-a082-4784-b483-532aee1806e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bbbea5-7849-4699-a4ce-a367439602f2", "sighting_of_ref": "indicator--4fc41c73-a082-4784-b483-532aee1806e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432b8371-2254-4b86-a184-9ad96a5421cb", "sighting_of_ref": "indicator--1d836c2c-5138-46c9-b3d2-0e056cf5cb47", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1dca0e-6202-4f46-9446-9069eb91ee33", "sighting_of_ref": "indicator--c0d0cf1e-8764-43ec-896f-78b6fd72d664", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1383723d-48d4-407e-9de2-477f466ce9fa", "sighting_of_ref": "indicator--c0d0cf1e-8764-43ec-896f-78b6fd72d664", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5a222f-4db2-4f6e-8699-5887a7254e8f", "sighting_of_ref": "indicator--c0d0cf1e-8764-43ec-896f-78b6fd72d664", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82ab5a3-d059-431b-9264-b0680c8e45fd", "sighting_of_ref": "indicator--4c893174-e365-418c-b1a6-0dc7c08f63a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33fcecc-03e4-4d55-8f31-9e3dbb183653", "sighting_of_ref": "indicator--50283b36-0913-487a-8ecf-23de54956cf6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b39e6d2-3a38-4458-aa0e-30a00b0d2ddf", "sighting_of_ref": "indicator--50283b36-0913-487a-8ecf-23de54956cf6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b002ee-56f0-477e-aefb-7430201c6124", "sighting_of_ref": "indicator--593d5b44-a625-4636-b98c-016d88c76609", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbe363a-5782-4efe-a3f5-51f1f7484ef7", "sighting_of_ref": "indicator--c26b0567-e1d7-48ce-9a48-b5a190c50b45", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1804f5-6578-44ef-9826-a0725d2536fa", "sighting_of_ref": "indicator--85575bbb-7206-4b26-b89a-f1ae7c7665eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78923a96-329b-4589-afd1-3545e9fa5337", "sighting_of_ref": "indicator--76e93260-f7dc-4f10-965b-02d1d3277336", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5333b2d-c173-4437-b7a1-98bf950ff824", "sighting_of_ref": "indicator--ccf319ab-69d1-4eb9-99f4-fe34b5515311", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d806ef9-729f-4193-8c99-88d792f9db7d", "sighting_of_ref": "indicator--54b6dcaa-64b7-4fe6-aabf-8f31420339ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67c3e60-e525-479c-a1ae-05eac4c4d61f", "sighting_of_ref": "indicator--25bc9eb8-40a6-407c-883f-98b141f3fc74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c393521-4eee-4940-b24e-501cbe34bc20", "sighting_of_ref": "indicator--5e725dd0-2388-4692-879b-34760b920762", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad04b6-b77e-4965-b8fe-4ad5c196ad35", "sighting_of_ref": "indicator--5b7fb391-8f0d-4b93-8db3-81ec079338d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4965b28b-ef5a-4a37-a10b-bdd2eab5bbf5", "sighting_of_ref": "indicator--5b7fb391-8f0d-4b93-8db3-81ec079338d4", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c674884-6dc1-47c7-89db-b74a6c82911d", "sighting_of_ref": "indicator--35174833-681d-4942-975d-3c3be4783b35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77c72b8-275d-4aa0-bc67-55e61be71777", "sighting_of_ref": "indicator--10c1fe18-9dc0-4435-aaf1-481841dcdfec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77d5f43-c448-41b6-b524-441871ccb7aa", "sighting_of_ref": "indicator--5601bd71-b821-4cd7-af7e-4ffd2ef4d33a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eca3df-ac55-440e-928b-9af70848bd5c", "sighting_of_ref": "indicator--7149e7dc-2d21-42b1-addd-fb9d9517796b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52add28-205f-4f70-92bf-a48fe4abffba", "sighting_of_ref": "indicator--72015397-2bf0-4158-a7df-4a46ccf33fab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000bf42c-219f-4e36-9fdf-19194ef2f5b8", "sighting_of_ref": "indicator--0020eaed-b8d5-462a-ae31-7b823fd50c11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64127752-bd70-4099-8580-8376b09c6a4d", "sighting_of_ref": "indicator--3201ed6f-daa9-47a2-87fc-0ab09bebccfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f345ab83-2be1-4c6e-bad2-e355bed059a4", "sighting_of_ref": "indicator--5a665662-c32f-4fc7-8be0-60958c464272", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d692ff-e793-4655-b5b6-87c1a4d83320", "sighting_of_ref": "indicator--482af2a5-01f7-4e81-81ec-5f0a71e46169", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f04b8d9-3438-458a-9395-0bbf6ff209aa", "sighting_of_ref": "indicator--fabeba08-1062-4e19-ab7e-2a9d35133e66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa73ec89-cb82-487b-b3c5-596904f800e3", "sighting_of_ref": "indicator--ec8f3be9-c1dc-444b-b40c-081ea005f65e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c115bd-200f-4503-b048-d968d7d8cf7a", "sighting_of_ref": "indicator--1a3f8d27-8a46-4684-ab24-91d33bcd956a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc7da3c-3d7c-43f3-8c24-793c715c5fa8", "sighting_of_ref": "indicator--03740503-5783-44d6-a743-b9fcd96fa7f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf70acb2-243e-456b-9e3d-8dacdc7b7994", "sighting_of_ref": "indicator--ff2ccfa5-4cbd-4271-a07f-fab6b72dd990", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc82a73-ec60-4f35-8edc-0fdd8fa8d07a", "sighting_of_ref": "indicator--0dd7fc8e-cd14-4508-b0c0-d2f3900f940d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34735751-a170-4788-80ba-c8d4b2044355", "sighting_of_ref": "indicator--abeac330-75a5-4a5f-8c66-ae0e6d627f9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df04a32-9f29-4a29-b7dd-ec994c6ad7d3", "sighting_of_ref": "indicator--c9f2af2b-b8b5-4c21-a1d7-2eafef460744", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea566cf7-1e1d-4c0e-9c7b-afbad8301590", "sighting_of_ref": "indicator--bec82bb8-3900-476d-93ec-840f3df9aab9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bf91c8-6393-4d00-8f42-b17a55915004", "sighting_of_ref": "indicator--2997f0de-c58a-40df-9f93-89c6bbdba7d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72ffdde-6eb9-4954-a96b-e01d62efdccf", "sighting_of_ref": "indicator--e1f2969e-0f34-4801-8142-e0c52c3dbc26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2abb75-3aaa-4512-b06e-5983f7f22de6", "sighting_of_ref": "indicator--f5799549-2c91-4cfc-806f-4f4dd77fa3a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1112e751-0812-49f1-b545-d0023e441a4d", "sighting_of_ref": "indicator--59a7ad3c-207d-458b-b6a7-d2a2d1332095", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9433f4d-8f5c-474a-b68b-cb7aaa3af294", "sighting_of_ref": "indicator--430b8445-1671-44ad-84ac-ad545d97fef3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f887783-55f0-46e1-a1ac-3a0e547d94c9", "sighting_of_ref": "indicator--eb0116e4-408e-4446-94d5-e3c359e0a7e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250950ef-8738-4419-a3fc-905e2c1d9b88", "sighting_of_ref": "indicator--5f940cef-d8b5-45f6-9665-dbf608126d55", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c457f138-da67-4ef9-b66a-3baeb469aefa", "sighting_of_ref": "indicator--1696a218-b324-412f-b14c-08991564bf47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aaecbc-fa35-4f63-97ee-1824bc1e82e8", "sighting_of_ref": "indicator--443b9197-1205-4843-a16d-d35d6453ac5d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b689937-0ed0-4202-a459-8f8dfb476854", "sighting_of_ref": "indicator--8c0f920d-8b3a-418b-be08-6c1ce4e6963e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5496b1-8c88-4e13-9a4a-3766321fa1ca", "sighting_of_ref": "indicator--cf6fb3b0-8a6b-445d-ba1f-e1844b717180", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1570cc-a3af-4b19-8578-0c38f00dad95", "sighting_of_ref": "indicator--a54d23c6-c404-421d-bf07-70a9bd57338e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534d3621-9276-4e73-8d65-3b4888695bea", "sighting_of_ref": "indicator--e28d32b9-4e84-418b-8325-6befcf98cf64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bd1fab-f855-48c2-99f3-b7e2047b4363", "sighting_of_ref": "indicator--fa37dce8-ed9a-4cd5-ac7d-7d2174b39940", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162a514e-83bb-40d4-b7aa-ba432412bcf7", "sighting_of_ref": "indicator--d931b0e1-967e-4d5f-b031-b3a2bd799139", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4bc5f5-0029-4e29-82a0-71be7fcaf82a", "sighting_of_ref": "indicator--c4f4dd6f-3764-481d-9bdc-f62c5e4b5b44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e4578d-c19a-4d75-bf06-8d4aaacbe0c8", "sighting_of_ref": "indicator--a24198e6-63c0-430d-98ca-0bb8daa91b66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b933af-1de5-4d34-a60e-c7e1b4cd6260", "sighting_of_ref": "indicator--8445db81-c8b4-4055-a5c3-c46b9f376b39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27930fae-c60b-4343-81e2-559e45873f36", "sighting_of_ref": "indicator--40d9dc0e-6ee2-4986-af87-1b5549e7557c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26db66cd-c1a7-46ea-ac26-fae679de447b", "sighting_of_ref": "indicator--5589c03f-eaf7-4d36-8b27-48a5d8f4a21a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c81e0d0-4304-4777-a912-48b9c652a2d2", "sighting_of_ref": "indicator--7c392305-40ee-4e17-899b-cec344d41c64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acacd25-d807-4963-a789-aed4e873078b", "sighting_of_ref": "indicator--09b762f8-ce90-46ec-b820-b4a358b11512", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c31663-0801-4e71-87e8-03598454796c", "sighting_of_ref": "indicator--1bb76135-9f14-49ec-b620-b17ffc30708a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82dbc3e-46de-46f5-a42f-4dba9b5f6592", "sighting_of_ref": "indicator--e629b297-a2ef-4eba-8acd-eb6e86bbd743", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe8ff7c-8272-476e-b780-9edbc47b738b", "sighting_of_ref": "indicator--ce4f08f8-d5ef-490f-bc77-ee54cb1d99a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a110d6-7852-4495-9142-2c1fe02c893d", "sighting_of_ref": "indicator--7a7d1b2a-05f1-4851-99ef-e2b544520892", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996cb9ae-0672-4b74-8431-10dcf76e3f0b", "sighting_of_ref": "indicator--6388ded8-3a59-4460-9b79-d569181bce86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2821a0-177e-41e5-85f1-cf0e3f3d347d", "sighting_of_ref": "indicator--6d15dd2e-5d8d-4590-9660-d7ef35fabf01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffadadd-d78e-4064-8454-9ede318ec633", "sighting_of_ref": "indicator--2a7a06b9-2498-4447-a3f6-fad0bc642218", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f6a001-61f1-48c1-b922-76225688609a", "sighting_of_ref": "indicator--ee431afc-00fb-47d6-865e-835cd26d089f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712bd9f6-897d-477c-a01d-778f5f702433", "sighting_of_ref": "indicator--ff29550c-0125-4636-9379-04ef648b796d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a7242d-2dbd-4b63-8745-932b6d5ac3b5", "sighting_of_ref": "indicator--4a2e85aa-355c-4add-beb1-128790ae861e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca01ba24-d8b1-4966-8f64-ddc8fc0c31c5", "sighting_of_ref": "indicator--ec801bd5-5e9d-4b1c-9144-4357126ba522", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c18754-2690-48f3-824b-54840323cdf1", "sighting_of_ref": "indicator--2c0e1717-ba4e-40fa-9a1a-6dafded30beb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee30cb3-f630-4511-8e8d-bfb304416b12", "sighting_of_ref": "indicator--a9b5e33b-3d49-44c6-9cf2-4e27189838b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ff8b6d-00c9-4715-b00b-bf9cb0112a76", "sighting_of_ref": "indicator--e8a095d2-95f7-4686-b6c1-73f2e1eb3c7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9912f5b-6915-4e80-9efb-32800fad0dbc", "sighting_of_ref": "indicator--642908bc-4b4b-42f3-8306-b8c0a8171dc9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835429cc-3233-4aa1-af4a-674d9020dbb7", "sighting_of_ref": "indicator--83bd33e2-69bf-4ee6-ae00-30c5695a7372", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3060237-163f-4693-a175-3bb192e6ff4d", "sighting_of_ref": "indicator--d89d195c-f269-4651-8889-ffc36a2239e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3418d8a-c5b3-4b89-b2e8-16ee13b06429", "sighting_of_ref": "indicator--bf9b5d21-9987-4d7f-910f-a8b5104269ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02c9a4c-1374-44e1-973c-161ef2b8def2", "sighting_of_ref": "indicator--f6766e06-3e17-4972-843a-41413f05d302", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabd97e1-c54d-4566-a6e7-91be31f5181d", "sighting_of_ref": "indicator--4d4780c8-593a-4c99-99e7-55facbf72d32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11538cc2-87ac-4f12-ba3b-5b4b2c453e85", "sighting_of_ref": "indicator--3baff0cc-f977-4e9e-8514-b571bd5bac73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859950fb-71cd-49a8-b6c2-6395c4c9a221", "sighting_of_ref": "indicator--58a576a1-aecb-40cf-b00f-9d96f61a12ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03944ff5-03f5-4d42-8e43-177417581d9a", "sighting_of_ref": "indicator--b8caee63-710e-44f1-9ae3-9909d1297eeb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7040c775-7f88-4f3c-958e-4413cf0a49b7", "sighting_of_ref": "indicator--ac5d6af9-6451-47cd-8d10-db05095ccefb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8465ca06-cb63-4dde-beec-90eaa13e6258", "sighting_of_ref": "indicator--e1b54744-2b28-4ce7-83e0-3c44a19e6c0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41acecb9-1079-4d25-a098-ce81ddf9fb1a", "sighting_of_ref": "indicator--42213b13-4853-4445-83e6-a7ac86ac9fb8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5cfe4c-452b-44b8-9ab3-1e18bb6be931", "sighting_of_ref": "indicator--6cb6dc99-9ea6-4f55-aa8c-2c647018d7d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f625f102-27e4-4e8e-ad21-7d7dc02166d1", "sighting_of_ref": "indicator--cbc173b1-4865-4f00-be6e-7463dc104aff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83b7963-0f10-4609-adf2-126aa488be5d", "sighting_of_ref": "indicator--74b2f81b-2254-43b0-8369-8f18d457253f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215404d7-42fc-4f0b-801f-ce09d0e2667a", "sighting_of_ref": "indicator--dde9076d-f732-4451-8ce5-aa60ba9720c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a205adb5-de45-454a-be94-05379a3b5362", "sighting_of_ref": "indicator--0bdac0a3-dd0a-4e2e-b8fe-c71d91f90168", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb54feb-367b-456c-b353-39959fec91bc", "sighting_of_ref": "indicator--a6e82749-a4b2-4692-8a7a-0c249c015c26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af17da0-a6f4-4ad2-8cc9-a5363355cb1a", "sighting_of_ref": "indicator--c882e8b4-e8b7-4e9f-87b3-fcbec8a98da7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54b4515-ba1f-4080-ba31-62fbd022c31a", "sighting_of_ref": "indicator--c04bc212-5101-400a-a50a-52221a48463e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac31c399-e013-4009-9452-124b866b3063", "sighting_of_ref": "indicator--6fb06e8f-e094-40a4-8711-e809e21d362d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698a4dd9-27d3-4e26-a2d7-83d64c23f865", "sighting_of_ref": "indicator--ad771bbd-bc2e-4998-8978-3d3ce296d4c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78464a2c-edfa-42df-b370-81cb1309e85c", "sighting_of_ref": "indicator--7ef45247-4ed8-4fa8-b31f-57ff9450d144", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23460c97-7d81-4cd4-9282-45b267cacc07", "sighting_of_ref": "indicator--20674d77-7059-49c7-81a6-b1df3f5fc754", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3cbd11-88d4-40cf-975b-81aa4415a05b", "sighting_of_ref": "indicator--5395735a-e2a6-4455-a540-220ce36aa789", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea604601-f2e0-4ede-87e9-ade29c4efe6f", "sighting_of_ref": "indicator--09fef9d5-fccd-4802-bd53-3f43767ec922", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ac527e-4704-4352-9a14-9b580b908477", "sighting_of_ref": "indicator--f14e7803-1469-4d01-a821-dc9dcbff545c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75fd8f1-57eb-4fb9-a201-b2b75515a733", "sighting_of_ref": "indicator--812e2c58-4857-4310-aeab-cd2a21270a20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f164db-aa72-4be0-8150-be0274962b68", "sighting_of_ref": "indicator--e89cf785-4dcf-4be5-aa0a-d00e2849eee1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b720f58-3553-4ffb-9fcd-c694be412d9f", "sighting_of_ref": "indicator--c9b4caad-9f31-4efb-85d3-c32b9a60f17e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf0c615-fde4-42dd-8685-b8307c2fca14", "sighting_of_ref": "indicator--1ad67e47-7a09-476a-ad14-9d28e607574a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9531a16-7158-457e-b778-2dfadd0fecd7", "sighting_of_ref": "indicator--61efa95b-29e3-44e0-8e65-fe7cf25f8ccc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbef64e7-413e-47f2-abc1-706f398a6300", "sighting_of_ref": "indicator--1a1fd732-d8b7-403e-a738-a6f71996a52d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2093fe6f-51c1-4db9-9e0a-3fcd5a19a84b", "sighting_of_ref": "indicator--c97680cf-f2b8-4b66-b02b-a82fb92cfd42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef4a9e3-99a7-471d-bf2f-981f164625ac", "sighting_of_ref": "indicator--4e7550df-e46d-4a3a-888e-ff008e4f6238", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13417173-712f-4d4c-9fa8-06fe3ba3a1af", "sighting_of_ref": "indicator--bdfb2539-97e7-46a5-b5b5-0eccf5161ead", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee86a0bf-b97f-4e0f-9b34-3d4fec7a6504", "sighting_of_ref": "indicator--25723ca6-89c2-40ec-8b6c-2c620b228f46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e4610e-4ef0-4996-91ed-6e7d0ae649a4", "sighting_of_ref": "indicator--b34e35c4-ce2a-41ba-a810-a686da20edfd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac522ad-c9b3-4f6e-8562-859539a552f7", "sighting_of_ref": "indicator--c7ad86e5-2ab8-47cc-9086-c4609f73a8a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b638acc1-42b2-4829-9044-24e0417099fb", "sighting_of_ref": "indicator--72d41944-471d-4bd8-81e3-312c7fa6c80e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2018a4-04ef-4bcc-b585-ca2f2eae8840", "sighting_of_ref": "indicator--6ab43158-8934-4d46-9252-6593ecfba68d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830d50c0-b843-4125-928c-93f70231b812", "sighting_of_ref": "indicator--653040f7-d580-4a15-86a0-3618aee3eca8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35b2ced-04fb-4ebc-a8b0-bda935dc0f77", "sighting_of_ref": "indicator--4e515cc9-0a6c-4d35-8560-6b3edc9739a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55408f0-abe9-41d4-924d-b980950c8002", "sighting_of_ref": "indicator--13a15141-483b-4379-8234-e0938d62edc0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a3a334-3ea7-402d-b4a3-9c9ece951fba", "sighting_of_ref": "indicator--38fca292-2ca2-413f-aa2d-0b304e5c3955", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6adf925-a3a8-451d-aa98-e595ca7de840", "sighting_of_ref": "indicator--235d4ae0-9088-4334-8b39-4338a3d906a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf4fc83-4ad8-46e6-8ec7-411d0e1cb76d", "sighting_of_ref": "indicator--12c6892a-3230-415e-a35f-8e0dbcb04546", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408e8783-d172-4e85-a6ea-68d712349778", "sighting_of_ref": "indicator--2fbdac91-d854-427b-8481-bd89c8e2f381", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae99dff6-1612-4415-87e0-573494b4b2ef", "sighting_of_ref": "indicator--d206a188-5dd2-401f-8da6-6575c005f892", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a26666e-8767-44b8-a719-97e4ee8203ee", "sighting_of_ref": "indicator--ee07c3f1-4859-4f29-a76d-aa5f54b018e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8017922e-cd41-47ab-a42b-6ed28b5900ff", "sighting_of_ref": "indicator--b5d726f0-c3cf-4982-8f7c-7d5d613f7ba8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76512bf-573c-4923-87af-7ab4ac1dfdde", "sighting_of_ref": "indicator--90b5300a-579b-45c9-adf6-8a1d294ad2d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ae2e7a-27cb-4242-8482-8b05c41b087f", "sighting_of_ref": "indicator--cfa95082-e062-41a9-97c8-123fc1c5fd4b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a70186-e926-4826-812e-fc389d1e770e", "sighting_of_ref": "indicator--0f7c9d69-ef65-4b86-80e7-140c20896a8b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ce78e4-d3bc-4dc2-a702-091cadd180d8", "sighting_of_ref": "indicator--9fb3a0fe-6fa3-42ca-93b2-032f5f1795b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb99db7-1544-41c8-9a49-2d187cc95ffd", "sighting_of_ref": "indicator--1bab98b2-cc04-408e-bdc1-dc11869b9b83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be90957-7fe6-4d6f-840b-8a791e1e1412", "sighting_of_ref": "indicator--4fdc9cf4-dd20-4a32-b315-4cef5f99a42c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca97caf-223e-4d16-935e-6c5b08656f74", "sighting_of_ref": "indicator--db8c7b58-9818-4955-92e5-205639d002be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92de2ba5-2eae-4643-bf77-7b3725f8a765", "sighting_of_ref": "indicator--424107e1-48b1-498d-98d0-1626770de5f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd89f958-1d22-4e19-91a3-b66be3c9f0bd", "sighting_of_ref": "indicator--cdad7e65-c07d-4957-a4fb-90a013ab3319", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182a0b45-9c1e-4d15-a96e-90dcb692813c", "sighting_of_ref": "indicator--19f1fd3c-722a-43ef-bb2b-ddb7a162975b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5354bb-2d6d-4546-b7cb-2b0089df7ea7", "sighting_of_ref": "indicator--9413c3dc-d441-42e4-a41e-b4fc75d0a6f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8305f7a7-70c1-4e2a-9bde-d9e5398d0a37", "sighting_of_ref": "indicator--3fefc660-65df-4ea4-aed3-f1c5a6794021", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749dca4d-8c50-42fd-a686-f446a5510cec", "sighting_of_ref": "indicator--70bec294-77e1-4bb7-814b-5ff577729609", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee254eb-ba62-412c-a470-c0bdf7b4b74a", "sighting_of_ref": "indicator--4be58ba9-ca2f-4d21-b389-20d455e42d9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eccdce8-2202-4443-966a-f120891d898e", "sighting_of_ref": "indicator--01722f47-d9a4-44c5-92fa-0094edac232f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c184ba0c-70af-4e86-982b-28fbec04afd0", "sighting_of_ref": "indicator--fe305a97-3e55-4362-9e5d-998c8ec140d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc73cd46-1d95-4a3c-82d3-b6e06881606d", "sighting_of_ref": "indicator--d4a5bab1-1bfb-45cd-b928-c517e2ea1360", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05415c23-83dc-4f58-8af4-9670379cebb6", "sighting_of_ref": "indicator--224a8a51-f51c-4de5-99e3-763a000580ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef82a6e-fb8b-4d2c-a732-857c37787164", "sighting_of_ref": "indicator--0081966a-64b9-4c62-a37f-802d81379741", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff92f7ec-efa9-48c8-8c8a-bcbdffc43aed", "sighting_of_ref": "indicator--84f04513-5977-4fc5-b016-00389c0ed170", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088d0a33-5add-41f3-8ce3-72a922356418", "sighting_of_ref": "indicator--42a00ebc-65e8-408f-8631-f620a5af3386", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5774e307-2184-4b54-8f08-a41cbc0c2728", "sighting_of_ref": "indicator--c4b959d9-617f-4fe7-89f1-69bef00e6672", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fff01e-c91f-49d2-8993-e4b92051cedf", "sighting_of_ref": "indicator--e9954013-081b-466e-9ad9-ae74110534a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ffecf9-765d-4852-b905-b840f55cc796", "sighting_of_ref": "indicator--fd90f2a0-e48d-4af0-971a-8297e698ed10", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3475ddf-735f-4f60-a315-88c8e33c28da", "sighting_of_ref": "indicator--187fa4bf-3b5d-4248-bcbf-394b030f1dce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf38ebe-96fe-46a1-9988-dc1a01dc764d", "sighting_of_ref": "indicator--7b4cedf4-6abe-40ae-b9cb-0fc6190f1e3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd69c476-9d4b-4520-833b-7450e506db75", "sighting_of_ref": "indicator--5c948cce-af48-40ff-a065-511a7b8dc726", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878601cc-ec6e-45d4-b239-a3c3517c49d7", "sighting_of_ref": "indicator--f43f2a2e-26bd-4e53-aaa7-c6cdeb95f28f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bfaa25-0b21-492b-9da8-182c19644927", "sighting_of_ref": "indicator--13354147-ce37-4d10-8f20-2c2cf2ea814b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29190d4b-340e-4e26-8ac4-75e483e8b20c", "sighting_of_ref": "indicator--b8cf522d-eed3-4a33-ba49-908a1245f897", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10815744-abfa-4c7d-b32f-1db18923a8b5", "sighting_of_ref": "indicator--b41129e8-3a46-4b44-8a5a-84484dcf13b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746ad08c-cc86-4afb-8402-136fbcb20190", "sighting_of_ref": "indicator--ffdc9f36-7b1e-4b45-8970-4f6cf08a10dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0ccf34-eab4-4ed9-87de-c3a7772e39ec", "sighting_of_ref": "indicator--17f3a980-a679-4688-a501-9aad64173085", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bc2339-829b-4316-a3c4-4324d32f4a59", "sighting_of_ref": "indicator--6f2711f7-75b9-41b2-a25a-c9d8140c867d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3f1766-e981-4995-b1e5-39cdc48582d8", "sighting_of_ref": "indicator--2b9c871a-3cf9-4827-bcee-e4c5bfb6032c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a33aa06-1afe-41d9-98b5-9e9115de6e5e", "sighting_of_ref": "indicator--78de4c6c-e50a-41b1-978f-f89a487f7f83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14e6f55-0f5e-44cf-8a9d-dcd91a6bea8a", "sighting_of_ref": "indicator--b316c7e6-6004-4d8c-8889-68bf9fd00fa0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddecf02-8c00-4a00-b10e-60aa17dfa3f2", "sighting_of_ref": "indicator--94c5fd43-6839-4395-a626-ffb0214ada19", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7cf21a-1a26-4c7c-a97d-84cf39b87d88", "sighting_of_ref": "indicator--8467a0be-a989-413d-8c41-841863a8d200", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354a6d6d-59e3-4716-9e1e-6d755fa9a090", "sighting_of_ref": "indicator--9f33c06a-7787-4216-8683-f94857ffc9ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82d46f8-acbe-4874-82c1-4cc7d9c4fc06", "sighting_of_ref": "indicator--0c6da260-88db-4a50-bcef-85606274d5d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1763db01-0497-46ec-90f6-a74b7adc7b42", "sighting_of_ref": "indicator--8afff0aa-6618-46ee-9c7e-d3acd9ccb03e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43016e58-5aa7-40fc-8272-db076571d272", "sighting_of_ref": "indicator--05891abf-5443-4e23-a969-ff929edd31a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ba314f-28ef-4c8c-8463-091d076dece3", "sighting_of_ref": "indicator--d6220f75-f545-4f44-98b7-c8de71d3b0bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b658eec-0d1b-401c-9a54-ea8c295e6ad9", "sighting_of_ref": "indicator--3a567cf3-ec68-4081-8549-5f663cb6684d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2357a62-798e-4cd5-adfa-0172a79b89ba", "sighting_of_ref": "indicator--e8a2e790-e803-4195-8a73-3b34da7bfce6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58eb518f-ead8-46cc-b5a8-cc32e432af5d", "sighting_of_ref": "indicator--8508eaad-82ec-4be7-8ae5-67441704c4de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad87eaff-2c04-4368-9445-179c518ac173", "sighting_of_ref": "indicator--d7b59ea7-e1a9-4726-ba3e-0222da548ba4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d811d06-8055-4383-919e-4243b4397932", "sighting_of_ref": "indicator--234ada5f-1e1e-44b7-804d-86444f0c4a8d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb3f392-b9a7-4e66-bedb-f955705561a9", "sighting_of_ref": "indicator--86bf9e9e-9e8d-4ae4-98f3-26bccc2ec8a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc48afe9-146b-4469-81b8-88b343fd0af8", "sighting_of_ref": "indicator--6b4e5889-231a-456b-9c8c-e7379fc8d84b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a3ec73-b1f7-4eca-9713-91c9f19ab111", "sighting_of_ref": "indicator--f1988bd4-fd23-4d1f-8499-5951d38740f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cf6dfc-6291-40ae-940d-2e69fa24c229", "sighting_of_ref": "indicator--ce7d384c-b188-4505-83d9-ba64124e9834", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c528f4-afa9-4af7-8e60-1a1f1eafab13", "sighting_of_ref": "indicator--198d4705-ff03-4990-9fd1-9b1df76a55bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780ad8b2-53a4-4f67-ae26-36b2ea62aa62", "sighting_of_ref": "indicator--c72bc091-4817-4a83-a632-bdb74f06928c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31be997-0983-44ac-a6aa-9118bd4851cc", "sighting_of_ref": "indicator--1f25bdcf-d5c8-49c1-875c-590888de1ddf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280cc33d-e6a9-4fbd-9195-8a7b6b0a0e40", "sighting_of_ref": "indicator--e03f4b88-99de-4e09-a693-bcbe6e9874f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c461ddc-f057-40f4-b66b-c504fe60ade8", "sighting_of_ref": "indicator--136a6aea-35bb-4f77-875e-eea1f0e92a60", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d4afbc-b59c-4190-9537-e8806f45fa78", "sighting_of_ref": "indicator--7f850d40-b857-434a-880e-8595abf20ad0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a022efd-249b-4c54-a2dc-b8d6011b26f0", "sighting_of_ref": "indicator--64d8bb0e-07a5-42f4-92dc-9682132292c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ad68b2-11a7-4479-809e-5589372096df", "sighting_of_ref": "indicator--b359270a-ce9f-4e82-90c4-092b3468fb0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a4742c-3281-4b21-a21f-44da9dba62c2", "sighting_of_ref": "indicator--e00f749f-a425-488f-b647-0a4bf54b18c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4f879a-1907-48d6-99de-03286fa0a734", "sighting_of_ref": "indicator--eff96a20-32b1-4c9a-b2ec-ec58401ff3ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f841494-fb05-4df4-b109-282cfa53c9bb", "sighting_of_ref": "indicator--564afd75-cc11-4ac6-91b1-47b76b7d4201", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b63e183-801c-4d6d-858c-d362c872be9c", "sighting_of_ref": "indicator--5915c958-a7ee-40ea-85f1-6595f952aaf3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8f93db-8469-4c3a-bc78-ae4eb4746df2", "sighting_of_ref": "indicator--62eecfe8-df21-47eb-8d6f-82a9d415ed31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad537989-9276-48c0-bd40-27ed9e9799ee", "sighting_of_ref": "indicator--ea0dd564-864a-4c80-b8da-d2300eb6c611", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb1da5-3ce7-47f3-a531-8ab9250b2109", "sighting_of_ref": "indicator--ea0dd564-864a-4c80-b8da-d2300eb6c611", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f686a8d-58d7-401f-ac6c-c419400975b3", "sighting_of_ref": "indicator--00aca914-c03a-41c4-bc20-4e4c6edd713d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefef848-156e-4f38-82ae-2b8ce266302a", "sighting_of_ref": "indicator--00aca914-c03a-41c4-bc20-4e4c6edd713d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bb0127-ee1a-4429-b27f-efe485dad327", "sighting_of_ref": "indicator--00aca914-c03a-41c4-bc20-4e4c6edd713d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4ece62-8aa4-4173-9457-5fbe9d549a77", "sighting_of_ref": "indicator--b6abe909-9af4-43ff-b2fa-270c2e0adcb4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdea3250-3418-4d21-b123-12d4709b0954", "sighting_of_ref": "indicator--fa1e8a9b-8b1e-471c-a98f-7e9544683700", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff15810-1b9a-4643-a540-35d884c3380b", "sighting_of_ref": "indicator--672eac4e-c3c4-4a0b-8b10-4c5759d66ba2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1c6ed-9846-4868-93d6-84f4eb2d2801", "sighting_of_ref": "indicator--746898e6-b9ba-414a-b7ca-dc5d4ba49265", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1f46bb-e000-4228-aa52-1b3c01079f35", "sighting_of_ref": "indicator--bde75f32-9c4c-4e19-abfd-970548d30609", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e9268f-80d2-4bf1-b62e-0b58c763b665", "sighting_of_ref": "indicator--96c3bfbd-0604-428b-a0bf-97550023e632", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a796bede-2425-4b2d-a873-c55c716f8282", "sighting_of_ref": "indicator--1ea79a57-e063-4159-85ac-9ecd6a839404", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e380520-027e-4ed6-847c-60dcbd5e6d3b", "sighting_of_ref": "indicator--dea3ba68-3d84-4608-93d4-d7c6dd910a42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f45b953-c795-4132-bfc0-35711e78cc07", "sighting_of_ref": "indicator--4debe145-2f40-4d4d-95b0-5df310123353", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8d170d-4ae2-4902-a095-97dc90e905fb", "sighting_of_ref": "indicator--4ee721df-1f6c-4971-91d2-4005e0638420", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44b8092-65c6-4876-a406-48e8f80ffe95", "sighting_of_ref": "indicator--0e2c40c8-ec0b-48dc-b150-dd6e28c11e33", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e896c42-2d6a-446a-9268-86a0be8adeb4", "sighting_of_ref": "indicator--af12ed56-53be-41fb-b837-c1435d4fc3f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcafa2b-3e07-4a99-923a-5d9abd41ec87", "sighting_of_ref": "indicator--e3e1a37f-fe84-4f15-8f69-e3cd2eb859d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e79b74-f867-44aa-bc74-64c6f6067c0f", "sighting_of_ref": "indicator--2ceb2b39-fdc6-4dca-8014-c4d095fa8d3a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515a1e5c-6a29-4bcd-9dd1-8af2485a607f", "sighting_of_ref": "indicator--47bee9bd-4369-48d5-b03d-ac659babfe83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ecc2d9-302f-4803-83c0-ddcfb4b30fb0", "sighting_of_ref": "indicator--75e97402-5325-42ee-a037-aecfdf258cf7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afc885c-ecdd-4973-86a3-524e5b6766f7", "sighting_of_ref": "indicator--cf2d77cf-f6fe-469c-8f15-ee8cc245267e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ece6389-c5dc-47cd-94db-4e84dcaf4fa2", "sighting_of_ref": "indicator--bae6766f-c4ee-4739-8b54-a15eec91f908", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3f323-961e-4db1-80cd-be318c5f6a3d", "sighting_of_ref": "indicator--e1dcd2da-9c9c-49f1-a835-b19a241da668", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381db8db-fd7d-4d14-9a8b-d5ba11e5529c", "sighting_of_ref": "indicator--42c7bd6e-6df7-4ab4-be90-13334e64c214", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58133bde-3496-4c57-95d8-1b1d4b7e1c44", "sighting_of_ref": "indicator--11b2c7a8-0a02-4845-9d3a-4a9edc09773a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eebe4b3-5923-4203-8cbd-bcdacb1d8c54", "sighting_of_ref": "indicator--467a2a47-6d62-4647-8426-64da6d80d39b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8c059b-03d6-4d1b-b043-cb2009c93444", "sighting_of_ref": "indicator--45071446-a383-4fef-a350-6cfa7da34ab9", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6b24d3-4e1d-44a0-b108-4328f7b269fb", "sighting_of_ref": "indicator--bcb616ce-25c6-40c3-9e39-61b2fd23cc1d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428a3dde-25e6-4494-b4c8-57f7e4855c26", "sighting_of_ref": "indicator--9f1171fa-1d7e-40d1-a2c9-ec597a3e4776", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc961d6-8308-49c0-a153-0eb94e685616", "sighting_of_ref": "indicator--e243ed13-ea7f-4c63-972d-680905364b14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e99c937-153e-4e74-a064-88203793a860", "sighting_of_ref": "indicator--8db01175-93c5-4a7e-8c28-8b42b70b9666", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e79478-84a3-406c-8a0d-9c78e47e90d2", "sighting_of_ref": "indicator--a5c4b93c-143a-4935-91e8-4fdb6dff405e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c524b684-bcc7-458f-89f5-00b7db21eca5", "sighting_of_ref": "indicator--ac13607f-6be1-4fc1-9992-8878165c3d4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba54643-9d22-4579-8567-19f5e379c6b2", "sighting_of_ref": "indicator--06088276-33d1-42f8-87cb-ea2a517a7fdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9588b2-96c6-4835-8516-e81a4614a264", "sighting_of_ref": "indicator--8f075ce3-55bf-4544-ba6c-88d97e5186d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328cbef3-881c-491a-8c99-dea855336703", "sighting_of_ref": "indicator--917a44b4-ed24-4e4c-9366-70bf422e67e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187e0372-d011-43cf-acee-d74bc4238370", "sighting_of_ref": "indicator--b78ee722-edaf-4a39-81e9-2fd94da3d503", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1c6e8f-e012-4047-962e-9c369d612b0f", "sighting_of_ref": "indicator--66efac2b-3b16-47ff-8780-bd38aa7ad3e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189990c5-05b0-42d5-ab4d-4fe70134181d", "sighting_of_ref": "indicator--06e3c00d-a9dd-480f-a5b5-549a0914e695", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f5b64b-dfbb-4db0-bc5b-7cc609ee80a6", "sighting_of_ref": "indicator--51c761d2-ed89-4c91-b6d6-b2222ba7b132", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523e7873-8f75-4dd0-8e8b-f6cf6e902004", "sighting_of_ref": "indicator--51c761d2-ed89-4c91-b6d6-b2222ba7b132", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddc2d40-a6fd-4e3e-abfd-dcbbab09540b", "sighting_of_ref": "indicator--51c761d2-ed89-4c91-b6d6-b2222ba7b132", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe4409d-c6ad-4211-ab1c-6caa0be89789", "sighting_of_ref": "indicator--acb2fecd-1e05-4583-8d36-1c542009d332", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9927fd1-643f-4726-bb61-025425627102", "sighting_of_ref": "indicator--acb2fecd-1e05-4583-8d36-1c542009d332", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92788322-60a4-4cc6-8f1c-d452d197bbed", "sighting_of_ref": "indicator--8f021463-630f-4c20-b324-7f8e748dc254", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194fa295-e865-48c5-a605-1773d71d598c", "sighting_of_ref": "indicator--2bb27cea-c49a-43ad-a256-d1247626edc6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07a2f2e-bd3d-4ca8-8942-eb461e73f8b3", "sighting_of_ref": "indicator--7046d38b-d1c6-407a-97eb-c5ab78c0ae9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a71f4e9-1ca6-4d63-b5e9-714261dd5db9", "sighting_of_ref": "indicator--7046d38b-d1c6-407a-97eb-c5ab78c0ae9c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7271c37a-54e0-4fb5-bbd4-e73be23f1250", "sighting_of_ref": "indicator--b780b406-7d3f-4ffd-af58-4d349c103e8e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1d5a23-cf77-43e0-b626-34d3629a746c", "sighting_of_ref": "indicator--5a43aaf1-a45b-48ed-9a62-2169971086e3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070abb74-a250-47b7-a28a-c77f99ecd819", "sighting_of_ref": "indicator--5a43aaf1-a45b-48ed-9a62-2169971086e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5713b2-0c98-4f84-94ea-c87d4ad250c8", "sighting_of_ref": "indicator--6dc499c0-3352-4ac8-a458-128cbcee4cc1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3322b8-0804-4751-bd96-6fac26663aaa", "sighting_of_ref": "indicator--32b4fed8-7fcc-4731-b3b7-ecd827714b8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f696e9f-c988-4d4b-ab37-051dd870b3e2", "sighting_of_ref": "indicator--9a8eb4f3-8c10-4754-9033-997e2216e96c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d38fbaf-6420-4317-9afd-7d0a96cd843d", "sighting_of_ref": "indicator--caddf87e-cbcc-4d39-9f25-e105451bd7e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2400d64c-6b66-44eb-8615-f10e75f729e8", "sighting_of_ref": "indicator--caddf87e-cbcc-4d39-9f25-e105451bd7e7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03a1ab1-10c3-4013-923b-2a48ac616b82", "sighting_of_ref": "indicator--5b2baab0-4aa9-4823-b7af-e990c8516ac3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b6192f-2337-439c-ac3c-ff87676f2dac", "sighting_of_ref": "indicator--5b2baab0-4aa9-4823-b7af-e990c8516ac3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4741a1-c724-4b85-9ae0-71cadc464bce", "sighting_of_ref": "indicator--5b2baab0-4aa9-4823-b7af-e990c8516ac3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eb39b5-eb65-414a-ae63-7f904158cada", "sighting_of_ref": "indicator--4bba3e8b-492f-4516-affd-d5ea16f1a44c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e63cd03-6d46-4ffd-8292-493a97e1ae49", "sighting_of_ref": "indicator--4bba3e8b-492f-4516-affd-d5ea16f1a44c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2b3ff6-bb69-4377-b6b3-f3d59edabe4c", "sighting_of_ref": "indicator--4bba3e8b-492f-4516-affd-d5ea16f1a44c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f407ba5-9a60-477e-a156-b3e063ef5411", "sighting_of_ref": "indicator--71ddaf24-9d41-48ec-82b1-e93d8545fbaa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d68078e-6871-4825-a4e9-9e386aced07d", "sighting_of_ref": "indicator--eccf3b07-ea29-4943-af29-ce66b178af48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efaf8b8-8c5a-4f05-8811-567d31b24fe8", "sighting_of_ref": "indicator--c09ee930-7751-4844-8758-3a9841e9c67c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1e1515-3e3e-4a93-a44b-2972e66fc034", "sighting_of_ref": "indicator--c09ee930-7751-4844-8758-3a9841e9c67c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21071d19-6add-4260-9c15-7565e0948c03", "sighting_of_ref": "indicator--c09ee930-7751-4844-8758-3a9841e9c67c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a883b20-c84e-4b9b-94ae-f11a001ded86", "sighting_of_ref": "indicator--7d34fa49-d7b1-40ed-9930-505e3676fd93", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf6ac80-2754-4726-9c7e-1a24e65d2cbd", "sighting_of_ref": "indicator--8ee2c0a3-fc84-48a7-9446-56591833b88b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2347b318-a525-4917-86ec-145be05bb768", "sighting_of_ref": "indicator--e7e756f4-80cf-4af0-b13e-d209b8aca333", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8c36b9-8e02-43b8-9fc3-d31caf649f15", "sighting_of_ref": "indicator--1203c4e2-e00a-4472-bb34-ecc137bf29a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32441c2a-909a-4259-afe9-624705494246", "sighting_of_ref": "indicator--1203c4e2-e00a-4472-bb34-ecc137bf29a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04563aa-eb5f-410f-94da-4377b4ab327f", "sighting_of_ref": "indicator--10337f03-f733-41a4-8bef-1dbbb5bc52bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d06eef1-3b10-4793-b4cc-68bed04323e5", "sighting_of_ref": "indicator--e315d5c3-2dc5-46b4-8063-a067cec82cb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36545c23-b382-456d-ad2e-8a452a2c0a29", "sighting_of_ref": "indicator--e315d5c3-2dc5-46b4-8063-a067cec82cb7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25328c3-d6f5-4f6d-82d1-80ad33662737", "sighting_of_ref": "indicator--edc11957-7e68-4f18-8506-320ea11934fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dded0f7c-39be-4740-8bf2-b47dcf49497f", "sighting_of_ref": "indicator--b646c85b-059f-40ba-bea1-479e36a13647", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0052c6-7c1a-41c7-8f92-bc971ba100a0", "sighting_of_ref": "indicator--abaab95c-69e0-490f-a82a-064a62876826", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d7d7f7-925e-4d3b-9d77-94649dcc0ea4", "sighting_of_ref": "indicator--62db1f3e-14f2-4cec-9c1c-c47dc426ffde", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a6c722-453b-4630-bec9-06e03fad38ff", "sighting_of_ref": "indicator--2a819558-b9b9-4b63-ac27-d116ab67d64f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3764114b-21f6-401f-8c36-55e449ce2c32", "sighting_of_ref": "indicator--2a819558-b9b9-4b63-ac27-d116ab67d64f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1f505b-c49d-4d8e-b95f-8fb2f2d97f00", "sighting_of_ref": "indicator--2a819558-b9b9-4b63-ac27-d116ab67d64f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b7b382-1c74-4305-9db5-0dd357defed0", "sighting_of_ref": "indicator--5d0a5516-bf71-4d4b-8e34-d73891dac74e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a44bd-80ce-4ff7-a902-b6b153434bd7", "sighting_of_ref": "indicator--d44ab5f9-cc99-4df1-b325-7554a2d3244b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceff395-ed3c-4dc9-8cfa-e55b0e778bac", "sighting_of_ref": "indicator--32228ec9-288f-40ac-913b-8b4f3849aa35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b992e45-a1b2-414b-8bd0-6d073a805fe4", "sighting_of_ref": "indicator--32228ec9-288f-40ac-913b-8b4f3849aa35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c00b33-bb91-4ebd-8044-563ffb07d681", "sighting_of_ref": "indicator--60a6b305-b720-44b0-b9b9-a150675b5e9c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d32057-63fc-4cfc-ba9c-009306dd3db8", "sighting_of_ref": "indicator--17d61a48-c86a-4a77-bebb-09dc7adaf5eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7479ba-61e2-4ed4-9d4d-2eede356a598", "sighting_of_ref": "indicator--17d61a48-c86a-4a77-bebb-09dc7adaf5eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2932fbe-c704-4602-bf01-a44dbe5ce5af", "sighting_of_ref": "indicator--ecc4eb29-d4e7-4a8a-8d03-a6f715526042", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a93e03-7892-4b7e-868c-99d596b95225", "sighting_of_ref": "indicator--ecc4eb29-d4e7-4a8a-8d03-a6f715526042", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4605741-4aa1-486f-b8b8-b5dc87e17652", "sighting_of_ref": "indicator--7fc14686-0c8e-4b89-9994-0339d39837f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf31301-f125-4b64-b9cf-84abb0ccfd1f", "sighting_of_ref": "indicator--7fc14686-0c8e-4b89-9994-0339d39837f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a8a0ee-ad71-4199-aa87-cb5bfa0b2a71", "sighting_of_ref": "indicator--c97b6bd2-4f3f-4300-b788-9c6d9a30225b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e9fc5d-01fc-4594-9c59-c7f4cb055ea0", "sighting_of_ref": "indicator--c97b6bd2-4f3f-4300-b788-9c6d9a30225b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3ae669-5ac6-441f-abbe-3555cf7af688", "sighting_of_ref": "indicator--317e42ac-d162-4f65-9ba1-6ebbadacc624", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303ad689-1439-44c6-a2c3-bab1a77e7533", "sighting_of_ref": "indicator--317e42ac-d162-4f65-9ba1-6ebbadacc624", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f0bbee-a609-45b7-a10a-57492583437a", "sighting_of_ref": "indicator--dff67641-d4b4-4d40-b4d0-79bd7617d723", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7d07f8-2614-453e-8b0f-cc659426eac0", "sighting_of_ref": "indicator--dff67641-d4b4-4d40-b4d0-79bd7617d723", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8502f6dd-d3ea-40a9-9012-d21ec14d33e2", "sighting_of_ref": "indicator--612d24fc-5223-4b6a-b4c6-aed4176a24f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a62d05-cb62-4bbe-81c3-e21ad392a615", "sighting_of_ref": "indicator--612d24fc-5223-4b6a-b4c6-aed4176a24f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999c37f1-5462-4d21-a376-fddbb939159d", "sighting_of_ref": "indicator--709f0d4c-536d-43b6-b8fd-9081e22cf957", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f447c5-7ec0-474a-96f4-831c098d9ac1", "sighting_of_ref": "indicator--709f0d4c-536d-43b6-b8fd-9081e22cf957", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78a0525-7534-4deb-964b-9b19a9d18ce3", "sighting_of_ref": "indicator--ff15d45b-e3a3-4ac6-8733-0b11cd1656ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb95803-8879-4678-9696-63d82b62a6ac", "sighting_of_ref": "indicator--ff15d45b-e3a3-4ac6-8733-0b11cd1656ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5a9761-d5fa-4097-be0f-b669405f3773", "sighting_of_ref": "indicator--aace6c8b-1c3b-46d0-ad25-6c08ab739759", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82560add-a5d7-477a-93f8-32fc7d3cf27e", "sighting_of_ref": "indicator--aace6c8b-1c3b-46d0-ad25-6c08ab739759", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc3d702-c91b-4b5a-a951-5714bc24850a", "sighting_of_ref": "indicator--726bf84e-17ad-41ef-945c-eccdc91d970c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e951c826-ba1c-43ff-8243-7c40ed979960", "sighting_of_ref": "indicator--726bf84e-17ad-41ef-945c-eccdc91d970c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1e2109-d91f-456f-a488-1ee9867802f5", "sighting_of_ref": "indicator--eceab145-ee31-4fee-a377-6249426762d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3a7193-0164-4b44-b7e1-c286792b5588", "sighting_of_ref": "indicator--eceab145-ee31-4fee-a377-6249426762d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b498efb2-1dcd-46a7-b72d-e3982b05a246", "sighting_of_ref": "indicator--24b62d55-5c6d-4c36-979c-abbcebc13022", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7520fc-92d2-4a6f-862c-d4a3555a08a1", "sighting_of_ref": "indicator--24b62d55-5c6d-4c36-979c-abbcebc13022", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e160ea6-ca60-4dab-8b9e-432c4460312a", "sighting_of_ref": "indicator--aab4df8b-75af-43ac-b5cb-c5495aca7e7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c569f1-aa0c-4dfa-ac78-34f35d7a29f2", "sighting_of_ref": "indicator--aab4df8b-75af-43ac-b5cb-c5495aca7e7a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df567676-30ed-4c85-b41b-1ff4057bfa36", "sighting_of_ref": "indicator--e43fcc82-f224-420c-87c1-0bf15cae679c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5bcd61-2f04-40f0-a226-2d79a029acda", "sighting_of_ref": "indicator--d1420f09-55c7-4646-b509-2c516889a654", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdbbe51-7dd3-43d6-a710-0c3fa31962e2", "sighting_of_ref": "indicator--d1420f09-55c7-4646-b509-2c516889a654", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fc79f4-10c4-4e7d-9340-f9dc3658920e", "sighting_of_ref": "indicator--7d672383-8a00-4861-846e-ff935aeb4259", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a53543-8d68-4253-a045-19ab92ba0236", "sighting_of_ref": "indicator--7d672383-8a00-4861-846e-ff935aeb4259", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0320a7-27e9-4568-9fd8-b9b160509dfc", "sighting_of_ref": "indicator--15c9e35b-cd9e-408a-8865-18a98816ee0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa355a6-8b20-4496-87eb-41587c43ceb8", "sighting_of_ref": "indicator--15c9e35b-cd9e-408a-8865-18a98816ee0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c2171d-ffe8-4e91-b862-2ce9df67c8f8", "sighting_of_ref": "indicator--15c9e35b-cd9e-408a-8865-18a98816ee0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9824cca2-f9ef-40e7-b638-75ef4d1c4278", "sighting_of_ref": "indicator--5cd739f0-bc5b-4831-b1b0-64f1e1c7a44c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f12321-8037-4b2c-88b1-358fcede68e8", "sighting_of_ref": "indicator--5cd739f0-bc5b-4831-b1b0-64f1e1c7a44c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b74bbb-083e-4147-91fa-234b1394be41", "sighting_of_ref": "indicator--47934bec-1674-42a5-adc2-99d1f3c730bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830526df-b6ff-4792-ac49-43234bf8393d", "sighting_of_ref": "indicator--47934bec-1674-42a5-adc2-99d1f3c730bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b47d0d4-7877-440b-81f6-f1f1e1b40d62", "sighting_of_ref": "indicator--72d45184-ce64-45a5-b826-98c225fca4e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04660623-cdbb-4832-8186-7ea69d9071d6", "sighting_of_ref": "indicator--72d45184-ce64-45a5-b826-98c225fca4e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c30aab-62fb-4754-9250-f9cfe4739db0", "sighting_of_ref": "indicator--13609647-9e99-4869-af2e-592c453ad467", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e246f388-7568-4c1f-b33f-3c40cd3cfb66", "sighting_of_ref": "indicator--13609647-9e99-4869-af2e-592c453ad467", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8046b3f-be5e-401a-ab6f-9091925a4369", "sighting_of_ref": "indicator--60913465-0edd-4437-b591-5bbbea03085c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18de757d-755d-48d8-8611-76751d314cad", "sighting_of_ref": "indicator--60913465-0edd-4437-b591-5bbbea03085c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff768571-1042-4527-a173-17eaae903cfd", "sighting_of_ref": "indicator--1e146a97-017a-430c-8cce-2e4e1614dea7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43e667a-0ca3-4ed5-be52-bce84d293a8e", "sighting_of_ref": "indicator--1e146a97-017a-430c-8cce-2e4e1614dea7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b43d48-9bef-4650-b75a-b91fa085dbe8", "sighting_of_ref": "indicator--f55b3337-f8c8-4a9f-8b62-8268346dfcd9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24205a61-cf34-4721-b173-8e9ce2a6428b", "sighting_of_ref": "indicator--f55b3337-f8c8-4a9f-8b62-8268346dfcd9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a9666f-79d6-44a0-8f59-bb8da805371f", "sighting_of_ref": "indicator--19b0999d-5556-46b5-809a-5beb191ef84b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5446cb9-84ae-4b3a-91cd-865dde8525fd", "sighting_of_ref": "indicator--19b0999d-5556-46b5-809a-5beb191ef84b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7c474c-c874-4b68-b22c-511156f979dc", "sighting_of_ref": "indicator--88d38a8c-9dd3-4538-9df8-d8369ab5e752", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e4dc66-34cf-47fc-9c04-5d26a2386204", "sighting_of_ref": "indicator--9d87360a-b7a9-4448-b1c3-c8b5516b2e26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a72c1d5-9623-4b06-9acb-c24861f27d28", "sighting_of_ref": "indicator--9d87360a-b7a9-4448-b1c3-c8b5516b2e26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421de81d-d756-4a62-be19-903a66e39ab3", "sighting_of_ref": "indicator--b3e0e5fa-c15e-4950-a4ab-1051c2e0496c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6374921c-c962-43bf-9e09-145598aaa96a", "sighting_of_ref": "indicator--b3e0e5fa-c15e-4950-a4ab-1051c2e0496c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbf1c96-401a-48e9-8c9c-b809a51ed853", "sighting_of_ref": "indicator--4c1e7a1d-4f17-4f93-bacd-93df84db6de5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5654f9ef-ee56-403b-bad9-fb901d57bd72", "sighting_of_ref": "indicator--4c1e7a1d-4f17-4f93-bacd-93df84db6de5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac813454-7d7c-498f-9e9f-3045202a4aa5", "sighting_of_ref": "indicator--8e9774b3-d448-4206-a182-8f4c3fabcb38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450a8ee9-ff73-4605-9c63-8724a00570de", "sighting_of_ref": "indicator--8e9774b3-d448-4206-a182-8f4c3fabcb38", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbaca29-fff8-4e0f-b711-29bc09c1e3a4", "sighting_of_ref": "indicator--6d4c9557-49f4-470c-8c70-029a4abd452c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc818c6-a119-438b-845c-a0e2e0ae4cb3", "sighting_of_ref": "indicator--fa4afb45-e254-4b4c-98e7-4fe8cd022be7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba747a0-fbbf-43dc-b4d4-2b32b8f93766", "sighting_of_ref": "indicator--0dac3c4f-d6b5-4b34-af91-0abfb2fc7d03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aa4e37-05b3-42da-a69c-0a6b93e7e050", "sighting_of_ref": "indicator--0dac3c4f-d6b5-4b34-af91-0abfb2fc7d03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd51d09-ada1-4546-b89f-3cdddab3517c", "sighting_of_ref": "indicator--63e472c7-c51c-42cf-a781-60c9bafc887a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce696e56-3b65-44e9-9bba-2d6068a6f9d2", "sighting_of_ref": "indicator--657aafd5-00d6-4e5a-970f-0d0181d208dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59c5ec8-ca1e-4095-ba74-f4932d0e4eae", "sighting_of_ref": "indicator--bdcacf61-edd1-44ed-b54f-ccec80bc8677", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a34a878-bc0e-4201-ac91-8f9759d6bb1d", "sighting_of_ref": "indicator--f0a3e4be-83ee-488d-9e28-330147160381", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa2485f-84bc-4853-b0d2-6b545d99c8f2", "sighting_of_ref": "indicator--37e96d2c-916a-42bb-b09b-bf2c92382e4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de84c040-bfe9-4be3-aa54-8f5eb99702a1", "sighting_of_ref": "indicator--b8656bc1-d77b-46b3-9022-50aed40d7714", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebaaaf3-85c4-4115-958f-65c5caa3142b", "sighting_of_ref": "indicator--72f03002-ac2f-461c-9b57-051950ecc58e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b736578c-ca8a-49d0-8a24-0e0f98e22602", "sighting_of_ref": "indicator--a5bac658-c412-40a9-a881-871b20f19132", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ce47ca-b81a-48ee-9d96-6ff9f4da8040", "sighting_of_ref": "indicator--a12473b4-f74b-40d7-882a-b8587d4127c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefde993-b3da-4b43-853f-cc548f879141", "sighting_of_ref": "indicator--6230d349-35ef-4cea-8c27-ef537feae11f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6232cb8-1ab0-47e8-b139-40564a8c7ff9", "sighting_of_ref": "indicator--df67aee0-a138-417e-a805-97392c2f850b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e102d75-cbd3-4ad1-9edf-470a46b3cdaf", "sighting_of_ref": "indicator--df67aee0-a138-417e-a805-97392c2f850b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799e1882-aea5-4063-9fb5-2336becdaec3", "sighting_of_ref": "indicator--c6e1d461-e142-4fdf-a4dd-c18826c7e6a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2c0952-be85-44b9-846c-59494309d739", "sighting_of_ref": "indicator--60785fca-10c3-4b44-8623-2aceb273a4e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1245d505-1afa-4516-8f8b-3fa16b3c1569", "sighting_of_ref": "indicator--845ca1a6-6489-4b94-887d-e6469f0cefa1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2249df93-9028-4a46-a453-7914adab5175", "sighting_of_ref": "indicator--27d2306c-e3b2-45d6-99fc-1e4f1a4a1534", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae46024-3eff-491b-bb7a-f4f5fca6a22f", "sighting_of_ref": "indicator--0608399b-8812-4927-9d92-b04f839871de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34508c56-23c8-4cf5-a26e-1ea2a14c79e8", "sighting_of_ref": "indicator--6af14e9c-4601-4b7a-ab4e-3d79fe5bc378", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571dcd24-da35-48e5-987c-87b4577e70f2", "sighting_of_ref": "indicator--168c1042-f8e0-4a32-a518-7a820c8b9923", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ea7e34-06fd-4bb8-8a43-5cc3a742543c", "sighting_of_ref": "indicator--0a6969fd-f6ec-48cf-babf-7045e58b86e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99312f13-81e7-4dfb-8cc1-da8e717b62d8", "sighting_of_ref": "indicator--54855a3c-53c4-4b7a-b5c9-0191b2c86e9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e56be26-d76e-404a-bc0a-e837ec9848ea", "sighting_of_ref": "indicator--55dd2488-c18e-4ef3-ab1d-757d69683075", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d76ef83-ed7d-4bc0-88eb-c90bdd5de3d3", "sighting_of_ref": "indicator--1457579f-bcb1-49b7-889f-8bd3205e2564", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482a207c-31da-4372-a282-fc14b97dd8c1", "sighting_of_ref": "indicator--1457579f-bcb1-49b7-889f-8bd3205e2564", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d979b3-a563-455f-8f8c-fb3755e67787", "sighting_of_ref": "indicator--0f585b34-7407-48d4-ad4a-b5ffe09eb8f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce73e1b-09f2-467f-a0fe-856e7ba0efda", "sighting_of_ref": "indicator--37ec8ba5-77a4-4fbe-b039-be6798573e96", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087a0dce-55b1-43c5-99c5-66d38a3d7740", "sighting_of_ref": "indicator--f359b8c9-1918-434b-99c7-be13ec72d1c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f26b41-7eed-4915-89d7-fd3899de64e3", "sighting_of_ref": "indicator--e90bd7ad-fb4d-4e61-bb38-04a439751853", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8c3a10-4977-485e-bbcf-979186429d67", "sighting_of_ref": "indicator--31bb2967-a3f9-4cc3-a03b-258cb4e6395d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49461ff-78b9-4ca5-ac16-cfbdd78b810a", "sighting_of_ref": "indicator--ac267747-1d53-4532-ab61-a53dde73afcc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ce3ecc-b614-4ee3-bd36-636e4b429e46", "sighting_of_ref": "indicator--e4b6dab2-0246-4140-bf17-4c8d79c6099f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1104d2a-7d50-4d20-bead-bc263097e54b", "sighting_of_ref": "indicator--5c40fdb9-031a-45f3-9b40-55f5a92fa507", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297c234b-973f-44e0-9c49-14e04c440a75", "sighting_of_ref": "indicator--45917cde-abd4-462b-8623-1d0832024823", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92a4864-1996-46ce-8d79-12b5aac4dc70", "sighting_of_ref": "indicator--d328708a-39b7-4104-b03f-eca80df9ae7f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b094a5b4-3e64-408b-9c0d-aa842f054f1c", "sighting_of_ref": "indicator--3896638c-0e7f-4ba5-a392-0a7ee3aed889", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1114a7ab-bc35-40cf-a5af-44417acf0d69", "sighting_of_ref": "indicator--3896638c-0e7f-4ba5-a392-0a7ee3aed889", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bcbce6-023d-401c-9030-404c25332884", "sighting_of_ref": "indicator--4405a85d-a517-4783-a374-9f61dd26af18", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb76b272-e5ad-423b-a5b9-c211713d135a", "sighting_of_ref": "indicator--fefc8267-1331-4df7-8477-5c186362e75e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459019b1-4163-486e-bc3e-cb2dcb2caf77", "sighting_of_ref": "indicator--e489b6ea-f51d-41c5-a952-f75d70f3268a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d169fc4c-41a0-4b21-aa82-0e41ead49f59", "sighting_of_ref": "indicator--0e50dc21-1a49-4052-a97f-9cdba1af0114", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3f4189-9a4f-4fdc-b8fc-610ee7a2f201", "sighting_of_ref": "indicator--ecb4ae3c-5dfe-4b8a-9141-db1697a48d7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4ac897-451a-441a-97f7-9cda2b8afa60", "sighting_of_ref": "indicator--ecb4ae3c-5dfe-4b8a-9141-db1697a48d7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0edb6ad-4efe-4007-bff1-563bc0807740", "sighting_of_ref": "indicator--ac1dee16-5ed9-4dcd-b38a-902a36c02969", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2de94f5-e677-4839-b4da-49bd36656b6d", "sighting_of_ref": "indicator--ac1dee16-5ed9-4dcd-b38a-902a36c02969", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5994daa4-c677-42cc-9059-aa86a284de46", "sighting_of_ref": "indicator--44295b82-3fa0-495a-9687-50273d1e43da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6aed0b-865b-405f-9624-2394509e313c", "sighting_of_ref": "indicator--44295b82-3fa0-495a-9687-50273d1e43da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6feab737-313f-4631-9247-e362f32b6c5e", "sighting_of_ref": "indicator--44295b82-3fa0-495a-9687-50273d1e43da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c874e53-e2a3-454d-96ac-991734689880", "sighting_of_ref": "indicator--ef62eaa9-1313-47ce-9b10-bfe1b4c943b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83a20dc-1e97-483b-ae44-6741a89b2864", "sighting_of_ref": "indicator--ef62eaa9-1313-47ce-9b10-bfe1b4c943b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4550f9-6240-418f-994c-9efe5673fb9d", "sighting_of_ref": "indicator--ef62eaa9-1313-47ce-9b10-bfe1b4c943b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d862d7-2b52-46a6-b4d2-9c6e3a864833", "sighting_of_ref": "indicator--2f1105c2-f66e-4b58-a68e-52f971ca0666", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b285cb-3e7e-4244-9d6c-b63be40761d2", "sighting_of_ref": "indicator--466e2b83-325c-45dd-9446-8f20a1e84f1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f114e4-17f9-4589-82f9-8533ee5ea33e", "sighting_of_ref": "indicator--7917f3b6-8846-4862-a2f2-c41cfe4747d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0663f0d-33f3-47b3-8b04-0ca399789e6b", "sighting_of_ref": "indicator--8c8d67ad-f674-47f0-a481-30b7e61413e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0290a571-cbc7-4abf-8e6e-17e43489865e", "sighting_of_ref": "indicator--50e8b475-3a6f-4d90-8100-801407af5ca7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c350004-e932-4aa0-aed3-30c10c60f971", "sighting_of_ref": "indicator--0560e92f-2a9f-4f32-bafe-271314d2419d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e579d371-59ed-4081-991b-85d555e47e57", "sighting_of_ref": "indicator--bc3aedf6-6a16-45ab-b2db-84de790cb7f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de3d74f-171f-4771-bf89-45fddf99d6d2", "sighting_of_ref": "indicator--61c07bac-e10b-4b82-92bc-2f3e102eeaec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311cecf2-4f69-4631-b8cc-944a53d59746", "sighting_of_ref": "indicator--b237e2d7-8b4b-48cc-8b16-d6f624a58425", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6030adb4-77f9-47b7-a76b-5d953ffee24a", "sighting_of_ref": "indicator--b4b587a6-9316-47a5-8544-50fef964d27a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2e4565-900f-406f-b462-40c3d193b1ca", "sighting_of_ref": "indicator--6a7e643c-cb23-4fd5-b6a9-7c537624bbb4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dbc90f-cfea-4ac2-9ebe-66fb2d88efa6", "sighting_of_ref": "indicator--f93c4967-f8d2-4f1b-b718-e2fe442df3d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22418a90-66ee-477a-ba0f-45a7bca9aa91", "sighting_of_ref": "indicator--d7662457-b3f3-4ea8-b689-1614f4da60b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d057574-0aea-4d47-bd40-dc2558e79810", "sighting_of_ref": "indicator--76ddda21-e773-4ae4-8a8c-bcc89145018c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac1fbee-cab1-447e-9f6b-af4d623727f2", "sighting_of_ref": "indicator--ff7c9f29-a4d9-46ca-86a2-6461b6772041", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9269bfee-9c5b-48c4-89fa-2b44ca8d7123", "sighting_of_ref": "indicator--d4b9a734-1ac8-4620-a5aa-8ae66ea32a71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb96e20-890a-4131-96ca-9230bfae2de6", "sighting_of_ref": "indicator--d4b9a734-1ac8-4620-a5aa-8ae66ea32a71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa94bf92-6dec-4f6c-8856-8f5a2d224cb9", "sighting_of_ref": "indicator--316ddd0b-f4e7-43a0-af41-703bbaa13d00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220fefb7-5e4e-4601-b326-6e4a83c43861", "sighting_of_ref": "indicator--865fe791-83ef-4f7d-a1fe-34f73c968a0b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2c9a2c-338a-4482-9844-4ddb3c23fb58", "sighting_of_ref": "indicator--6ce832c3-be16-417c-ae6e-945108bc1d25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9c75c4-6c74-452a-bf57-7a27ec210ef0", "sighting_of_ref": "indicator--037e0ff8-e0da-4859-a5bd-aa27ac3aa36c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b71988-af58-4808-80ea-7eb5bbd0e010", "sighting_of_ref": "indicator--037e0ff8-e0da-4859-a5bd-aa27ac3aa36c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b28274d-3753-4295-948d-63d80010a3fc", "sighting_of_ref": "indicator--037e0ff8-e0da-4859-a5bd-aa27ac3aa36c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24cd76b-0106-4e6f-8bd0-0a46220f6448", "sighting_of_ref": "indicator--dc5a315a-af79-4aa3-ba03-1a9b29d71ecc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e38f0f-9cee-46f6-b6ae-7a1bd42139fd", "sighting_of_ref": "indicator--ed206720-84de-4abc-96c3-8bad99a0acfc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc6daf9-69ad-4c2b-b19c-1eefa29af0dc", "sighting_of_ref": "indicator--ed206720-84de-4abc-96c3-8bad99a0acfc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f080ff87-c964-42ec-a503-d981949c6a1c", "sighting_of_ref": "indicator--ed206720-84de-4abc-96c3-8bad99a0acfc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e209701e-b8f8-4172-8c23-ab55ffa6b499", "sighting_of_ref": "indicator--4f87dee0-b360-4211-80b8-ac02e771c225", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e1c0f2-1a9d-424e-8385-7b6e140de365", "sighting_of_ref": "indicator--4f87dee0-b360-4211-80b8-ac02e771c225", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdabb436-f7a1-4d3e-905c-581e93d60d24", "sighting_of_ref": "indicator--830f2172-81fc-4ee2-b91a-ff7657660f4e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd5b798-cb42-43bb-92f0-015731c97be4", "sighting_of_ref": "indicator--025b8b48-3e29-4fd4-ac66-dc9ea5dcb8b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d38a6f-38c8-4669-832b-c3ac1e98ee39", "sighting_of_ref": "indicator--32444498-4cfd-426d-a1c9-20f065cb5749", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660ca64f-1afa-405b-a53d-51dd7276d61f", "sighting_of_ref": "indicator--50bdd468-a025-4219-b85a-f95ad2d3a066", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb51f2c-c1a0-43bb-91a7-f3958b52fa6d", "sighting_of_ref": "indicator--50bdd468-a025-4219-b85a-f95ad2d3a066", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7682fea0-7eb8-4535-b680-8a2b755f1623", "sighting_of_ref": "indicator--e30b00d7-36e8-47bd-a4bb-69ff7eac9de4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f55212-b6e8-4c4e-9121-4ecda054e6e5", "sighting_of_ref": "indicator--e30b00d7-36e8-47bd-a4bb-69ff7eac9de4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e341b81f-e6d8-43a4-b066-dc3a9584e77f", "sighting_of_ref": "indicator--7fe19f87-be74-444c-8911-9858e03f18db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05f4b18-583a-447f-901f-51e328c33878", "sighting_of_ref": "indicator--7fe19f87-be74-444c-8911-9858e03f18db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4f57b9-4e5d-4100-989d-fc1578879ce6", "sighting_of_ref": "indicator--1d1a9f53-b189-49e5-b256-69adb78cc82a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c749d9fa-a8ef-4fc7-ab95-2a7bcec19d52", "sighting_of_ref": "indicator--1d1a9f53-b189-49e5-b256-69adb78cc82a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d586a8b-0c13-4172-a741-91e405da708c", "sighting_of_ref": "indicator--1d1a9f53-b189-49e5-b256-69adb78cc82a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3487de0c-9550-4c35-a50f-255d6b7429d0", "sighting_of_ref": "indicator--9ff81ec6-9219-418a-9c74-75cdeaf65693", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c49b92-2c07-4bce-8155-52a4498d3215", "sighting_of_ref": "indicator--9ff81ec6-9219-418a-9c74-75cdeaf65693", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5b3e5b-1fa5-4842-842f-248e01a835f0", "sighting_of_ref": "indicator--9c906ee1-d192-48e9-a71c-6f5bee9fa7b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cef0c6-5721-498d-a72d-8bc45777fbd9", "sighting_of_ref": "indicator--9c906ee1-d192-48e9-a71c-6f5bee9fa7b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51aebd8e-2047-4b9c-bdd7-9795f75b7ca8", "sighting_of_ref": "indicator--9c906ee1-d192-48e9-a71c-6f5bee9fa7b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c85f28a-d141-47e5-b7cc-50f1a0d3e335", "sighting_of_ref": "indicator--9c906ee1-d192-48e9-a71c-6f5bee9fa7b8", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb814615-fbc9-47bb-97d3-8e6e7da03e20", "sighting_of_ref": "indicator--656fb476-e49a-44e9-ba87-9c00916ebad7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d837ed98-7daf-40e8-950a-c0976579f77c", "sighting_of_ref": "indicator--eab8f28b-d7ae-410b-82c4-e3825c33c3a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ea22a4-41db-4253-8d14-bd9a3ebe1a7f", "sighting_of_ref": "indicator--e6ee4a5c-91ac-4c0b-896d-7f461b18de0f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422a4ee3-cbd3-4f82-a83e-b281871e63f0", "sighting_of_ref": "indicator--e6ee4a5c-91ac-4c0b-896d-7f461b18de0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d925ef-5db8-4fb2-998b-35019efe03ca", "sighting_of_ref": "indicator--cb5e75c0-129f-4350-ab2d-ae047f27b511", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a687acb-3c10-49b5-ae2c-9b4a5a342d69", "sighting_of_ref": "indicator--972c0df1-91a5-4227-a9d3-7095d97a87c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8943b78d-126c-4734-8ce6-1e5d8ccf4171", "sighting_of_ref": "indicator--972c0df1-91a5-4227-a9d3-7095d97a87c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831a9bee-f04d-4a17-9e4d-bc946e9f07de", "sighting_of_ref": "indicator--a7d83b77-5bf1-4226-b4b1-718887190e88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ad2374-e4e7-436d-902a-7265283a3c64", "sighting_of_ref": "indicator--749cde35-517e-4204-9cd7-030275641fb1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb52ad45-698a-459b-9a5f-5af74025a11b", "sighting_of_ref": "indicator--fa2b48ac-6443-4521-b2e3-234caa94076a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcdc2d6-e268-4af8-994a-a820acdfc867", "sighting_of_ref": "indicator--fa2b48ac-6443-4521-b2e3-234caa94076a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f20e87-257b-4bfd-a5c4-6780af544d0a", "sighting_of_ref": "indicator--fa2b48ac-6443-4521-b2e3-234caa94076a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf90f41-32f3-4bb7-aedc-0f2df4f8630e", "sighting_of_ref": "indicator--a2a64b97-67b3-4000-a87d-2e242602ff10", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad87f5a-05c0-40c5-89ec-4cb9b9b139f8", "sighting_of_ref": "indicator--a2a64b97-67b3-4000-a87d-2e242602ff10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ee6c89-f7dc-4d1e-96ab-eefd61104961", "sighting_of_ref": "indicator--a2a64b97-67b3-4000-a87d-2e242602ff10", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2053d46a-6340-4017-b104-1de539b6b34e", "sighting_of_ref": "indicator--4c8dcbee-b521-4294-8714-47929339db94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9681b7c-73e0-40cd-89de-4fc3450f2a79", "sighting_of_ref": "indicator--4c8dcbee-b521-4294-8714-47929339db94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3663fe4-fdc3-4313-876b-38e638b545f7", "sighting_of_ref": "indicator--4c8dcbee-b521-4294-8714-47929339db94", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f401a09-c7ae-42a2-9bf8-cc514e1a5673", "sighting_of_ref": "indicator--010b5c9a-59e6-49df-ba00-d961f087f953", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34618b6-d07e-46c4-98f4-3cafc045ce97", "sighting_of_ref": "indicator--c59aed7b-f9a0-4b63-8125-0fba4f20df7d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f2bca2-1396-4307-9cc7-4fbe0b996b2f", "sighting_of_ref": "indicator--2abbc9bb-e1fb-4bc9-b262-8df56232e9be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca7408d-7bbd-46ee-94ca-372dda8796f1", "sighting_of_ref": "indicator--db06edf0-03cd-4dc1-9d37-02173c2a8cd0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08036aa2-a1a6-4dc8-a37b-c07fc75f6dfc", "sighting_of_ref": "indicator--de08c5cc-c580-4a7d-9a8e-a9daf48c917b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fe4357-a2f3-4618-8956-36dc40143507", "sighting_of_ref": "indicator--7fdedbd1-da14-4f2d-8f60-602917b37852", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f337e3a-d781-4a6f-9363-6c01677d672e", "sighting_of_ref": "indicator--06f5f1dd-05d5-4791-b5fc-fdfc5c52db4d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50281118-8b74-4fbb-afa5-9403c467d6fd", "sighting_of_ref": "indicator--17329460-fb70-4155-9694-bd99e8611341", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f37acd0-746f-4f49-b047-d5250941121e", "sighting_of_ref": "indicator--17329460-fb70-4155-9694-bd99e8611341", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fdaf9a-16a0-44fc-99ef-dc8c8f7a212a", "sighting_of_ref": "indicator--17329460-fb70-4155-9694-bd99e8611341", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124e90dc-444c-45e0-a0a0-fa3c8a278660", "sighting_of_ref": "indicator--c6e138e0-167b-4021-b262-3e95c079c1ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad878f5d-e370-459a-832f-1cd433a7c120", "sighting_of_ref": "indicator--f81cad8d-0ff9-4053-8b5b-e156c685fbdd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd81562-5c26-443a-a1f4-36a91fa4b991", "sighting_of_ref": "indicator--f81cad8d-0ff9-4053-8b5b-e156c685fbdd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299a5925-bb2c-4d66-9511-b755a6d792ee", "sighting_of_ref": "indicator--f81cad8d-0ff9-4053-8b5b-e156c685fbdd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b03e57-4ad8-4fd5-bc20-b6c2ca87b853", "sighting_of_ref": "indicator--7ea8b893-49f2-4769-b4b3-69ffdb6a12f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b62ad5d-0944-4bc6-8bb6-67945c290dcb", "sighting_of_ref": "indicator--cb07e46b-1281-44ae-a981-9e72b55cc048", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6eed24-113c-4eae-9f67-b8ed14890d28", "sighting_of_ref": "indicator--1727d5f0-7b60-4b8e-83b9-ddb24e4d27a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d834ce-f738-4e15-8c74-da34ec889ff8", "sighting_of_ref": "indicator--34828664-fa91-449e-a597-2d3c163cf9c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a60eed-db3e-44e1-ae04-af37efdb0e15", "sighting_of_ref": "indicator--8afa1aa0-0619-4791-bd8b-03b6b32fd33b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885e827e-ee7c-4b2b-ab94-83fb7aa5617d", "sighting_of_ref": "indicator--9e4cfd6e-8dbb-40d4-8e8d-32792b5ebb3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8c8f91-9251-47e6-9a7c-33a216e93f92", "sighting_of_ref": "indicator--5f54c1d3-ccde-4372-b04e-aa3a1c7e1d46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef0166d-3b33-4967-89c9-f246f9f11e26", "sighting_of_ref": "indicator--6256b287-7633-4445-8e19-1ca23f0536f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a107d36-5d9c-41a9-8863-8aad4ab74748", "sighting_of_ref": "indicator--8247a348-b9df-4fc8-abdb-3cfffc87ba4a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6f458f-680b-41c7-90c1-55fe50b14d1c", "sighting_of_ref": "indicator--4e32380b-d39c-4493-958d-12d17537e2fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba77119-02c9-4c06-ba5d-bc0b1bee7f35", "sighting_of_ref": "indicator--3a9489b4-cfe5-44d0-a08e-76f961f6ae45", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33df0cc7-b11d-4b91-839d-f0f2962d0a3a", "sighting_of_ref": "indicator--65cebab0-b6b3-497b-a6d9-9a7565ba43b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d50db22-09a8-4bc8-8c77-6f30f23f5373", "sighting_of_ref": "indicator--3b9bee4b-679a-4074-aa4e-f701be6e15dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fcc4ff-a264-4402-9202-2c67ea1017c4", "sighting_of_ref": "indicator--ca9bc5ca-03a8-457b-86ea-3f173841b232", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d0dd0b-96ad-4293-8d57-9df6ee864b55", "sighting_of_ref": "indicator--7857609d-078b-4d40-a45f-84be0dc7021e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950fb79b-d0ce-4f28-926b-131af1e88da8", "sighting_of_ref": "indicator--64f601cd-a523-4dd9-8577-0f3cff0a7bce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e946128a-376f-4a32-8c2b-e550fe25e721", "sighting_of_ref": "indicator--651b87d0-7c0b-492f-88a8-7980e2dd3af6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24585d50-5dcf-49fd-acf9-82428c1ac3f6", "sighting_of_ref": "indicator--713468b5-7fb1-4379-8e72-ca99ccaf1160", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06683e37-b14e-41b0-8936-464166a285d5", "sighting_of_ref": "indicator--eef3bcf9-c8f7-40ab-bee9-cc76d805f748", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db17c553-6640-47c7-9d82-f588c127aad5", "sighting_of_ref": "indicator--eef3bcf9-c8f7-40ab-bee9-cc76d805f748", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d9d2c9-b31a-4ac8-9332-0ed22346828c", "sighting_of_ref": "indicator--eef3bcf9-c8f7-40ab-bee9-cc76d805f748", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4a8c09-4e73-4732-834c-41175591c8a0", "sighting_of_ref": "indicator--30e9e8ca-e6fe-47bf-99e3-4f88e12481f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056a197c-958a-44e6-8bd4-39641c7ea56c", "sighting_of_ref": "indicator--11fce0b0-c99b-44a3-b474-da8ae04d01b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77a3ca3-a1d1-47b1-b02f-13d46f7f057a", "sighting_of_ref": "indicator--11fce0b0-c99b-44a3-b474-da8ae04d01b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafd3fff-6cb7-4abc-9dc4-bc7ced45ca76", "sighting_of_ref": "indicator--11fce0b0-c99b-44a3-b474-da8ae04d01b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9341a1a5-172d-46ea-b33d-2b7e5e13bea6", "sighting_of_ref": "indicator--7d11b021-b353-4af9-a66d-f82cf314ced9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e7b9b2-a7ce-47b5-9158-62e43b9a57c4", "sighting_of_ref": "indicator--2e34a874-d0da-403b-bd58-e0f0e30314a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6d6dd5-1501-4f8d-adc7-5efb1b123f77", "sighting_of_ref": "indicator--29aa4996-a515-48d5-a780-6be78926dda8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820c3cf7-6e87-4afd-875a-7efcb38ef4fa", "sighting_of_ref": "indicator--3ca3e8b8-d5e6-46db-8e67-726caa51ee12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e5c8f9-3726-47bc-a027-11ef7f7d702c", "sighting_of_ref": "indicator--0e8229ce-a30f-448d-8dc8-6196e49f8ac7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb626140-1607-41e8-b24f-b184bf65cc6c", "sighting_of_ref": "indicator--dd346973-4914-4f6d-a167-7e36098f0567", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13288e1-7283-4e85-b085-5b45a7d7e793", "sighting_of_ref": "indicator--dd346973-4914-4f6d-a167-7e36098f0567", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba148050-2f24-407f-9538-fadc8b5c7da9", "sighting_of_ref": "indicator--6ff5ca2b-4bc7-4479-9693-35d37f27f243", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63acf49a-1b02-42cf-9da8-51b1a630d32a", "sighting_of_ref": "indicator--6ff5ca2b-4bc7-4479-9693-35d37f27f243", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4756a3-a554-4b59-a962-ac8d470e9482", "sighting_of_ref": "indicator--597c13ca-2662-489d-99e7-041149375768", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3ae594-ba4d-4c29-8dee-fe0dddd6c3ae", "sighting_of_ref": "indicator--597c13ca-2662-489d-99e7-041149375768", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8925f600-a6e7-4306-aa9c-bb291d257e63", "sighting_of_ref": "indicator--597c13ca-2662-489d-99e7-041149375768", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cd4af3-661e-4771-9c87-ee372589ec1d", "sighting_of_ref": "indicator--84646c6a-689e-42cb-aee0-64d3630c30f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f4fcc7-6da0-44f4-af32-b727d62411e8", "sighting_of_ref": "indicator--84646c6a-689e-42cb-aee0-64d3630c30f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44644f1b-1f92-44c3-808c-90a232a66bd2", "sighting_of_ref": "indicator--84646c6a-689e-42cb-aee0-64d3630c30f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e35565-d77f-4868-80ce-6721caa951a1", "sighting_of_ref": "indicator--33ece072-39f0-4682-a411-b97c3a6f37cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40d72d5-4ba5-4f22-8541-575b5d868496", "sighting_of_ref": "indicator--0013ad28-bbee-4387-af93-f5ade709324c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844218b0-6fdc-4918-8867-94625d59957a", "sighting_of_ref": "indicator--0013ad28-bbee-4387-af93-f5ade709324c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8121eef4-391b-4f12-824c-b7b56048b456", "sighting_of_ref": "indicator--f185d862-9d6c-4069-b674-fe955f191092", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894dacd7-ca92-4805-b02f-f7278ee86796", "sighting_of_ref": "indicator--8b48a34b-54ff-4567-a9e4-bcace766c0d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dc4d8d-7cdf-471d-9db2-0fad7963e532", "sighting_of_ref": "indicator--f56af4c1-43d4-48a3-8bf1-789e1a0881bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54813a52-9201-4ee8-aec4-657daf170961", "sighting_of_ref": "indicator--f56af4c1-43d4-48a3-8bf1-789e1a0881bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d2dbb9-8f30-48e0-a937-087036e85595", "sighting_of_ref": "indicator--f56af4c1-43d4-48a3-8bf1-789e1a0881bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5683197-6417-4f6d-857c-66a798756fd3", "sighting_of_ref": "indicator--3aa927b9-b2f0-4526-87b1-c7d0a7c171dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e611e51-fcdc-4a27-925c-152f6847d178", "sighting_of_ref": "indicator--0ca4f96e-6201-4a26-be25-57a5493d1749", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb3e252-6341-43b6-ac6c-9a0bfb9d1376", "sighting_of_ref": "indicator--99e1214b-1bcc-45e2-958f-44089da980a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0669f53f-1a59-499f-bb9f-dded419ccb08", "sighting_of_ref": "indicator--611cec38-4815-44d7-8141-bdcd3f399e0a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e976bf3-262c-4a93-a742-982e2563055f", "sighting_of_ref": "indicator--0167aacf-db27-46e5-af83-c7fdf07cc26a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f6c077-45ef-4477-801a-bc4629f94148", "sighting_of_ref": "indicator--0167aacf-db27-46e5-af83-c7fdf07cc26a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc7bab5-303e-400d-866b-1c9fc681fbe8", "sighting_of_ref": "indicator--9dcf6ada-daf0-4f5b-bb1a-326da2a4a8a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1ff27-5a99-4b0b-93d8-6211b6ebf212", "sighting_of_ref": "indicator--9dcf6ada-daf0-4f5b-bb1a-326da2a4a8a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5edb377-9de2-486c-a00e-fd5cf2468884", "sighting_of_ref": "indicator--00baadfe-2866-4041-9bb7-7ce565c40215", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeae36b-bb86-4a50-b6c0-2636f20c560f", "sighting_of_ref": "indicator--00baadfe-2866-4041-9bb7-7ce565c40215", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d296ec0f-d689-4096-897a-2b35e59194ee", "sighting_of_ref": "indicator--0a8a0d85-0577-4e8f-a23c-1883d866d829", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f2f74b-935b-45eb-bcf2-a89a4c839ecb", "sighting_of_ref": "indicator--0a8a0d85-0577-4e8f-a23c-1883d866d829", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07d1f40-8bf8-4e23-b8ab-cdd8528a255e", "sighting_of_ref": "indicator--9078fb51-e270-4362-94f5-6fff10ee47e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5990ef80-159f-460c-b0bb-2ae179fdd535", "sighting_of_ref": "indicator--85b11593-06c1-4d5a-9a47-e86b69c25eb5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc0398a-7eeb-4670-b4c8-d962b1d26e72", "sighting_of_ref": "indicator--0499ad6f-64d2-4560-ac95-d822bd396623", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f8fedb-5718-4092-8861-338ad7cd021c", "sighting_of_ref": "indicator--6e9c9dcb-6a3a-4851-a480-b53da0836466", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06747db-cdac-424a-8b0e-6ec050c0b02b", "sighting_of_ref": "indicator--c276ca31-bcce-49ad-96f8-cb88b7d2e35a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c692a543-fb47-4650-991d-e29f43a00309", "sighting_of_ref": "indicator--c276ca31-bcce-49ad-96f8-cb88b7d2e35a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6631a6-c139-464e-ba8f-487dd5c35739", "sighting_of_ref": "indicator--fed8e710-4c77-45f3-bdac-7d9194dce7df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f115b02-974c-4b1e-8d2f-5e29f9e0d819", "sighting_of_ref": "indicator--fed8e710-4c77-45f3-bdac-7d9194dce7df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca4311e-3c51-4fc8-babe-2bd89b892b1a", "sighting_of_ref": "indicator--b84235e1-c3ac-4fcf-bd5b-57035e92e5fa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30d2773-ecc7-47ee-a379-9235b630fcf0", "sighting_of_ref": "indicator--b84235e1-c3ac-4fcf-bd5b-57035e92e5fa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b54b29-46a5-4b22-b30f-8377c78c4280", "sighting_of_ref": "indicator--e1261f37-74e5-4cc5-b127-242ab98931cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55b3920-d21b-4771-8874-e2af4c90f32b", "sighting_of_ref": "indicator--e1261f37-74e5-4cc5-b127-242ab98931cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8009b2-f062-482b-a415-49c5f6847763", "sighting_of_ref": "indicator--e5463a5e-f619-4a52-b66f-0cda04e641a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a9f9cc-b84d-4eb7-b5e7-a57653638a8f", "sighting_of_ref": "indicator--e5463a5e-f619-4a52-b66f-0cda04e641a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5429dd9-b804-4472-9e1e-0b3117368163", "sighting_of_ref": "indicator--6b6987cb-d075-4143-81a5-5e597e62f69b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5df455-dbf1-412c-8006-1634473dbcf5", "sighting_of_ref": "indicator--6b6987cb-d075-4143-81a5-5e597e62f69b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e650f905-62fe-4034-8f32-1715b6583481", "sighting_of_ref": "indicator--5b9c31ce-f440-4e70-9fbb-0cf461f1a928", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e0e8c3-5ead-4931-b908-465faf5be3db", "sighting_of_ref": "indicator--5b9c31ce-f440-4e70-9fbb-0cf461f1a928", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da3cfc2-a632-4ea3-937a-4a1b8f0db86b", "sighting_of_ref": "indicator--94e6ab05-6485-4cba-b9ea-574a7c37a7f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da54806-044c-4447-9d06-c649894d8274", "sighting_of_ref": "indicator--94e6ab05-6485-4cba-b9ea-574a7c37a7f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a4a69f-8db3-4310-8eb2-d3fc09636ac7", "sighting_of_ref": "indicator--e8b65bc1-b652-46da-90bc-bd2160fcbdcc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b897ee1-7c69-47d7-a78d-5992ea70165a", "sighting_of_ref": "indicator--729ddc2a-0355-422d-987e-c0b7544239c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c9b7c2-a038-4916-b446-891a219bbdec", "sighting_of_ref": "indicator--c03fdc84-4b80-4b19-a7d6-6dcfeb05f95c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116022eb-f763-449a-979e-65998e19e1dc", "sighting_of_ref": "indicator--c03fdc84-4b80-4b19-a7d6-6dcfeb05f95c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de588ff6-05ed-4e2f-a052-f608e6bdc8f3", "sighting_of_ref": "indicator--700c527c-9ef7-4dd3-9fae-85e44bdab8a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456c51e6-4bc2-465c-8499-d16ce934110d", "sighting_of_ref": "indicator--700c527c-9ef7-4dd3-9fae-85e44bdab8a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cac6f66-657d-46a6-b813-1792e666caac", "sighting_of_ref": "indicator--422f89e4-5d64-4640-9d7d-538b498f7fd9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc4208d-a13e-44b8-9c20-33bcc014015c", "sighting_of_ref": "indicator--422f89e4-5d64-4640-9d7d-538b498f7fd9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c490fc-a424-4a1f-946a-f7e43fc67ab3", "sighting_of_ref": "indicator--22eb9c13-9d49-404a-afbe-1560d979041c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad2ac5e-442d-4409-8310-51b097431fb4", "sighting_of_ref": "indicator--22eb9c13-9d49-404a-afbe-1560d979041c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8dce52-936b-4f54-b38f-a8db4f9f2110", "sighting_of_ref": "indicator--61f1b26d-ae68-4c01-8017-7d87bb6c55ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f66527-2280-414f-aaf5-d11d85fe9de1", "sighting_of_ref": "indicator--61f1b26d-ae68-4c01-8017-7d87bb6c55ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbab825-b240-4d5a-a585-9a7cb01e42d1", "sighting_of_ref": "indicator--db885e13-a86f-4c34-ad94-9d2869144b36", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be611124-d683-458c-a90e-1108d674afbd", "sighting_of_ref": "indicator--db885e13-a86f-4c34-ad94-9d2869144b36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea42bfe-5c72-456b-af99-3a52549d6ab7", "sighting_of_ref": "indicator--8d0095a0-fe3f-4927-9d38-ac1076bb3f39", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae79fe9-e76f-4020-9343-3526be0c52ec", "sighting_of_ref": "indicator--8d0095a0-fe3f-4927-9d38-ac1076bb3f39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322382d6-4c7c-425b-8787-6df64e12b3f2", "sighting_of_ref": "indicator--e8c40934-0e1c-47b6-aad4-0de4f5fe5f50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2160f9-a365-424d-8627-02679ce9bc60", "sighting_of_ref": "indicator--e8c40934-0e1c-47b6-aad4-0de4f5fe5f50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6420d3-641a-4912-b8c8-a9a4239d94c4", "sighting_of_ref": "indicator--d7697870-6b6e-4020-a629-7dd3446e610a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954308e0-60fe-4205-b666-dd7441b91335", "sighting_of_ref": "indicator--d7697870-6b6e-4020-a629-7dd3446e610a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a722a3-1e26-44db-b23a-2b18fa633eae", "sighting_of_ref": "indicator--621a4b95-288a-4a94-a684-6d3143520fe0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945d0618-fb39-4fe6-9ab2-49fcbeb6ae24", "sighting_of_ref": "indicator--621a4b95-288a-4a94-a684-6d3143520fe0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88734095-07da-43b7-a233-38c90b70c88b", "sighting_of_ref": "indicator--a57082eb-18b7-43ee-96ef-07abb936a7ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f6b188-27e1-4101-9b1c-c0014437a808", "sighting_of_ref": "indicator--a57082eb-18b7-43ee-96ef-07abb936a7ea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6767dcf7-8e3b-41b1-8eb8-ec2b3f1d1320", "sighting_of_ref": "indicator--bbffd7a1-1428-407f-8ea8-f3c306276d0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edadc834-dca9-41a6-9896-56cc233dba27", "sighting_of_ref": "indicator--bbffd7a1-1428-407f-8ea8-f3c306276d0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b858e5a3-61e2-4b05-b871-d7ade8d8987d", "sighting_of_ref": "indicator--e3f585d9-1267-4dc4-a603-f3f7a60e984c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc9e981-aba2-4f8e-891d-989e135a3fe5", "sighting_of_ref": "indicator--e3f585d9-1267-4dc4-a603-f3f7a60e984c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25050695-1c0f-4f12-8060-aed28b2ce27a", "sighting_of_ref": "indicator--e8f5d0c7-3108-4a7b-b202-2751eb30b069", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da75b77-e955-4650-80a9-b763867bec12", "sighting_of_ref": "indicator--e8f5d0c7-3108-4a7b-b202-2751eb30b069", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f64422b-df02-458b-a19c-d0ced651affb", "sighting_of_ref": "indicator--0c3e2044-8e87-4e28-8285-02e6b60cc0d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99539e2-7a16-4c4f-8c6d-49d4a9fcbaf1", "sighting_of_ref": "indicator--1b890d00-f7fe-44e2-8872-1e0daf766cb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e398e1a5-9c81-45d8-abce-72f6043a9f8e", "sighting_of_ref": "indicator--99ad69c3-5597-4df2-8a35-8b50b6629746", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f4a10c-bc95-4124-92e3-22bde12925f4", "sighting_of_ref": "indicator--99ad69c3-5597-4df2-8a35-8b50b6629746", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4f397c-5f0c-49c2-aa36-1aaa68fbf6bb", "sighting_of_ref": "indicator--8640f902-e4ee-41f8-8943-267af1cc4e7b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a214a4ca-e4e1-4a92-a04e-8d1cacc3aa63", "sighting_of_ref": "indicator--8640f902-e4ee-41f8-8943-267af1cc4e7b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4113c5-b44f-43b1-87cf-f4eaa5992bd2", "sighting_of_ref": "indicator--0cc42c73-adce-4e7d-adc3-75811a32a721", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebee0d7-0e6f-49b1-81e3-9eeae9287478", "sighting_of_ref": "indicator--0cc42c73-adce-4e7d-adc3-75811a32a721", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ff54e8-abe9-44ea-b34c-a46180b241ca", "sighting_of_ref": "indicator--a03d15eb-ef80-4289-9f28-ff395bce1ae9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9702ace0-1e64-46a7-8d5c-131ae763021f", "sighting_of_ref": "indicator--a03d15eb-ef80-4289-9f28-ff395bce1ae9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f791792-ea09-4d3b-b541-9b6f3f9e948d", "sighting_of_ref": "indicator--6067192f-78f1-415e-8451-2eba08e8cb85", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9794bcfb-af6d-4d7b-8d91-93c3a5b3f989", "sighting_of_ref": "indicator--6067192f-78f1-415e-8451-2eba08e8cb85", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0993b1cb-d21a-4ade-99d3-fb7a7df573d9", "sighting_of_ref": "indicator--210fee6c-6b0a-42e5-ad90-093596743bb7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fd6861-b5c2-4393-9f9d-cdae1dd7aea0", "sighting_of_ref": "indicator--210fee6c-6b0a-42e5-ad90-093596743bb7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfef75fc-833f-4ddb-907f-c5b467f2dadf", "sighting_of_ref": "indicator--b0e4c214-0417-4a93-8aef-c22a1b45aeeb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785cae25-d8a2-4058-97ba-b4d3e929e047", "sighting_of_ref": "indicator--b0e4c214-0417-4a93-8aef-c22a1b45aeeb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb39a27a-8ec2-4a7b-8a9a-6c4994ba248c", "sighting_of_ref": "indicator--c27accf8-25be-4792-a441-59ae3dd2ce2a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da73613a-7f13-4a5d-8e6e-06ed3d79435f", "sighting_of_ref": "indicator--c27accf8-25be-4792-a441-59ae3dd2ce2a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e62f10a-eaef-40ba-9906-de4b77312233", "sighting_of_ref": "indicator--ff26f1bb-05c5-4c23-96b5-a9446dd34c8b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83470cb-b6fe-4958-959a-0a01c288ab24", "sighting_of_ref": "indicator--ff26f1bb-05c5-4c23-96b5-a9446dd34c8b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11a4efd-b783-4122-b3ae-710dd8048338", "sighting_of_ref": "indicator--a159347e-6d3d-4c75-8e43-af074a333ac3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b694f2-6cf4-487e-b355-7528edd1b68a", "sighting_of_ref": "indicator--a159347e-6d3d-4c75-8e43-af074a333ac3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161035f8-5345-4bc7-accf-ed746e588ae6", "sighting_of_ref": "indicator--46f69364-2bd5-4cf6-a18f-a2a2252f438c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7690501c-71fb-4055-93ed-b9c12c676642", "sighting_of_ref": "indicator--46f69364-2bd5-4cf6-a18f-a2a2252f438c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f213fad9-91b7-4d54-95e1-81583a43c457", "sighting_of_ref": "indicator--4e79f07c-45f0-45f3-ba48-173071d14813", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e400c08f-7e99-4487-a98e-39b83b321de8", "sighting_of_ref": "indicator--4e79f07c-45f0-45f3-ba48-173071d14813", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c03741-e178-4fa8-92c7-fab41509564a", "sighting_of_ref": "indicator--7a52d0c5-545e-4bad-8c65-498f6771b0e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64de42a-2e76-4d40-9829-e0a3fa7e1b7e", "sighting_of_ref": "indicator--7a52d0c5-545e-4bad-8c65-498f6771b0e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02621fc-00df-4137-a350-6c2a16bc44c4", "sighting_of_ref": "indicator--cf43735d-c02d-4693-a1ed-f157b8bc7e2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7f0df3-af9f-4092-9c50-a21ca9d3e7ac", "sighting_of_ref": "indicator--f0c2d296-9dbf-488c-9a00-b38520bb5f98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbc5c57-0943-4b3b-90d5-8dfd0e24b8ba", "sighting_of_ref": "indicator--459ec7bd-7834-4444-821c-580ded2f5e97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f760f93-a3fc-4b04-9d32-5eb3dad59db1", "sighting_of_ref": "indicator--459ec7bd-7834-4444-821c-580ded2f5e97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8aba7c-1345-489e-a8a2-03608b08ada6", "sighting_of_ref": "indicator--74618980-eca5-4273-bf80-fce75f3a8f35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e050b9b6-dc4b-434a-b354-8c4f530081ca", "sighting_of_ref": "indicator--9c3b242a-2305-49b6-8610-d0de2d0ee00e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebae00b-a76f-46ad-8f8d-dfc455ddc6fd", "sighting_of_ref": "indicator--39e5b553-a69b-48dd-a27c-2dc091d75a1f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef4952c-cb9d-4edb-a549-3e0235d64110", "sighting_of_ref": "indicator--39e5b553-a69b-48dd-a27c-2dc091d75a1f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587dad48-121e-46dd-b78b-9d5765ed5646", "sighting_of_ref": "indicator--436ac200-5f2b-42c4-b3c8-8463e45214f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11881f0-4667-4ca4-ad8a-23b13b515f21", "sighting_of_ref": "indicator--436ac200-5f2b-42c4-b3c8-8463e45214f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee42a54-78b6-4c2a-b808-a6089041a44e", "sighting_of_ref": "indicator--5f9e7bb9-8c89-4c39-aa7b-aa4d8a1ea9ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f8425d-98f1-48ff-885d-d6cb96d22e1b", "sighting_of_ref": "indicator--5f9e7bb9-8c89-4c39-aa7b-aa4d8a1ea9ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e956b1f6-fb89-4cfb-8676-b5a18a83ac7f", "sighting_of_ref": "indicator--30d59d9f-6336-47cd-9df6-bd2d395085c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709790ae-eb38-41b3-9de0-289acc39d941", "sighting_of_ref": "indicator--b02c8162-6132-4bc8-9e6f-a61ab7d5bf6e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad62773-d0e0-4bff-9f1c-a216612c3ce6", "sighting_of_ref": "indicator--b02c8162-6132-4bc8-9e6f-a61ab7d5bf6e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a940169-19ef-403f-a433-93857bd07fef", "sighting_of_ref": "indicator--84501d8a-f6bc-4d57-bbd5-207ab863130e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a26283-4ecb-489c-9d93-38a257af4a8d", "sighting_of_ref": "indicator--7fda1d62-2a9e-4c96-8bd2-4ceb114d9f6e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7687e956-168b-4a5d-b901-c0d7272719bd", "sighting_of_ref": "indicator--1a632444-7589-4522-8470-15798efc2542", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0938a755-802a-4aa6-be5d-2ce4cb9a09e7", "sighting_of_ref": "indicator--1a632444-7589-4522-8470-15798efc2542", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8bee47-fba2-426d-85e1-c05655442f1f", "sighting_of_ref": "indicator--1d3ad597-63eb-49f4-8932-37604e4819c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7899c210-5b6c-41b8-b97c-5dafe4e15246", "sighting_of_ref": "indicator--1d3ad597-63eb-49f4-8932-37604e4819c3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214fe16e-749a-4ff0-8e70-d18928a1e066", "sighting_of_ref": "indicator--85f75c03-a228-4ce6-ada0-3de9108d32f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dc9249-2e19-43ae-a8b4-c6669ecdc005", "sighting_of_ref": "indicator--85f75c03-a228-4ce6-ada0-3de9108d32f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5536f599-44d1-47a1-95ab-59c00a532079", "sighting_of_ref": "indicator--85f75c03-a228-4ce6-ada0-3de9108d32f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88c3b4f-e2f6-442b-b122-c2527f8cca23", "sighting_of_ref": "indicator--61af298d-30ba-4fd2-874a-dba6d48bacb6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45131e4-3f4e-4d2b-a2e6-92bfd92f6e7d", "sighting_of_ref": "indicator--61af298d-30ba-4fd2-874a-dba6d48bacb6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eca875f-290b-4416-ae4e-b020775470b7", "sighting_of_ref": "indicator--8357cb0a-20f5-4a4a-bac6-ba60d6f62c04", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcafe891-1b00-4c3c-ba7f-ff8ced5da19e", "sighting_of_ref": "indicator--8357cb0a-20f5-4a4a-bac6-ba60d6f62c04", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9624700-c244-4009-ba27-44774d5fd6ff", "sighting_of_ref": "indicator--8254746a-b4ab-43c3-9c6e-9c61095e5107", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f13ae05-6998-49b8-ae6b-f536fe86dfb2", "sighting_of_ref": "indicator--8254746a-b4ab-43c3-9c6e-9c61095e5107", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fad8721-f8b5-4f9e-a139-b4f843a398ef", "sighting_of_ref": "indicator--7216c0d9-59cb-4597-8c12-af2cba504cf5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34ae014-e32c-4945-94e3-4480d23471f9", "sighting_of_ref": "indicator--7216c0d9-59cb-4597-8c12-af2cba504cf5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3366796b-f1c5-471a-af46-992e3eba3eb8", "sighting_of_ref": "indicator--2328a600-334b-4d95-a1bd-52ac26452cec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fd39ac-9294-49c3-a2d2-14825f24273f", "sighting_of_ref": "indicator--2328a600-334b-4d95-a1bd-52ac26452cec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef96e5e-176f-47d8-a773-a656dbb89095", "sighting_of_ref": "indicator--4c82cb99-6487-4e6e-9d94-630d095dd72e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9645bbd-0b16-4696-8e16-091fb2ead742", "sighting_of_ref": "indicator--63dd70e6-8471-4bcc-bb5f-3bfb596e0366", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f78fe0-d4b9-4190-8244-804e75ff74c4", "sighting_of_ref": "indicator--86b7f743-5ccc-44f2-bc0c-295f576d5148", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a43be37-cf0b-469a-92f9-cfcf1f25d601", "sighting_of_ref": "indicator--745bd8cc-54f3-48be-b214-ec90990739c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaae31ae-1df5-45d1-9038-1b6836f32291", "sighting_of_ref": "indicator--d58b8a7d-0452-4251-95ee-ab9fdde99699", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d14786-a129-43c2-8f11-dea0567658b2", "sighting_of_ref": "indicator--d58b8a7d-0452-4251-95ee-ab9fdde99699", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e539c176-e11a-491d-9484-456dcabca845", "sighting_of_ref": "indicator--7c846019-9e87-4345-ab9c-265e91826427", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c71c3f-60eb-4425-8955-43a749d4d850", "sighting_of_ref": "indicator--7c846019-9e87-4345-ab9c-265e91826427", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b6e6e8-aa3b-4031-a70b-cf50a893260c", "sighting_of_ref": "indicator--b41b78c0-9b1a-470b-93f9-7797c97049fb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50811e8-8fb7-479a-a643-7858ecf74c5e", "sighting_of_ref": "indicator--b41b78c0-9b1a-470b-93f9-7797c97049fb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b376f64-1bd3-4294-ab04-15ecdad340b7", "sighting_of_ref": "indicator--e8162ccf-0e59-48bc-8d71-149d7684eede", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2bf61d-40b2-4b52-8700-1eaf5285e191", "sighting_of_ref": "indicator--e8162ccf-0e59-48bc-8d71-149d7684eede", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10152c8-a07f-483a-a084-138852d645c1", "sighting_of_ref": "indicator--9c3eef43-00ea-445a-b473-c74775a173d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78a54f3-1b42-40bc-9b97-5aba478837ea", "sighting_of_ref": "indicator--3648222d-a357-487b-9a3f-b2c2f8b6f33e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17d6ae1-0971-4fb6-8b34-6849d929b118", "sighting_of_ref": "indicator--1f40604e-4f7f-473e-9848-177921837eda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0167c42f-6ad9-4136-b474-4a11ea21bacf", "sighting_of_ref": "indicator--5ebe8a21-a596-43ad-90c8-71d3f78c1612", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec898f36-8b56-4cc4-8b30-8dac7cd92671", "sighting_of_ref": "indicator--512473b2-5382-4a22-998b-5465f9948dd8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ab3455-a9d2-4aed-889d-38a57a996ab4", "sighting_of_ref": "indicator--512473b2-5382-4a22-998b-5465f9948dd8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7012566b-e9a5-444d-8312-b6502f7946f2", "sighting_of_ref": "indicator--512473b2-5382-4a22-998b-5465f9948dd8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10631faa-b648-419d-88e8-2817e060dad3", "sighting_of_ref": "indicator--3c19fac7-9c23-4392-9d2e-a6e0bdd82735", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d658f48f-b4d6-4abc-84c4-4605fb3254ab", "sighting_of_ref": "indicator--3c19fac7-9c23-4392-9d2e-a6e0bdd82735", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65fffb9-69cc-4405-9683-6ae4c5105135", "sighting_of_ref": "indicator--f1eadc9a-5235-49d9-9d8f-387171e33759", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b05448c-3257-4dfa-b68a-bd79d97b265c", "sighting_of_ref": "indicator--f1eadc9a-5235-49d9-9d8f-387171e33759", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1ce610-45b5-44c1-a9c7-a6f0cc964bdd", "sighting_of_ref": "indicator--6e4cb383-0127-4e4b-bdb2-6729c8b8e2bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ba3533-7850-45dc-970e-f2c459d357b1", "sighting_of_ref": "indicator--6e4cb383-0127-4e4b-bdb2-6729c8b8e2bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6513bb8c-b45b-4f89-8293-87138e56f77d", "sighting_of_ref": "indicator--d224fc81-b085-4350-851f-1574cd037919", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50a757c-c802-42e8-8bdf-aac564acc64c", "sighting_of_ref": "indicator--d224fc81-b085-4350-851f-1574cd037919", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee0453a-333c-4039-bd7e-3a63f63da647", "sighting_of_ref": "indicator--d224fc81-b085-4350-851f-1574cd037919", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257caf4f-aaa9-4ec8-b50e-ee5f88c2ca76", "sighting_of_ref": "indicator--dc5f5c0f-c7bc-45af-8f0f-954c4b0ca1a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ef1774-e147-42dd-ba7b-d268154cc8b5", "sighting_of_ref": "indicator--a0c907ff-684a-42c6-9937-9aac5cbfcd95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bea5c28-e7d6-49ee-aacb-a575a8e09ddc", "sighting_of_ref": "indicator--a0c907ff-684a-42c6-9937-9aac5cbfcd95", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c45a9ad-5fb7-45e4-b46b-e55d9e443e9b", "sighting_of_ref": "indicator--d6d5a3a9-bc0a-45a5-845a-473e4d77d10f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4a00d2-8e17-4ad6-b301-7459f21ae6b5", "sighting_of_ref": "indicator--d6d5a3a9-bc0a-45a5-845a-473e4d77d10f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab95a91f-45aa-43c3-8d97-53a2f9ec4295", "sighting_of_ref": "indicator--b2085716-f624-44d7-ae19-5e0a040e2832", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f4d438-cbf4-4200-bd4c-58ca6ffbe66d", "sighting_of_ref": "indicator--ca00667c-4540-4ae2-9288-cc176ecdf988", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce285192-be2c-438e-a365-cbffc339427b", "sighting_of_ref": "indicator--ca00667c-4540-4ae2-9288-cc176ecdf988", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ece974-8eb2-4451-b2ab-0742dc6c5159", "sighting_of_ref": "indicator--ca00667c-4540-4ae2-9288-cc176ecdf988", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd536c4-9308-46a0-9897-0cbb01b2c9e2", "sighting_of_ref": "indicator--743c3ffd-7051-49f9-a228-4c4752436a85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400095d6-a188-45a1-a65e-8d818a3132cf", "sighting_of_ref": "indicator--7f4a0738-55e4-4671-adb4-dbd2a0f99e7d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb82102e-9f3b-437b-b929-e1230d47c310", "sighting_of_ref": "indicator--f7e32f38-894c-4510-b7a4-39a3ea0c0ef6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acaaab8-332e-472f-98c0-eccadc5ebdcf", "sighting_of_ref": "indicator--6bed75f9-6fba-4c4c-84e6-ae981bcbeb83", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35be76e-27d3-42df-ae4c-a371e3e9b15e", "sighting_of_ref": "indicator--60595d5c-485f-4ea5-9ce7-4e2e3b01cb2a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b37b6e8-ca01-4a32-9a68-69d7b39c6844", "sighting_of_ref": "indicator--1b4efd89-cc61-4810-be62-7f2ddfbbffe1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad65c09b-9c95-4e56-b65c-15860c801d5c", "sighting_of_ref": "indicator--6ee90560-af84-4f77-9069-811179565a63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46acea3c-be1a-47c8-b9a8-10342b84f5c6", "sighting_of_ref": "indicator--73d57ba9-2eb1-4bf1-8e7d-4812ef0a7c52", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b84ce0f-3b47-4470-bb4c-8a14e39e0312", "sighting_of_ref": "indicator--59c85726-f14d-47c6-adc4-cdecfd84c6a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554eada8-7131-46a0-ae7f-4c4fa5510136", "sighting_of_ref": "indicator--8bd6b126-ce25-47f1-ba9a-f3ec4d244f17", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed9ba18-23b8-4cc4-be2e-ae23a5077993", "sighting_of_ref": "indicator--ba0b53b9-1fb2-41e1-b0bd-b03f2a865d23", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc30bea-efae-47f0-9a43-107ec124c932", "sighting_of_ref": "indicator--8bc46589-3fe0-41df-8815-9090f880cbf8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbad8731-2a19-4715-a7e8-7884c723dd65", "sighting_of_ref": "indicator--9b9ca3a9-c132-498c-a9df-efb6b9015914", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b97dd3-fb5f-4644-b973-45923b0921a5", "sighting_of_ref": "indicator--934540e4-de07-47f9-8bd2-f951b748e2fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1db01ea-ba72-4b93-91c9-aa60b9b66c8c", "sighting_of_ref": "indicator--7aafc6d7-1a56-4bbb-9144-3e143704636b", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f27f15-db4f-4a34-9404-c6b4ff1daf55", "sighting_of_ref": "indicator--2ddf70ce-b4ed-4896-beb4-361237bef6ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bd8bc5-16c4-4582-bd96-a2ff2dd6da91", "sighting_of_ref": "indicator--689fc2ed-55de-41a7-9d00-f323066a4d4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f291c5-39dc-4ae4-873a-2dd7f8439635", "sighting_of_ref": "indicator--ed1131df-1af4-41d4-8616-f03a3de4b3ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b8bc85-300b-45f5-afc8-3d67018d6690", "sighting_of_ref": "indicator--c22d132a-0639-4720-a82b-21e69d198577", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2928c6c3-2ad0-4ebb-88c1-1fc47d8c093b", "sighting_of_ref": "indicator--c53fa464-7726-4aa4-9f86-b78f314c905a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959ec60b-219e-48ea-a41f-7ea9a1c10f18", "sighting_of_ref": "indicator--aa5995af-1116-4d99-8ce7-a7c3bbe6b344", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86940b48-2d2b-46ad-85aa-2671b530e6cc", "sighting_of_ref": "indicator--aa5995af-1116-4d99-8ce7-a7c3bbe6b344", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1220055f-9cc2-4f04-b083-896997f303a3", "sighting_of_ref": "indicator--34ac4c93-b8e7-45dd-8402-93585e9d970b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525c3d3d-2143-4cf0-a6bb-bd5577904458", "sighting_of_ref": "indicator--5e7a70d9-ebca-4b1e-90ab-38e27a00f5ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8fa28a-fbcb-4c76-9e0e-b98c7446ef83", "sighting_of_ref": "indicator--bf02a708-4270-426e-b348-24fbb9dc6c65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2d22a5-f4c9-4faa-882f-dee49b6f7794", "sighting_of_ref": "indicator--abe961b3-ee57-4142-b08f-f197b7af97d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557bd2e1-8d65-437e-92bb-5c44574abfc1", "sighting_of_ref": "indicator--d98ac766-a734-485e-b908-a3fc5ba90aa9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196d565d-1f27-4f05-b830-d012c26c9242", "sighting_of_ref": "indicator--4b791a9d-e2ff-4b9a-85fe-5abd0043feca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ebba0f-98cc-44b6-bd84-ad784eb23dbd", "sighting_of_ref": "indicator--4b791a9d-e2ff-4b9a-85fe-5abd0043feca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840aa998-d019-4048-b149-3bcc206c2ce5", "sighting_of_ref": "indicator--b48d8e4b-84c0-4adf-bf12-0537ce85251f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c816b6bc-043c-461b-a5cb-8780e3f7b20c", "sighting_of_ref": "indicator--c22edfb1-053b-49ba-9c98-e6477b0d5eb2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21802021-3235-4cec-bdca-454e768e52d4", "sighting_of_ref": "indicator--6ad7ef10-e9f7-480d-98e6-3b4b609d1612", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a033ae4-f8c7-420b-a818-7abcd51f2452", "sighting_of_ref": "indicator--6ad7ef10-e9f7-480d-98e6-3b4b609d1612", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98de52b5-dc8c-42db-9b02-c2c099de487f", "sighting_of_ref": "indicator--4b139a0e-3b35-433b-841a-3e8ba8db946a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7200f0-e52d-4b3c-addb-44e3c68488af", "sighting_of_ref": "indicator--4b139a0e-3b35-433b-841a-3e8ba8db946a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4129b7-2f45-44c6-9bff-54963a338f2d", "sighting_of_ref": "indicator--2efc9f81-3c2e-42ef-86c3-5a2489374d9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803b2c69-0e88-4fe8-89e1-ffc1e5cc92ed", "sighting_of_ref": "indicator--2efc9f81-3c2e-42ef-86c3-5a2489374d9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1888b335-3526-48dc-b832-fde91fe7bce3", "sighting_of_ref": "indicator--af728bd2-4a57-4e2c-957a-4a308b9e95e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b8b97f-a526-49a3-a761-65dbcdb63352", "sighting_of_ref": "indicator--395d357d-4280-4739-94e8-052b00f29afa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11df7ed7-03ca-4847-bd3d-655969d232eb", "sighting_of_ref": "indicator--f58367f8-c84d-45c4-8e93-4de49bb4b72e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022863c4-7f44-4564-80bf-dac7df8dfbba", "sighting_of_ref": "indicator--f58367f8-c84d-45c4-8e93-4de49bb4b72e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9524b492-02a9-426e-82cd-02b017a55f95", "sighting_of_ref": "indicator--77184692-1dc6-467a-a4a8-b561fc937e2e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a944246-2a9f-4f88-ba01-5259ab842443", "sighting_of_ref": "indicator--8b4401e9-bbd1-4f09-814f-24ee70a2d1b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279fb145-6781-4d3d-9885-a16bb3786721", "sighting_of_ref": "indicator--c03c4563-f259-40e8-bf80-55d69259e131", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b133453-983b-4e6c-93c0-4356373368bc", "sighting_of_ref": "indicator--c03c4563-f259-40e8-bf80-55d69259e131", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a3a92e-e6b1-4d02-898d-43a81631016e", "sighting_of_ref": "indicator--c03c4563-f259-40e8-bf80-55d69259e131", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b3cf02-5e8d-4de8-8594-eb46763e1890", "sighting_of_ref": "indicator--0f67d89b-48a9-4859-9024-776cb52b8b52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c8399f-9626-4b9d-8f01-22c0472980cc", "sighting_of_ref": "indicator--0f67d89b-48a9-4859-9024-776cb52b8b52", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c47f5c-8e7a-4310-9789-ad2f342e69e6", "sighting_of_ref": "indicator--3072025f-173d-48e8-865a-6a8e25667cf5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a46e83-2cf4-40b5-a286-4fc4f7c282fd", "sighting_of_ref": "indicator--3072025f-173d-48e8-865a-6a8e25667cf5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6619d149-7e60-429e-a6c4-844d85e31723", "sighting_of_ref": "indicator--08e5a944-dfc4-4df3-9704-c9b9491139c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8efc39-cb98-49b2-8a9c-ad62926610c9", "sighting_of_ref": "indicator--08e5a944-dfc4-4df3-9704-c9b9491139c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a931ad4-f780-4e42-88d9-e271af7ceb00", "sighting_of_ref": "indicator--b00bed1b-35d1-474b-8339-342b657ae952", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a14f7c-7741-4b6b-b917-fbc50b0a8c0d", "sighting_of_ref": "indicator--f69bfd64-490d-4a6d-9787-0c6d50369ba1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942ab557-ad9d-42d6-b18f-65c5f2579ac6", "sighting_of_ref": "indicator--0b26a1e6-f150-4307-98b4-08e5088ac38c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1d00ac-a9b3-4ad6-8f1b-b90d95b649fb", "sighting_of_ref": "indicator--0b26a1e6-f150-4307-98b4-08e5088ac38c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9e89dc-3114-4ca7-a61f-6690833174ee", "sighting_of_ref": "indicator--cfcfe9b3-1bea-461c-b783-d77ab6721809", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bd7209-ad54-4d7e-bf6e-3786627f8973", "sighting_of_ref": "indicator--9f55e5ee-533c-41eb-aeef-d673e963e5af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb6dd58-012c-4ec0-8b53-672d49622e9b", "sighting_of_ref": "indicator--60d54fc3-5872-4d6a-ab9b-793a43d16d81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4100c510-7847-4af8-b047-f80199dc248f", "sighting_of_ref": "indicator--fc5b8b14-0727-41e5-8e52-37dc0476e737", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25787ac-44d2-4fff-8d96-266e5e89dd98", "sighting_of_ref": "indicator--fc5b8b14-0727-41e5-8e52-37dc0476e737", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb65ca2c-7cc9-4ff6-b5d1-796c43f51c57", "sighting_of_ref": "indicator--3e88692d-4c32-4dc7-8a06-1dda78b27470", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3672203-22fa-4475-b16d-d7bdd143cd85", "sighting_of_ref": "indicator--3e88692d-4c32-4dc7-8a06-1dda78b27470", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634b3551-b7a5-4b72-8556-0de14ca8b6ef", "sighting_of_ref": "indicator--ab5131a1-be4b-4025-a599-9d90d9e338be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77b701e-3422-4e99-924f-2043d658c274", "sighting_of_ref": "indicator--ab5131a1-be4b-4025-a599-9d90d9e338be", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436806f6-87f1-49b5-868f-5ccb5266f07f", "sighting_of_ref": "indicator--ab5131a1-be4b-4025-a599-9d90d9e338be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a944737-b919-4609-b283-4ec0e950660d", "sighting_of_ref": "indicator--b63f287c-173c-47ca-aadc-8353862a5450", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24eac986-13c1-402c-93ed-6966933292f5", "sighting_of_ref": "indicator--b63f287c-173c-47ca-aadc-8353862a5450", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6b93e1-e412-441d-a493-cecc83d827d9", "sighting_of_ref": "indicator--b63f287c-173c-47ca-aadc-8353862a5450", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673c2c6e-44d4-4b2a-9b1a-9e6ea9cd872f", "sighting_of_ref": "indicator--77ef169e-77ef-49a4-bb92-c7d0f42d42ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7157f19f-a6ca-48b9-8446-58f33e25f821", "sighting_of_ref": "indicator--77ef169e-77ef-49a4-bb92-c7d0f42d42ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8a5a1d-7f2b-447b-885b-6c24142fbfaf", "sighting_of_ref": "indicator--77ef169e-77ef-49a4-bb92-c7d0f42d42ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d477b9-49f8-4430-bd47-894059c20d6c", "sighting_of_ref": "indicator--fa442020-fe6f-41ae-b442-5805ebbd3588", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517cc603-69a8-422b-8dc8-7090269eb3c3", "sighting_of_ref": "indicator--59e2b259-f08e-4a9d-a21d-b0d5ce9b7a64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444f9971-1b70-4532-aef3-a7276ba98d61", "sighting_of_ref": "indicator--bfcbd133-df14-45fe-b890-ffce290525fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cc5175-3db3-426a-aea2-23691983a580", "sighting_of_ref": "indicator--913b2b6d-bf52-4068-ade4-9433e563d194", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca20ea2a-2fd8-4f0b-bbe9-7e9041c2dcbd", "sighting_of_ref": "indicator--9da135a8-0b71-4648-869c-9a6b6fd293e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db6f5c6-5f8c-40ef-8fb9-fc4c1bbb5f18", "sighting_of_ref": "indicator--9da135a8-0b71-4648-869c-9a6b6fd293e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113c01e5-9050-47d6-aae9-e1cc1ae655f3", "sighting_of_ref": "indicator--2a7a47b8-9b7c-4b0a-9a37-66441a013fe1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c52bf8d-98c7-4f3e-8325-e207342f85f8", "sighting_of_ref": "indicator--2a7a47b8-9b7c-4b0a-9a37-66441a013fe1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afa683a-6710-4f7f-940b-d7c2b8655c87", "sighting_of_ref": "indicator--e9577355-1151-4b80-8c49-93ba11568c89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef4302f-28d2-4b8b-a29d-d0dcfb984129", "sighting_of_ref": "indicator--5a4bed08-ac2f-4154-81ad-2c6c9ad1878f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9db519c-ffe5-47ad-9d57-7008ebfd01c4", "sighting_of_ref": "indicator--5417574e-826d-468c-88f7-31cc5d8e6056", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee0d2ec-495a-45bc-9659-74dc6f0cb9c0", "sighting_of_ref": "indicator--5417574e-826d-468c-88f7-31cc5d8e6056", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4828da5d-7a21-47a2-b207-9b77009c39d6", "sighting_of_ref": "indicator--4cf9fc20-296e-45e5-8ff4-8641bade1b94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bfa52e-7673-4e6d-a87e-ccb6ea12af87", "sighting_of_ref": "indicator--6af847fe-9985-4628-819f-bd6a15fc6958", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5067e8eb-03d5-4a0b-b45a-669826654d3e", "sighting_of_ref": "indicator--a07e8e12-714c-43a2-9096-c271732c7d58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edb406d-e512-4d29-bb5b-6f09c43c5a3a", "sighting_of_ref": "indicator--d780bc5f-6979-4729-be63-1d2cd3ea6946", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d7f149-21ec-4e85-9252-4dccd0e37fcb", "sighting_of_ref": "indicator--ada957a4-dc42-4dfe-8c69-e26f044d911b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ce717-7480-4d69-91b3-18bf0c2703cb", "sighting_of_ref": "indicator--095f9c7d-b558-4d40-8b2d-08ec9729d789", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd14ed8c-95c3-4242-953b-9e097aae7578", "sighting_of_ref": "indicator--095f9c7d-b558-4d40-8b2d-08ec9729d789", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d778fe-789c-4a6e-a853-72c011da3609", "sighting_of_ref": "indicator--1f631c13-8374-416e-ade2-c14560c57c25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3417a2b8-9f71-4580-a9d3-f30050089abc", "sighting_of_ref": "indicator--a696eb60-f8d9-42d4-8e91-b417639b9ee8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8926bda2-7907-45a0-9c8e-d157e0dab88a", "sighting_of_ref": "indicator--a696eb60-f8d9-42d4-8e91-b417639b9ee8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da93783f-e4c4-4747-b181-906bd7c609d7", "sighting_of_ref": "indicator--ac4ed0f9-8203-492b-bec8-c433fd82faee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3713a8d2-7756-4a2f-b01a-9069894d5e2e", "sighting_of_ref": "indicator--3ad877c0-4ce7-47df-8f88-8471b2e2d8e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e6b8e8-5cae-4ad9-94f6-c9380cfb90ed", "sighting_of_ref": "indicator--a11b2339-f821-4c26-b9f9-ac00c7c6637c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345bd489-8a60-47f6-b1fb-ddccc4d591ce", "sighting_of_ref": "indicator--63b034e1-4e14-4415-9cda-2755b57618bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b1cea0-8aba-41f7-8c02-dd30fcbe224e", "sighting_of_ref": "indicator--76f528e4-e498-47d4-8842-6137086004eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e926926e-3607-41ff-8684-65d7e0d857ba", "sighting_of_ref": "indicator--3eca8805-4ae3-4e86-957d-5764fe356c60", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee78cf1-eaab-4042-b1f5-418bbca6f449", "sighting_of_ref": "indicator--3eca8805-4ae3-4e86-957d-5764fe356c60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20454078-5b13-45b6-93f9-298d0591dcf0", "sighting_of_ref": "indicator--d7fc3628-ac4e-44d2-86d7-73ad6b4578d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f2c5bf-b234-4c62-a175-6a3e9b69af15", "sighting_of_ref": "indicator--d7fc3628-ac4e-44d2-86d7-73ad6b4578d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86273f7-2cc5-4c03-8dfc-9bf6b6863f07", "sighting_of_ref": "indicator--c511bb5c-104e-43cc-829c-d1b41383d4f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4a904b-9c50-48a3-926c-1a90d3f37030", "sighting_of_ref": "indicator--c511bb5c-104e-43cc-829c-d1b41383d4f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad0512b-b092-448a-a285-08acc78b9ce9", "sighting_of_ref": "indicator--3cc77ce9-a7b2-407f-8c55-bc8be45a53df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368b2451-8d6f-41b6-96bd-1385df5a514a", "sighting_of_ref": "indicator--3cc77ce9-a7b2-407f-8c55-bc8be45a53df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c311cf-fd2b-4115-a8ff-9afc410e6509", "sighting_of_ref": "indicator--989c5dd6-5f1b-433d-b9af-59cb6b10c27c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9b0c76-db41-43f1-9fa0-298880617baa", "sighting_of_ref": "indicator--989c5dd6-5f1b-433d-b9af-59cb6b10c27c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbe9ebc-4e23-45c6-aec7-d82e55dc6903", "sighting_of_ref": "indicator--8a2696ec-61b2-4ce6-b0bd-bbbb4daf3fc6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d9dc3-ce87-4e1f-bd2e-e1b025204ff8", "sighting_of_ref": "indicator--73e23b7e-b649-4cab-b7e0-1d2e5680a8bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3d43bc-e61d-4aee-b8c7-8d83240631a0", "sighting_of_ref": "indicator--73e23b7e-b649-4cab-b7e0-1d2e5680a8bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d805dfd-07bf-41ab-b7c2-198b5c94395f", "sighting_of_ref": "indicator--c9ff1dcf-f841-4357-8ca2-ebe26b3a1d0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161f4f17-2608-4d5f-a547-5b9d7ed2def8", "sighting_of_ref": "indicator--ec1bcc12-a878-40f8-aba3-8cf2c4812738", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1755682-a3a5-4605-8691-35bdfffdbcd4", "sighting_of_ref": "indicator--a4067386-a6fa-4914-863f-ffab9e4cd03d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12acaaf1-2fcf-4933-8ef9-4d04dd6725b5", "sighting_of_ref": "indicator--a4067386-a6fa-4914-863f-ffab9e4cd03d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019809e9-c322-4214-b0d5-f9aa478ae563", "sighting_of_ref": "indicator--311b11b3-7769-4b6a-8962-3fe071cc518d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d012bb-3595-4ff6-af82-d9d2bc3ae211", "sighting_of_ref": "indicator--311b11b3-7769-4b6a-8962-3fe071cc518d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dde88b-ef61-427f-9c4a-9828d79c57d2", "sighting_of_ref": "indicator--6368abac-f397-47a7-9953-469d4dc040ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f20ec59-19bb-48b0-9c40-81f328258a9c", "sighting_of_ref": "indicator--6368abac-f397-47a7-9953-469d4dc040ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2011b0-8dda-4b46-bb81-2e9c83041c58", "sighting_of_ref": "indicator--112d5e50-3676-4ef8-8071-ad4c76165c43", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6feb1f-b231-42cf-b470-f92eab1098a4", "sighting_of_ref": "indicator--6565eac3-b2ca-46d1-a563-78e1e22b86dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bac0e5-b08c-42fd-9693-e8aef8d15b5b", "sighting_of_ref": "indicator--aaaa3654-e653-4a9c-8875-b880c71aeb78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9a0568-71bd-4c76-a909-5d111246227e", "sighting_of_ref": "indicator--a2a53ff2-b71d-43af-8a34-1a2ec6b1ccd1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9a8959-df6b-4ab7-b992-e273978631d8", "sighting_of_ref": "indicator--ab609dd5-5015-478a-bebc-951ead71ff07", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f7ede9-b1d0-49f9-8f2b-1af8d9851fb8", "sighting_of_ref": "indicator--ab609dd5-5015-478a-bebc-951ead71ff07", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bbfe04-8cb1-4d03-af8f-00b34158b4a6", "sighting_of_ref": "indicator--a3c30d2a-fee0-4197-b2a6-dde0bb82d6a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46882bc4-4e77-48f0-a85e-e0729cc2c8d4", "sighting_of_ref": "indicator--72551f7c-3786-443b-ae3b-31e25f45d346", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e2a00a-a663-4ed5-ab2a-42a97fe5b19e", "sighting_of_ref": "indicator--cefc0b48-5b29-4311-883c-9346ff1f5d64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a831fddc-094f-40d7-b1d2-ef762979fe8f", "sighting_of_ref": "indicator--b91001cf-cded-44c0-ab58-ad36c5618e44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abcaed1-ab65-4026-8490-6a80bf3cc892", "sighting_of_ref": "indicator--67023ff0-e6f8-4d9d-905b-88a5386ad91e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2658d72-cf76-4930-bcf0-51c18140cb82", "sighting_of_ref": "indicator--67023ff0-e6f8-4d9d-905b-88a5386ad91e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d59ec13-d02d-4ddb-b198-b9bed1db62d7", "sighting_of_ref": "indicator--76c0a05b-1510-4d04-b892-a5b26bb785a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae05790-a4c7-4c7e-87ee-b65325977248", "sighting_of_ref": "indicator--76c0a05b-1510-4d04-b892-a5b26bb785a6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0c9217-d5b2-4031-b047-d929ae663f48", "sighting_of_ref": "indicator--05a25065-fff1-492b-af98-cf300eeba334", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed9c6ed-079f-43d0-aa39-a44fd518f16b", "sighting_of_ref": "indicator--05a25065-fff1-492b-af98-cf300eeba334", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe7101a-f6e4-47b8-9aac-660eaec8e4d4", "sighting_of_ref": "indicator--3e83ef4f-2e29-4a66-9d40-f114fa29f8df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242f8340-8d77-4704-8978-3b65f8f2dbb1", "sighting_of_ref": "indicator--6b422dd6-2d10-48c0-961e-0f4f8ff91ccb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c932e600-fad3-48c1-a0dd-56196aa4cee7", "sighting_of_ref": "indicator--83d9ad70-c7ab-4aa6-9175-c9dce6483dc5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef23527-a195-4cb2-b726-8bb2c9ef1543", "sighting_of_ref": "indicator--6b09c53f-4b4d-4238-a567-1bb87320a4ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9cea73-33db-4af3-9506-937d964bde49", "sighting_of_ref": "indicator--6b09c53f-4b4d-4238-a567-1bb87320a4ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8569050d-6c54-405a-955e-163a8b7d7bd5", "sighting_of_ref": "indicator--6faea7b1-de30-4d58-9710-9ad88652500f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847b34ec-7351-4b2c-a993-ef142970c19b", "sighting_of_ref": "indicator--6faea7b1-de30-4d58-9710-9ad88652500f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5f655b-bddd-4fe7-a539-f95e3d54c94b", "sighting_of_ref": "indicator--6faea7b1-de30-4d58-9710-9ad88652500f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27443a51-6c48-47fc-bbf3-d1d1abde53a5", "sighting_of_ref": "indicator--3d4e987d-5604-430e-8192-daec0d64a04f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c528eda-42e5-4354-8864-d83110263049", "sighting_of_ref": "indicator--a7c7698e-1f13-46bb-8543-01255c7d09e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f978ad-5f52-4d95-884c-aa41820b0e80", "sighting_of_ref": "indicator--1a8a4b09-fcec-4532-99a4-4f17daa6b88e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0eebf3-b572-4dc2-9d61-856b121e8f1b", "sighting_of_ref": "indicator--7416cdb1-c67f-4300-bab9-837ec490c07f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a0acfb-58b0-4159-b62a-4249952bd763", "sighting_of_ref": "indicator--7416cdb1-c67f-4300-bab9-837ec490c07f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee9e58f-8ab8-4cc9-b5a8-9624163dc1cf", "sighting_of_ref": "indicator--83582772-7942-486a-83eb-2259c30c2f9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6184ea-3651-4620-8ebc-66559cc77fd1", "sighting_of_ref": "indicator--83582772-7942-486a-83eb-2259c30c2f9e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9c40a0-5d3e-4ddc-8d08-6017b22faf3a", "sighting_of_ref": "indicator--83582772-7942-486a-83eb-2259c30c2f9e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003ce1aa-11b5-49c3-8f30-8fb5314edbee", "sighting_of_ref": "indicator--db68339d-da8b-4949-9034-a87121ca516f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc7c457-7612-4207-ac85-f1d46b99e58b", "sighting_of_ref": "indicator--db68339d-da8b-4949-9034-a87121ca516f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00384f34-4206-4614-a540-34277d91d707", "sighting_of_ref": "indicator--ff56c9e0-eeb5-4bf8-99aa-075f77c2d540", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d2c6b3-a22b-4e11-b3f3-056abfd2b34d", "sighting_of_ref": "indicator--c6fa9bae-a0ef-4d02-9547-7ce114764523", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b0db66-5cf4-454e-bb27-9a6306905456", "sighting_of_ref": "indicator--d32210c3-8ad6-4c36-9899-002803408448", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a65b808-1a9f-41bd-8141-4764787b181e", "sighting_of_ref": "indicator--d32210c3-8ad6-4c36-9899-002803408448", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d30e77-f556-47d3-bbb7-9996adbebdf0", "sighting_of_ref": "indicator--0a6fc86e-d6e3-4ec9-96d7-6711869c9e65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5704f350-e35d-45df-8385-41b48e22f72b", "sighting_of_ref": "indicator--0a6fc86e-d6e3-4ec9-96d7-6711869c9e65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81620d02-5d8c-4cb6-960d-66d2f7c94641", "sighting_of_ref": "indicator--0a6fc86e-d6e3-4ec9-96d7-6711869c9e65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f393fd4c-3eb7-416e-a95c-fcf94cdd8c7b", "sighting_of_ref": "indicator--27875c58-e75a-436f-bfc7-eb4b5f659a1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac79c2d8-bf51-4d03-8248-7901d55167a6", "sighting_of_ref": "indicator--e457c1c2-64fb-40c4-845b-dbe8397e285c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8e67d9-3d06-4b7b-962f-95e6ca6df799", "sighting_of_ref": "indicator--de97229c-d31e-4bb3-a029-1d6aae095543", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63828745-96a7-4fab-989a-2028d2fbccc5", "sighting_of_ref": "indicator--de97229c-d31e-4bb3-a029-1d6aae095543", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110b0ad4-d903-4548-ab52-a83dcadd17ad", "sighting_of_ref": "indicator--a504ee1e-eac1-475f-a521-f6f0e9ee803d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83baf2f-ee2d-41db-8740-42a95c5a50b7", "sighting_of_ref": "indicator--a504ee1e-eac1-475f-a521-f6f0e9ee803d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17571598-8991-45a4-ba2f-b0d97cea656b", "sighting_of_ref": "indicator--a504ee1e-eac1-475f-a521-f6f0e9ee803d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2c59eb-9b2c-4634-a54c-0116abee8c7b", "sighting_of_ref": "indicator--b8ef94c2-02f4-4c0b-b8e6-e535bfd26655", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e11d190-390c-424d-a680-4dd0353f8d55", "sighting_of_ref": "indicator--b8ef94c2-02f4-4c0b-b8e6-e535bfd26655", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69551f3f-389e-469a-a884-d61c852a1040", "sighting_of_ref": "indicator--9b9ff483-9871-4868-94e6-2b5c2497e4e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a40f40-6fdd-4f0f-b44c-0260b3ef31cc", "sighting_of_ref": "indicator--4f407258-78cd-4302-817d-c38ce0e816fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4c89c3-b174-4604-94c1-6c18ccf08f24", "sighting_of_ref": "indicator--4f407258-78cd-4302-817d-c38ce0e816fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2afb32f-76f5-4147-9be7-781b7530de74", "sighting_of_ref": "indicator--fcaad2f1-1f2e-4893-842e-0559bc6e87c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f6b2e9-c5bd-43aa-a413-377e3c49f192", "sighting_of_ref": "indicator--c04239ea-3959-41c2-9143-238fe5a6f890", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db823cac-190b-4170-ba23-d675cecee78d", "sighting_of_ref": "indicator--c04239ea-3959-41c2-9143-238fe5a6f890", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8bbc60-d07d-4eec-a839-e64f9959785e", "sighting_of_ref": "indicator--e898e99f-76ef-471f-9912-41553a0b426b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49efc543-15a8-4fec-bf7d-04f89e7a556a", "sighting_of_ref": "indicator--11a6e24a-4ee6-4fa9-ac72-c3206fb581c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20be80a-a37c-407b-b39a-baa8042f02a3", "sighting_of_ref": "indicator--0979a83b-2998-4dec-aed1-47f21f46e4c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c8a59f-39f7-4907-97d7-4593069ddbf2", "sighting_of_ref": "indicator--0979a83b-2998-4dec-aed1-47f21f46e4c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2875f7-e7b1-48b1-b929-877fb0b9263e", "sighting_of_ref": "indicator--0979a83b-2998-4dec-aed1-47f21f46e4c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efd958d-c331-4e41-8d2d-4f788eea111f", "sighting_of_ref": "indicator--5bc20bc5-0d2c-4355-8ea9-2956890e5cc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63923fdc-d301-4d8d-89c8-99510fe0ca8f", "sighting_of_ref": "indicator--28853aaa-d6ea-453a-905d-99b3a2f8dd74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0474aee-5db5-4680-a1fd-1fb71d008bb7", "sighting_of_ref": "indicator--28853aaa-d6ea-453a-905d-99b3a2f8dd74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cebab92-ca63-4f1d-b3f1-c9e065a17631", "sighting_of_ref": "indicator--28853aaa-d6ea-453a-905d-99b3a2f8dd74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a8b9fb-bfff-4559-b8a3-5d24efef683d", "sighting_of_ref": "indicator--82d4daa7-3954-4747-a8e9-25a97f0c7019", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bcd89d-de8d-49a6-87e3-177dd35b5f88", "sighting_of_ref": "indicator--a9ee8c96-08c7-41ec-b80c-e8cc88d986e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c1142b-95f3-4bda-a15d-55b85993dfd9", "sighting_of_ref": "indicator--a9ee8c96-08c7-41ec-b80c-e8cc88d986e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e230707-7715-4a73-942c-b7fcca4562de", "sighting_of_ref": "indicator--427383d7-1a00-4a37-8adc-e8adc7b9f80b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d36b2b5-243e-4078-883a-4b33440b7662", "sighting_of_ref": "indicator--ee0f8e95-2ed0-48aa-aaa2-2b820c431f2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d128e7a7-0aeb-4e3f-8e67-3d9099b8fe86", "sighting_of_ref": "indicator--ee0f8e95-2ed0-48aa-aaa2-2b820c431f2f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07e14c7-f665-466f-aabc-8858833a8d2a", "sighting_of_ref": "indicator--340f3c24-c5ae-4f3f-b61c-dbc3670878c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f43f6e-8c8c-4dcf-b795-a60789a49c30", "sighting_of_ref": "indicator--340f3c24-c5ae-4f3f-b61c-dbc3670878c9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbc4e6c-dac9-47f1-8849-c73666070103", "sighting_of_ref": "indicator--f0a46f44-907d-45f0-999e-85f1b9ca4db5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31daef4-4454-4feb-80f4-21c9e30b56a5", "sighting_of_ref": "indicator--f0a46f44-907d-45f0-999e-85f1b9ca4db5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56a58dd-f750-4d98-b8ff-2bfffff8beb8", "sighting_of_ref": "indicator--71803566-829f-4cbe-9bca-f5981bd0c78c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a38ec0-ca75-4285-9be9-f5578b9d728c", "sighting_of_ref": "indicator--71803566-829f-4cbe-9bca-f5981bd0c78c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c06288-a4fa-4624-bd90-dbc76304f799", "sighting_of_ref": "indicator--71803566-829f-4cbe-9bca-f5981bd0c78c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c7f8fd-5239-4440-9b9e-98223cf3a3c2", "sighting_of_ref": "indicator--2611521c-235b-4d57-99f7-d85e44228992", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee133cab-1935-429b-87f9-3122842f9f07", "sighting_of_ref": "indicator--2611521c-235b-4d57-99f7-d85e44228992", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c024e5e5-ed9e-4a5a-ad59-86186ed66c3b", "sighting_of_ref": "indicator--2a71f3ec-e0a7-40ca-9615-0753d863c023", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bcfcca-ffa5-4db0-9d2d-473dacd3ce97", "sighting_of_ref": "indicator--2a71f3ec-e0a7-40ca-9615-0753d863c023", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85929c4a-2af3-4ffd-b66c-04e98ec0819f", "sighting_of_ref": "indicator--42f06354-fca4-4e99-8f04-f6db65841514", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e014ae-9c10-4c98-a776-000e0bfd97da", "sighting_of_ref": "indicator--42f06354-fca4-4e99-8f04-f6db65841514", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18862604-96e7-4fe8-acf1-58f39eb10f2d", "sighting_of_ref": "indicator--1ad94776-4844-40a5-ae36-bd91b34c123f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baecc352-dc0d-4f9f-9823-09fa090548c2", "sighting_of_ref": "indicator--21e02b5f-7ab0-41b7-bd3c-d7ff17a08c0b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e3a760-0296-44c2-b49c-3168964f08c7", "sighting_of_ref": "indicator--21e02b5f-7ab0-41b7-bd3c-d7ff17a08c0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd69443-1461-4891-9553-18e2e85e36ea", "sighting_of_ref": "indicator--987c6b72-e197-42e4-a7e7-0ac107af60ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276b0d9d-20fb-4a1d-9fa1-687b1d43cb5e", "sighting_of_ref": "indicator--91743400-f5fc-4e50-a5dd-8a80f10fc717", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb32206d-4eba-4bdf-87c1-cb1aa4160216", "sighting_of_ref": "indicator--91743400-f5fc-4e50-a5dd-8a80f10fc717", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803ba06d-80d8-4605-b353-e06751c6870a", "sighting_of_ref": "indicator--b77dfac2-20d3-4cf2-aae4-3aacb89d3164", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6204b9bb-ab36-4274-800c-c0cd2c2b1f8d", "sighting_of_ref": "indicator--b77dfac2-20d3-4cf2-aae4-3aacb89d3164", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f390e781-bcb9-43e7-b2a5-0b98dde8c8eb", "sighting_of_ref": "indicator--02978be3-3a2a-444b-970a-057f928897c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2375f14e-ee0b-4b65-88f9-1b21600cc4c8", "sighting_of_ref": "indicator--a1637923-1d1a-44fc-96ec-ac0be70d1859", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb127d04-665f-4b5e-a33a-115dfcdda849", "sighting_of_ref": "indicator--a1637923-1d1a-44fc-96ec-ac0be70d1859", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15328b8-c99e-4e36-bb9c-92b4148668d5", "sighting_of_ref": "indicator--a1637923-1d1a-44fc-96ec-ac0be70d1859", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed0b5c2-d493-40ab-bc50-596077214f79", "sighting_of_ref": "indicator--260e29aa-23a4-44bb-a75e-30f59a4a765f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c645874-b2dc-43ef-9a95-9662a43719fa", "sighting_of_ref": "indicator--260e29aa-23a4-44bb-a75e-30f59a4a765f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ee8946-29cd-460f-9f3c-23ff5f58a6eb", "sighting_of_ref": "indicator--3581a954-0373-4004-90fd-92fabed6c199", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee8a757-c38d-43c3-94e8-217bfd5739c3", "sighting_of_ref": "indicator--3581a954-0373-4004-90fd-92fabed6c199", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a1d168-4fa3-4b28-b700-9e55e8028711", "sighting_of_ref": "indicator--9480bf2f-a724-4bab-90d3-67a1cce43ae5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e969331-3ead-4021-869d-12db607202e1", "sighting_of_ref": "indicator--9480bf2f-a724-4bab-90d3-67a1cce43ae5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f445cd25-f093-417f-a5d4-69fc3faa01c9", "sighting_of_ref": "indicator--3cab1fe5-e3d0-4d7b-9d3b-bc326362b479", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ce549e-9769-4317-ae68-f43540939a5a", "sighting_of_ref": "indicator--3cab1fe5-e3d0-4d7b-9d3b-bc326362b479", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e30c1e-33cc-407a-8eb9-9ec2e3843359", "sighting_of_ref": "indicator--b728dcf7-3bac-4fa3-acad-cbec31cb5981", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202d7ef0-bc9e-4108-b130-cc38113f0903", "sighting_of_ref": "indicator--b728dcf7-3bac-4fa3-acad-cbec31cb5981", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb425718-d950-4218-950d-5aab7b8ac0f4", "sighting_of_ref": "indicator--f13c359b-7c1a-4943-b8a5-135adfa33206", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941f65e3-bbe2-4385-9cc6-118d4d724379", "sighting_of_ref": "indicator--f32f56d8-22c1-4d0e-9aca-33fc5ef66c0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078974c3-fa79-4258-bf51-fce26425fbbf", "sighting_of_ref": "indicator--4d0a27a2-b6b1-4b2e-afcd-8786e75c30d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b972feb-e15b-4ee4-a305-eaec63bc425f", "sighting_of_ref": "indicator--cb121f2e-6ee3-40e8-9981-9ab4366c5f74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201e90c7-5756-4017-abbe-f40e32d40f8a", "sighting_of_ref": "indicator--cb121f2e-6ee3-40e8-9981-9ab4366c5f74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df80a481-2705-4dc5-bca1-bfd3b2874d6b", "sighting_of_ref": "indicator--402da224-57ce-4098-ba8f-41fca920d205", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaea8bb-19a1-41e4-aeec-4a9c37250a7a", "sighting_of_ref": "indicator--bca70345-0d05-4d67-9e3a-d32fd282dadd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df64428-1a34-49b6-87d2-e06c8eac8fb2", "sighting_of_ref": "indicator--ab9270ca-424a-401b-b168-4005de73e086", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c2bf14-3ad9-4f25-826b-b7eafd61f16c", "sighting_of_ref": "indicator--ab9270ca-424a-401b-b168-4005de73e086", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e8c8e5-6e42-4e63-ad08-fe0cd3513d44", "sighting_of_ref": "indicator--ab9270ca-424a-401b-b168-4005de73e086", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48d4dfc-9b9f-44a7-8e6e-19c58d00ee9e", "sighting_of_ref": "indicator--1ef74483-e2dd-4c60-bf70-22e4dc0216c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d0dfeb-ed7b-4f03-aaa6-9082ff753272", "sighting_of_ref": "indicator--4af16406-2643-4099-8d94-fca4b9dffad8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479d265c-0126-4823-a67f-bd40f8cd6ec1", "sighting_of_ref": "indicator--5156eb57-f553-41df-9d65-0de8b355a413", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e114ce-d28a-4d37-8e5e-e6595e89b11d", "sighting_of_ref": "indicator--5156eb57-f553-41df-9d65-0de8b355a413", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795fb67f-29d1-4f9c-bc79-23debec1c293", "sighting_of_ref": "indicator--87611628-98ea-471a-897e-1c47bf9a3d79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e888d5-ed14-4c88-b4b8-2795f684a914", "sighting_of_ref": "indicator--9e2a760c-4a27-46b4-ad21-4bc0dd9b5d2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ddb6a2-e29e-44b4-b99d-fb26df3f341b", "sighting_of_ref": "indicator--de4e823b-6dde-4b6a-8c65-aea126799233", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3acad57-985c-4039-9797-d4e8cd7d7f8c", "sighting_of_ref": "indicator--de4e823b-6dde-4b6a-8c65-aea126799233", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec2d3c9-3192-45cc-8f9d-5a5002545c6d", "sighting_of_ref": "indicator--a440ed54-2a87-4c53-a2fd-620c00493dd9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c601c36-e36f-4674-bdb0-ec8a5a54847e", "sighting_of_ref": "indicator--f181634b-5928-4d0d-9963-5cbc01d1d517", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fe558a-e8ed-41e3-8672-04534b855c0e", "sighting_of_ref": "indicator--84285a23-28ab-4bc2-a5ce-c85cff3a2dbe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee50e7d6-e661-4d37-abcc-2f83846a53ba", "sighting_of_ref": "indicator--a9ea5a1f-214f-4124-97ab-5d2b99323302", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b05873-d797-4c23-a117-cbcb316527d8", "sighting_of_ref": "indicator--c0f2c72c-6daa-47b4-bf18-3d311b01431e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc1c50f-4923-49cf-ac05-17fa4eef9174", "sighting_of_ref": "indicator--12acb7d1-fae1-46c8-a3cb-fb7ef4313a2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccc4ce7-8701-4f39-a419-9472a544eb18", "sighting_of_ref": "indicator--81f0dd07-27cc-4010-ae25-aa00e9dc0d8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b0718f-ad33-44d5-b230-9d1876884368", "sighting_of_ref": "indicator--4b94cf79-ccfd-4146-86e0-48e877696492", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd437b8-3018-4f4a-a47a-0eadea3a5380", "sighting_of_ref": "indicator--4b94cf79-ccfd-4146-86e0-48e877696492", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f013ba22-8fe0-4785-9703-46c10a9be2b3", "sighting_of_ref": "indicator--c32489de-e1e8-4a5b-af56-a99496db39ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7690176f-dc70-4235-89ed-a5f1102fe0bb", "sighting_of_ref": "indicator--38d51b21-1748-4cbb-abb8-13edba102577", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd58d68-726d-4a8d-940f-ab8b66164fe8", "sighting_of_ref": "indicator--1abbeeea-9bae-43a7-8919-2f2613a4a7c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4239e2d5-179f-42c3-9681-31495c1d85d4", "sighting_of_ref": "indicator--1abbeeea-9bae-43a7-8919-2f2613a4a7c9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a225eb04-6f45-4fd6-bf66-64e2ff9ede86", "sighting_of_ref": "indicator--1abbeeea-9bae-43a7-8919-2f2613a4a7c9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6e1abe-af3a-426b-bf31-9b3ad895ffcc", "sighting_of_ref": "indicator--087c2216-290e-46a8-a10a-2af62cb98f5e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c211320-faf9-4129-9a17-86dcb3666c56", "sighting_of_ref": "indicator--c958147a-4cee-4af4-adbb-0887470e705c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b720cb9b-632b-4415-aef6-5eeee0544ae2", "sighting_of_ref": "indicator--c958147a-4cee-4af4-adbb-0887470e705c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1dde38-7c01-4b71-aab8-0a298672e862", "sighting_of_ref": "indicator--c958147a-4cee-4af4-adbb-0887470e705c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d89a17-a383-473e-873c-90abc3eeb30a", "sighting_of_ref": "indicator--cf595099-b3ae-4cee-b3b7-e510b6961fee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c6f16f-66b4-47e5-82e5-e303d20e4a92", "sighting_of_ref": "indicator--cf595099-b3ae-4cee-b3b7-e510b6961fee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448de99b-1b08-4161-a39c-49139239957b", "sighting_of_ref": "indicator--a9a3c286-9ba0-4dea-af24-340584c4e026", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8b0aa1-88b2-4513-9e74-998677aca4a7", "sighting_of_ref": "indicator--a9a3c286-9ba0-4dea-af24-340584c4e026", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bddc6c-c969-4d7b-8122-60f1bdc064c0", "sighting_of_ref": "indicator--e592da74-4451-490a-83d4-483eedce5798", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9daf80-2d03-49b3-9d3a-50af14e8350f", "sighting_of_ref": "indicator--e592da74-4451-490a-83d4-483eedce5798", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25517616-b8c3-413e-b4c1-e0d4c5225e63", "sighting_of_ref": "indicator--7c2b7cdb-2710-41c5-98e3-f1400dcf3af3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7db16c-6512-42b6-a9ae-349c5f76c2e2", "sighting_of_ref": "indicator--1311d3f8-8007-4b7e-a6f4-33e011829688", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c90426e-7ca9-40be-b33c-a44812174a38", "sighting_of_ref": "indicator--a2b405af-8092-4a2b-ba2b-af1f026dc3a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86aeb0b4-672b-4d8d-a129-308cef0f678e", "sighting_of_ref": "indicator--a2b405af-8092-4a2b-ba2b-af1f026dc3a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67adb3b7-7615-4be8-b51f-0a285db37e83", "sighting_of_ref": "indicator--a2b405af-8092-4a2b-ba2b-af1f026dc3a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfd4296-5a98-43c6-9057-d9a46ce754ed", "sighting_of_ref": "indicator--30219ae2-082f-44e9-b1e4-320b95b6d1fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731e4f29-353b-4287-87f6-b63f11d85960", "sighting_of_ref": "indicator--5bd89026-b336-4f57-95f7-9981d0204b32", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487e8e84-4d50-4866-bd7f-0bd2088a90b2", "sighting_of_ref": "indicator--5bd89026-b336-4f57-95f7-9981d0204b32", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adce28d-df87-4ef9-805a-648a65658cd7", "sighting_of_ref": "indicator--60669b2a-5d98-48d1-b8db-f9383b3bb949", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49dfe5f-f191-4935-a6e9-5a0b1056aaa6", "sighting_of_ref": "indicator--60669b2a-5d98-48d1-b8db-f9383b3bb949", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6debba68-2687-48ec-80b1-bcb3579d8370", "sighting_of_ref": "indicator--ae685a0f-ee1c-4973-8d82-8215901e4639", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7d3f82-3170-4493-9b0a-2f5eb571d1f7", "sighting_of_ref": "indicator--89007f9a-4da4-4030-a68c-afe5e77eb42b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b402ca6-3539-4cbf-8f7e-859a7a58f10c", "sighting_of_ref": "indicator--89007f9a-4da4-4030-a68c-afe5e77eb42b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5943817-128f-4965-9605-8da42c0de719", "sighting_of_ref": "indicator--61a8cc38-fcc2-4a12-9f8c-dec95cf9b640", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0034c3df-e20e-4362-b192-474b725265af", "sighting_of_ref": "indicator--fb36862a-9c81-4964-9c64-3dc1572827b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a30ce2f-6a77-46c3-9298-4f6306fffaa8", "sighting_of_ref": "indicator--c5b41ca6-d1d1-441f-8a75-b4d893588d67", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baf2df3-6a6e-4fba-9839-cfb6e97f1d7e", "sighting_of_ref": "indicator--76f2015d-3108-4aba-b93b-ae0bb9b9531e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13293d23-a22b-426f-9fea-abe14e941e19", "sighting_of_ref": "indicator--128152c8-9929-4965-86aa-0a4cdf4541f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e3a56e-fa2c-4051-8f1c-6f4589ab3420", "sighting_of_ref": "indicator--128152c8-9929-4965-86aa-0a4cdf4541f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8944f9-1828-41e6-9d8d-3e0ad01902f9", "sighting_of_ref": "indicator--3596c055-0654-4e4b-9863-bdb62f941f93", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a53f875-21f6-4208-a4e4-fb2fca262d21", "sighting_of_ref": "indicator--07effc9c-0c22-46f8-95b6-85ad4dfd09f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65ea403-a521-4ea7-ac59-40800164422b", "sighting_of_ref": "indicator--07effc9c-0c22-46f8-95b6-85ad4dfd09f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb21731f-84b1-4266-9c79-b5f43081e8ca", "sighting_of_ref": "indicator--07effc9c-0c22-46f8-95b6-85ad4dfd09f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92f1314-4522-40c7-af4a-325bffd3bfa1", "sighting_of_ref": "indicator--e576527e-ab99-491c-91d4-ad29815b8737", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff99c91-2bd2-447f-a61b-f4bb9a7502f5", "sighting_of_ref": "indicator--e576527e-ab99-491c-91d4-ad29815b8737", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c9d5b3-8fb0-4d12-ab95-acbcc345d0fb", "sighting_of_ref": "indicator--e576527e-ab99-491c-91d4-ad29815b8737", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c902227d-3995-4a1d-9af9-f08f1678c187", "sighting_of_ref": "indicator--3238a9a7-835f-4771-b6b0-36a2698fc2d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa48a25-43e4-4330-8f51-ce66deacacee", "sighting_of_ref": "indicator--3238a9a7-835f-4771-b6b0-36a2698fc2d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e310343-d083-4a20-9659-1751f536fa5a", "sighting_of_ref": "indicator--3238a9a7-835f-4771-b6b0-36a2698fc2d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f3485c-0eb0-4be9-a48d-fb2021755c63", "sighting_of_ref": "indicator--2adc838f-e5a2-423f-b566-9686f757ce1e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9548986f-2a2c-494f-bc76-66bdf6d3fa60", "sighting_of_ref": "indicator--3aee1283-ad30-49b2-a485-90e54c132c88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af962ba1-16a2-4003-ba67-b6fe5afde0ea", "sighting_of_ref": "indicator--3aee1283-ad30-49b2-a485-90e54c132c88", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480ecb97-fb65-47f5-ba38-4377fb2a3e1e", "sighting_of_ref": "indicator--75670367-b9f2-4a02-b9d8-98c961828a98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7904344-1321-45a5-a0ec-f7cf36d955d6", "sighting_of_ref": "indicator--75670367-b9f2-4a02-b9d8-98c961828a98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb73c23b-7430-43db-bc5a-178e1aace5ea", "sighting_of_ref": "indicator--5a583880-8bca-4c57-8b62-fe2fea381d02", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7bc98e-8717-4fff-b7e5-5069fb58e109", "sighting_of_ref": "indicator--5a583880-8bca-4c57-8b62-fe2fea381d02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff327d8-43d4-48b9-a325-b91a012fda1f", "sighting_of_ref": "indicator--7b3cb853-72fa-4ce7-ac76-41b825fcbd24", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb35bd0-bdef-4b72-885d-f46f0aa0b3f5", "sighting_of_ref": "indicator--2ec2056b-0763-4c15-8e47-0ca2ac7084e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f291b3e8-8a41-449b-825b-33ed7f80ef65", "sighting_of_ref": "indicator--5f2f7dc4-8250-4d92-bcec-88a6d9550092", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f09775-55a5-4159-9d0c-5425400d8808", "sighting_of_ref": "indicator--5f2f7dc4-8250-4d92-bcec-88a6d9550092", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaf738c-875e-43c1-a246-7afe2a39cb96", "sighting_of_ref": "indicator--8eeae43e-0dd3-43ca-9045-2c26ae9dcf7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fa53a0-2974-43cb-8dc3-8ecc3f900653", "sighting_of_ref": "indicator--8eeae43e-0dd3-43ca-9045-2c26ae9dcf7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c947f8-449c-4fde-ba54-a7ee763b5d13", "sighting_of_ref": "indicator--831af49e-cccc-44e1-9d7a-16bf387d1cd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499fdfc2-110d-45df-8b91-866720e8b048", "sighting_of_ref": "indicator--c2474cb8-c8f0-47ae-8d83-80a8cb6b9dcd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac88b84-707a-4b00-955e-79b93094ca06", "sighting_of_ref": "indicator--5090169f-5ddb-4474-a683-1ae55d1504ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722d9f8c-4a81-4592-8f73-58c67eb66667", "sighting_of_ref": "indicator--d0c43302-5a99-4039-984a-063ff53260d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525259a1-9d68-49c5-b08e-9ce7d0bb8b2f", "sighting_of_ref": "indicator--3b313aa1-b8ff-4122-b421-b903751180fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4054cef6-8041-4fc7-a7b9-48767354f376", "sighting_of_ref": "indicator--3b313aa1-b8ff-4122-b421-b903751180fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccf561f-a67e-4416-ad36-6adf97922df4", "sighting_of_ref": "indicator--714a61ca-1ba0-456f-aaf0-85930365fae3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8012585f-d56e-4904-86f4-df109f9d8362", "sighting_of_ref": "indicator--a6e5441c-88e7-4d84-a19c-0ad5b8d86022", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e598d43-ec55-4c36-9bb0-ee65dd4ed21d", "sighting_of_ref": "indicator--a6e5441c-88e7-4d84-a19c-0ad5b8d86022", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8db5b0b-3293-47f8-8afe-bb5633f42ba8", "sighting_of_ref": "indicator--20a6f722-596b-4da8-947a-83cce9085bf0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73f3ebf-fbdb-4a1f-bddf-cbc2924a8d16", "sighting_of_ref": "indicator--20a6f722-596b-4da8-947a-83cce9085bf0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ad40e4-0f11-4ca4-b756-c29b53fae9bf", "sighting_of_ref": "indicator--20a6f722-596b-4da8-947a-83cce9085bf0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b25373e-7f84-479d-9002-224970885e46", "sighting_of_ref": "indicator--d60de3cf-d007-4564-a804-8dc37f6ab762", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07da827-8a06-42c7-909e-c7a450662996", "sighting_of_ref": "indicator--d60de3cf-d007-4564-a804-8dc37f6ab762", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ff6317-d9d0-4243-9e71-370fa1309cd5", "sighting_of_ref": "indicator--8a3346f4-84e8-4549-8c3a-7de0a680bdbb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dbf8ba-fa7f-491c-bec0-99d365ecb470", "sighting_of_ref": "indicator--cce3779c-13d1-4d9a-82cf-4d35d9b78e58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd06d384-aa57-4698-b42b-269f66702006", "sighting_of_ref": "indicator--cce3779c-13d1-4d9a-82cf-4d35d9b78e58", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ba8657-a0ad-4750-bd7f-d53c7c4808b3", "sighting_of_ref": "indicator--7d26e93a-f46a-4e4e-a7c2-528959b22d98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cc2d66-146e-41ed-acda-12317aafa54a", "sighting_of_ref": "indicator--7d26e93a-f46a-4e4e-a7c2-528959b22d98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c65a63-a0ae-4bf2-85e3-38440a14c43f", "sighting_of_ref": "indicator--7e975bdc-8d2d-4fec-9b9a-61e388369a73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bf658b-9346-48b9-8357-dc7feecd68e8", "sighting_of_ref": "indicator--44cd2ef9-64b0-4f60-8bb6-99daec450f2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c576e167-6082-4cc4-b177-69d74506d2e9", "sighting_of_ref": "indicator--44cd2ef9-64b0-4f60-8bb6-99daec450f2a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a451c4-d684-436e-b08e-d4f74dbc03ed", "sighting_of_ref": "indicator--44cd2ef9-64b0-4f60-8bb6-99daec450f2a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70597a3f-0bc2-4ad6-9514-c755e80b748a", "sighting_of_ref": "indicator--f848e68c-c200-4c36-89c5-714d95378f0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50846a62-11be-42da-bcf5-40deafc1ca20", "sighting_of_ref": "indicator--7904b0bd-69f5-4356-be69-328005ef032e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50bb3cf-6093-42b3-a5d5-9dde1f075618", "sighting_of_ref": "indicator--e1d299e7-0128-4b05-9b8a-e1f83ae6ce9b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bccc3b-40ef-4091-9e46-0751c13572fb", "sighting_of_ref": "indicator--b374e57f-097e-428a-aaf4-beccf16d69ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bbdd66-317f-4b44-a6cb-6f3897647d60", "sighting_of_ref": "indicator--b374e57f-097e-428a-aaf4-beccf16d69ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6f1663-4b0a-4cd2-9428-133c879c1620", "sighting_of_ref": "indicator--b374e57f-097e-428a-aaf4-beccf16d69ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bae87f-b6f8-445b-b36e-6526a133c88d", "sighting_of_ref": "indicator--3de67f38-93f4-4580-b277-54fd8889e0c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c59a602-adcf-4fa3-98d6-3ec486fe19b2", "sighting_of_ref": "indicator--3de67f38-93f4-4580-b277-54fd8889e0c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d6e851-ae40-45e0-89af-22f2402a493c", "sighting_of_ref": "indicator--171e6d0d-f9ef-4b22-89ec-f2b959c6a404", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b99d1db-f302-48f5-97fc-ab1c162a9170", "sighting_of_ref": "indicator--171e6d0d-f9ef-4b22-89ec-f2b959c6a404", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27b2656-59cc-426e-a7f7-07eef7e7f253", "sighting_of_ref": "indicator--398cf05f-df09-453e-ba49-d37adada5a52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6c6d66-4a38-4707-aced-6a17e02a97e9", "sighting_of_ref": "indicator--398cf05f-df09-453e-ba49-d37adada5a52", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4edf78-6bd9-4fe8-abb0-4314df55f948", "sighting_of_ref": "indicator--c4263b8e-d41c-4714-aed7-a9212126087f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff04c45a-9743-4601-8fc6-44553c79bbcd", "sighting_of_ref": "indicator--06c95a8f-f412-4b99-82db-3dc1d06f29cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9e92e1-4169-4819-a257-175feded880c", "sighting_of_ref": "indicator--fdf83e63-7efc-4b07-b357-d64f4cd718fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0934fbe-8b6e-41d8-847d-d986bb3c1c8c", "sighting_of_ref": "indicator--e1831f15-b08f-4f87-80b6-3367567dd408", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1b0d94-5959-4ee5-bd6c-c9f45b9a589f", "sighting_of_ref": "indicator--f6f16d18-34cb-4214-b8cc-128292823c58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad27db9-511d-461a-a73a-491d863a13e5", "sighting_of_ref": "indicator--f6f16d18-34cb-4214-b8cc-128292823c58", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301f2675-1d4a-4596-8815-9b4b80d554dc", "sighting_of_ref": "indicator--f6f16d18-34cb-4214-b8cc-128292823c58", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9916ce-cbe6-419c-aa90-b26b08e4af5a", "sighting_of_ref": "indicator--3e54506a-8e8b-4a7e-ae28-b302e2880dd9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a449dbd-9e59-43a3-b292-381753d49144", "sighting_of_ref": "indicator--efc42342-2d4b-43d4-8159-a81027aee59b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c750e096-967b-4273-8eba-2d571a0b93a9", "sighting_of_ref": "indicator--bf76a909-518f-4695-b734-cbd450f264d6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4426d4-8d4f-415d-8f50-49e0a0cbd3d3", "sighting_of_ref": "indicator--0d93abaa-b97c-412e-9802-15166824bfc1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6323717-59ec-436a-bdc3-5a59d37b36d7", "sighting_of_ref": "indicator--c1dbf436-1de2-463f-9163-401cfd27da65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f3952a-1e6f-4c6c-b4e1-802d84f3751d", "sighting_of_ref": "indicator--c1dbf436-1de2-463f-9163-401cfd27da65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164dd28c-798b-4d5d-9678-35c636a62ae5", "sighting_of_ref": "indicator--c1dbf436-1de2-463f-9163-401cfd27da65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23e6914-6035-4e29-a727-7ef314224fcf", "sighting_of_ref": "indicator--51a83813-7fb8-4b85-9ada-1a38636d0947", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4c2100-66ed-478b-910c-e8b431af8e61", "sighting_of_ref": "indicator--6307f29f-ef8c-4605-afef-9726276a887d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebe0623-9992-4c94-b06d-55f77a4c1620", "sighting_of_ref": "indicator--6307f29f-ef8c-4605-afef-9726276a887d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c80afb-43db-4747-ad28-d0a747e9c2ac", "sighting_of_ref": "indicator--1a603cea-7f68-4c87-a41e-23ae94469ed3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1570e9b-8a5f-4ec5-a003-47b9a9cbf39d", "sighting_of_ref": "indicator--9a890ca1-8d2d-45c9-929e-aa5da2883fda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fb67cc-adda-437e-b74e-a15118b08f50", "sighting_of_ref": "indicator--8fff0a1b-1929-45d2-b020-425e5346fad5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea273a98-c481-4c73-abc9-dfb40b4fdd7d", "sighting_of_ref": "indicator--8fff0a1b-1929-45d2-b020-425e5346fad5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4246b4a-7eac-46cf-af0f-c3b26550bb83", "sighting_of_ref": "indicator--8fff0a1b-1929-45d2-b020-425e5346fad5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcdd46e-a618-432f-9bd0-d4b1c5aa080d", "sighting_of_ref": "indicator--ca1874e4-a343-4c36-a1d0-f04e6c280247", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a6a2ca-97bb-4c8c-83e4-1ff64f0562b9", "sighting_of_ref": "indicator--43049254-41b7-45b7-9dbf-c0140208a53b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62abe4e-f92e-4868-bdc7-e5b388229bca", "sighting_of_ref": "indicator--a8bc6f3b-8316-47c1-8e01-707dd33a6366", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea184ff1-2925-4ab2-972b-efa0109e5e91", "sighting_of_ref": "indicator--a7bdc5d9-b953-42c3-8269-b627fa9bc920", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd8338e-d271-4990-ad42-5bc26acdc284", "sighting_of_ref": "indicator--a7bdc5d9-b953-42c3-8269-b627fa9bc920", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edc02a9-ea5a-49af-b2b6-07bf5a7a7017", "sighting_of_ref": "indicator--6ef3e31f-84f4-4359-b8ae-e6d953049f35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c986e12-9192-414d-a5df-6d1bb017a188", "sighting_of_ref": "indicator--06976b01-ddaf-46c0-9bef-c661b747aff5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752b792c-13eb-429f-9c6f-6459504ee469", "sighting_of_ref": "indicator--2c6d603b-014e-4ba3-8f72-f33837bb3715", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a374b8-9d3e-48e7-b0da-72d6496a4636", "sighting_of_ref": "indicator--cda3d521-cf7c-4c48-b190-5f6fc28fa3d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71f0ecb-0958-4b79-b737-ad22863c08aa", "sighting_of_ref": "indicator--5ea166dc-4509-4bfa-b019-be033dca4325", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3790405-5e3b-4b0f-87f2-bf1a7dbd7f36", "sighting_of_ref": "indicator--f7d73e71-ebbc-4ae1-a96e-da868ecd7929", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409b934a-20b3-42e1-a8e3-d2c695be5f9d", "sighting_of_ref": "indicator--03612bde-7127-4aa5-b90a-b4b94431bed3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04048040-a4ba-4e97-b6d2-c8db5dfa5230", "sighting_of_ref": "indicator--f3bb4e01-6bc5-48e8-924c-8c7f02e4d30b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea7a460-15e2-44e7-9974-36121901d6a8", "sighting_of_ref": "indicator--c1fe36ec-1577-4241-b255-85bfcc534225", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c98360-f7ff-415c-8342-e600c66e1558", "sighting_of_ref": "indicator--10993f45-b9ca-4a34-ad74-00df5eedb515", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd9064b-2b2e-440c-829f-f202b387a34a", "sighting_of_ref": "indicator--33766a21-99ee-4bb3-b1de-d91bc9e9d4f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13be85d8-53c6-4317-96b2-6fe4443cdd59", "sighting_of_ref": "indicator--7cb1d3da-6002-449e-b0b1-b6b7a594f356", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c029b237-d474-4e32-a9f1-d167818c33a6", "sighting_of_ref": "indicator--b06b6c6b-1434-46ab-bbc8-447ccff9b963", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e810be9-0c1c-45c5-9f72-1a65b8b8d760", "sighting_of_ref": "indicator--b06b6c6b-1434-46ab-bbc8-447ccff9b963", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e88e49f-6732-4c48-81f7-8441f46f5118", "sighting_of_ref": "indicator--b06b6c6b-1434-46ab-bbc8-447ccff9b963", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85329e25-b36c-4ddf-aed2-38c38a7c2148", "sighting_of_ref": "indicator--d3394e97-0df1-48ed-8f53-f0ed5da37e60", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2792acc5-1c4a-4e4c-a22f-79ff9ecbfb90", "sighting_of_ref": "indicator--d3394e97-0df1-48ed-8f53-f0ed5da37e60", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07e37dc-619a-40eb-95d2-4ea90aa19752", "sighting_of_ref": "indicator--d3394e97-0df1-48ed-8f53-f0ed5da37e60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09751ebb-7a96-4683-8496-1320b58f49c4", "sighting_of_ref": "indicator--59b0d2b9-e3f1-4274-87da-7647b6381cd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d5e64b-7d1d-46a9-8ac4-ca4fac4fa970", "sighting_of_ref": "indicator--59b0d2b9-e3f1-4274-87da-7647b6381cd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a7af7e-ee31-4266-a27c-06163b158e43", "sighting_of_ref": "indicator--59b0d2b9-e3f1-4274-87da-7647b6381cd3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eae378-9339-424c-a0da-edd00cd2369b", "sighting_of_ref": "indicator--b66b6108-68a9-4ab5-bf15-ded8418abd74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedc295d-c992-420a-b629-1f5861251550", "sighting_of_ref": "indicator--b66b6108-68a9-4ab5-bf15-ded8418abd74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082112a5-66d6-4279-ac82-dbec0ad64285", "sighting_of_ref": "indicator--b66b6108-68a9-4ab5-bf15-ded8418abd74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa47e2dd-0b22-4223-b294-2a3ebeaae80b", "sighting_of_ref": "indicator--9884e8bc-e683-4a7e-af87-07fd1228d2d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29675efb-dea2-4620-a365-4a21fe30a802", "sighting_of_ref": "indicator--9884e8bc-e683-4a7e-af87-07fd1228d2d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9018bd55-ed77-40a4-9211-7390471e6cdb", "sighting_of_ref": "indicator--9884e8bc-e683-4a7e-af87-07fd1228d2d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d987b01-5c86-49b4-9259-7460701e47a4", "sighting_of_ref": "indicator--ab41df56-1916-44fd-9ce1-088c7821361c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2877e84-e1c4-4225-846e-053662f9aadb", "sighting_of_ref": "indicator--ab41df56-1916-44fd-9ce1-088c7821361c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df8642e-b5be-4572-98c3-791f5ebbd1f5", "sighting_of_ref": "indicator--ab41df56-1916-44fd-9ce1-088c7821361c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e86b351-ed04-49a7-8d7a-06f2678e6e35", "sighting_of_ref": "indicator--771aa79e-c7c6-4262-b152-1b9dc9db5df7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77a5178-0caa-459c-80ba-9566d27ac240", "sighting_of_ref": "indicator--771aa79e-c7c6-4262-b152-1b9dc9db5df7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8470a91a-4e91-4495-b91d-3905bfd005bd", "sighting_of_ref": "indicator--771aa79e-c7c6-4262-b152-1b9dc9db5df7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e84d7ee-143b-4f4f-80c9-03b94e6f7ec2", "sighting_of_ref": "indicator--ed10edea-047b-47a0-9fcd-2b86c5cf3048", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3182def0-9b2c-4636-a069-3ad4bbf0f3d2", "sighting_of_ref": "indicator--ed10edea-047b-47a0-9fcd-2b86c5cf3048", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b110cb5-b086-4250-8805-5119bb675f79", "sighting_of_ref": "indicator--ed10edea-047b-47a0-9fcd-2b86c5cf3048", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f82e56-69ce-4752-936f-25579483bb59", "sighting_of_ref": "indicator--50dce4ed-d658-49de-b0f2-67bb1a1ccb85", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8816af56-bb3b-4ef8-86d5-0d2f1ce66b4a", "sighting_of_ref": "indicator--50dce4ed-d658-49de-b0f2-67bb1a1ccb85", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa895c47-c811-46d2-96dd-a60e6d261264", "sighting_of_ref": "indicator--2b10e64a-a61b-468d-a363-16ea6cfcdba4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba5afa2-e4cf-4f1e-b76e-bb7ae8454347", "sighting_of_ref": "indicator--2b10e64a-a61b-468d-a363-16ea6cfcdba4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c48291b-d26c-4547-9c21-df49b919d5fd", "sighting_of_ref": "indicator--2e24e24c-61a6-4f15-851e-6d9c8f708fbc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6a792b-1a39-46fd-895c-19596c1b8ce2", "sighting_of_ref": "indicator--2e24e24c-61a6-4f15-851e-6d9c8f708fbc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936dfb14-e7f6-447f-be6b-61142a59078d", "sighting_of_ref": "indicator--3f43246f-1e6f-4213-853d-c7999a4fcbd7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dedf40-ee24-4f56-81ad-e65e62922356", "sighting_of_ref": "indicator--3f43246f-1e6f-4213-853d-c7999a4fcbd7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93219cf6-9744-4681-883c-4993a4d7fc4f", "sighting_of_ref": "indicator--3f43246f-1e6f-4213-853d-c7999a4fcbd7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8667ec50-ce10-48a5-8192-9bfab3dfc36f", "sighting_of_ref": "indicator--ffdf239a-6437-4de5-980c-6bbd2ca45ac4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca94471a-8ab1-4cb6-a06b-3623874435bb", "sighting_of_ref": "indicator--ffdf239a-6437-4de5-980c-6bbd2ca45ac4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285582b2-cac8-479c-ade6-09ac70d8de2c", "sighting_of_ref": "indicator--ffdf239a-6437-4de5-980c-6bbd2ca45ac4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6a994b-19e3-482a-951a-8b72ce4556f4", "sighting_of_ref": "indicator--56de8879-dd88-4260-9948-ab25d8eb90e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac3a493-2e5b-4a94-b689-cc47aab632b7", "sighting_of_ref": "indicator--56de8879-dd88-4260-9948-ab25d8eb90e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5eadae-80e3-47db-81f5-8b3581d57d82", "sighting_of_ref": "indicator--56de8879-dd88-4260-9948-ab25d8eb90e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6cc1da-9173-4a41-97a6-cab2668db097", "sighting_of_ref": "indicator--1f8b1427-2b63-41ca-801d-598f968f4ba5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11813193-b6a0-48fb-ad16-46f20f5bfaf1", "sighting_of_ref": "indicator--1f8b1427-2b63-41ca-801d-598f968f4ba5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abecca13-20b6-42c8-9c94-3fafd2e94489", "sighting_of_ref": "indicator--1f8b1427-2b63-41ca-801d-598f968f4ba5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c4953d-d581-4721-8c8d-4c0cbc22979e", "sighting_of_ref": "indicator--4056c9cd-eae8-483b-9baf-62cf651baf3a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d7d535-ff7c-45bf-addd-88f97efe10e8", "sighting_of_ref": "indicator--4056c9cd-eae8-483b-9baf-62cf651baf3a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d6dfac-2fc6-4ac3-833b-9623f48dc940", "sighting_of_ref": "indicator--4056c9cd-eae8-483b-9baf-62cf651baf3a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe2588a-d7bf-4e51-8f7c-ca0af09e74ec", "sighting_of_ref": "indicator--58ee1b4d-e7b9-4d49-a991-f7a3071d1dd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bedfaa-0e27-4b57-b2eb-ac4923edf471", "sighting_of_ref": "indicator--58ee1b4d-e7b9-4d49-a991-f7a3071d1dd3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478a2da1-e2ea-4a0b-a72a-216aa4c31828", "sighting_of_ref": "indicator--b5209ea8-f522-4e27-8e8d-6c5c5d41448b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa986b02-7157-4fbf-a897-aa7927091489", "sighting_of_ref": "indicator--b5209ea8-f522-4e27-8e8d-6c5c5d41448b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7e43f8-93d3-4250-a776-b586f3d915be", "sighting_of_ref": "indicator--786f81bd-41b2-409c-80c7-802aa1ce3c7a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53eed33-127f-47af-9ef4-4bbb4e04ab59", "sighting_of_ref": "indicator--786f81bd-41b2-409c-80c7-802aa1ce3c7a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ed9c73-c0d8-4331-baa4-59712b6988a9", "sighting_of_ref": "indicator--c73ea670-6141-4d96-9211-1fa25b39301c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afe8045-7c39-4eff-bdac-b0fb265b76bb", "sighting_of_ref": "indicator--6166d933-c998-4e4b-8c52-321f7d0a3177", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffa37f8-2170-44a3-a814-9e0687362cd0", "sighting_of_ref": "indicator--41f5dc92-d5e3-4777-954e-3010ca003056", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2d3d1f-7f9a-4825-b193-2e9968aa1292", "sighting_of_ref": "indicator--41f5dc92-d5e3-4777-954e-3010ca003056", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01ab8f6-7c61-4e19-ba53-383728723f69", "sighting_of_ref": "indicator--dbfbdf28-7fa8-42d6-a5e1-d282d86f654e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c14d4d-7292-41f7-923f-1bd7b08cb717", "sighting_of_ref": "indicator--5d13ea7a-4fb2-490f-8447-8ab14d8f6fe9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6044cd-b872-4f4c-9d9d-f71ab4143f2d", "sighting_of_ref": "indicator--2d972685-8a00-4ed3-a57b-7ebfec83fd24", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7b8cd6-c269-4370-b51e-13bf3545118b", "sighting_of_ref": "indicator--e07df7ad-89e2-495c-937b-9591ffd86cf6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169944c5-7c2b-498a-97f7-0be7e77575e2", "sighting_of_ref": "indicator--a299f679-148c-4182-afd8-7591b3f26a46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2b27a6-1300-4167-8f26-5c099a89316b", "sighting_of_ref": "indicator--a299f679-148c-4182-afd8-7591b3f26a46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf12d32-480c-4504-bbac-a8a2ae82c20e", "sighting_of_ref": "indicator--b744f474-b37b-4598-ae13-5bb0396f32d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6234d8-0d1a-49b6-b13b-c4956258febe", "sighting_of_ref": "indicator--b744f474-b37b-4598-ae13-5bb0396f32d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ebf7f6-4391-4449-9d32-d5c9e93587b9", "sighting_of_ref": "indicator--0b77641a-84ee-4825-9736-ee71197b2d84", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00c46b5-0e30-4aa0-a807-51f218ae41bd", "sighting_of_ref": "indicator--74061785-f0fa-42f4-9b07-7dc0f7b48f64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1351bc03-7c1e-481c-a126-18478a8c6712", "sighting_of_ref": "indicator--584e3c8b-16a3-485c-be1c-492e0e17e119", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c07a26-b806-409a-b47e-601db191ae44", "sighting_of_ref": "indicator--04113260-addd-4739-900d-3acc6e9deae1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01538f25-18c7-4b5e-af80-f1a76568457b", "sighting_of_ref": "indicator--db5b7668-3790-4b4a-b004-be30491f4205", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9473a7c6-a7a3-4e6a-be2c-9ac009d20ae5", "sighting_of_ref": "indicator--db5b7668-3790-4b4a-b004-be30491f4205", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a793508d-5df5-4811-b4cd-4262777d4e73", "sighting_of_ref": "indicator--500d5068-4381-4fcf-ac22-04fb940224b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a047ddd-f10e-4bda-b04e-bee2bc76d1a9", "sighting_of_ref": "indicator--a509713c-2dd1-4ab6-a419-04dd9356c3ab", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a87fbda-66ec-4b26-a38e-9847bde8b9ce", "sighting_of_ref": "indicator--5db8599b-4e61-47ab-b6e7-9d8303eddab7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93d538d-a02d-4ec1-891e-23bc0fba783b", "sighting_of_ref": "indicator--803a1fc6-33d7-4d0b-9706-ddfebdee5c62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268a30cd-9e4c-431a-81b9-2fe50868b58d", "sighting_of_ref": "indicator--51982383-789f-4247-8e6e-0c340eaf87ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4183df8-6bb3-4e95-987d-f034ab9ebbf5", "sighting_of_ref": "indicator--51982383-789f-4247-8e6e-0c340eaf87ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11211bb3-7e38-495b-8d4a-50d8838be175", "sighting_of_ref": "indicator--51982383-789f-4247-8e6e-0c340eaf87ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a575d6bf-e8ac-4978-bd2f-701321fcc30b", "sighting_of_ref": "indicator--51982383-789f-4247-8e6e-0c340eaf87ec", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6066702d-3835-41ad-b270-8d968efc0915", "sighting_of_ref": "indicator--cf6fd4e8-5912-4b75-84d7-9d6896d8fdcb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e05cda3-381f-4413-b9ee-9d742edeb83a", "sighting_of_ref": "indicator--cf6fd4e8-5912-4b75-84d7-9d6896d8fdcb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5253536f-daed-4c57-922d-e0642d8800b3", "sighting_of_ref": "indicator--cf6fd4e8-5912-4b75-84d7-9d6896d8fdcb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac6d510-2977-4d56-8475-e5b26c4c60f5", "sighting_of_ref": "indicator--d942232b-9a7a-442d-b6aa-8b9fc3211c71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357cdaa6-2ec5-48c4-a7bd-a6aa192e2688", "sighting_of_ref": "indicator--bd5cdfdc-8ce8-4f17-b83b-3dac23697166", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbc0622-86f1-4019-8d2f-cd613d364ce9", "sighting_of_ref": "indicator--bd5cdfdc-8ce8-4f17-b83b-3dac23697166", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6c3a80-f511-4907-a29d-6de379dd5a27", "sighting_of_ref": "indicator--bd5cdfdc-8ce8-4f17-b83b-3dac23697166", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3446362c-6211-41cf-b46f-6f34e870c33d", "sighting_of_ref": "indicator--bd5cdfdc-8ce8-4f17-b83b-3dac23697166", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f92f54-6fa4-4119-ade3-4958d2ee9ef9", "sighting_of_ref": "indicator--e5faacf1-8364-4b23-9cc0-37d5ea0c45d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9fa06e-3cba-449e-9f6b-d39208278004", "sighting_of_ref": "indicator--e51c2dab-5323-4e08-a457-b53d3beddb2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a7f5f1-de87-4c8a-94e4-d27515b96b24", "sighting_of_ref": "indicator--e51c2dab-5323-4e08-a457-b53d3beddb2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8bc584-7835-4ba4-aa53-41f2538c5e0f", "sighting_of_ref": "indicator--717f1e15-d31b-471b-bf24-21fd46cce57e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b2b77d-68cd-4fb0-abe1-12fc4305f427", "sighting_of_ref": "indicator--921a4163-c406-4185-aa1e-a2dae67349d6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2b5af1-c2d9-44ad-a39d-70d7426c24d9", "sighting_of_ref": "indicator--6d7fea0b-b3fb-4b0c-9a45-f2f9249741a6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b615e92a-9fd9-4d40-aeda-040c0dfa9847", "sighting_of_ref": "indicator--e97292e0-3564-4be3-a572-da5044a521a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228a6027-3701-4cbe-a50b-e9b42f9652ae", "sighting_of_ref": "indicator--16120050-2650-4ea9-be57-c0ac4ef31030", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c32d1d-32c4-4c15-8fd6-57f234abf48d", "sighting_of_ref": "indicator--16120050-2650-4ea9-be57-c0ac4ef31030", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd29c8c7-bf53-4f98-9336-58c64a1b1e73", "sighting_of_ref": "indicator--4f4f59eb-f683-4f33-82c9-5322ccb3f711", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdbc839-dbf3-41ac-b2d0-d4f643a2a834", "sighting_of_ref": "indicator--531b985e-c647-4a9e-bcc0-1285ecb6dab9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04527f4-3e2d-4f12-b7f5-7c647383d7e6", "sighting_of_ref": "indicator--516aebb5-5afb-4737-8e8f-07adeb452314", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7718bde8-20dc-42cb-9e90-d90a9996f31a", "sighting_of_ref": "indicator--57da1b33-f86c-482b-8f38-68847caf42f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6488a3-c1ef-4786-9333-d6d96090bec4", "sighting_of_ref": "indicator--de6b04d2-e76e-4fdf-963b-b3ff697f2531", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa6caca-216d-414e-bd5a-b10a4bbe6427", "sighting_of_ref": "indicator--9be1650f-5704-42d0-aa23-82f3771d3e00", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8932883-07b4-4d72-b253-2e90bf7b93c8", "sighting_of_ref": "indicator--2b1bc053-9cb3-468b-b9ed-e8e8a523736d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873ce08e-1099-4d76-9022-efaa538e0910", "sighting_of_ref": "indicator--986b5a8f-a4cb-4380-b93d-f569012ab979", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8febc7af-61ec-424f-bfbb-c444472b4b52", "sighting_of_ref": "indicator--3a3e6afb-9767-4d00-b1be-bdda0cb3c95e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41abe344-5fef-4457-9a48-18535762cfb6", "sighting_of_ref": "indicator--3a3e6afb-9767-4d00-b1be-bdda0cb3c95e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5033a54-7470-4278-b7d2-1bbb8a52c596", "sighting_of_ref": "indicator--9496bcdc-f169-4a84-a6c1-7b3fd342a2d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09270e11-3744-4c55-9112-e92c6775e959", "sighting_of_ref": "indicator--b5c8d2fe-af81-42b1-b065-c937c64f8097", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1049f54a-33d2-4c8c-bd3f-326b35aa5d81", "sighting_of_ref": "indicator--1bcf07b4-2935-471d-a64b-d9b64007e3f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf2d415-fe08-4363-93a8-f714806edded", "sighting_of_ref": "indicator--8fcbd320-6e59-499c-9cc8-54e3e703e209", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e81619f-43ae-4474-b685-48310528f818", "sighting_of_ref": "indicator--8fcbd320-6e59-499c-9cc8-54e3e703e209", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7dbfce-a32c-437f-af63-831b4ade7be4", "sighting_of_ref": "indicator--b5a66df3-991a-4ad9-946b-26f625786f49", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976eea77-74b3-450b-ac8b-545091645568", "sighting_of_ref": "indicator--b5a66df3-991a-4ad9-946b-26f625786f49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c08c2e-1c88-44be-8cbe-de64a4c3ba37", "sighting_of_ref": "indicator--a84c2ba0-db4f-431c-bc81-207eef2d29de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaa80c8-15d9-4898-83e3-80067da675d1", "sighting_of_ref": "indicator--5bdcb289-ef44-4d8f-8849-b877a953b597", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f62696d-a355-4b77-8ec0-7dab9b909213", "sighting_of_ref": "indicator--a20f3970-5a63-428a-9e86-2234f8b7db11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44329b5b-171a-4059-8f8c-1d448b16dc78", "sighting_of_ref": "indicator--8b446a66-7a8d-4a54-9d6e-0eaf6eb1a53a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96bfb2c-59e4-4e5e-a72e-9006eab0606f", "sighting_of_ref": "indicator--5ab8e16f-c9fa-40c5-92e4-cb962ee1a0d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb7d14c-832c-4590-9808-b756b4108aaa", "sighting_of_ref": "indicator--92464225-a239-4f20-926b-003a0e1c1ff8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591d2aa4-dc59-441f-8344-76089aabee38", "sighting_of_ref": "indicator--ab71345d-dd28-4669-a1b8-dc59b91d05d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce28e939-3003-4228-9b0a-8dad11135172", "sighting_of_ref": "indicator--a736d595-510b-4e12-b408-1c2bc927a3d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58563c7-87a4-4521-9143-464a41660c40", "sighting_of_ref": "indicator--c36b3bf0-e59f-41b3-acf3-0127de7378db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c08548-b0cf-4d88-aee0-55ed6e9b6cea", "sighting_of_ref": "indicator--72da3331-7f81-4355-b070-523a6020b2be", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1602e7fa-a21c-48ce-93f9-c9fb030e46b9", "sighting_of_ref": "indicator--3d634485-849f-4445-9178-0e128d20ec54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09000001-9990-4b94-a818-e22eaa99c3c7", "sighting_of_ref": "indicator--9685df86-7e21-4d8f-a553-ced64bdd5cc3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6efc5f-5904-4204-b2e9-47762986c30a", "sighting_of_ref": "indicator--ce579a74-03ca-4945-8e12-1defa647d636", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d89986-61c3-4502-8e10-e7a65e08a1e4", "sighting_of_ref": "indicator--39c21b35-4950-4b9c-9dc8-73289fcc2c5d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03428f97-67d4-4f76-b40b-712c842105e0", "sighting_of_ref": "indicator--ee2ab2ce-197f-4821-b03c-9acbf7249891", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f476203-165e-4829-bd4e-aa321bae60c0", "sighting_of_ref": "indicator--2c497474-7924-4d52-8b42-687dcbcd134e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490d9c18-c01c-4ec4-a773-bade08c30d29", "sighting_of_ref": "indicator--8e8457f7-a1d4-4643-900b-d7528ffa8992", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a2b48f-a926-44a2-9998-3b6076ff6c19", "sighting_of_ref": "indicator--58ae4208-8a72-4b53-9d6c-bf452bef51d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f493e32-00ff-445b-859b-b300f73f1e68", "sighting_of_ref": "indicator--c279b85a-0448-44d1-8e6f-0efe12e67e8b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc1a75e-3f27-45d5-a773-307d2aaea67d", "sighting_of_ref": "indicator--5d1abbd8-d663-4150-b502-6c0e67371f75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8d9d42-425d-46cb-8d9d-6da88dc664ae", "sighting_of_ref": "indicator--e2751ca2-8eea-4cff-a182-c2fbe63664b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f311ded3-9a1d-4d90-8335-bc905bbff51e", "sighting_of_ref": "indicator--43f68726-39d5-40d8-93e7-6e3f75ef8fe4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2045fc71-f65b-469f-9c01-bda0c4b9d1af", "sighting_of_ref": "indicator--6d1c0496-14a9-49db-9dd4-1aa405b35733", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eee2ce7-b5b6-4832-afc0-9166c20a15bf", "sighting_of_ref": "indicator--805e43e3-ed39-4779-b823-59be4d81ea27", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475d6300-1a89-4bc8-b1b0-78b159bf0e69", "sighting_of_ref": "indicator--8d6b2cec-47bf-4d08-9749-20e950492937", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328628ad-8201-4e50-b6c7-3202984458f8", "sighting_of_ref": "indicator--7bef02c3-011d-414e-8476-fa9e11b198ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed23ad6-95e0-4e03-b607-7fdf53710b08", "sighting_of_ref": "indicator--e67a02b7-30ea-4d9f-9ee1-8ac8ba1b7ee7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef7f003-f45e-4015-82ea-8351b6c473d1", "sighting_of_ref": "indicator--074c8bc0-012d-4d64-950c-ccd4229f1618", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a415cd3c-0e15-425d-9a21-e5247fb18482", "sighting_of_ref": "indicator--35446d36-41e4-4dab-bb34-a9343417cd6d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d52dad-c32f-4b20-8ac5-bde1899b2c06", "sighting_of_ref": "indicator--3deba548-a0d6-4daa-a02c-fefe70d0bbb7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b858a50-38f7-4dcd-b854-6ca1ed68e605", "sighting_of_ref": "indicator--19f5e56b-04dc-4db3-a664-5e26149f8b65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78239d6-4e9f-4b9e-8408-8d40b10faf2c", "sighting_of_ref": "indicator--19f5e56b-04dc-4db3-a664-5e26149f8b65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf54c4b8-bb99-4f50-9cc0-e13862720a20", "sighting_of_ref": "indicator--c0707166-0676-4826-bb48-cb6565950d32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cb62e7-75be-4114-a77c-08dd37f5c337", "sighting_of_ref": "indicator--c50f350c-f0e4-46fa-aa04-87b333ed3b68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f28103-a53d-4310-8512-efacf2e368a8", "sighting_of_ref": "indicator--c247bbb0-6246-4362-b5b5-33439aee2cff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344c1b38-e586-476d-8c1d-0b82581dcfa1", "sighting_of_ref": "indicator--7fdfc20c-62a5-4e00-80f6-94f523bb6a4e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e1a425-bf6a-4139-9088-2a01b68dcfe3", "sighting_of_ref": "indicator--d906f40d-d01a-49f2-b66d-e3b4a02bfdf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c68791-5c24-42d4-9142-120969d5ac14", "sighting_of_ref": "indicator--8e84a736-55bd-4fec-a945-b666b8c82a99", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8eeff8-5bd6-4198-bcb8-4ca39974b3b4", "sighting_of_ref": "indicator--fccb11cc-18df-4fe3-b115-5c90cf65106d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36929570-0a0f-4c3a-97e0-a4b4b6d93bd3", "sighting_of_ref": "indicator--989706fd-5506-454c-ad4a-7727dccf7e4e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b1e8cc-b358-4274-a6e7-d9b16896d855", "sighting_of_ref": "indicator--b245bf05-4ddf-42fa-88a5-e62ec36b3d44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcd796c-1f4c-4510-97d1-c0044e08e256", "sighting_of_ref": "indicator--f93d21cd-4a57-4b9c-864c-b25913221cfd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5869053b-3a70-48e0-992a-ee76d28b1262", "sighting_of_ref": "indicator--0a4c829b-12b7-4b56-94e2-e12880b91528", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec68e8d3-a0c0-46a1-b425-a8a990bb1141", "sighting_of_ref": "indicator--2fcf247e-7553-493c-a290-4db6d3459b21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe8bdd5-9d49-46f9-8dd5-c2d61b568023", "sighting_of_ref": "indicator--998eac62-a513-4f1f-870d-c1bf86073b45", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a7ce3-a749-4769-bccd-73e09742cf4d", "sighting_of_ref": "indicator--e425134d-0770-4174-af5c-3ed947793df6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfa6bdc-af46-48f5-ac90-5b630c1ec26f", "sighting_of_ref": "indicator--2bbaee3c-36e5-4690-a047-ace298c69012", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b68b98-2f80-4484-8e04-f83d954e63b6", "sighting_of_ref": "indicator--57d38469-3a42-4c6d-912a-a1750987ad26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee34631a-c891-4c70-b377-84f971a5ecf7", "sighting_of_ref": "indicator--57d38469-3a42-4c6d-912a-a1750987ad26", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf78b6f-77d2-4e46-8ce6-bca76303e0cf", "sighting_of_ref": "indicator--9174aba9-96fd-4392-b377-f0e91a184a3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5243922-dfd3-4040-adbb-bc27fe9bb069", "sighting_of_ref": "indicator--9174aba9-96fd-4392-b377-f0e91a184a3e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116c21b1-2008-481b-a77a-a6828a4bc419", "sighting_of_ref": "indicator--b0d2cfbb-99f4-4db8-9de6-266dab8039ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92984e31-fbd0-460b-b60c-02243eded24c", "sighting_of_ref": "indicator--4fca11c9-2e07-4f06-b360-7e42b3921cfb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71159d00-2a17-4904-b36e-3eded3129473", "sighting_of_ref": "indicator--8a46fa2e-058c-4388-bd18-9725e56a3bee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04889b96-59b5-4844-9664-bf6ceef17aa1", "sighting_of_ref": "indicator--8a46fa2e-058c-4388-bd18-9725e56a3bee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412346cf-4a45-4bb5-803e-478ec52a4b08", "sighting_of_ref": "indicator--80a2ff70-ba61-4caf-bf9c-2a418e9fb4f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7462c70a-b0e2-43b6-b0ba-a0706f61ae5a", "sighting_of_ref": "indicator--d7587035-ed80-4a32-a9b4-904cbe7284d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438a0380-d814-4013-a75b-2a93967c7a44", "sighting_of_ref": "indicator--1a950b0a-82a2-4f2a-96db-db918937b5fa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafb527b-48ea-4908-9494-94864cf5137a", "sighting_of_ref": "indicator--2ec0545f-2377-404e-9423-1eaf46eaef04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98d2d7c-defd-4546-b7f8-00a74aaeec45", "sighting_of_ref": "indicator--de666ec2-ac33-46fe-816d-710204d54b56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ab605e-e057-40ff-8996-1921610e8261", "sighting_of_ref": "indicator--07ec9dca-e4ed-4f99-9844-423b777b5cc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9803d50-c328-410c-ad7e-3ea1b2c807c2", "sighting_of_ref": "indicator--c3066ade-2a5f-4bce-8563-ec9486a2eec8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece5f457-84c4-4169-ac93-f61e3946ae0e", "sighting_of_ref": "indicator--66cc575d-9e26-448b-b24a-7b24f632d5ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af21a4c-8f46-4c10-b10d-a884fd97fdf1", "sighting_of_ref": "indicator--b9e38b59-9429-4a8d-bd08-aeee08fdb84c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78010f6d-c6a3-473c-b684-2aa4a5462c9a", "sighting_of_ref": "indicator--b9e38b59-9429-4a8d-bd08-aeee08fdb84c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2767ae-7ce4-4506-a050-ec18cc18d94b", "sighting_of_ref": "indicator--a8e1a35a-8c01-4b60-8ad4-4558ff4e3603", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2494ed62-6dfc-4d59-8bce-f147d9b03f53", "sighting_of_ref": "indicator--4e140825-6bad-470a-b326-edacf6a9ca7a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf5ad8c-3c82-4250-a261-66ee5d835c1d", "sighting_of_ref": "indicator--838d0208-4385-4e0f-ab9a-e720fd889f8a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac503c79-68ff-4366-81f3-bb67628efe47", "sighting_of_ref": "indicator--838d0208-4385-4e0f-ab9a-e720fd889f8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976213c9-ed36-446a-acf8-f8d6decdbbd7", "sighting_of_ref": "indicator--dce9095f-45ca-45a0-98fb-74f28019fc1f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e21769-8c2e-4474-b9fc-2cce0b8253aa", "sighting_of_ref": "indicator--ed6aa837-986f-4c0f-b77c-f093c87e958e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c1bf97-9849-4664-ace8-61d1e67aa5ce", "sighting_of_ref": "indicator--bd52fea5-27e7-4879-8296-a1af2d82553e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4b5f8a-4990-4649-9b8e-8b05b2a5cb55", "sighting_of_ref": "indicator--21e9eb78-309a-4f0a-9a26-9b9319e68e77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0fda89-340e-468c-8205-df0106d7aa96", "sighting_of_ref": "indicator--c1859c0c-7abe-4c21-b22a-dbcd8c37bdbf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b9168c-59d6-4110-9957-f11ec5b0d4fc", "sighting_of_ref": "indicator--e6b431c4-b34f-4249-9661-5205f787b89b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c3e906-a35e-49a6-b7da-bdbb774ea05c", "sighting_of_ref": "indicator--9a150965-af02-448a-afaa-7263b8cb22a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf983ac-9642-4422-8a5b-cbfaa0db9bb9", "sighting_of_ref": "indicator--9a150965-af02-448a-afaa-7263b8cb22a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e4bbf8-687d-4c2a-a682-c3a0651f156a", "sighting_of_ref": "indicator--104a073a-0d32-43cb-8ae5-7ee4f3d5b599", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c6bcfa-d5f1-416c-afc0-39f8084a4193", "sighting_of_ref": "indicator--2761eb81-19ac-492f-aaff-d1071759583e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c74863e-f52a-433b-9201-ed75682bc28e", "sighting_of_ref": "indicator--af6fee50-7055-4be1-87d5-b3cdf0ec9824", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5550ff-c8ab-46b6-bf3f-9891dc4e5ec3", "sighting_of_ref": "indicator--e7173e41-a058-4423-aab3-ce56375bfdd4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a98b7a5-f354-4ce1-b977-17e0f9e17a57", "sighting_of_ref": "indicator--b4e62bce-84c4-4ae4-a3cf-d84c53d424d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8ccfb3-74df-4e80-baec-c8ff3567c8f0", "sighting_of_ref": "indicator--5540ae52-fe74-49d8-b7f4-925d1d55591d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea2c62-a757-4f3c-915d-edba86c15e7f", "sighting_of_ref": "indicator--a5f2ca97-b4c9-4cd6-939a-837980a7bfd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb16247-6b17-44df-a07c-d37733f3bcea", "sighting_of_ref": "indicator--58bc079d-bc18-4618-8fed-6dec219cf92b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad893d19-a45a-4544-847d-42038f4a6eba", "sighting_of_ref": "indicator--3b846f23-5c05-4a85-a0e9-7c90ad38d0a9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103f7285-e5b5-4fc2-ad3a-feb9fc14dcf1", "sighting_of_ref": "indicator--ea157b82-572e-48d0-8209-ff597f4da3fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b87603-8a46-4a1f-a836-04f926dae1f6", "sighting_of_ref": "indicator--7abf68cd-8bda-4de9-9efb-a851a2f9a97e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5714c67f-9e08-4388-9088-28ceda30257e", "sighting_of_ref": "indicator--997104ba-81b7-419e-bd11-aaccdb89a4b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c7845e-65b3-4666-b9a3-9c424a6f948d", "sighting_of_ref": "indicator--83c2eb4e-fc32-4648-b52a-ab0d7a7387e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc345b0-f8e2-4f89-b72e-f899124e03be", "sighting_of_ref": "indicator--6e42fb83-aad1-434a-be0e-922051ba0879", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e006b2c1-80d4-451e-bc35-8b1b8df5dc3a", "sighting_of_ref": "indicator--58bf37ae-69ae-42d9-86e8-31d80dda5f51", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbfadbc-bcfe-45ae-b21b-3729aa50008a", "sighting_of_ref": "indicator--899b6fbb-8586-443b-b7ac-94e1c59ee262", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095cf1c9-fa04-4ff2-bdca-17a7491e97a2", "sighting_of_ref": "indicator--710ef674-99ac-458e-ae1d-10968d825d73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2ae18a-ead3-4778-9ac6-1943fb403e1c", "sighting_of_ref": "indicator--0c65ffdb-a193-4d15-9bde-9a8bd85e9dbc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636f1c6c-1573-4eaa-a0f0-fc304d1af822", "sighting_of_ref": "indicator--ec292d77-95c1-4603-88a5-0313db352d9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bb2e8e-baa0-4c66-9bd5-673e792cb1fb", "sighting_of_ref": "indicator--ec292d77-95c1-4603-88a5-0313db352d9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a7924-a7a5-42fd-a081-33433011265e", "sighting_of_ref": "indicator--cb4f4c76-e94d-4337-99f2-0404bd19f8cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f64c86-8054-458a-b3c3-3ac90b3ba33c", "sighting_of_ref": "indicator--2bedcd9f-bf51-4823-acf4-78ed69579e0d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eb5a2f-430e-4ab3-adf3-c3b83b7518c1", "sighting_of_ref": "indicator--a8bc2f36-030c-4d97-bfdb-94ee160d2452", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607115d8-58ef-4ee8-8040-8948ba5134c5", "sighting_of_ref": "indicator--f1e4d15d-4813-4281-9040-f7c8b5897aef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a702bca-d89e-453c-adc2-cb0c9590251b", "sighting_of_ref": "indicator--bcbae563-4754-4c12-9a72-49692317b221", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1c70eb-869d-4dcf-a048-2b98d997b5c9", "sighting_of_ref": "indicator--2679b5ff-1a71-49d9-8a5b-d92428b54290", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2699c292-6ced-468a-b8e7-67e55dc90bcb", "sighting_of_ref": "indicator--d88e4875-b490-4acd-bcd1-ea7bd78b8ce7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0e60ee-9d91-4dbf-94e7-e269626c190c", "sighting_of_ref": "indicator--58ab47f2-4a09-4849-9532-98ab5d6e6ca3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210eb8f0-d77f-467d-b715-2375b0b7637e", "sighting_of_ref": "indicator--88f16d80-eebb-41d2-bcb9-fc4b72efcb54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e293d6fa-9a8d-41a9-8178-0aaa8c85cfed", "sighting_of_ref": "indicator--caea7d86-f2e4-4c3d-8d2d-e63e91ca8b14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501e6e05-452b-48c7-83dc-a9bfc997f7f3", "sighting_of_ref": "indicator--7427c326-5af5-45d1-9f60-9635f7dfb597", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f672b855-cd64-41ee-9848-88856af04917", "sighting_of_ref": "indicator--622fb048-307a-4464-82aa-ed0ab80a7c06", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419c08c1-0d0a-4e67-bef1-6b8049d7e578", "sighting_of_ref": "indicator--8ee82e8f-0739-4460-951b-61306efc7a7b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca23c5c-94ab-43fd-b5d1-1e2ddcb33436", "sighting_of_ref": "indicator--ac3c5788-584a-4acd-8c30-ffe3544f5a16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d0a88a-f66a-49bd-a5e6-836542a48e43", "sighting_of_ref": "indicator--9e01098b-4beb-431e-8333-4899c095018b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adf4eb8-6b01-4b1c-89e8-f19672390308", "sighting_of_ref": "indicator--4bb02aae-5584-4a93-8ce5-d255bbf8f692", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f33a978-fd79-44c9-a8e3-766e210ef489", "sighting_of_ref": "indicator--f1817ca2-f694-43c6-ba26-84d90da4e50b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7e9011-20eb-4ff0-bc35-7864fd145bfc", "sighting_of_ref": "indicator--45fc47a1-68a6-44ec-acd7-d7a32ed5b532", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f19850-d4cb-44e7-a92b-efaa84133744", "sighting_of_ref": "indicator--53d853b7-7682-4d27-8167-5b8845f48583", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ea60ac-6c45-4281-a927-3d6c7ade52b2", "sighting_of_ref": "indicator--9be85497-2753-48af-951a-972240947447", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a0f1f2-3e50-4135-8c92-04579bbfd86b", "sighting_of_ref": "indicator--c1482c1a-fc3f-4549-97d3-0d782ea53b3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903b088e-1f48-45f9-b8e7-918040f6981f", "sighting_of_ref": "indicator--521852f4-bc3c-470e-b19e-02d21fce3e00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accd54b8-e358-41c7-98bf-924b767cb4c3", "sighting_of_ref": "indicator--5a12dbc5-d8fd-4a0c-9536-bce64d8b680f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971c61dd-9145-4bb0-b6a6-e8b8be130e00", "sighting_of_ref": "indicator--d396962b-371e-4707-babc-225016e08310", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be36c121-94ff-4f6c-8ce2-32ee8b613add", "sighting_of_ref": "indicator--48918f05-6afe-41be-b590-1ba5d121451e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8ef548-6a36-4d86-8be9-2365c76d81e8", "sighting_of_ref": "indicator--41d509a4-02f4-49d5-a0dd-ef6633831457", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3c99d4-a143-4be4-92e7-201f1151853b", "sighting_of_ref": "indicator--41d509a4-02f4-49d5-a0dd-ef6633831457", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1d8c6a-78e6-483f-bea3-9878a77e4586", "sighting_of_ref": "indicator--c71be447-117c-4fad-9b16-53217c46930c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b179595-1c08-4dd4-9ac2-c54adaedaea0", "sighting_of_ref": "indicator--cd8010b8-ee0e-4c5c-80fc-f46a3458d9ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f77914b-8da5-40ab-8233-fdec1b7f9703", "sighting_of_ref": "indicator--9561e82a-3dbf-4a4b-b333-7024e6a5a38c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f8f94a-d73a-44c0-b2ee-8ac8bb54a90f", "sighting_of_ref": "indicator--cdf80955-321d-4e39-a88b-0a2aa0d1d904", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f76bcdc-3e46-4396-910e-64bc1e6b8383", "sighting_of_ref": "indicator--a9c188a0-6f27-4cc1-8472-93b1a6d92c66", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d452b97f-fde9-49cc-be24-f0215b8a0f89", "sighting_of_ref": "indicator--51881649-91c6-469a-8562-3082c6aa4535", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fecfa0-acbb-461b-99ab-cc4ec08e1f70", "sighting_of_ref": "indicator--24111dd5-c239-462b-82e5-77a8965c3a25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34fc1c3-2999-4557-8bb7-3574fc29b0a3", "sighting_of_ref": "indicator--375052fc-d5bd-40d0-a4a8-36cca3b6c7b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c05fd27-eb88-425e-af45-dad32008497e", "sighting_of_ref": "indicator--1d9ee43e-c19c-4608-a0ed-f3a23354b6d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59241cfa-6f7b-4c8f-888c-77bb8df5c3e9", "sighting_of_ref": "indicator--9fbda079-c138-43c3-8540-bbc61e32d775", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2232cf-eb8f-47f8-9c22-de06199575e1", "sighting_of_ref": "indicator--a4ffb3e9-6f2c-49fc-81c0-4416d9db476a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1903f2a9-8754-43c3-909d-d0e78da64667", "sighting_of_ref": "indicator--d653d441-e1c5-4d41-9682-d94f7609f4b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72216d11-bf1d-4de1-8446-95e6a418110a", "sighting_of_ref": "indicator--2c12e811-7bed-40f4-b8c7-c86d1cbfc40b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1749025-48e5-4c67-be36-0ce7d9723140", "sighting_of_ref": "indicator--455a2563-8c21-4875-a9b6-a9db6a400327", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bc7570-795c-46dd-b9d2-402d13e17977", "sighting_of_ref": "indicator--c9b29754-371a-4739-92f2-662234097f54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a96230-4536-4bb1-8839-2d0155774662", "sighting_of_ref": "indicator--ca37e7e1-8df4-4e44-86b0-83cd8e015f3a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe88b45-952b-4d7d-b133-c139b86cf071", "sighting_of_ref": "indicator--0eebce23-5656-4f92-80ae-b792f4397cca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ea9409-1d25-4e1c-b819-3d88e5072426", "sighting_of_ref": "indicator--ee83f61e-ea07-42e2-93f7-be20ede578ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e0c267-0035-48ae-b080-b4cb5b30ba9f", "sighting_of_ref": "indicator--cd32b9df-64ba-45f9-91c4-73d4ab2a0ef8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e6b600-4daa-4463-8785-e8520fccea14", "sighting_of_ref": "indicator--32fe75ba-aa0e-4f3a-a68f-8a851ad6535e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7aae19-e40b-4422-a096-b06d658ddbe9", "sighting_of_ref": "indicator--7d9cbcb6-3ce6-46ff-91b3-8f60bf16fd71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed057385-3d75-4ea5-9a2e-286767120fff", "sighting_of_ref": "indicator--c2e64044-ecc6-4ff0-9119-ef6a4f571f94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beecf32d-a19e-438d-82c7-73fea9a95f40", "sighting_of_ref": "indicator--ebe85e8d-3839-4210-9102-6031d33cc190", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8735f23d-990d-4b2c-b670-78706ec329f3", "sighting_of_ref": "indicator--0617c179-2229-4f52-a58b-7959860d188f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf71b5a-10f7-4b1f-91d0-1b54e317a2c4", "sighting_of_ref": "indicator--ea64dff2-2e89-4f54-a044-7aaa28ce7337", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f7086c-23c4-4120-b570-00eb38f7a117", "sighting_of_ref": "indicator--5d5ed46f-5042-4128-a41e-5f22c8b98901", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5f3fa2-43b4-4ca0-baa5-36e2feb20f19", "sighting_of_ref": "indicator--5d5ed46f-5042-4128-a41e-5f22c8b98901", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7905f139-1807-44f8-8d01-b15b8317bf6c", "sighting_of_ref": "indicator--b1e35841-2380-443d-92f0-e1afc864545b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bf0e2a-cc8c-4a58-985e-0fd2340cff13", "sighting_of_ref": "indicator--7b6f87a5-8ae8-46aa-ba92-00b5b5b80ada", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3e7841-ef44-4af8-bc6a-f46d81b57b92", "sighting_of_ref": "indicator--7b6f87a5-8ae8-46aa-ba92-00b5b5b80ada", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14347ec-210c-4109-a9c9-1075f0ac7d9b", "sighting_of_ref": "indicator--2bc34cb6-9d15-4175-8280-268878781f8d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aca095e-747f-49c6-b59d-154a11e0198e", "sighting_of_ref": "indicator--f680fe1b-108c-4714-83d1-528187e245f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5416caca-cba5-4403-aacd-a927eda57e28", "sighting_of_ref": "indicator--3c3bb384-1d71-40eb-a4e3-f2df864fdc33", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1ac758-78ed-43a0-9ed6-2252a7078471", "sighting_of_ref": "indicator--f8a0b06d-ebb1-4863-932b-1628f8e2b116", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f00bb93-3ad9-4999-8d20-fa966c63a0e8", "sighting_of_ref": "indicator--234b64a0-8a63-413b-b2dd-79f7c4a5a542", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47491565-1363-4ac7-a7a1-c7afccd317a4", "sighting_of_ref": "indicator--234b64a0-8a63-413b-b2dd-79f7c4a5a542", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce643ded-698a-46fc-80a2-ff04b54dfaa0", "sighting_of_ref": "indicator--54ca72e9-b445-4454-8ba7-9f49909d2a4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d39df17-d0c9-4646-a711-35de0b12c722", "sighting_of_ref": "indicator--54ca72e9-b445-4454-8ba7-9f49909d2a4f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88053960-f5b4-4df7-bdf8-36574392ae4e", "sighting_of_ref": "indicator--74ab7e18-2b66-484a-af5b-aba1222fbd6b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be20abf0-baf8-43f8-b7eb-dce66df7b535", "sighting_of_ref": "indicator--1d6bb2c0-1e9b-47bb-aace-bfe1eca44897", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed09a9ef-a7aa-419b-ba47-5d951eb26e90", "sighting_of_ref": "indicator--dcb7442b-d10e-4b23-ab3b-9a7b16ad44ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ec3f0c-1ed2-4a68-941e-d235138eb34f", "sighting_of_ref": "indicator--2877ad39-316d-4881-a347-a62016436de0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27da7ad5-0a01-4aa1-b67d-f830ed23bb0f", "sighting_of_ref": "indicator--5702f3ff-aa65-48db-8720-f656c8ac9856", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16418f75-1b37-413a-88f3-4dfc39bb30a1", "sighting_of_ref": "indicator--3a194850-37c0-47cb-8826-a53b16a0eb7f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5c749a-7a8e-477b-9c74-5b9bb0c0e254", "sighting_of_ref": "indicator--211620c9-41cc-468d-898d-521b8d750b14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee036a53-eab0-4a63-bcff-9602989661cf", "sighting_of_ref": "indicator--e03365dd-b8b7-4b7b-a85e-9bf78af332d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbbfe23-d283-4f92-a9b6-a875d84d25fe", "sighting_of_ref": "indicator--52e38359-64b0-4ed4-8d32-66443bffc3e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8229d919-5295-4917-9057-22c830f45c57", "sighting_of_ref": "indicator--95252a2f-72bb-48d7-bf9b-54d469879c91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2443c16c-59b5-4095-99b4-f20b6e9429d4", "sighting_of_ref": "indicator--9ab453b0-e0a7-4b47-a684-ca2313f89154", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b8bdbb-70fa-4b42-93ae-7835f4caf884", "sighting_of_ref": "indicator--faee172b-2d68-4634-a411-b2fc38c74040", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff949a08-e6ef-4a88-a308-4ffdba1cf292", "sighting_of_ref": "indicator--806e8d01-cb0f-4328-bba4-3e5353e1c6d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d4e1a7-0577-4657-9f82-ee8f0c7e11af", "sighting_of_ref": "indicator--63007125-f2bf-4124-bca4-f06d0102a48a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c236cdf-0bb6-4af4-ac11-72bb1aa276f4", "sighting_of_ref": "indicator--d15a0bbe-a096-4de4-82af-408428eb3649", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0786ed48-c295-4a1f-a990-19fbee3655ab", "sighting_of_ref": "indicator--c6a526b6-2d04-49d1-8a4b-96cd7f1c4b9a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7886f850-d9dd-4638-b31a-cdf37bd4ba5b", "sighting_of_ref": "indicator--6da16e98-5e19-4a8a-9b9b-8f97938aa925", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edea3510-702c-441a-a360-c1307f9f54fb", "sighting_of_ref": "indicator--bf0dd2b3-cef9-4cb0-a30b-abe9d9c6a54a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fbd7e1-cc68-4c9d-a42e-0215c5f29392", "sighting_of_ref": "indicator--bf0dd2b3-cef9-4cb0-a30b-abe9d9c6a54a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d70370-982c-4614-be31-f61e92b11b7f", "sighting_of_ref": "indicator--78ca60be-780b-4570-a11b-e85f23d8515f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef565f4-3c4f-4385-bf04-bac12185897c", "sighting_of_ref": "indicator--7f18fd08-10ef-4416-bab8-0bb82e80d7de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9396688c-f370-4675-beeb-15ebb07ebc48", "sighting_of_ref": "indicator--b6e4ad2c-f3b3-4efb-bc90-d32196afc2f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85337b45-2feb-43e5-9585-05f5fa75ad55", "sighting_of_ref": "indicator--a25d8cd6-7f79-489f-8f57-91598bf9f735", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b195ad02-97d6-475a-aa83-fedcabc3b56b", "sighting_of_ref": "indicator--c45ffe14-cd4a-40d0-a8ea-9d30f63b6c29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984201aa-c340-4770-914d-bd8f0eddd18d", "sighting_of_ref": "indicator--241578d2-85bf-40fb-a0ee-aaea1d732a74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4197916c-ac38-4302-bd2b-66ea2386bbac", "sighting_of_ref": "indicator--fa038561-a243-4827-ad22-b81018b8bc1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b8999c-6bcc-42f0-88fc-07e62acfb76b", "sighting_of_ref": "indicator--c52435d0-9ca9-4e1d-9a31-302e1116dff3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7327913c-9729-47f7-b62c-7fa1bad2bc9d", "sighting_of_ref": "indicator--0d1319da-a051-4816-8485-cfe76b4cc396", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db7b5f8-6312-47e3-9d61-488a79aa681a", "sighting_of_ref": "indicator--0d1319da-a051-4816-8485-cfe76b4cc396", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c4088d-9fbf-45ab-bcbd-0fa8578cd8f5", "sighting_of_ref": "indicator--ec1aeddf-1649-4f55-a3a6-6a9536577ed2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74c8910-c15a-43e2-823b-61817be1079c", "sighting_of_ref": "indicator--4a1b3d4a-0656-4f56-999e-60c84a7e8399", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b73b95-67ea-493e-9dcf-945cbe871e06", "sighting_of_ref": "indicator--8b23158d-2c16-4fdf-9d76-8a967a39ece9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891039f4-6959-4cf7-b25e-b436e9c95a0e", "sighting_of_ref": "indicator--a6c1ae33-596e-4a8b-a4ee-24d88e4f753b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6effe65b-54d8-4b2c-8da5-10cd4681024a", "sighting_of_ref": "indicator--a6c1ae33-596e-4a8b-a4ee-24d88e4f753b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d590370e-090b-4154-b4fe-943606c35aa4", "sighting_of_ref": "indicator--f04362c8-f0bc-4c68-80cf-92d0eb39c7ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef966a4-80b7-478a-9dc9-4c0d64802432", "sighting_of_ref": "indicator--f04362c8-f0bc-4c68-80cf-92d0eb39c7ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8111149a-5584-4fc7-bcd8-a4abaab2f6dd", "sighting_of_ref": "indicator--05372e73-a646-4629-a882-3186ee2457e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fced3a34-e431-404e-8984-9b6f9b3d604c", "sighting_of_ref": "indicator--623f8f6e-cd86-42ae-95f3-260c92d37231", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f491289-7339-4b25-b938-8951e1a46532", "sighting_of_ref": "indicator--9ec0a43c-2b0e-478f-babb-b9b3ba6933c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024a1da3-59d2-4d62-9c0d-08c7aab3ade0", "sighting_of_ref": "indicator--2e6f0491-c571-4815-a186-cd25781c7acc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6046ef3-b12c-4559-809f-497e3b601deb", "sighting_of_ref": "indicator--2e6f0491-c571-4815-a186-cd25781c7acc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec99720-faf6-40b3-83ce-1473a9c177ea", "sighting_of_ref": "indicator--c0ac1e3d-8003-460a-b8c7-cab964a6a6b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906098a4-39fd-422a-8bc9-32e80b9d497f", "sighting_of_ref": "indicator--83a5fe62-9972-4542-92e7-b270d27886f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16a60e3-a240-4c36-bfe0-8016f6ce5e99", "sighting_of_ref": "indicator--4012b281-bc2d-41a4-b802-dfaf49422649", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffcc3ae-af52-4be9-9a44-9c746978e45b", "sighting_of_ref": "indicator--f152a83a-a62e-45cb-8b83-904d138299f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46d9f5e-b836-4d21-806b-3988a233a5f8", "sighting_of_ref": "indicator--c9509c2e-ddc4-4053-912d-09d3007729f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356dc0dc-a6a5-4a75-a6ab-655450a5e9b1", "sighting_of_ref": "indicator--d71cadbc-d4c9-42c8-8c79-de4f6987fe25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c876eb60-bbde-4793-8eda-470c4705bdff", "sighting_of_ref": "indicator--10eeffab-5bbd-487f-af54-a64b1427a595", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c7681-f212-4c95-90ca-cf96cb18fc37", "sighting_of_ref": "indicator--10eeffab-5bbd-487f-af54-a64b1427a595", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06aa190-d777-4ef0-877d-ba2d1bcbcc6b", "sighting_of_ref": "indicator--ca286853-e323-482a-993a-e1eb0d9fcf5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c9f7be-6189-4a6d-9d0b-bfc2173265ae", "sighting_of_ref": "indicator--b13c306b-e33e-4cce-a1a3-b74593fb0b09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3601b136-fbda-4d58-9a49-eb70bd10b0b3", "sighting_of_ref": "indicator--d33b0169-fedf-4868-aba1-fd695aad9783", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b2a8ca-20b2-4f60-84ee-27a2add0912d", "sighting_of_ref": "indicator--d270a4e5-f8cd-45dd-8b20-608000b7890f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd1b696-d490-4066-b3e5-00aa269821dd", "sighting_of_ref": "indicator--b9d7d38b-cac1-4226-b7d1-19e84001db86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093ac07c-8ed2-4bae-8d12-a2241ab2efa0", "sighting_of_ref": "indicator--0bf323de-515f-4d24-9089-b743bff9d706", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf6f24c-3521-498f-829a-9ab549feb89f", "sighting_of_ref": "indicator--81b154c0-f4e9-410f-9274-1fd15f1c0c2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a72de8-0106-42d7-8365-aa7570f92326", "sighting_of_ref": "indicator--145dd3c9-b529-4bbb-a192-357ddd114938", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc03240d-79d8-480e-b09c-2dc297b19cab", "sighting_of_ref": "indicator--60f52beb-2d1a-4a72-8183-3720ab2d5027", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956d1767-5585-45c2-a331-cffb01308c3e", "sighting_of_ref": "indicator--57f9395a-d2c7-47a1-876b-08e8bb88929c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df79531-30e9-459a-b1de-4f5cf37ad845", "sighting_of_ref": "indicator--b02d7854-0f94-4e0e-9478-f43c3258811b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943f39e9-3fea-4526-b082-106a851482b9", "sighting_of_ref": "indicator--c23af2bd-98e9-45c5-92da-de7011b01c20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417018e2-66a6-46ea-9ce2-859baa7e1141", "sighting_of_ref": "indicator--b4f9817c-2e65-4d4b-805c-f95f907c22e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a237d31-a00f-487f-9ab7-2dc816ca2725", "sighting_of_ref": "indicator--b4f9817c-2e65-4d4b-805c-f95f907c22e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014afde0-d882-4a60-8110-b79106e55853", "sighting_of_ref": "indicator--98f05ec4-dcbe-4492-8351-59299a6d4f65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f178d3-32f6-4099-9f3b-2db067b42118", "sighting_of_ref": "indicator--cfb3b885-fa7d-416e-8a48-48e3eb25604d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4935ace9-ccc4-4686-8258-1128bfb2a7f1", "sighting_of_ref": "indicator--8caa8661-cd7d-4bb8-858f-2596f8fe596b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5d5954-3e75-43e5-9623-60217c5a114e", "sighting_of_ref": "indicator--c2f60989-981f-4938-9850-db5b3f85e670", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a030974-6fe0-43ba-bc6b-b94b8cf08522", "sighting_of_ref": "indicator--e32d80f5-a80f-4d50-a93d-b0e72ee523c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dd2081-e44f-4a25-a438-3d5a6c2b66b5", "sighting_of_ref": "indicator--1f88a557-8d8b-40c7-a017-3a524ce3aea3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19ed9ad-7d74-4dbc-9e61-62c62404f561", "sighting_of_ref": "indicator--b45e5402-1624-40e8-b808-8d9517b45745", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1cab1f-6cfa-42ef-89ef-00fb6723eef4", "sighting_of_ref": "indicator--532755a0-1f92-406d-b939-40c327934008", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8192c75b-8df4-4cb6-9477-3205a0a18d22", "sighting_of_ref": "indicator--c878b21f-fa8d-4253-bc41-845fb57808bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6306b000-cc89-4f18-aee3-26df77679b57", "sighting_of_ref": "indicator--def1da1a-5596-48bc-817e-c0b95b1bec75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c77c02-8bab-47c4-af4a-67af2339d527", "sighting_of_ref": "indicator--def1da1a-5596-48bc-817e-c0b95b1bec75", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f20141-a208-4b5d-abbd-b1bb4980c1c2", "sighting_of_ref": "indicator--1f51cb50-87be-4339-80e5-fab487cc5ec5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1760e32a-d5dd-4d4c-b296-4f47a81b3cac", "sighting_of_ref": "indicator--cc68a6f4-ad9e-4c40-939b-46a951cd5ced", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ffca6-6b0a-477e-8778-103649e48fee", "sighting_of_ref": "indicator--cc68a6f4-ad9e-4c40-939b-46a951cd5ced", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e546e2d-f440-4a7f-92d0-76aac209173c", "sighting_of_ref": "indicator--fd34d288-c31e-4868-9808-c6aecb74e620", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f845495b-7563-470b-a9da-7168ccb9cae3", "sighting_of_ref": "indicator--5d11ea62-287d-49c4-8301-d98b04903443", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606ae83b-9969-4872-a215-8159fb5e1615", "sighting_of_ref": "indicator--aad370da-1b4e-41df-967a-fb788979b60b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aca2513-787f-4956-ac21-6e03d6302e66", "sighting_of_ref": "indicator--6681fe21-b242-4def-b99d-3c9de6835c28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5568eb45-1709-42cf-8033-8398b8a624da", "sighting_of_ref": "indicator--0e7b826e-866e-4fd8-a114-02d2b13c162c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c92886-6534-4e3f-a5e1-49d03bb28144", "sighting_of_ref": "indicator--1b1a8607-37ed-4036-b07b-c0497414c7bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225daa6d-bed5-4e02-a671-ecb3054ed0ab", "sighting_of_ref": "indicator--38f0de4c-dd4d-4489-97dd-16bff6fbc153", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97ad05c-f542-40f8-951d-12435727a928", "sighting_of_ref": "indicator--ccab6c42-bfcc-4d06-9ab4-8d16729c8dfd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ba3a8-176f-4b0c-9de6-b52cef40b2f3", "sighting_of_ref": "indicator--9ca1255c-1ce2-4963-8bcf-1a9aeef45a5a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb41787-f79e-4e38-82c3-9a7848fde40c", "sighting_of_ref": "indicator--c47e633e-5f5d-46f8-8038-5a5fe1433f44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd203f68-e8e3-422f-a6ee-5a235b8d728a", "sighting_of_ref": "indicator--7a596fe6-00a0-4075-a7e9-7add98fabf8f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9c9435-0339-4abd-9b2a-b3965878a480", "sighting_of_ref": "indicator--02743d2f-80e4-4c8d-b1d1-28a48556825d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d670fc71-f43c-4b2f-b876-b686f01624b3", "sighting_of_ref": "indicator--397ffd48-0565-42ad-962b-ceedc0eee07a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5f6663-94d6-46da-a810-ee6a85099ba7", "sighting_of_ref": "indicator--9ee4240b-22ed-413a-b311-f4ce223c488e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed8d7b7-8ece-4f37-bd38-4cad961c5f18", "sighting_of_ref": "indicator--b5036860-882a-411c-82f8-ca8f51a62aae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dd45f4-45db-4fa8-bc5f-7c9719d5142d", "sighting_of_ref": "indicator--f6fd981c-ceea-4426-9f8f-24c86f366b9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf1fc79-258f-42b9-b342-9858f408ff30", "sighting_of_ref": "indicator--612bcf1f-841b-4011-bdaa-34621880ce68", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29757ea3-bdbd-4375-93ac-9d5a32854247", "sighting_of_ref": "indicator--aa973602-4e9b-44a6-9c32-c36acb1a67b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32090bbd-248d-43e9-aabf-66f724c0c848", "sighting_of_ref": "indicator--6cbad39b-3a4e-4934-9eff-406e4c249562", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aae9e2-e68a-4327-b3cc-a11371df6cea", "sighting_of_ref": "indicator--a6ab5570-6716-43a1-a248-2b621a344622", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffac794-0a90-47e8-987c-0bdbceb8fce6", "sighting_of_ref": "indicator--a6ab5570-6716-43a1-a248-2b621a344622", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012032d4-edeb-4f61-bdb7-23c1203eae25", "sighting_of_ref": "indicator--adeb5629-2b04-4fe1-9e1f-854625302293", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0837ac96-9c07-41d8-9b15-aae671fb66bc", "sighting_of_ref": "indicator--e798ff13-f4bc-40d8-9410-f07a6eb97e3d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5246653-3c11-4c2e-95fc-9c245b611328", "sighting_of_ref": "indicator--510714f4-e32b-4169-be59-c4c506ffacf9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5673c311-ca34-4cb5-b27e-e6ed5974d847", "sighting_of_ref": "indicator--902d1381-5e4a-4052-be21-dcfb6da4d713", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419300fd-2ca6-4346-8de4-27b01494c8d7", "sighting_of_ref": "indicator--b9ee52f7-8586-4506-9207-c0ca2464aa2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbd212d-40bc-4d5f-b11a-789a382f7228", "sighting_of_ref": "indicator--b9ee52f7-8586-4506-9207-c0ca2464aa2a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8b38dc-f064-42f6-a4df-4b437d3197f3", "sighting_of_ref": "indicator--6792bf38-704a-437b-a6c4-f5ca901aec6d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb42efa7-2de1-4cc7-b39d-86ef06d2f711", "sighting_of_ref": "indicator--f342a2f0-1afc-40ef-ad7a-58ae02aa1e9e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af665814-b82c-4710-bcb0-ac798b774ba9", "sighting_of_ref": "indicator--25d85b5b-bfff-4ca4-b35b-f31ca67e4698", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3686a78c-1c3f-4d63-b03d-24d409a339f1", "sighting_of_ref": "indicator--c7016301-32f1-4c56-a1b9-95efc8b7438c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81916909-fb69-4da1-84f5-5bf40f9bf2ba", "sighting_of_ref": "indicator--4f85c75e-91e4-4e18-922f-3e5f0a81414b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb14c2d-c908-45b7-b140-5859461a0b3a", "sighting_of_ref": "indicator--4f85c75e-91e4-4e18-922f-3e5f0a81414b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d633ea7f-6ba4-4640-9fc9-5b3b0f160372", "sighting_of_ref": "indicator--c43a610a-34b7-4474-bb9f-be53a297dc83", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c109a36e-d41b-46ef-8f6c-df509a98f17b", "sighting_of_ref": "indicator--177c86bb-51a7-4be8-9aff-7862b8e79eb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0e862b-4d7a-4067-a5d4-b579f5f2934a", "sighting_of_ref": "indicator--01021f54-f40b-4283-a984-f948f12109cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2943cf-d4b1-4cec-b2fe-4c7f48315b79", "sighting_of_ref": "indicator--01021f54-f40b-4283-a984-f948f12109cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b22f1bb-eee6-4183-9f5f-5918ccd4bcf4", "sighting_of_ref": "indicator--7a90b3bd-e5dc-410f-bdb7-beffa142e672", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a1656a-64e4-42b6-91c3-76b8cafcfd9b", "sighting_of_ref": "indicator--84260f12-2bd4-4610-b09d-6731d8e7eb78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2468181f-831d-401d-b30f-635bc0790508", "sighting_of_ref": "indicator--835a5bba-d3c4-4024-8b25-55ad43de1f74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b95ccb4-6ecb-493e-86cd-2005613d5e22", "sighting_of_ref": "indicator--c09c22aa-ae98-4b72-9cd4-37199243a8a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd550892-92cc-46cd-b258-5b9a5078f7ed", "sighting_of_ref": "indicator--c09c22aa-ae98-4b72-9cd4-37199243a8a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48038c3a-7877-4f31-ba7f-70ce0a94dbe4", "sighting_of_ref": "indicator--aa3e2085-90a7-424c-bdd0-94a8fb4a6750", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1654deb-6751-4be8-8382-784eed8a124b", "sighting_of_ref": "indicator--14e74ad4-2dc7-49ee-b528-1db72c576711", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb563938-30c2-4f8c-ae37-e2c284c51aa5", "sighting_of_ref": "indicator--81661b31-e4e1-46a7-88bf-d0bbd3b1be4c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aaddb4a-99ff-4ac6-903d-00ca9fe44ccb", "sighting_of_ref": "indicator--0d8ed981-a9a7-46fb-bfe5-1044b27ec19c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf1e7dc-2395-4549-b7e2-62da1110c836", "sighting_of_ref": "indicator--5c21589d-ee46-460c-9f2d-c525c197cb69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ad70d5-1203-4c96-a506-1522ee6f3d0d", "sighting_of_ref": "indicator--37d01ba2-621f-4a34-9332-fcfcbce69376", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38880aaa-7c64-4204-a035-800011ad2f5a", "sighting_of_ref": "indicator--54aecf1f-7909-4940-a79c-86cf4cdaf5a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7ebc8f-1ab1-4890-b0e0-3fa416074f63", "sighting_of_ref": "indicator--54aecf1f-7909-4940-a79c-86cf4cdaf5a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a094ec6-d473-4fd1-af0f-730135ee13bb", "sighting_of_ref": "indicator--ca1b3baa-f7ba-45ea-bc09-8020bc3972d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3877d3-1b61-466b-8dbb-aa099ca04657", "sighting_of_ref": "indicator--a479694a-058c-41a9-add2-f14e7ab77383", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c78a1d5-4822-4f81-ae2c-ce1b247db453", "sighting_of_ref": "indicator--8fccaeef-840f-4117-b805-721f93a9adc0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d009977d-de23-4557-b688-7ea3cacfd46f", "sighting_of_ref": "indicator--7ddfdf58-93e9-437e-ab7d-df9ffa6eb65d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1bd0fb-ea43-43da-9219-4cfeea738204", "sighting_of_ref": "indicator--7ddfdf58-93e9-437e-ab7d-df9ffa6eb65d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f67c386-b545-4510-ab9c-370ccc6192ca", "sighting_of_ref": "indicator--f99bb752-0fa2-42c6-92d5-1de651842376", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aaade24-ba22-4ccb-b61c-5650a105050e", "sighting_of_ref": "indicator--6ab46fc3-a070-4e3f-9f4c-ce21a00d63f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700db05f-83e3-4259-8cad-8d37e27afb88", "sighting_of_ref": "indicator--0e4dba8a-0d74-412c-83dc-e1baf71bf880", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e2378e-33c5-480f-be8b-07b132028768", "sighting_of_ref": "indicator--c0f53a0b-c738-4bc7-b17c-3ee39f0d79b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b9bc3f-47b6-4929-ab9e-7aa31effaf3c", "sighting_of_ref": "indicator--34d2f8b7-a553-46ee-8e65-e9549a429989", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ed3ad1-8404-4fe7-afaf-de90871d637a", "sighting_of_ref": "indicator--2227bbcd-8ffc-4dc2-ae2b-a99c4b2945ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0d65a3-07ac-4df2-9752-35d4f3529dc4", "sighting_of_ref": "indicator--f830b25c-b5c9-457b-ad21-cf3138bc70a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa1270e-13ce-4f8c-af10-3b53b385fef5", "sighting_of_ref": "indicator--57e78af7-7111-4249-a071-2c783ac086ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa417ae9-84f7-4a36-b708-d805f60f355c", "sighting_of_ref": "indicator--c7395459-b590-4ffb-98ce-8360601dc72b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab13cf7-0419-41a0-95c5-b208f80e2ab5", "sighting_of_ref": "indicator--901471c7-42fb-487d-82d2-d84c63f09b45", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a765fac2-555d-4203-bea8-4a4f9ad75969", "sighting_of_ref": "indicator--50322c49-98f4-4e50-bfb3-35538ed4793b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc96ac4-d609-47a6-9d97-6c3089d65fa9", "sighting_of_ref": "indicator--fe8d5c81-371d-470c-995b-5b678c2ab4e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236e7e13-f11d-4fd8-9c52-dd54317b2ecd", "sighting_of_ref": "indicator--ad4e6380-ab92-4eb2-9ec5-ddf6d424b41d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec676fa4-430c-4763-96aa-55da9fbb221d", "sighting_of_ref": "indicator--b063e5ee-03bb-4b83-8952-8ff539300e2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d0ad81-5231-47b2-a9c6-7762d6a6c2ce", "sighting_of_ref": "indicator--50723827-c421-499e-aa2d-a422f706ea46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0245b4eb-20a9-48d3-a7a7-95d0c0e7cb1d", "sighting_of_ref": "indicator--41e4e9c9-395b-466e-90d2-a8c456adf9ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a066c8c0-15a8-4dab-b9b4-c6dc9c31a44d", "sighting_of_ref": "indicator--41e4e9c9-395b-466e-90d2-a8c456adf9ae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dffdf4-97eb-4b39-90f1-25e67d311f13", "sighting_of_ref": "indicator--d5e88ee0-2ab1-44d8-87c9-581e91b668b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdf4e82-5bf4-4722-899d-19500202b450", "sighting_of_ref": "indicator--27b4f420-69c7-40b5-9134-89d8b8a1dca9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9559c407-8aad-4656-a3ed-8a2e3933c605", "sighting_of_ref": "indicator--27b4f420-69c7-40b5-9134-89d8b8a1dca9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39346d90-a07c-4068-b7bb-c2d027537c57", "sighting_of_ref": "indicator--4384d44e-a050-4277-8c68-78448e0c22f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f4fb19-8958-41e8-b36f-cf3c1b5add04", "sighting_of_ref": "indicator--4384d44e-a050-4277-8c68-78448e0c22f5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9435ade7-bf4b-4f84-ac3c-63c721b09b88", "sighting_of_ref": "indicator--474e8329-062a-4a2e-a1e3-10f467b1da7d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cfd082-a499-420f-a174-c3a5887aeeea", "sighting_of_ref": "indicator--cf36467f-2532-4f11-b301-281d7edad16e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b089c07-9027-4b6f-be1e-54c91b32a93a", "sighting_of_ref": "indicator--bca0916d-3143-4bb8-ad79-3bcc5aaabd0b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a44d68-9872-4263-9721-42c973ee5f9d", "sighting_of_ref": "indicator--361fee4f-9505-4b0f-a825-ee4a3dffc263", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66633afb-3064-4b68-b548-f92bb05fe0bd", "sighting_of_ref": "indicator--9a4af871-dc6d-4192-9639-502bc5416136", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0548b8e-4e56-4a02-b2ff-34ea0d550b6d", "sighting_of_ref": "indicator--2dc6ee2f-a119-4358-8867-a0d054691f44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a2b76c-2a34-4af5-afa6-b9edfbf6f28b", "sighting_of_ref": "indicator--043f7266-b922-4d04-84c4-d1ca08b338ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b6c7b6-50e6-4de6-8b9e-767987564e50", "sighting_of_ref": "indicator--595a2306-9169-445e-b3c5-a86606a4a51b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdbd4ef-19ac-4024-9fd7-2648fb6633fb", "sighting_of_ref": "indicator--46e6d3a7-6121-4d77-b4c8-3436417131cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ca8c96-3355-4206-9b42-e887b0ce9dc1", "sighting_of_ref": "indicator--f95e5735-b2fc-46ab-9e3f-3df51aa97a87", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfea90c-082c-4261-97b5-b8f27cdaf35a", "sighting_of_ref": "indicator--987e57ce-0202-4bd8-8b42-17bd04509fa0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc75241-70a8-49ef-8942-7625e3787e2e", "sighting_of_ref": "indicator--20e0173e-3e7d-4c47-b614-697fbfeea53d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517dea0b-e235-43d3-a523-cba5c33caf6c", "sighting_of_ref": "indicator--20e0173e-3e7d-4c47-b614-697fbfeea53d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c902471-8800-4560-97ae-752774328f0f", "sighting_of_ref": "indicator--dd4ff049-fb29-45f2-89b8-c4d265c0cee7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01041965-9327-45b1-862b-2a2caa4234a2", "sighting_of_ref": "indicator--ea6320a7-14ef-4407-baee-67a1bd6c26fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c59c33c-f676-4d25-8476-3671d9ff08dc", "sighting_of_ref": "indicator--040a89ce-7941-4789-828f-257d03c48918", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44b70c9-e756-470b-8b19-fd4cb82d70f6", "sighting_of_ref": "indicator--7efe93cb-b583-4cac-94b2-d7e8a408192a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56827f4-31a5-4878-9020-291b4b4e3942", "sighting_of_ref": "indicator--81557197-c45e-4c0b-ba03-3b7d6a3c9fe9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dc0c83-e065-4e9e-bd46-a144fe334368", "sighting_of_ref": "indicator--81a64ae9-0aba-4aed-8657-f3b11667fe0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5954a9-81e2-4181-bea8-84ad78acfd3b", "sighting_of_ref": "indicator--3c20a43e-7757-49f2-97a9-8c05a3ac2f74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3c43f9-f05e-487d-a0e9-7b9b5821ab22", "sighting_of_ref": "indicator--13c8e800-e80a-45c1-933d-b99a0bda87e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9026737d-ae58-47a3-b042-6ba7d8502598", "sighting_of_ref": "indicator--a293bcd6-10a7-4f7e-835b-6c682590252b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec8b0a5-61f4-4282-bb6a-807878cf783c", "sighting_of_ref": "indicator--a18b0050-2a87-4ba4-b12a-e34b1d7d458f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4733cbef-83be-423c-af58-daa1be1e87be", "sighting_of_ref": "indicator--18b6f7ec-230b-4004-8aa9-57c0b12e3dee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f1e6fb-3efd-423d-97db-a73e55c7eafa", "sighting_of_ref": "indicator--1f784754-c2ef-4a6a-9c90-c85cdae09b8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d52df53-fbe9-4f89-b3bd-5eeb5583abb2", "sighting_of_ref": "indicator--4d87454a-b6a4-45c3-8e0a-146b771a6934", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b276dd2e-55b9-4a9a-a006-8d5ba84cb62b", "sighting_of_ref": "indicator--4d87454a-b6a4-45c3-8e0a-146b771a6934", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d191151-a269-48a0-8655-2c8985e4e7d3", "sighting_of_ref": "indicator--4d87454a-b6a4-45c3-8e0a-146b771a6934", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aa12ed-0c96-49cf-b65d-e9c8a6bfc774", "sighting_of_ref": "indicator--a5f8a496-2dcd-4cf0-9bc4-616f9fbed7e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8188c9-bd0a-46d5-b6d1-ab50fc3e1396", "sighting_of_ref": "indicator--48efa0b6-418f-4caf-b510-acdbf7ec8d91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c6f389-f870-4011-89ea-07eff38ca918", "sighting_of_ref": "indicator--6b220ceb-c0d1-418e-9b76-4436b2396c39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040730f5-f06b-4242-9046-8eec7983f587", "sighting_of_ref": "indicator--c1b9d2dd-3fd2-45d8-ace7-93825a14fc69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fd7a32-ac85-49fd-9e20-637f389e0eff", "sighting_of_ref": "indicator--c1b9d2dd-3fd2-45d8-ace7-93825a14fc69", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d513304-5a56-44e1-9010-23fdd6c6ba46", "sighting_of_ref": "indicator--2bf2a34a-3ce8-491d-a802-c306c6805364", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a724bc97-47ba-41ab-8b00-51e3e1041ec1", "sighting_of_ref": "indicator--a3d591df-8f06-4a9a-a783-ab0471fc663b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae49c8e-4c90-46f0-adb2-1f4625db9f38", "sighting_of_ref": "indicator--a3d591df-8f06-4a9a-a783-ab0471fc663b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27208535-07e3-4455-b7cd-ee588aa9ccc0", "sighting_of_ref": "indicator--3faed7be-7b0a-4c7d-88bf-2e3faf72f942", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba3874e-8cdd-4c9c-bd0e-d82aeaa0d314", "sighting_of_ref": "indicator--15d4f4a1-f109-4c54-97e8-f1c6ab83abc1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b222e11-9567-40a7-ae4c-b8f2f5953f66", "sighting_of_ref": "indicator--15d4f4a1-f109-4c54-97e8-f1c6ab83abc1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d578b519-e41b-4e87-ae82-a73528ba58c0", "sighting_of_ref": "indicator--676c2a2c-cd33-4b27-8411-c2e97845de51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90700bd7-a1b9-4fe7-b377-bbdf68a96247", "sighting_of_ref": "indicator--87ea67fc-5d01-443d-b286-bdda6fa6b546", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1543e686-3cbe-4d35-b00a-446ee8f78ec2", "sighting_of_ref": "indicator--78983c21-cc3b-4b84-a7c5-135d6abbaf30", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdf0d0c-190e-4540-a7bd-44cb25ff05c1", "sighting_of_ref": "indicator--8864ba2d-0947-4add-b968-d0ae9ee84c9c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f410a74-0a72-4035-8923-bba6db73e3de", "sighting_of_ref": "indicator--00c7d041-79ff-4720-b2e5-2d3600fab61d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5387b8-8ebf-487f-9e8b-4152c25e9216", "sighting_of_ref": "indicator--91c62ff1-f116-42f4-bf8b-32ebf62a687a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feab233c-9518-4627-ad79-12c71f114b9a", "sighting_of_ref": "indicator--91c62ff1-f116-42f4-bf8b-32ebf62a687a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6916778-768c-4cf4-9019-96e0fcf6383c", "sighting_of_ref": "indicator--4177733c-371f-411e-8a80-7636ff4b5950", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b98757-268f-43a3-b2b7-701c83452404", "sighting_of_ref": "indicator--987804c9-4998-416f-8368-e3cf39294395", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fc08f2-9d39-4ca2-953e-252d7c18b990", "sighting_of_ref": "indicator--bb81c121-fe21-4a83-a429-4df86addb93c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b77024-e63f-4ef3-ae43-693b35f7de48", "sighting_of_ref": "indicator--f9e2bec5-78e0-426c-8a85-abeee3302b0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d151d9a9-469d-4017-bd88-0fc8d461e2ce", "sighting_of_ref": "indicator--3bedb520-42cc-481c-9867-8a86abdb30ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff3b623-99f1-476e-8330-1a5cd08c8f5d", "sighting_of_ref": "indicator--7856d518-d872-45da-9feb-36cc1708405d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b646bf81-2780-4121-a6e6-b7e5b4098fad", "sighting_of_ref": "indicator--572c5413-acfa-42f4-a064-0b53fff2518c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d512887-a161-401a-9db9-192691c861e9", "sighting_of_ref": "indicator--572c5413-acfa-42f4-a064-0b53fff2518c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b052559-b540-4375-b38e-4dc41b829d3e", "sighting_of_ref": "indicator--572c5413-acfa-42f4-a064-0b53fff2518c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d179ee-acb7-4795-a1ac-03261547aa15", "sighting_of_ref": "indicator--4994445d-15f1-4a7e-9233-3f7119784e8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9af6b2-f61f-45ed-bb2e-2807a51bfbd4", "sighting_of_ref": "indicator--5a2cc98a-eb63-4ac2-8b50-b00951001dee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642f3dd4-e043-43db-b6b2-b2ddb8f3722d", "sighting_of_ref": "indicator--79582f86-da95-410b-9c85-27d3492dc9fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe759150-5ba0-41e9-bc29-33761121a6d9", "sighting_of_ref": "indicator--1e5eeb4d-b801-4608-a129-e5273bb2b05f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b32d7d-17a4-4b2f-b918-371e510a5d5f", "sighting_of_ref": "indicator--641fad38-d989-4062-a711-115109e86aba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75592a81-5426-4adf-a5e1-8529de3042cf", "sighting_of_ref": "indicator--641fad38-d989-4062-a711-115109e86aba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2aa0c4-b77f-438d-9776-583ca1c820e9", "sighting_of_ref": "indicator--0dda1108-5363-4433-bd2f-66ef39af8075", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2f7175-67cc-49d8-ac72-d8d0d07ffa2b", "sighting_of_ref": "indicator--da5d5400-7cd5-442f-b4de-9fc5d98df156", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fe8a03-c59a-4a7e-8f88-2b5e3d468d27", "sighting_of_ref": "indicator--e24d0361-5327-470f-a8eb-2995733c9b68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d810aa4-d6a5-4a91-a2dd-f7e64ce878f5", "sighting_of_ref": "indicator--909c83d8-edd0-4b48-a6f3-9ad337965dee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cfd8b4-0dc1-4fb0-b519-6220eab4a179", "sighting_of_ref": "indicator--9978a495-1daf-473c-8bb8-da8edc4a1c54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735cf2b6-0ca8-4d16-bda7-173ef98ab81b", "sighting_of_ref": "indicator--6b35839b-febf-4cb9-8929-68e00812e576", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cf25af-0b79-422b-a2cb-92a6e8b17b3b", "sighting_of_ref": "indicator--e6d82600-37b1-451e-afa6-628ce52f7443", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36678add-6fea-4dce-be6a-b67ad5f6f708", "sighting_of_ref": "indicator--82146deb-2c59-463b-b21c-c9429192f928", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458b3af1-977d-4d9d-bd2b-5638ec9f7925", "sighting_of_ref": "indicator--838bc8eb-e0b8-46b2-981c-a0c86a3f487a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5f2c35-2483-4358-ab42-cc55ff79a46b", "sighting_of_ref": "indicator--4037f5ef-c96b-4580-ab62-3177a5808dbb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df816188-c49c-4327-adf8-dfdfa369aaf5", "sighting_of_ref": "indicator--4037f5ef-c96b-4580-ab62-3177a5808dbb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5462f83-b6c0-4019-94da-3b13abc83ab7", "sighting_of_ref": "indicator--cb567cb7-a291-4a6a-953e-d1d5c84789d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256bb357-1f50-4d13-a2eb-b1be8cd726fd", "sighting_of_ref": "indicator--787c9a37-cf9d-4fb2-ab89-87a5f38d1c1d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db186e9-6037-41a6-b3cd-dc3b11e19deb", "sighting_of_ref": "indicator--82c7d883-1e79-4b0f-8810-f32a1a317531", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ae02cc-5994-411f-b65e-aab89d936f06", "sighting_of_ref": "indicator--fb29d46f-8031-4066-b1cd-232cae841bfa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5da2df9-8c7f-4622-ba5b-8306f73f985f", "sighting_of_ref": "indicator--fb29d46f-8031-4066-b1cd-232cae841bfa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de46b47f-7546-4888-bf16-a6a23ee4da6b", "sighting_of_ref": "indicator--e7122fe5-06b3-4a3e-9314-30e500aa6f17", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcb641a-cfe2-41de-9c42-22d75f0fc3ac", "sighting_of_ref": "indicator--4ffb9028-ae03-4ffe-b205-2d5c30e11427", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d08d9d-a7ea-4ef9-a85d-0c2bbb5daca6", "sighting_of_ref": "indicator--dcebf566-6493-439f-8e09-657ab04c308d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067c45eb-7f86-4952-9e4e-06cecbc032a8", "sighting_of_ref": "indicator--a1351b13-3e0d-4960-9bee-2a84416c89c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441a8206-e077-4b47-9fe0-f59d13be1a83", "sighting_of_ref": "indicator--4be79c57-4d41-499c-9ecd-ff4d4e2a27b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b83b4c-c678-41ea-b478-af2c17847e31", "sighting_of_ref": "indicator--60a451f0-577a-460a-b55e-cd6ad1623143", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce0fec4-3ada-4cc6-9d56-2275188732dd", "sighting_of_ref": "indicator--77616621-b4dc-4936-bb5f-46f186eab070", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9e5caa-7364-4560-8c9d-86e322896c1a", "sighting_of_ref": "indicator--1ae0edb4-0812-46b1-b3ed-042c2590d78a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4af3a0-fb7f-469d-816f-e1de554cb7b2", "sighting_of_ref": "indicator--d8b9e424-bcc5-44fd-abda-73b5c2a2beea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff96434-181d-4210-8b3d-db67cddec164", "sighting_of_ref": "indicator--e151233a-d8c7-476e-b0d4-9c56f74807cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204c79d0-f225-41a6-9fd7-5993508960a7", "sighting_of_ref": "indicator--0440b4e5-b7a8-4741-ae66-819f46a00775", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1449310-4040-44e9-9ecf-cea80dfff127", "sighting_of_ref": "indicator--1545b42b-4338-470b-ba37-1c7d19e0a41e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3492301d-e4e7-415e-a0da-8a6768a6251a", "sighting_of_ref": "indicator--0b375519-a34b-436e-8bf8-5f383fae3897", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c458c7f2-a743-4440-9d2d-33d514fa9d50", "sighting_of_ref": "indicator--0d7743a3-7c99-47d7-87df-d468f56fe209", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258a383f-cb6c-4756-a6f2-017d089e33b9", "sighting_of_ref": "indicator--95531f91-b120-47ee-9a55-14bd9ca1a2a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89eed06-27a3-4714-aaa8-315cb3059748", "sighting_of_ref": "indicator--95531f91-b120-47ee-9a55-14bd9ca1a2a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b9d455-d000-4f7b-927a-9a25f0f84420", "sighting_of_ref": "indicator--9677723d-671b-4e5b-8efe-63c05b0231dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c303d6c-de5d-414b-9a83-3963a1123406", "sighting_of_ref": "indicator--d50dd296-34b0-4ea8-8cfe-37536975e3a9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d1e41f-510b-4dcf-bca4-0bf3bedf49c3", "sighting_of_ref": "indicator--3cb72ce0-6ab3-4b37-bdf3-6dcae2a44b33", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57123ce0-6097-4caa-8023-2c42fea4efce", "sighting_of_ref": "indicator--9415d267-d8dc-45f9-8efb-4ccce558361a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d8f405-e027-420c-9e60-e94f0fa139ef", "sighting_of_ref": "indicator--82ebec88-d9dd-4494-930a-a9ff8071d753", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6ddd1a-7b7e-4ea8-a5e0-f85d95d748be", "sighting_of_ref": "indicator--4929fc01-dcf7-4784-97c4-67fc83b6bacd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabb9991-e9cb-4fb9-93c6-053c8c340b5a", "sighting_of_ref": "indicator--6e86378a-1bca-4282-b4f4-860930739f12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40248b2c-a4fa-457d-b5b6-337c104655dc", "sighting_of_ref": "indicator--4e3ef19b-dddf-458b-8dd3-2172956ccea5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d291365-76a7-4095-8dff-0b8b69976d20", "sighting_of_ref": "indicator--d4db673f-bb01-400a-aea9-760fc9f8e245", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a666e6db-da08-44b0-92b6-b79e6d05e783", "sighting_of_ref": "indicator--54a84eb2-ce12-4829-8993-a8259e56d9df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2d4f3-47d4-450c-82b5-21d778be5320", "sighting_of_ref": "indicator--c67fd955-ab6b-454c-93fa-890d6c8716f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4237bb26-4d2a-42cc-a269-2fa7daa68754", "sighting_of_ref": "indicator--5108103f-c6b1-4f39-a9d4-e2ef15183722", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296f4c1b-8523-44de-bd7a-9915f9351c4d", "sighting_of_ref": "indicator--324dc7b8-8feb-4d6e-a210-194416e7bc88", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7021ff-90f1-42c7-adfb-2ae8e032cac3", "sighting_of_ref": "indicator--7400ba50-9e2e-4d89-890b-1ee6aa9a2ab6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06aefac-9c08-435e-ac13-bbf1752556dd", "sighting_of_ref": "indicator--d93764c6-3240-4219-9c5a-3cbb79e2f4c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55693dd6-59e1-4780-b191-5b03cfaaa1ae", "sighting_of_ref": "indicator--8aab2080-3b7b-4395-a09e-523bc6e98ea4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbda9f9-f799-4b4c-8445-afa68b85d795", "sighting_of_ref": "indicator--9ae986c8-8258-478b-9660-b3d2142bba20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6e8cda-60c7-4f34-a007-f2220db602de", "sighting_of_ref": "indicator--47a9e918-c8eb-4957-a96f-1b0e9acfebf6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea26915-08d7-41c8-a4cf-37b390bb9306", "sighting_of_ref": "indicator--76948c76-8150-4997-872a-eadd8288264d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fb0a8e-d6b5-460f-a58a-aeb8bb5a9a1a", "sighting_of_ref": "indicator--76948c76-8150-4997-872a-eadd8288264d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1997988d-16a1-4299-b999-4d4ed426edf9", "sighting_of_ref": "indicator--9bb49c79-5910-44ba-94e8-156e52f86377", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ca2691-c8fd-4432-b8d1-dc6589630e05", "sighting_of_ref": "indicator--1a0eaa81-bbef-4417-9023-8245ccced0a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f506eb1b-98ef-465a-9421-e3365828ebff", "sighting_of_ref": "indicator--15ab33f5-1ef3-4e7c-8c69-9c679b8f4db4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3429a07-1f21-4994-99b0-30b7245ae160", "sighting_of_ref": "indicator--f7e6f42c-4321-459c-95f0-2bc523e76f49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948d414a-b564-47bf-830c-33b4c8a2bfa3", "sighting_of_ref": "indicator--5d795b6a-8bb0-494e-b4a1-453b0033fccf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17355b56-cb7a-4a91-b6a0-d7a81fab4218", "sighting_of_ref": "indicator--0a305424-f907-4e92-adec-7008982ceda1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fc685c-6787-43d5-ad83-c0a6fe290992", "sighting_of_ref": "indicator--70351704-446c-4598-babf-e2fdd03124e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff36ee5-adaa-499f-9d08-0d9ff59b249e", "sighting_of_ref": "indicator--9b2c8e33-f88a-4abe-a847-8201d1ca8036", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98197d2-f39c-400e-bafa-c6e5a582599a", "sighting_of_ref": "indicator--b3bb0fca-7f84-4444-8fd9-663968be5f49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e797fcd-2998-4e5f-8717-7a44f5a3f55a", "sighting_of_ref": "indicator--b3bb0fca-7f84-4444-8fd9-663968be5f49", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f9f617-c3bc-4ccf-ab5b-04e3c994609d", "sighting_of_ref": "indicator--95d65d77-984e-46b9-98ec-8544eed0bf8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431568d2-d9be-493f-904d-3480a52bb9bd", "sighting_of_ref": "indicator--d13ba253-3a86-45a6-949b-a0d2df27504f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4812418-886c-44d3-8d59-4809013d8327", "sighting_of_ref": "indicator--d13ba253-3a86-45a6-949b-a0d2df27504f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77a507c-c5ce-4168-8d63-dd07607e4568", "sighting_of_ref": "indicator--efa6ff82-2218-4b4d-91eb-f6b0656888e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d33ccad-d067-4c9a-997a-43ab0b84cfad", "sighting_of_ref": "indicator--3f664179-408f-407b-a1fa-ccd0e91c20c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753f0a5e-1fef-48c0-9473-e49761de8980", "sighting_of_ref": "indicator--f859cb98-b131-4dda-bca8-bf6dfae202f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb84607-53ab-4d17-92c1-4386d87ab8e1", "sighting_of_ref": "indicator--8eeaf9a7-7d37-461b-a9c3-1b3fb6d139f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150015a8-4be1-46ca-87df-e9691ccdabce", "sighting_of_ref": "indicator--3a0f16af-315f-41a1-9455-2d698569120d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2981fad-12ba-4e6a-bea7-f1cc0263b077", "sighting_of_ref": "indicator--6e3ac7ce-4e77-49f8-80b9-8bf36506aecf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74f1950-6c1c-448a-9af4-4de2967aba39", "sighting_of_ref": "indicator--803142a4-df9a-49d7-9aa3-e661a85da978", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da12569-4b6d-4af0-b4d2-af99007dc6cd", "sighting_of_ref": "indicator--0014ec16-9e54-408a-9d72-ba25e50bf13e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6cd4b0-e411-412d-9d80-dca74835b7a6", "sighting_of_ref": "indicator--3e5cb928-7871-443c-96c2-5393bc90cc15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a874f38-1c0e-4695-9afb-30d59dfaba3d", "sighting_of_ref": "indicator--3e5cb928-7871-443c-96c2-5393bc90cc15", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4435c9fc-2b7b-4e38-b5ef-7e3c0adf6956", "sighting_of_ref": "indicator--d8cae3d5-6db5-4925-a517-4914da0c6d2b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91211898-a926-411f-8967-33d815b0ae6e", "sighting_of_ref": "indicator--b5696e2f-1e57-4993-8c84-846d26111d0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde8f53a-7806-453a-8b96-288c60f36458", "sighting_of_ref": "indicator--4435118a-1ab3-4d78-896e-58ca4d1ce133", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42215229-ef3c-4116-9589-c5955355b23e", "sighting_of_ref": "indicator--214e1fa0-371c-4e20-87e6-4230608f790c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc98b18-3a4f-4e2e-a64a-b7b1bda36593", "sighting_of_ref": "indicator--a125edc3-5f11-4967-8302-fd25e5f96f09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2206dc1c-80c9-40e8-b7db-6186a5c5f205", "sighting_of_ref": "indicator--da9e29c6-f2ae-43dc-a726-74cdf2039ac9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f286fa-4fa2-4234-b4fd-cf64f8f19533", "sighting_of_ref": "indicator--4f4a6632-0ca6-4b32-af48-2cc1736cb4a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6533cf81-ec0e-49f4-a542-a3cdc9bcb569", "sighting_of_ref": "indicator--4f4a6632-0ca6-4b32-af48-2cc1736cb4a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53432e9b-4f54-4c7c-801c-e5c372f55848", "sighting_of_ref": "indicator--7bd733de-50b6-4598-8861-868b16a873db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537a2c9b-3578-4237-8838-7f9a7fe099c5", "sighting_of_ref": "indicator--d05b40b5-64ad-4619-99b9-f7201f4bd49c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e16b1a-1314-41c4-96ff-23dd8760ef94", "sighting_of_ref": "indicator--9ee208ba-0439-4a32-99a5-3a722f0ca76d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b569d2-24dc-434c-b839-60dbfd86cd78", "sighting_of_ref": "indicator--2b035f95-e849-48b7-afc6-634875901756", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99afeab0-9322-4931-be2a-6961ee1d8af4", "sighting_of_ref": "indicator--0ebc3536-2faa-4b3f-8fdd-8afed029a32a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd5f1c0-bdee-4587-8bac-0863e61082ed", "sighting_of_ref": "indicator--0ebc3536-2faa-4b3f-8fdd-8afed029a32a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6568cf58-33f3-42d3-b2e5-dde0fbcc1bf8", "sighting_of_ref": "indicator--11e30c25-6134-4fb0-8dc5-2e4c2d270943", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d264cc-48d5-4652-8223-39bf744ba2d7", "sighting_of_ref": "indicator--713297fb-382b-43b1-b6a6-e6d95b59bfaa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdfde72-4b66-43c4-bd8a-37d7227cdf1f", "sighting_of_ref": "indicator--f0abbd0d-c002-4895-bd1b-f75dce884cf4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127ffbc2-91da-4b91-9ddc-7b526ecd7177", "sighting_of_ref": "indicator--f0abbd0d-c002-4895-bd1b-f75dce884cf4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ae37ca-4313-4ddd-bf5f-986896d04818", "sighting_of_ref": "indicator--29542a04-aa09-4743-b90c-b7088f393777", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dc4e4c-70e2-40c6-bb84-8007e4b9c978", "sighting_of_ref": "indicator--f52b0a86-ea12-4660-8fff-7cdcb8769cb1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17935273-6077-41a9-a6a5-7c77091f9f56", "sighting_of_ref": "indicator--2f761995-1ccb-4dbd-952e-21e56c7adba1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1adc80-8830-4cc4-a685-223ac098e668", "sighting_of_ref": "indicator--17a4e7ab-867b-4170-a895-b6d7755fdb5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b7150f-d1e6-483c-8125-d6c070324683", "sighting_of_ref": "indicator--22461e57-a320-4cb0-b322-c7728d118c99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285d152c-799b-4f2d-98f8-cd2fd53a5622", "sighting_of_ref": "indicator--4c771e84-b0ad-4847-a021-56dffe2433d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba3a6e3-d057-49a4-a8be-4a4a95260fad", "sighting_of_ref": "indicator--51f813d8-7c71-4052-9e76-7472e744c68d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89a1b0b-90d6-460e-a282-31ecf8af5ffa", "sighting_of_ref": "indicator--008d35af-038f-42ea-8663-f9bee939ae5e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8ea22f-4d80-4dd4-b893-dbea862bb9b1", "sighting_of_ref": "indicator--7c1df4a3-ee84-4031-bb28-54061a866d06", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa39730-a749-4ae9-96b0-f66b88be7fde", "sighting_of_ref": "indicator--44f20bab-d085-4589-b50a-0beaf3c5283f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8d2df0-facc-43dc-8037-d3815afe7c6e", "sighting_of_ref": "indicator--6adb6d2d-2980-42e9-b159-78a7f5096ab4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffa0bd2-65e3-4892-accd-1e18d02306e8", "sighting_of_ref": "indicator--d33c9742-9eba-4419-ab1d-5ee5fd0c1216", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfca280-5adc-4eb3-a082-eddd2b3bab40", "sighting_of_ref": "indicator--1f69c13d-4317-4fe3-9a7d-5092abf6857d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df079192-1248-4695-8f86-2bd667e287fa", "sighting_of_ref": "indicator--ba651d35-b04c-418f-92d5-638261217aa1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e70d0ed-200f-4679-bba1-ccee74bf219d", "sighting_of_ref": "indicator--096d1cb6-612b-44f1-b67e-b66c99d492a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d92a33b-180e-4ff2-ad15-29c3c0a4b0b8", "sighting_of_ref": "indicator--0abb9d55-1010-4407-9b03-7541b9c9098a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c37c1a3-8fc0-458e-ad3a-1f042fb2b04a", "sighting_of_ref": "indicator--0abb9d55-1010-4407-9b03-7541b9c9098a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ce9edd-cf55-4dc1-9e25-5005b1b44970", "sighting_of_ref": "indicator--02f1c4da-a25a-4ff8-93a9-65119009a37d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4073bb-a2b8-42fc-a693-f6bb18490544", "sighting_of_ref": "indicator--2393a2c9-264d-45c3-ba3f-98a006a41b8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156768b6-9d9e-4e7e-8344-3dfecd1f8470", "sighting_of_ref": "indicator--4a3ef951-fa75-49a0-81a1-90902605c6a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d3e4d0-7522-4f9c-8e18-ef55f947b02b", "sighting_of_ref": "indicator--2994d81e-ed54-4679-a2f9-eee4bb07c422", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284659a2-59be-4b70-91c7-58c83fe82b08", "sighting_of_ref": "indicator--cd008f95-c445-48ff-b843-308b45e1992c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaa6df7-3496-4e43-b8e6-cbf2706e7751", "sighting_of_ref": "indicator--a36b5f1d-cf90-45cc-b562-b880bdaac717", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae01c539-1509-4f29-87da-c9b7402e53ce", "sighting_of_ref": "indicator--98d75f94-28bf-44dc-968b-a7b1d94ccca0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036c3dc2-5166-439f-aa38-dd2117040c4a", "sighting_of_ref": "indicator--98d75f94-28bf-44dc-968b-a7b1d94ccca0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be9b8e9-5fde-4893-9eda-4c5623eff1d0", "sighting_of_ref": "indicator--75b6a9fd-7879-4505-a13f-0e7b3794f5ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcb04fb-c67b-4fc0-b49b-7e957732280a", "sighting_of_ref": "indicator--75b6a9fd-7879-4505-a13f-0e7b3794f5ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933c350c-1fd2-4f61-8c47-93ab0e84a2da", "sighting_of_ref": "indicator--ccfda5a4-c988-4fae-abe8-92c3d76bd4e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8798c5-902e-428d-96c9-fbb1cca4cf5f", "sighting_of_ref": "indicator--ccfda5a4-c988-4fae-abe8-92c3d76bd4e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5494bab-b39e-498c-b3f4-18d4a0cc8ab1", "sighting_of_ref": "indicator--ccfda5a4-c988-4fae-abe8-92c3d76bd4e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ff2917-6d71-41b8-966f-d1576667c4e6", "sighting_of_ref": "indicator--eb9cd77e-7ebe-48a3-8601-850b834ca4d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc90c15-0c5a-4bbc-93ae-639ed98c8b14", "sighting_of_ref": "indicator--c66af02c-32a7-466c-8081-3c668fc1c618", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa4e806-4579-4670-b798-de356830fc50", "sighting_of_ref": "indicator--07390320-5d6f-4b29-a4f4-61878f8431ea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6814e1da-4d12-4290-ad58-2ef2fbfce000", "sighting_of_ref": "indicator--e32b98e8-6b62-4a56-97fd-80fbf8cafd37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2ca2e5-302e-48f8-ae9e-4da34191e9eb", "sighting_of_ref": "indicator--75cb8e5a-14e8-40e2-a7d8-cbde8f2216c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38eaef47-2dd0-49cb-9d42-b7b01c059934", "sighting_of_ref": "indicator--328cb60f-3733-4e81-bf07-0d2f649f301d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3107ba51-99b7-4d08-8093-f7e9c5146912", "sighting_of_ref": "indicator--3d03c163-0473-41f7-ac3e-c47c9e6847eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06511b2-0151-4658-ab8e-4e72fa52f82d", "sighting_of_ref": "indicator--fd80d3b4-4123-48f6-a699-c282bd6be32c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f8734a-c029-45a7-ae70-37dcb5e3a9cf", "sighting_of_ref": "indicator--94f49ee9-d125-40b7-bf4a-a30f4e628664", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66db6968-4f84-479b-8083-71fd8ef6a02e", "sighting_of_ref": "indicator--94f49ee9-d125-40b7-bf4a-a30f4e628664", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c66e393-f3e6-4530-9278-b7f87ad292ce", "sighting_of_ref": "indicator--94f49ee9-d125-40b7-bf4a-a30f4e628664", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a1242f-edc0-4b91-aa75-187e3d04c5ba", "sighting_of_ref": "indicator--73e63cd9-f2ea-4d1b-a1f6-01965ecac72b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548b12ae-c664-41ef-a96c-a29a256b45f1", "sighting_of_ref": "indicator--b8fd7b3f-b11e-43d6-9ea5-5270eb43499c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0343126-c21c-4194-a060-6b83a3ce43d7", "sighting_of_ref": "indicator--b27236a7-d9a4-4701-b989-592388b61f92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556930a-378f-450f-8306-f326ace04ec5", "sighting_of_ref": "indicator--40a7bd22-f048-4f32-8f1c-4402b442ba47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c57d80c-9a94-4d22-b7f6-a4ee3e4a670a", "sighting_of_ref": "indicator--61e62298-c1d6-4cb0-aa41-451960b14c83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74119db-50a2-4863-8841-c8f4cfa868c9", "sighting_of_ref": "indicator--77632308-4d16-4ab4-a50b-cd43b6176d07", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58e37ea-3c8a-4fb8-a7dd-70ca97507304", "sighting_of_ref": "indicator--030bd7e7-c099-4adb-8f7a-2f888e366f62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f553f7ba-5c0a-4cdb-81b2-5e74f68b8cea", "sighting_of_ref": "indicator--16fce571-bbab-4095-9eb0-d147f1cf0a49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e97b19-1a8e-4ba1-b771-83482f0e9c74", "sighting_of_ref": "indicator--1d420776-c31f-402d-9cec-ebdb145924b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1226dd8-a3ad-44ab-9716-2057d533bf37", "sighting_of_ref": "indicator--44e60a11-a1ae-43e5-b0ad-0df1056842b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c21c34-77b7-461d-b70a-621ec1d2aca8", "sighting_of_ref": "indicator--e3350756-20d1-42b6-9c6b-5074077f093a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8644a75e-bd29-4d44-9b2e-b88886ada0e8", "sighting_of_ref": "indicator--e3350756-20d1-42b6-9c6b-5074077f093a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2339f8b7-5dad-4048-a133-ec896cd9617c", "sighting_of_ref": "indicator--e3350756-20d1-42b6-9c6b-5074077f093a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b947055-a457-4680-ae0e-944505aac7df", "sighting_of_ref": "indicator--98dfa450-4366-41ae-aec8-b3ed37ce324a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7576462d-1baa-4fe7-b27c-feccfe4b06b2", "sighting_of_ref": "indicator--98dfa450-4366-41ae-aec8-b3ed37ce324a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb61f43-5a84-4a53-b8de-78e1893e7767", "sighting_of_ref": "indicator--98dfa450-4366-41ae-aec8-b3ed37ce324a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1546e1c3-bf33-4f9f-88b5-e7067bb17de2", "sighting_of_ref": "indicator--ca8d1860-1051-4156-9de3-4f99b62efd36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23a419d-6623-40f6-9ae2-8bf993e4614a", "sighting_of_ref": "indicator--ca8d1860-1051-4156-9de3-4f99b62efd36", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5c1536-84eb-42e8-bfb5-572c6263918d", "sighting_of_ref": "indicator--ca8d1860-1051-4156-9de3-4f99b62efd36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a24d08-0acd-4f78-8065-5c046e2edbc7", "sighting_of_ref": "indicator--9dc6defc-4206-4c6c-99de-03e45318b372", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2503240c-bfd3-4f0d-8ed4-625c2561720e", "sighting_of_ref": "indicator--062e93ac-65f0-49b3-939c-412f13806e29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdbd6c8-ae46-4621-95a0-3baf34b6b682", "sighting_of_ref": "indicator--a7e33496-d10c-4494-9f5d-12d88916bd94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5b6ae2-9acf-4530-80ec-c9582ac88d1e", "sighting_of_ref": "indicator--e15b84e8-577a-4d57-873e-88d93a3023c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ab7b88-db2c-482b-80f7-f04fb50368b5", "sighting_of_ref": "indicator--f0d3c228-f080-4e0a-8ed8-7d2855eee6b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a5cca1-300b-430a-826e-1597eec6990a", "sighting_of_ref": "indicator--f0d3c228-f080-4e0a-8ed8-7d2855eee6b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d59459e-8083-4f56-8a71-e92fc4ee3161", "sighting_of_ref": "indicator--41464527-af18-413c-8444-256e7f0ff6a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d1a012-7b50-4977-b8a3-9ae8472791bc", "sighting_of_ref": "indicator--41464527-af18-413c-8444-256e7f0ff6a6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe92d628-11e3-4945-b1ea-6951bd009702", "sighting_of_ref": "indicator--5a7b839b-6953-4585-b3d4-2b66e6d2f8d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d819732a-539e-4b3c-8e78-ae9cd52dad0e", "sighting_of_ref": "indicator--5a7b839b-6953-4585-b3d4-2b66e6d2f8d1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00be437a-bc95-49bb-a392-9d83c091caee", "sighting_of_ref": "indicator--5a7b839b-6953-4585-b3d4-2b66e6d2f8d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdce69bd-f8b1-4cf7-9816-547423aee7a9", "sighting_of_ref": "indicator--6d3b98c6-693b-4209-8ea6-022f552106ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db22553-3d4e-40a3-b4e0-851035e63526", "sighting_of_ref": "indicator--3a59b6f7-a0bc-4503-8d9f-c83062c715a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492ce024-81a6-4d12-8d07-98b1724e6b00", "sighting_of_ref": "indicator--3a59b6f7-a0bc-4503-8d9f-c83062c715a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51fe11f-2d7a-4742-abbe-19356c63e4ac", "sighting_of_ref": "indicator--d09a25c4-3dbb-47a4-8610-30f74514704b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91367c4c-fb98-4a18-aa98-b0092bc91935", "sighting_of_ref": "indicator--d09a25c4-3dbb-47a4-8610-30f74514704b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18828cb-2df8-4f84-8745-18c39d40e9cf", "sighting_of_ref": "indicator--8aca4cff-2448-4896-8807-620736c6c6ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432777bb-99f4-440f-bd8f-4ed2852bab01", "sighting_of_ref": "indicator--15159569-3ada-4239-8517-f41af5ea0201", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3ed69-83b7-4a7c-84bc-703d7fa29d80", "sighting_of_ref": "indicator--f5e8f82d-fe9f-4d1c-bcb0-ac8fa3f4e5a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd760749-e966-4368-9508-66a279e22cd9", "sighting_of_ref": "indicator--35a47152-1f27-40ca-b3d9-f78249418309", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3739e8e0-bc1d-49eb-ba6f-739e072d8ce1", "sighting_of_ref": "indicator--35a47152-1f27-40ca-b3d9-f78249418309", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ac1a16-02e1-4d2a-8eca-3bd3c11d539e", "sighting_of_ref": "indicator--4b987f72-727b-4b5b-a213-39b1483e5c21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ea52f5-6270-47cc-8d69-c3917c252e33", "sighting_of_ref": "indicator--4b987f72-727b-4b5b-a213-39b1483e5c21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6003c924-180b-41dc-baf5-febf3aeed020", "sighting_of_ref": "indicator--1f9e72e1-c3e1-4844-8168-e5bd60d013d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07e4ea4-83d0-483c-9884-bf889130408e", "sighting_of_ref": "indicator--c44b203f-0b40-4028-8e3d-a899f30fc56e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f733c1-40a3-45d9-87bb-98181bcfb89d", "sighting_of_ref": "indicator--80d94667-d8ae-45f1-b49e-20d3bab3e6f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b03ae-0367-4411-b076-681465c15618", "sighting_of_ref": "indicator--46321ce6-38c6-499d-ba1c-adcaaf08d9db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d4428b-2b55-471f-a38d-fe988ea7dad6", "sighting_of_ref": "indicator--4c782a14-6693-4596-a22b-b656a898c2b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25faadb-5b1e-4e14-bb46-8678445d4c50", "sighting_of_ref": "indicator--63eeff57-0ebc-4e39-a05e-c10ba7977b68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0478dc-e426-4b52-9627-2a60e11746d9", "sighting_of_ref": "indicator--63eeff57-0ebc-4e39-a05e-c10ba7977b68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f205a5a-0b6a-4ce3-a309-13e37815d90d", "sighting_of_ref": "indicator--333564c7-fe49-4bff-8515-79763b39e59e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cbb7c6-454d-44a2-b832-cd34d2ca50d1", "sighting_of_ref": "indicator--333564c7-fe49-4bff-8515-79763b39e59e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29e2cbf-2501-4f98-951b-f4c506cc363d", "sighting_of_ref": "indicator--de17dbec-f5ac-41f4-9d84-1d50424bfdd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8e7761-ad59-4939-8cc2-40c356bfd9bd", "sighting_of_ref": "indicator--de17dbec-f5ac-41f4-9d84-1d50424bfdd6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cb894e-81ed-4879-a0b7-f2b0f901cc42", "sighting_of_ref": "indicator--e8a3acfb-da0c-499d-a12c-7de24a1af15e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75976750-c63a-4dcf-8947-535cfc17a952", "sighting_of_ref": "indicator--e8a3acfb-da0c-499d-a12c-7de24a1af15e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a39e383-4cf9-4b9f-af6f-be16c9f63530", "sighting_of_ref": "indicator--e8a3acfb-da0c-499d-a12c-7de24a1af15e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdff68b5-2075-4592-870c-baef17817559", "sighting_of_ref": "indicator--f7434a50-3c7d-44a2-a2bc-9dcfbec9d2b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7490dbd3-d501-4253-8c2f-d295e6ce5cf2", "sighting_of_ref": "indicator--409c9065-cfb8-4478-8185-766ed61d4ae7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46301cc-45b8-4383-ba4c-74d659345dc6", "sighting_of_ref": "indicator--409c9065-cfb8-4478-8185-766ed61d4ae7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c9755e-1818-4a97-84c3-6a19fb0ec16f", "sighting_of_ref": "indicator--2516e383-284c-4a5f-afce-516c53f6e3e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b63e36-8888-4673-ac67-767ee4d0a363", "sighting_of_ref": "indicator--ce11a6bb-c60f-4772-a640-35df5aba05eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7659fe1f-1716-4bc0-9669-7549ae25d488", "sighting_of_ref": "indicator--ce11a6bb-c60f-4772-a640-35df5aba05eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81754fbb-ae9e-492e-922e-f29807678b94", "sighting_of_ref": "indicator--fc89e05f-2309-43d0-9425-d3a440bc69b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af300587-af17-40ee-bcb5-a529fc96d7c2", "sighting_of_ref": "indicator--fc89e05f-2309-43d0-9425-d3a440bc69b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d871ea-7d3d-43e6-8628-bd7ccdcc4952", "sighting_of_ref": "indicator--cdf6020f-94d3-4c09-85a1-cd5a3451229a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60bbde4-b53c-455d-82f2-29ef9bf9800c", "sighting_of_ref": "indicator--cdf6020f-94d3-4c09-85a1-cd5a3451229a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad8f310-c550-4e1b-8cea-dda21255ccea", "sighting_of_ref": "indicator--f3d0dd4c-864a-4ce1-b9e7-ec358b307a9e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369f43e4-f398-4642-a03e-f71e0b762960", "sighting_of_ref": "indicator--d9fd8227-dde7-48e3-bf70-4dc9fce30ac8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17d4819-c727-4b5b-b70e-3616d77fc1a6", "sighting_of_ref": "indicator--608f0044-99d7-4bd7-92dd-c8ba3d5cd090", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769c7c74-1eb9-4b61-848d-9e8f0c4ebb36", "sighting_of_ref": "indicator--77cc869e-067e-4593-932f-9ed5945d5de4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdef17d-02c6-4b80-8daf-1a95ef0c9fa8", "sighting_of_ref": "indicator--77cc869e-067e-4593-932f-9ed5945d5de4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578e9210-085f-4566-b5d7-694def72797f", "sighting_of_ref": "indicator--1fb05bbb-fbc6-4d0f-a6bb-2d0846450ed1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743f8035-290a-4a92-9ed9-d8132a63cdac", "sighting_of_ref": "indicator--1fb05bbb-fbc6-4d0f-a6bb-2d0846450ed1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa60b1d-0907-445d-ba24-67328a6b48b6", "sighting_of_ref": "indicator--b66070ed-862f-4209-b3a9-637106c1cb76", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfde551-8082-44ac-aa19-14912f61ccf4", "sighting_of_ref": "indicator--b66070ed-862f-4209-b3a9-637106c1cb76", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13de531-a948-401b-9aeb-8b5e27deb9f8", "sighting_of_ref": "indicator--d742c901-4831-4414-bba8-f9c65ac12695", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae27b89-cd01-4cba-b00d-0a9fab3ea790", "sighting_of_ref": "indicator--d742c901-4831-4414-bba8-f9c65ac12695", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427c36bb-5a8b-4e38-9055-83449be207b6", "sighting_of_ref": "indicator--bf8a4659-8c17-4a93-80a8-6e29309b12ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c291a4-a720-4afa-9866-eda96c3b49c8", "sighting_of_ref": "indicator--bf8a4659-8c17-4a93-80a8-6e29309b12ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceb385e-5a60-4a00-bc24-f89d98290a47", "sighting_of_ref": "indicator--bf8a4659-8c17-4a93-80a8-6e29309b12ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef48f90a-75f5-4d93-b062-81d0568e039c", "sighting_of_ref": "indicator--62da8546-24b4-4d24-aed4-d15fbeb2701d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdc012a-77ce-492c-8a07-8ac4fc8843ee", "sighting_of_ref": "indicator--4ff4fce1-c360-4f74-9a4b-a76c91e80aac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b48e21b-b88d-4d3a-9bb6-e565dfb6c218", "sighting_of_ref": "indicator--c9c6a598-9acd-48ae-8b97-1bf8c905718d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd866a6c-82fc-4c10-b2d6-056147533bdf", "sighting_of_ref": "indicator--c9c6a598-9acd-48ae-8b97-1bf8c905718d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a279331-051a-49c1-a354-43ec8c72080b", "sighting_of_ref": "indicator--c9c6a598-9acd-48ae-8b97-1bf8c905718d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16027b8-612c-44cf-ab26-52d6cd9f934b", "sighting_of_ref": "indicator--9ecf0e86-7305-49c8-8348-7c3426de90af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e13343d-bdb7-48af-8511-43cb56f4c5c9", "sighting_of_ref": "indicator--9ecf0e86-7305-49c8-8348-7c3426de90af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6692d4-80b6-4d47-b5d6-211a23199833", "sighting_of_ref": "indicator--9ecf0e86-7305-49c8-8348-7c3426de90af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75e9528-362f-43b3-9b8a-36ca1cb785f1", "sighting_of_ref": "indicator--b11d461f-11b1-4a5e-88d9-06f4f5197421", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d01e958-4b35-413f-99f9-4f32e68cb224", "sighting_of_ref": "indicator--3a5c5f22-7dca-49fa-9ca6-d9db2531f695", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66aabb5-4bf3-4642-93f2-558ab0ff0a12", "sighting_of_ref": "indicator--d46dd4f0-230f-4d8d-bd04-e9433394f896", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4546a80d-dd1d-4b66-bb13-7c37d0039aba", "sighting_of_ref": "indicator--d46dd4f0-230f-4d8d-bd04-e9433394f896", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee1b3ae-3dd1-4fa5-85ae-fe7ceb214ad8", "sighting_of_ref": "indicator--320dcda5-5167-4309-b1f5-402c8e67839f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d19e892-1d52-4a0f-8537-435fc32dab95", "sighting_of_ref": "indicator--320dcda5-5167-4309-b1f5-402c8e67839f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b7b34d-70a4-4f6c-bb77-5f5180069ef7", "sighting_of_ref": "indicator--36f0214f-2f37-4777-870f-1d315f64e806", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2a5d54-a14c-408d-9f7d-5cef30a524a4", "sighting_of_ref": "indicator--36f0214f-2f37-4777-870f-1d315f64e806", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c840d0f-50df-4e36-9a92-320d83340707", "sighting_of_ref": "indicator--58ca45d7-b96b-42db-8d97-009040395afc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f560bc11-7f9f-45bb-9442-8be315579921", "sighting_of_ref": "indicator--21f22fac-c9fa-4448-8dfc-31216bbc5f70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c669b0ba-a823-4a8e-bf61-a1242f24033f", "sighting_of_ref": "indicator--0e114c9f-b4b1-4ae1-af75-8ff8ee6fb87e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900c0813-49cb-4244-8f35-4acfb7912ae2", "sighting_of_ref": "indicator--66e238b7-6e52-4d3a-a2d9-d121fdd51e77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29001d5b-9de9-4b14-ad0b-2dccae7c690a", "sighting_of_ref": "indicator--b24cdce4-9cce-4fa2-a463-0be6cfe41234", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545e2558-92dc-476b-bc6f-82531a23d717", "sighting_of_ref": "indicator--b24cdce4-9cce-4fa2-a463-0be6cfe41234", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56376517-5787-4a46-a60c-703ecf27c305", "sighting_of_ref": "indicator--b24cdce4-9cce-4fa2-a463-0be6cfe41234", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682a9260-7967-4fd8-b470-dd444c1cd550", "sighting_of_ref": "indicator--49f12995-d2be-4a97-a31b-09481c348159", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb295fa-0c66-4266-be4b-e32437247971", "sighting_of_ref": "indicator--49f12995-d2be-4a97-a31b-09481c348159", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6f2f40-b4e5-4953-9509-dc39dee78bff", "sighting_of_ref": "indicator--22b3ec39-b51a-4cde-9e7e-2b5778876d73", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0760f143-29cf-49be-b667-91854ca3533a", "sighting_of_ref": "indicator--0ae0f9d8-e55b-455b-a4aa-04402ec76b08", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b4b49e-75c6-4b2b-bc87-690da009d3ac", "sighting_of_ref": "indicator--64088b28-2996-47a2-a01a-1eab8fbf5587", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3602bd10-11eb-48b5-8da8-6e0bde685c9f", "sighting_of_ref": "indicator--64088b28-2996-47a2-a01a-1eab8fbf5587", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24148d0f-fb44-49d8-8ed7-db264d42e501", "sighting_of_ref": "indicator--5d8e650d-7d6a-495c-a076-5f9525b99df1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbcd596-383f-4ab9-ad5a-e316f5f0c62e", "sighting_of_ref": "indicator--5d8e650d-7d6a-495c-a076-5f9525b99df1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e02d3d6-4302-4573-92b9-fb4965632668", "sighting_of_ref": "indicator--5d8e650d-7d6a-495c-a076-5f9525b99df1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9440a5b0-13cc-4517-93af-7c6e73f0df54", "sighting_of_ref": "indicator--2e1cd0ad-f489-4fb1-8c40-1b851cd49535", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7d5831-4695-46d8-b9ac-aefed470a098", "sighting_of_ref": "indicator--2e1cd0ad-f489-4fb1-8c40-1b851cd49535", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f845e92b-da0c-43ed-bf3d-e82aee2e8a10", "sighting_of_ref": "indicator--07944021-8856-4c85-b2e1-68dc75fd247e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97911fc4-1d79-4a33-83af-74e37024bdb3", "sighting_of_ref": "indicator--07944021-8856-4c85-b2e1-68dc75fd247e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7938c1ee-822e-49ce-8d82-2e86442e2318", "sighting_of_ref": "indicator--27d7b845-ac50-4103-9342-22f08d8ce987", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71011947-56eb-45f7-970a-a98fb927adf4", "sighting_of_ref": "indicator--27d7b845-ac50-4103-9342-22f08d8ce987", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f572f945-47fe-4d81-b619-b4dcd2d78e1c", "sighting_of_ref": "indicator--722b5e67-91be-43c1-931f-8298b6bef022", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbb9216-ebe1-4547-b4c0-fac7381311f0", "sighting_of_ref": "indicator--51ffdafb-dd77-4ca3-a987-cd703200ccab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4335f3ce-dc82-4e81-bad1-635a4164014d", "sighting_of_ref": "indicator--51ffdafb-dd77-4ca3-a987-cd703200ccab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8cb499-3cd1-4a34-b890-7b4ec4ddd7e6", "sighting_of_ref": "indicator--51ffdafb-dd77-4ca3-a987-cd703200ccab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b4b1b6-a4cf-499b-81ea-7c17f69c698a", "sighting_of_ref": "indicator--7150adc8-4995-4eb8-9407-24b8b861a764", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee56c12d-dea4-4fd3-a3d5-e79d59750481", "sighting_of_ref": "indicator--d8922bb5-a34d-4860-964d-f4e2355b2496", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd328f26-2904-472d-89cd-0054bb44c252", "sighting_of_ref": "indicator--d8922bb5-a34d-4860-964d-f4e2355b2496", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b572a5f5-d1ce-4902-83b3-af7bb30607b5", "sighting_of_ref": "indicator--9efcfe2b-b97b-4481-9e27-ddd5e9621a87", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571773a0-617e-4a9d-9a94-a03230f568d3", "sighting_of_ref": "indicator--9efcfe2b-b97b-4481-9e27-ddd5e9621a87", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18197f17-4c09-4e4e-9716-9a921ec96dc1", "sighting_of_ref": "indicator--1d071732-9fe4-4cf6-a44a-2f7db78091b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3b0f91-9645-4ba6-bcc1-116fba945c36", "sighting_of_ref": "indicator--71268105-efc5-4b9c-a790-922cbe778435", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d802ae5-c4bd-454a-8e6c-f5fce72b81f6", "sighting_of_ref": "indicator--52c6b22b-c1ae-410a-ba22-a33b2b03bd3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16282d55-8ad1-4d77-a3cc-9c7614d72557", "sighting_of_ref": "indicator--fdbeb9ea-2e5c-4b2b-ab04-ce189275ccaf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21985f98-479f-49e8-b495-111c52710d11", "sighting_of_ref": "indicator--0b63ac7f-fd53-4c24-9f51-a5c6e1c31278", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd011f0-c8f9-44db-8033-edaaf64c9b66", "sighting_of_ref": "indicator--0b63ac7f-fd53-4c24-9f51-a5c6e1c31278", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22265d76-eebe-4e7f-81b8-905833bf512c", "sighting_of_ref": "indicator--62d10fda-54a4-4690-a089-4d876fd7fe58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d924a88-439d-4df4-bc86-3396628aa7dc", "sighting_of_ref": "indicator--075c9fcc-da29-471b-a2f2-20ce21eb6b93", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329b6b6d-48ae-4c2d-bf4c-c83bb0977ab6", "sighting_of_ref": "indicator--075c9fcc-da29-471b-a2f2-20ce21eb6b93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e732be07-c154-4256-92b9-575d01866b6c", "sighting_of_ref": "indicator--502ff8ff-b7bf-48e8-b95f-c9496aa5bd29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6806d749-c414-4f1c-9973-d4f61a2cddba", "sighting_of_ref": "indicator--502ff8ff-b7bf-48e8-b95f-c9496aa5bd29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fc15d0-59bb-4b5b-af6e-552e4efc2b13", "sighting_of_ref": "indicator--74133ea7-dd44-4df7-84e1-1767c51a05d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a179a62-c019-4165-9125-085d775a72fd", "sighting_of_ref": "indicator--57cc7cf0-dd77-4229-8b92-1ae8dc8a0a47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f54db4-72aa-44fd-9b1c-f100b77ec1eb", "sighting_of_ref": "indicator--57cc7cf0-dd77-4229-8b92-1ae8dc8a0a47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590c2a47-41cf-413b-845f-1a87b34766bd", "sighting_of_ref": "indicator--57cc7cf0-dd77-4229-8b92-1ae8dc8a0a47", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82618a91-46b5-4131-b502-b52e04a16193", "sighting_of_ref": "indicator--a480eefc-96bb-4f07-9a11-29d929325bbd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00a64a3-d7a5-4493-8604-c5d28487c040", "sighting_of_ref": "indicator--98587a8a-e06e-4b92-b38d-fc97e7c1b475", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a7214f-db25-4b30-a487-84e0d953909e", "sighting_of_ref": "indicator--98587a8a-e06e-4b92-b38d-fc97e7c1b475", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5fac6f-ac84-48ec-a5a6-e380c76d71e8", "sighting_of_ref": "indicator--b88ef6f8-158c-4166-91b1-eb7182abc1e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7abfdf-00da-47e5-a4e5-7c06690a4754", "sighting_of_ref": "indicator--3de6fa96-6087-46af-a9c4-30a7a9e12d7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3512cf-c111-4b1d-b565-9be0df5e4e80", "sighting_of_ref": "indicator--3de6fa96-6087-46af-a9c4-30a7a9e12d7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8157013-8c57-49c3-b579-a9fcade05f89", "sighting_of_ref": "indicator--3de6fa96-6087-46af-a9c4-30a7a9e12d7e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e11fbb5-b9ae-4182-ad9e-ba21dce39a7c", "sighting_of_ref": "indicator--23835c4b-1293-4028-bbc5-98959b563010", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d41383-7c48-47f8-9876-c489e372b1ca", "sighting_of_ref": "indicator--ca111823-d006-465a-8ae7-92516b952863", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57aa9fe8-1b54-40e4-a3cc-bf805573c779", "sighting_of_ref": "indicator--ca111823-d006-465a-8ae7-92516b952863", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef16af0-df13-45a6-9ad7-7866b40908c5", "sighting_of_ref": "indicator--31642124-27df-47d3-bc3a-483ace4e8b38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80e418b-21c9-4fa5-9116-e717f9a29bbb", "sighting_of_ref": "indicator--31642124-27df-47d3-bc3a-483ace4e8b38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f609629-d333-4714-9dc0-ab06137b3d15", "sighting_of_ref": "indicator--76d3fe17-4cea-40df-959a-d27720ea5b92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e53fd2-6635-4c1f-943a-9d5fcbd2c52a", "sighting_of_ref": "indicator--76d3fe17-4cea-40df-959a-d27720ea5b92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21ad3c4-a417-44c0-bcf3-453f628a779d", "sighting_of_ref": "indicator--f36ee661-8a0d-4c27-82df-7a790a4240da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8636a37-67cd-4b76-81f1-b748dc9445f4", "sighting_of_ref": "indicator--aec33d8d-01dd-48f7-b862-8ddd17a49bb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9432b507-0bb4-4b24-aab7-c8b62dec6073", "sighting_of_ref": "indicator--aec33d8d-01dd-48f7-b862-8ddd17a49bb6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebfde2a-87e9-4910-9cd9-2529c8b6f1b3", "sighting_of_ref": "indicator--84d03363-360a-4d9d-819f-21d9d5e31b64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90423558-9537-4816-9622-d973def9f3c8", "sighting_of_ref": "indicator--c94f409a-de67-4474-adb2-5a5000ca68c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc5c436-51c3-40b3-8908-db0de4ad3faf", "sighting_of_ref": "indicator--bf284502-d924-4056-b60a-66a66ddd3f12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3044ec-a1a0-4d0a-af5c-63f6bec11240", "sighting_of_ref": "indicator--bf284502-d924-4056-b60a-66a66ddd3f12", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0159248-59ac-415c-80d0-a1e3be6dbaf9", "sighting_of_ref": "indicator--48daf5cb-cd1d-4ea4-9cba-e2df97480479", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378288ff-e0d8-4f79-91ff-5d88c4d816d5", "sighting_of_ref": "indicator--48daf5cb-cd1d-4ea4-9cba-e2df97480479", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b95d5f1-09d1-4344-8e45-3e63c86eb477", "sighting_of_ref": "indicator--e4530739-54a5-47ad-9fbb-5eb558e5b0af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eb6f9d-bafd-452d-976c-ce283e43f29c", "sighting_of_ref": "indicator--e4530739-54a5-47ad-9fbb-5eb558e5b0af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b144d8f3-2b02-45a3-beb6-c0d5b0ae427e", "sighting_of_ref": "indicator--e4530739-54a5-47ad-9fbb-5eb558e5b0af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b58424-a4f4-43f6-8df8-252281566b5c", "sighting_of_ref": "indicator--e1d6c962-8300-484f-84f6-a2e43f7d4713", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116f75fe-6641-4062-bad9-6de08ca91eed", "sighting_of_ref": "indicator--e1d6c962-8300-484f-84f6-a2e43f7d4713", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a8a066-8330-46b0-8480-80f5a5158e8d", "sighting_of_ref": "indicator--e1d6c962-8300-484f-84f6-a2e43f7d4713", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500c9523-c454-4788-b594-d8191c30ad05", "sighting_of_ref": "indicator--527bee71-6e7d-4c59-b43b-8c51b2cfe133", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6661ed06-1951-4b7b-ac6e-69d86732200f", "sighting_of_ref": "indicator--e243d12b-deb3-4a83-a6ce-7b8f4dadc843", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e927a6-a9d3-4908-9aef-20e5c44245c9", "sighting_of_ref": "indicator--e243d12b-deb3-4a83-a6ce-7b8f4dadc843", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569f88f2-a966-4204-a8f9-46b38989b933", "sighting_of_ref": "indicator--5d40a53c-48b2-4372-8a8e-a66b60259b63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5a0a5f-c55a-4d76-8d99-8344d09ddcb2", "sighting_of_ref": "indicator--5d40a53c-48b2-4372-8a8e-a66b60259b63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133c465e-4b8e-4f60-8ad9-7a86a8b9f556", "sighting_of_ref": "indicator--5d40a53c-48b2-4372-8a8e-a66b60259b63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d32767f-a920-4f2f-8d2c-15ef4d72af2c", "sighting_of_ref": "indicator--7228634e-d21d-4003-869d-85dc27a7c729", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfcbc7d-76d8-4ece-b540-34e84683cebb", "sighting_of_ref": "indicator--5c5339f0-be94-45d2-adb5-388488aca550", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d9b9c8-b1a3-4791-97b2-3d6318f5b592", "sighting_of_ref": "indicator--34e8ec42-41a7-431f-91db-a6787c9e4254", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960d9110-8621-4044-aab4-6919a900251b", "sighting_of_ref": "indicator--34e8ec42-41a7-431f-91db-a6787c9e4254", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43708b26-c544-4869-9a82-f613da8d2adc", "sighting_of_ref": "indicator--eab20ebd-7eb3-42be-9070-737f913acddb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cac0b48-583c-4f26-8734-1672a804ff19", "sighting_of_ref": "indicator--eab20ebd-7eb3-42be-9070-737f913acddb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b907d12-8daf-4294-a3e1-b37e856844ec", "sighting_of_ref": "indicator--eab20ebd-7eb3-42be-9070-737f913acddb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce0b92f-dd22-49bb-a6f3-bfad3d133997", "sighting_of_ref": "indicator--b2108c4b-70c4-4dd7-8499-09d8ea8a0498", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2651321d-46ac-48e7-851f-cd4158795825", "sighting_of_ref": "indicator--661e6f49-ea5d-4ff9-a1db-70e3e8f0c6d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea887df-9497-4b62-b1d4-e51ccddc7477", "sighting_of_ref": "indicator--661e6f49-ea5d-4ff9-a1db-70e3e8f0c6d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e725b6-44cb-419f-98cc-50d8ae4b7148", "sighting_of_ref": "indicator--36f092a0-e02f-47b5-9952-07a041ecab4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6830d114-7004-476b-a9c9-024623000421", "sighting_of_ref": "indicator--36f092a0-e02f-47b5-9952-07a041ecab4a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25017eac-d71d-4ca4-ad36-216b61d6d161", "sighting_of_ref": "indicator--36f092a0-e02f-47b5-9952-07a041ecab4a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e631860e-a676-4101-bf30-acc336dd0ea2", "sighting_of_ref": "indicator--0a077102-d47f-4cad-9a15-f36f2ff3ff07", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e258d8-4761-47f0-8462-ce8efabeafc9", "sighting_of_ref": "indicator--363112ff-955b-4e51-9a4a-2bc69ec23614", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed86ba2c-0a5b-4b5c-87da-bb1102596b1f", "sighting_of_ref": "indicator--363112ff-955b-4e51-9a4a-2bc69ec23614", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269121c2-8724-4f36-8003-227f187c844b", "sighting_of_ref": "indicator--cf7de3fc-e23d-4335-9826-0b3d2bc2d726", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0e6897-4352-48db-92aa-398a5a5af81a", "sighting_of_ref": "indicator--a3feb1a7-f6bc-47bd-9b6c-dac8f7b7dc13", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102d03fe-1bce-493b-83b1-f3fdd089d683", "sighting_of_ref": "indicator--0646ef52-f1fc-453f-bc32-7f7b84588073", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674da044-e55c-43ff-81a8-0df355c8d794", "sighting_of_ref": "indicator--0646ef52-f1fc-453f-bc32-7f7b84588073", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edd2bf8-1c7b-42cc-843a-8e9e520ba72a", "sighting_of_ref": "indicator--79bb7d17-8a62-4d7a-84e9-d3f48784c395", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1923cc0-66ea-433f-ab7f-56e85d9e402c", "sighting_of_ref": "indicator--157ff39f-a14b-43c2-936f-08c540600880", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9619e5a7-bcd2-4c7e-9dd4-6a33812d1d16", "sighting_of_ref": "indicator--157ff39f-a14b-43c2-936f-08c540600880", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f5edd2-bcd0-4495-a62c-25177c8eb931", "sighting_of_ref": "indicator--19e64e93-a0b1-404a-8883-946094ab5af3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5319bb0-71d4-4c01-9a6a-f9f08faefb5b", "sighting_of_ref": "indicator--83c311a4-f973-4e25-905b-fd56ca82f977", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9d59ac-35b3-4aba-8419-79d068421a80", "sighting_of_ref": "indicator--7dd70bf5-bed3-407d-adb0-9537ddb8ae04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbe9fcd-abed-4f97-bf77-6decae84c5ad", "sighting_of_ref": "indicator--7dd70bf5-bed3-407d-adb0-9537ddb8ae04", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92505e3e-9146-4c7f-a248-3d10f6971128", "sighting_of_ref": "indicator--7dd70bf5-bed3-407d-adb0-9537ddb8ae04", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a98601a-c3b6-455a-8026-457d89477056", "sighting_of_ref": "indicator--aa2e2e52-d558-4d52-82cd-13b5e9462ddb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7914205-061c-4e65-900d-0a029dad596c", "sighting_of_ref": "indicator--1d33beb6-cbee-4cf8-9254-09dbf022682d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae082172-ff27-4603-be7b-d8a4b0fd312e", "sighting_of_ref": "indicator--1d33beb6-cbee-4cf8-9254-09dbf022682d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f818fdf5-b51e-4edf-b1d8-49b7e28402e1", "sighting_of_ref": "indicator--28988bd9-23b3-4f2d-b6f1-d989e2432bbc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00aa6cf-5c99-4a79-85ad-9ffb72916ec5", "sighting_of_ref": "indicator--28988bd9-23b3-4f2d-b6f1-d989e2432bbc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97a3e74-0f3e-4438-9060-b92635887b68", "sighting_of_ref": "indicator--dcb61356-a048-452d-96e1-6f351a1c63f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cbc5dc-a4f7-46c4-9302-ca51043fb46b", "sighting_of_ref": "indicator--ff5b3fc7-1817-4291-a057-b5a1ad90bb75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef422f40-7d3a-49b3-885b-229eb650115c", "sighting_of_ref": "indicator--59e814ca-c734-48da-bf00-d3670210de5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876cc02a-a8ce-4e8d-910a-bdcb9586f183", "sighting_of_ref": "indicator--c623e3fc-5a3f-4da2-a76b-69fa436a6ba0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3134eb5f-b914-4de2-afc0-936b9577413c", "sighting_of_ref": "indicator--893a3032-f84f-4b81-868c-c6955c118db1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5fb2f9-7a47-49a8-bdc0-4c63b27a511c", "sighting_of_ref": "indicator--70dadda7-f2e0-4dd6-8c99-b62f3552f76d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d2bad6-aef9-4985-ba1a-ca4c2cd1f6a2", "sighting_of_ref": "indicator--70dadda7-f2e0-4dd6-8c99-b62f3552f76d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7c200e-6bbd-468a-9e81-a894a1fa28a3", "sighting_of_ref": "indicator--ac908a11-2339-4c78-ad8f-7d61709f122c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ad12fc-daee-4a29-8216-d6d355909672", "sighting_of_ref": "indicator--2cbe319a-7828-4c8b-998e-f3f961ea4626", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4879f7bb-4808-4cb8-ab04-6d58d3b0b717", "sighting_of_ref": "indicator--2cbe319a-7828-4c8b-998e-f3f961ea4626", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efebab3d-0d26-4b6a-b4f5-df59ef06d113", "sighting_of_ref": "indicator--54c06ac2-9d6f-418b-99f3-495a97b2c4e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349f611f-091f-4323-8462-9c2c2886dda6", "sighting_of_ref": "indicator--54c06ac2-9d6f-418b-99f3-495a97b2c4e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd68ec66-b6bd-4f01-a212-e598bf0c5885", "sighting_of_ref": "indicator--54c06ac2-9d6f-418b-99f3-495a97b2c4e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ac55b3-8d99-48ec-96e8-8126fb275132", "sighting_of_ref": "indicator--4bd9eea0-45bf-49c8-b299-d15d1444125d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0df7fbe-0c90-436e-bc27-8fe78dcda32f", "sighting_of_ref": "indicator--4bd9eea0-45bf-49c8-b299-d15d1444125d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf87788f-3980-48ae-a917-e8557a7ed8f1", "sighting_of_ref": "indicator--4bd9eea0-45bf-49c8-b299-d15d1444125d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a6b10-3e7a-496e-8b32-bfab394513b0", "sighting_of_ref": "indicator--79f78c57-74a9-4d2a-84cc-95451f9e0eb8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f292a81f-cbc1-44f6-bf0e-deb80beb71c7", "sighting_of_ref": "indicator--79f78c57-74a9-4d2a-84cc-95451f9e0eb8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de99658f-4031-4cd1-b564-e3a7d353bbd1", "sighting_of_ref": "indicator--e4172991-0801-4b03-adc9-a93cd4b5c24b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a01cb-d9b3-4b00-a93d-e683cdacd831", "sighting_of_ref": "indicator--1bb12180-ce17-4fd7-aa58-fac5893c7309", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185c76ad-d8a6-42a3-9f38-1ca78c2a5ba6", "sighting_of_ref": "indicator--1bb12180-ce17-4fd7-aa58-fac5893c7309", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b31d67c-630a-4570-bbc9-02664af73024", "sighting_of_ref": "indicator--acaa1efd-9aef-4206-9f4d-c114d02adc36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d955d1-50e0-4c3c-80b0-47c6539971c4", "sighting_of_ref": "indicator--f0e3098a-9de2-49db-baff-4b704e32248e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485275ac-ca75-4bc5-b6e6-fc7f93d55ebc", "sighting_of_ref": "indicator--e0c1fc47-b483-43e6-a0d5-f83aa250bd47", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf7c471-a82f-4f1d-b59d-fcb55ce61fa9", "sighting_of_ref": "indicator--10945570-1016-429f-a105-0b602191a2e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da8853-3964-4335-b92e-8a4092ce0846", "sighting_of_ref": "indicator--10945570-1016-429f-a105-0b602191a2e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc401c3f-64dc-4bbd-8e9f-6b7c71305fa6", "sighting_of_ref": "indicator--578c7118-36f3-4496-9c9e-64e99a34e623", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8852872-4081-4ea2-bc86-86faab43b404", "sighting_of_ref": "indicator--d860af0b-772c-494a-a780-ef6f08d43f97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bca5451-2424-43b9-8ab3-0c52836c3197", "sighting_of_ref": "indicator--aa207c3f-c79d-44f6-886f-54c8df8e3be4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73912d99-d2dc-4b50-9a17-4bf730cb8e59", "sighting_of_ref": "indicator--deac50e5-eee6-4457-bad9-8fd318c9a9dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cc8556-0650-4596-9da1-fdd1afe557dd", "sighting_of_ref": "indicator--deac50e5-eee6-4457-bad9-8fd318c9a9dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be82d40d-810e-4649-9407-3bc67fa05ffd", "sighting_of_ref": "indicator--d00c69f1-a3a3-424c-a9d9-9416f97b280c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3267d404-838e-4c8f-b48b-e1b983df4e90", "sighting_of_ref": "indicator--6acd1591-dc7a-4424-932f-9b9c163d073e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca89ad0-5590-4a08-8f81-1205e12299f1", "sighting_of_ref": "indicator--289d0186-b908-4c46-ae6f-892ad5485ae2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ee9bd7-6898-4d00-a5bf-f566d48305d0", "sighting_of_ref": "indicator--289d0186-b908-4c46-ae6f-892ad5485ae2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222add14-a796-4147-bef0-44e13c742dd1", "sighting_of_ref": "indicator--289d0186-b908-4c46-ae6f-892ad5485ae2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2b5472-d781-4cf3-a530-2c69fa04626e", "sighting_of_ref": "indicator--abbd52ce-2c90-4092-b057-832e0f6bbc39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b612fc15-ec07-4661-be17-a71e9e046cb4", "sighting_of_ref": "indicator--11a790d0-d9b9-42e4-96e3-3e6e7f9509a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7df1938-9c7a-4b6d-a62d-dcd9e0b8af6f", "sighting_of_ref": "indicator--11a790d0-d9b9-42e4-96e3-3e6e7f9509a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa8cc87-05b5-4e27-a763-8fedca1a4579", "sighting_of_ref": "indicator--11a790d0-d9b9-42e4-96e3-3e6e7f9509a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bda879-04f4-444e-937c-453c78a727af", "sighting_of_ref": "indicator--1a44b34b-455c-49aa-b36f-e8ebfe97bc34", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352c173f-006d-40f0-8f08-4aace781ff1b", "sighting_of_ref": "indicator--08d93793-b9a6-43a2-b4f6-dd189c9651d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bf0d4d-8bf5-488f-a934-39fd9eb62b7a", "sighting_of_ref": "indicator--01799173-308f-412f-8b06-825016d4e377", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecc81e5-19b4-41a4-bfd6-5f3ae8634523", "sighting_of_ref": "indicator--9f441cbc-3218-4388-9c85-0ef6bab7ffaa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf94a78b-06e6-4859-a915-c2ca0219b89b", "sighting_of_ref": "indicator--9e6f0b1a-2ec1-4a6c-9c3f-26b0954ac1a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f63f926-a3c0-412b-b2d6-5d8bad4a5786", "sighting_of_ref": "indicator--0efa841f-8446-4a48-9795-11bd9207d3f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83814657-311a-4a54-b66a-3f8505c1fe8a", "sighting_of_ref": "indicator--a552e108-6f9a-41bc-8105-9e9c54734e55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121a5a0a-4f72-4596-b904-cca8c043e1cf", "sighting_of_ref": "indicator--a552e108-6f9a-41bc-8105-9e9c54734e55", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cc18c1-3d60-42fd-b902-c20b2bc36cc2", "sighting_of_ref": "indicator--cd6fc22b-9c70-4f91-bfd0-db9403493086", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef452d1f-3e64-4070-b4c4-0d9a00373730", "sighting_of_ref": "indicator--e2d49e8c-d2f5-4bbc-9a20-5a7e73478740", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2b0c3c-19f0-4b49-bf6b-a79749542a2b", "sighting_of_ref": "indicator--e2d49e8c-d2f5-4bbc-9a20-5a7e73478740", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55032e6c-94cf-4b43-87ea-615869e614b8", "sighting_of_ref": "indicator--4b4ade3c-c2d1-4a25-8020-64829fe694e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafc1a61-cb20-45b9-a8fe-eab264a15b99", "sighting_of_ref": "indicator--32f0342c-39a9-45d4-a016-cea82381d9a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae161101-a646-4d7c-ab9d-cadb7e2e8569", "sighting_of_ref": "indicator--32f0342c-39a9-45d4-a016-cea82381d9a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0545ac-6e05-4f01-9c5a-3e0a04302336", "sighting_of_ref": "indicator--042c83cf-d456-47cd-9038-58632272a940", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd444c5-3daa-4ff2-8ffd-8c4227da6273", "sighting_of_ref": "indicator--0d93fe93-3fc5-465c-a76f-427afbf9d34e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75e30cd-2ead-4016-bcbd-b6e2ddecd7b3", "sighting_of_ref": "indicator--0d93fe93-3fc5-465c-a76f-427afbf9d34e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122b8be2-b473-4fa2-9f46-94f8c86bb165", "sighting_of_ref": "indicator--acbf9346-bfde-4c81-bbb8-0df7c9c341e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7b4016-f1c5-4d98-9390-79ad4a0c4447", "sighting_of_ref": "indicator--acbf9346-bfde-4c81-bbb8-0df7c9c341e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc170d0f-77da-42c4-b706-50809b3ffd35", "sighting_of_ref": "indicator--f52653a4-2ec9-4cfb-bf02-5c4a37146c75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa5b189-80fb-4a30-8ece-533a61f03058", "sighting_of_ref": "indicator--f52653a4-2ec9-4cfb-bf02-5c4a37146c75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b2e87c-4c47-4e83-aebd-6c1b5f085fbb", "sighting_of_ref": "indicator--9eb55941-2963-4c4b-8cec-84dfd1963ae8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc49a1c-fa0a-498c-a637-b092717a5150", "sighting_of_ref": "indicator--9eb55941-2963-4c4b-8cec-84dfd1963ae8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dad494f-e52d-45fd-b544-15c267157786", "sighting_of_ref": "indicator--a77a2c4a-a202-4ad0-b795-a80be0736b27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d997283-8242-4ac4-b716-894a8d39359d", "sighting_of_ref": "indicator--10009afe-bf47-438a-82ab-5cf707af0f57", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eac136-294c-402b-965b-935f160ac209", "sighting_of_ref": "indicator--23c05838-b291-4427-b1f9-f9560b340424", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfb7066-6eea-4061-9db8-2ad56e117316", "sighting_of_ref": "indicator--b692eafa-de76-4288-b632-ba789831c8c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731f597e-af17-47ea-b032-633e489d04a7", "sighting_of_ref": "indicator--b692eafa-de76-4288-b632-ba789831c8c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9476bfa0-e0be-47eb-9cf6-c755489f7f73", "sighting_of_ref": "indicator--b692eafa-de76-4288-b632-ba789831c8c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54d9cac-d757-4b6b-a3c7-2e3877c63708", "sighting_of_ref": "indicator--390c3f4a-6f25-40be-86a2-4b3e3ab6c8ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026c3805-e562-4ebf-a980-116ca0c909d2", "sighting_of_ref": "indicator--390c3f4a-6f25-40be-86a2-4b3e3ab6c8ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66992506-cb8d-4aed-a625-2d4a02db158f", "sighting_of_ref": "indicator--7f586688-0bcf-4ba3-a3a6-ec5f6d5f9d58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49126c6a-83ad-4384-a08a-8f0c28a61318", "sighting_of_ref": "indicator--7f586688-0bcf-4ba3-a3a6-ec5f6d5f9d58", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1509529b-7cf0-4dae-93f8-fb66e2c06c76", "sighting_of_ref": "indicator--d2d5ef30-bda5-4071-82f9-0427e2111b27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfb13dd-e1d6-40cd-a7c7-64307eadb4b6", "sighting_of_ref": "indicator--7e60b43b-3026-424c-9c80-08c791ffbe1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60961e0b-eed8-4256-9f0a-3da49be1ca21", "sighting_of_ref": "indicator--7e60b43b-3026-424c-9c80-08c791ffbe1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ab70d-42d3-4ad8-8c12-bfb949583a4f", "sighting_of_ref": "indicator--7e60b43b-3026-424c-9c80-08c791ffbe1c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b88a732-4026-4523-a39b-6e1000792483", "sighting_of_ref": "indicator--3f81e047-d94c-448d-8821-aa0d26f55f4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0429f7d8-da5d-4079-a521-08d18c797018", "sighting_of_ref": "indicator--3f81e047-d94c-448d-8821-aa0d26f55f4d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02ddede-8a32-4be0-8920-ca98b19c6036", "sighting_of_ref": "indicator--3f81e047-d94c-448d-8821-aa0d26f55f4d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8126ac4-2778-40c0-9bd9-93191bf7aac5", "sighting_of_ref": "indicator--e65f1264-439b-4e7c-89f5-3016023e02a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9c5eb4-be5e-4b4b-80bf-13f5102eb04a", "sighting_of_ref": "indicator--e65f1264-439b-4e7c-89f5-3016023e02a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2fcba3-0e6c-401b-aaed-203a5c0a7d84", "sighting_of_ref": "indicator--b4639e8a-9889-471d-bf37-d78d2eab7cb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210840dc-383e-408b-8539-cae1fa7d5bd3", "sighting_of_ref": "indicator--3f2cbd57-4c74-42d3-a0fc-9d5fc918e9ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdde1c2c-e2d0-4aad-ab21-761f4b3d5249", "sighting_of_ref": "indicator--3f2cbd57-4c74-42d3-a0fc-9d5fc918e9ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0992fe26-b365-4f1e-bf59-eab7850bdcaa", "sighting_of_ref": "indicator--3f2cbd57-4c74-42d3-a0fc-9d5fc918e9ae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1311e0e-830e-47a3-aa6a-e638ce900f55", "sighting_of_ref": "indicator--7fbcf5ce-8c44-4440-a39e-17beec71e8d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5d76c0-c1b6-41a1-b242-5804b827f429", "sighting_of_ref": "indicator--1b7b7868-3beb-4373-9094-1f02e0e62d0a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c5c197-e099-40a8-88cb-3d3787582731", "sighting_of_ref": "indicator--1cbc39a6-8792-4d84-88e9-df2cd39842e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c68ee0-8407-404a-866d-d8eb36203e8a", "sighting_of_ref": "indicator--1cbc39a6-8792-4d84-88e9-df2cd39842e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f24a022-3089-4d7f-895a-f849ef0a5501", "sighting_of_ref": "indicator--8da08dfc-bf04-48ae-beb5-bbab6ad125c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84dc387-cae2-4866-ace4-31fde4a0e0f6", "sighting_of_ref": "indicator--8da08dfc-bf04-48ae-beb5-bbab6ad125c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400a449b-83fe-41c5-b09c-d6712bd9535b", "sighting_of_ref": "indicator--8da08dfc-bf04-48ae-beb5-bbab6ad125c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d462e0d3-df30-4352-a360-1813c1386dd7", "sighting_of_ref": "indicator--f51af7ca-a556-4a6f-a86d-18f0cdedd187", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82762530-6e84-42c4-9604-81c8d8f98223", "sighting_of_ref": "indicator--fbc67255-6954-4464-bced-5cd4cedd62d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b41953-04be-40c0-b76f-8397b8e43a78", "sighting_of_ref": "indicator--fbc67255-6954-4464-bced-5cd4cedd62d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c8ebeb-6aad-43b9-9e9f-04e0cd44eafb", "sighting_of_ref": "indicator--fc437903-2665-48c5-8fb4-3f32e69a347a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7fd9f9-7601-45bf-a2b0-dffcee2ef590", "sighting_of_ref": "indicator--992d7425-f6d7-4eb9-96e2-d2c0ff1fa4ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfb2c2c-5115-4994-ae80-7a4ea8e3920e", "sighting_of_ref": "indicator--5d4ff00e-9b0c-4d7c-befb-a9066582c3b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dc7363-e58c-4a15-ab1d-f6e3ff6bac51", "sighting_of_ref": "indicator--5d4ff00e-9b0c-4d7c-befb-a9066582c3b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98052c43-438c-4127-94b9-f4a7a0280eca", "sighting_of_ref": "indicator--5d4ff00e-9b0c-4d7c-befb-a9066582c3b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1f5bc2-a65f-4a75-9b36-2bdd1901002a", "sighting_of_ref": "indicator--d20cc13b-2cad-49cc-ae7b-5c679e7ee935", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e6e226-5d08-4c73-b874-64afca1b55a5", "sighting_of_ref": "indicator--d20cc13b-2cad-49cc-ae7b-5c679e7ee935", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a03e26-1188-47fd-8de0-25f93cd998e6", "sighting_of_ref": "indicator--d20cc13b-2cad-49cc-ae7b-5c679e7ee935", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b847c97-80c6-4283-8dc4-5e8f0325033f", "sighting_of_ref": "indicator--4f35ed96-f886-4574-88d4-15ff8c6f3d3a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fdea05-53f8-4e98-bdea-5c305cf35907", "sighting_of_ref": "indicator--e0034f89-669c-4294-93e5-f3e94d959414", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb396c6-3844-4b1d-a000-667657a60ccc", "sighting_of_ref": "indicator--f3754e11-70a3-499b-86bd-60dfeca5875f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d5f4c7-8660-4ec1-b6f9-b1ec6e48189e", "sighting_of_ref": "indicator--91d18c85-e89e-4b57-b258-1746bfd14820", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c04fe0d-e2bd-4abb-ba96-b740a61f0b43", "sighting_of_ref": "indicator--d1bababe-a003-4137-949c-0168d16229c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966eadf0-da17-4942-b453-60f3af7ad6b5", "sighting_of_ref": "indicator--d1bababe-a003-4137-949c-0168d16229c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0215cac-249a-4b44-91a3-4e5042c65b3e", "sighting_of_ref": "indicator--dc568a56-a68a-4f19-91d2-99267d787047", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aac609-7e1d-477b-aef7-f43b58c668bc", "sighting_of_ref": "indicator--e44ce27b-af24-4eab-bc27-7c68c4803700", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e6a573-df95-4c62-a557-16d3000273a7", "sighting_of_ref": "indicator--d69ffb55-a14c-4d4a-877e-04c3c9ef0382", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accd0db5-7cc9-4c54-99a7-02f309af665e", "sighting_of_ref": "indicator--48d5282d-40a5-4d8a-a051-79fb7cca808a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4d316d-a358-4eb2-8eef-48258f8d4f67", "sighting_of_ref": "indicator--ff717f97-8e5e-4360-8d7d-e0b447a7a19c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9916eb6f-1817-4b0e-ba90-22ca7ce4537b", "sighting_of_ref": "indicator--ff717f97-8e5e-4360-8d7d-e0b447a7a19c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2630eb-c7fb-4c57-8050-0b4cc123bd04", "sighting_of_ref": "indicator--13840651-4660-4d5a-bdcb-ba3632c748b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80026097-d1fd-44a8-b916-37873395a2b6", "sighting_of_ref": "indicator--13840651-4660-4d5a-bdcb-ba3632c748b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee424915-88c2-4227-b5c8-16bf59c23819", "sighting_of_ref": "indicator--13840651-4660-4d5a-bdcb-ba3632c748b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f8c23d-b85b-4321-a4e9-99ddd1204d4e", "sighting_of_ref": "indicator--c8826f98-c501-4088-809e-a8116472b3f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49003a64-01d2-421d-a6b7-ecad84ae3963", "sighting_of_ref": "indicator--c8826f98-c501-4088-809e-a8116472b3f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa41b6f4-b5fe-462c-9a42-1476cd7c8958", "sighting_of_ref": "indicator--c8826f98-c501-4088-809e-a8116472b3f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e09208-1e8e-4e0d-be20-3a430cc266ac", "sighting_of_ref": "indicator--71dcc58d-aa03-44fd-a29b-2b6bbc996e94", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc93e62-1f68-414f-aebb-7ee07ba07adb", "sighting_of_ref": "indicator--2930ff55-b2b7-4b3e-bc38-4d969fc13f03", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20efe71d-fcf5-4b51-baaa-e694c9f9a2f9", "sighting_of_ref": "indicator--9ff6f614-7171-4617-bf7b-c588864e1725", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba185fff-5ee3-44ce-bf45-cfef7eebabd2", "sighting_of_ref": "indicator--ebd718a1-f231-42bc-932a-1745321b3a04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ce01d0-9e91-4305-9130-4978a620eb7b", "sighting_of_ref": "indicator--4e5a118b-0930-4caa-b5d0-a8f9d5c5277b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1274c68-6e42-4885-a1b4-238d903f47a0", "sighting_of_ref": "indicator--4b60d629-b51b-4aa5-91e0-0c61d44dd7db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ab7552-dea9-4d9c-bee7-8483c31e253b", "sighting_of_ref": "indicator--3550353f-b113-449f-ae22-202a7face650", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a236b3-cd0a-4c33-9b18-ee8365d1c9a8", "sighting_of_ref": "indicator--d1e65c80-0d08-42c2-9d9f-39fc5dda565d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4195bef-c754-43ec-8d79-7fce19997aa1", "sighting_of_ref": "indicator--d1e65c80-0d08-42c2-9d9f-39fc5dda565d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3894f998-37c2-45c9-8b88-13703bf6cb84", "sighting_of_ref": "indicator--d1e65c80-0d08-42c2-9d9f-39fc5dda565d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc838b5e-44d8-40a8-977c-62d6083db436", "sighting_of_ref": "indicator--4226f00d-940c-4e36-b5f7-33039e191574", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161f7e46-7490-4c94-ac04-0b7430eea88e", "sighting_of_ref": "indicator--4226f00d-940c-4e36-b5f7-33039e191574", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001e1fef-8599-4cb4-9d4b-5c2e5c4341fa", "sighting_of_ref": "indicator--77b4734c-1452-40d5-bba0-e5eb785401bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2f6682-b1fc-4061-ac34-c0a2d362807c", "sighting_of_ref": "indicator--6c8543fb-98e6-4f2d-82b3-0280570bbdc4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dc0dfc-382d-4e50-8e0a-501ddc758df2", "sighting_of_ref": "indicator--a327d824-9c5b-427b-a6c4-05e9394a9c31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7753206d-b26b-4bb1-8d60-d333f96874a3", "sighting_of_ref": "indicator--03cba954-e022-4dc4-b928-5061d3c84a61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c75febd-ddb3-4df7-8805-ab32437cba50", "sighting_of_ref": "indicator--a9c15559-ec94-4bdd-94e3-8b9d592ffb03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c736d8c-68a2-45e9-a4b6-83b1691afee2", "sighting_of_ref": "indicator--2f2fbc54-d275-4b04-a731-7f631195ee2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b822bb05-e260-4498-8c33-24f35100860c", "sighting_of_ref": "indicator--f7a942d0-5a3f-4eba-bf7e-e46a398332d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad71bc2-bf41-4a7e-8fb4-5191e3834468", "sighting_of_ref": "indicator--f7a942d0-5a3f-4eba-bf7e-e46a398332d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9a24b1-4c5d-4980-82b6-4d3e7fa1b27a", "sighting_of_ref": "indicator--f7a942d0-5a3f-4eba-bf7e-e46a398332d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb33c9f-2320-450f-a383-99a27112390d", "sighting_of_ref": "indicator--6e1d0551-4237-4189-a1e0-1c54602f0564", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b0e54a-c393-4639-af72-d2369c89f7a1", "sighting_of_ref": "indicator--6e1d0551-4237-4189-a1e0-1c54602f0564", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e083c1d-5a9e-4fbc-8818-542acb6e1ec1", "sighting_of_ref": "indicator--6e1d0551-4237-4189-a1e0-1c54602f0564", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b9b269-0924-4c09-982c-b986e0875443", "sighting_of_ref": "indicator--22091295-9878-45ba-91a5-8156f3774300", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d761589-da3e-46a8-8fbd-6f4e810303c4", "sighting_of_ref": "indicator--22091295-9878-45ba-91a5-8156f3774300", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f5e1af-c5af-4dd8-960d-52c2c395c148", "sighting_of_ref": "indicator--22091295-9878-45ba-91a5-8156f3774300", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42be979-f3f4-4441-b08f-d698805bea88", "sighting_of_ref": "indicator--43de4300-712d-4117-af3d-cc07abf3336d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3473c1dd-2ea2-47f1-9a53-84561ebe969d", "sighting_of_ref": "indicator--43de4300-712d-4117-af3d-cc07abf3336d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f86f84c-45a3-4795-af07-f55dcaa46b0b", "sighting_of_ref": "indicator--43de4300-712d-4117-af3d-cc07abf3336d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddb567a-ce0d-4005-a8bb-63e6afa13886", "sighting_of_ref": "indicator--ff72137b-cf4b-4d58-a739-d5919f318f7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b764b94-71af-4e51-b118-796156e1ed9a", "sighting_of_ref": "indicator--ff72137b-cf4b-4d58-a739-d5919f318f7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9797d6-41ba-4f4e-a3ed-5c97ad9248d3", "sighting_of_ref": "indicator--ff72137b-cf4b-4d58-a739-d5919f318f7c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b9bc61-dc46-46d3-a302-2c1d2343bbde", "sighting_of_ref": "indicator--c5c93aa4-9cbc-4833-a4df-8a0c7dde1454", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276af5ff-4f23-4f84-ad2a-6e03170c062d", "sighting_of_ref": "indicator--c5c93aa4-9cbc-4833-a4df-8a0c7dde1454", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebabd468-d77e-40f2-beb3-d5e801b86bb4", "sighting_of_ref": "indicator--c5c93aa4-9cbc-4833-a4df-8a0c7dde1454", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb14088f-fdc2-4db8-bee9-65e4fb273457", "sighting_of_ref": "indicator--2618a3cd-0425-41c0-834a-2d35bae70cbc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc04bff4-c224-4387-bbd5-dc39a1165900", "sighting_of_ref": "indicator--2688f0db-9d91-4896-9dbb-cd9a09f4eea7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a42e1a-c122-4b44-b4f6-afafc8f21909", "sighting_of_ref": "indicator--ac73ea68-3865-4fdf-8661-3574959f1de5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89126166-6a60-4ddd-b4b0-7c68b40bbc3c", "sighting_of_ref": "indicator--c4b126f1-96b2-4bbd-9282-b77cec131e79", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc4be87-2705-4535-9bc8-8a6d3f8edbaa", "sighting_of_ref": "indicator--81e86533-788d-4065-8825-d80f9e486d23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f9e1ec-c6d4-4329-a580-0e48e156ae94", "sighting_of_ref": "indicator--81e86533-788d-4065-8825-d80f9e486d23", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bedb21f-2691-44a7-9ecb-c8d1638688e7", "sighting_of_ref": "indicator--81e86533-788d-4065-8825-d80f9e486d23", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16271ab0-efe5-4230-b2aa-a28154962661", "sighting_of_ref": "indicator--0ecc46ce-c2c3-453f-955d-ef9292cb055e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62cd05e-6998-4f5b-80d8-5a662c73b45c", "sighting_of_ref": "indicator--0ecc46ce-c2c3-453f-955d-ef9292cb055e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85a53b4-882c-42be-8052-92eaf17c82ea", "sighting_of_ref": "indicator--0ecc46ce-c2c3-453f-955d-ef9292cb055e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b233d2a5-e80e-4585-9bbe-3bb4c6e99e9e", "sighting_of_ref": "indicator--7727c3ed-65dd-4a53-a964-48ffc0d0f939", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1d282c-c474-4b5b-b748-952972fd538b", "sighting_of_ref": "indicator--04d90630-9439-4e44-aa84-da0018eb29c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a227b02d-c667-4659-8fa4-4cb6c1e3b876", "sighting_of_ref": "indicator--987938c3-3968-4fc8-8ccb-c51188cb8797", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c1c245-5deb-412d-af65-7ed28aa664d7", "sighting_of_ref": "indicator--36632150-c8db-4f4f-89ba-0010fe82fa7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a350da66-c086-41d9-89f1-b9eb78a31af5", "sighting_of_ref": "indicator--fcc33e19-8936-493b-9811-8ea5d174ea17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00225c2f-0c9b-4f21-99fa-268ca7ebb5b8", "sighting_of_ref": "indicator--5514c77d-5011-4331-b0db-e57b76a621d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3978d3-d53c-4c33-9d3d-84c61bd10b62", "sighting_of_ref": "indicator--5514c77d-5011-4331-b0db-e57b76a621d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4358ccbe-ca0f-4712-bff8-d4764a514311", "sighting_of_ref": "indicator--cec509cd-c669-404a-b182-eb6083f37284", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67d2419-307d-4e25-9224-1f18e1aa0987", "sighting_of_ref": "indicator--368e119f-c428-4538-b1b1-a5eff1fe80ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65362843-64c5-4d81-a60e-f79e11700b84", "sighting_of_ref": "indicator--368e119f-c428-4538-b1b1-a5eff1fe80ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d844722-add9-4a39-af30-21a15387b955", "sighting_of_ref": "indicator--368e119f-c428-4538-b1b1-a5eff1fe80ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363c81b1-5f82-4847-b650-490b511d981e", "sighting_of_ref": "indicator--99609bca-bc0f-46a4-b027-f266cef5f722", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccdf1bb-730b-4398-a2ed-23a058087608", "sighting_of_ref": "indicator--b4c25c2d-59ae-4c95-9390-d408259c5b2a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46693da0-3dce-4b66-bb4d-b54966595298", "sighting_of_ref": "indicator--411d4ccf-bb84-4dba-9f45-e71284ceed89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0f883d-2c7b-4eb5-af64-670acb7db164", "sighting_of_ref": "indicator--fb969910-c919-4095-af0e-35aceda87162", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e72ebfc-804a-44a1-817a-c7ce4851fcc3", "sighting_of_ref": "indicator--9e2f6418-5a36-4724-80a5-af73e06de9cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0759dc9a-92bf-495d-8ab8-a669e08d995a", "sighting_of_ref": "indicator--9e2f6418-5a36-4724-80a5-af73e06de9cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b66a7b2-f72b-4e5b-ad2f-65b3fbcfe8cd", "sighting_of_ref": "indicator--c768cb67-e0a0-4629-9568-d0a3c77c9ded", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cd0ed4-f119-419e-a193-6438203398cd", "sighting_of_ref": "indicator--ff75173a-fe5e-44e0-855e-e45f49544bff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d781f84-7676-4065-b271-ee5390f50e43", "sighting_of_ref": "indicator--302e3129-20cb-44fe-b2cf-7597eebf8cbf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec828326-7642-4eb2-adf7-3029e4357d7b", "sighting_of_ref": "indicator--67a0b347-cf6f-4468-a559-0889bb594961", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81118588-1bc5-47b3-b7ba-d99c5d1a55b0", "sighting_of_ref": "indicator--67a0b347-cf6f-4468-a559-0889bb594961", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83440faf-68a0-4f48-8a35-e6929dd22ac9", "sighting_of_ref": "indicator--67a0b347-cf6f-4468-a559-0889bb594961", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0bd6aa-f6d2-43ce-a132-6171573742f5", "sighting_of_ref": "indicator--d86731bd-ab33-442a-9be0-83379d17b490", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2450820-2517-4755-abef-215d80fc0fe6", "sighting_of_ref": "indicator--9f64c142-2346-4a0e-9031-eacc1afa7677", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0561a82a-9ca4-4c40-9455-6ffbb64dca28", "sighting_of_ref": "indicator--9f64c142-2346-4a0e-9031-eacc1afa7677", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e2d221-cff9-43af-b0a3-720c5fcecd3d", "sighting_of_ref": "indicator--f3562284-af68-4d74-8cdf-d61702a9ce94", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67333197-9b1b-4f4c-b689-6765cdf2d334", "sighting_of_ref": "indicator--a4feffda-1f15-438c-b42f-1425d146984e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbedc013-ab73-4fcd-86fd-b899a30078c8", "sighting_of_ref": "indicator--fee9669a-cc08-4377-95ea-c7a0ebe75d69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a60099d-8513-4d75-802e-9361b804c5e0", "sighting_of_ref": "indicator--ba986888-9d25-4c5e-b6ad-410c6d20b8a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a285d4-55ed-4676-8f35-c988f25cf243", "sighting_of_ref": "indicator--7d9e37bd-ae2c-457b-abca-983eac540aa8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6aadc7-0036-4542-98f3-758e1e6cf97f", "sighting_of_ref": "indicator--d5e55cb2-c06a-4293-b18a-c1c99ae8f5ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd0c34b-4797-4ede-9569-1c4b44c4b052", "sighting_of_ref": "indicator--18f7a05e-1b7e-43b8-82f8-a46b31058e91", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d788a99-6a6d-48ec-bab3-91d02b027e37", "sighting_of_ref": "indicator--18f7a05e-1b7e-43b8-82f8-a46b31058e91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c67f972-e9f3-456d-bfb3-6d00db3cadfa", "sighting_of_ref": "indicator--18f7a05e-1b7e-43b8-82f8-a46b31058e91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4aadff-c9a4-42ba-840c-2c752904bf97", "sighting_of_ref": "indicator--aa0644b3-eca2-4d1b-a43f-eae9a4bda0ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9973ed52-3998-4721-8e3d-334998f9a779", "sighting_of_ref": "indicator--a7051157-88b6-4e23-a029-8ec3cacb1bf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3580619b-7cca-434e-9ef1-94d26f809f7b", "sighting_of_ref": "indicator--e45b819f-b80f-46ab-898f-7517abed39ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47201778-8a72-45ab-ae30-84d2fb39c708", "sighting_of_ref": "indicator--e45b819f-b80f-46ab-898f-7517abed39ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035455c2-69d3-4c6e-8fd9-8bf71527c6e1", "sighting_of_ref": "indicator--e45b819f-b80f-46ab-898f-7517abed39ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7cc842-b9a8-46d4-9d04-45a867e74f44", "sighting_of_ref": "indicator--ddea3a7b-3010-4fbc-8bf4-ae9a5c7b1040", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0c4357-30cf-4abb-8b86-de8982f1daa4", "sighting_of_ref": "indicator--d5bbae30-ff01-4451-aadf-71f623112f9c", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f44bd4-4a01-40a5-8730-432bc899c893", "sighting_of_ref": "indicator--d4f0cf84-ffa6-4515-b394-01043ea01949", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3ecaf3-629a-4f83-ae0d-81ac8efc57ff", "sighting_of_ref": "indicator--82ad166f-3316-4b23-aff3-076295f5efff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3362eda3-4d7f-4779-b8a8-9a7f86ed55b3", "sighting_of_ref": "indicator--2b9fcc90-8b29-4ae1-b3c5-0bc09556a3de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0364e39-a1c1-4263-ac2a-a4f1ed04dae5", "sighting_of_ref": "indicator--a740ad2f-7e0d-4662-972e-fffa7db0b0ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d923697d-8ad2-4a00-98f7-501abe8dbb3d", "sighting_of_ref": "indicator--3a1a78d9-f442-49ca-9708-3b5fd5ccbd27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719cb4ac-45b4-471d-9133-0cc1bca28475", "sighting_of_ref": "indicator--57e1a524-f2ed-42dc-a1eb-21f516cc9492", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688c55af-4d79-4de7-9a4b-a3d196e847da", "sighting_of_ref": "indicator--754b7d8c-2d42-487c-971a-480401acd5e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8db0453-ad11-43f5-b186-209ce0388fe1", "sighting_of_ref": "indicator--4f6033bd-13b3-4e53-b1bb-a4b9216f938b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c19e7ac-a909-4d32-9a7a-fdf0d65d2860", "sighting_of_ref": "indicator--e1d2f431-7df3-49c9-8fcf-3f2206fa3b93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f204c7f0-661b-4271-9988-0ecf31bb7a96", "sighting_of_ref": "indicator--8b1b8eff-0e0f-400f-b294-486dd92d2f2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f873f4fc-795a-48e5-95b3-5203d9a172a7", "sighting_of_ref": "indicator--39866365-a031-425e-a2ef-ee52a9c6cfd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad2c2fd-e5df-471b-8aa6-a4c09dfad5cf", "sighting_of_ref": "indicator--649c7639-b621-449c-a5b0-ce1b4659765a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2734b4-374d-47f9-98c1-25cdffaf9176", "sighting_of_ref": "indicator--972c5d0e-55ca-40eb-a7f6-fe38349612dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc91a74-80a8-4b0a-9d50-58f9c127807a", "sighting_of_ref": "indicator--672940b4-90a1-431e-accc-a220eb4c11ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c780866-7967-4da7-a6dc-4bb9d6b0a7c4", "sighting_of_ref": "indicator--ae546e00-9094-4e4f-9c1a-4919516f9711", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01681229-1005-41cd-b321-cd73f50b795f", "sighting_of_ref": "indicator--3fcec6a2-ee80-4754-9564-3862777482bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdbdce7-fb70-45b6-af68-de4efe3d95ef", "sighting_of_ref": "indicator--e63035f1-f36c-40f7-94be-338aa8e97255", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e40ba65-b694-401f-9ce0-c976a20c61d9", "sighting_of_ref": "indicator--043a0e14-2129-4535-9d80-89f0a5b6c157", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa1eb63-dc69-4819-a495-cfcb9307747e", "sighting_of_ref": "indicator--e14882a9-dda9-4623-add4-dba6118602c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f67788-1952-4851-b81f-73e1a0580630", "sighting_of_ref": "indicator--f5c42368-0b1b-444b-8bc1-64476a7583cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a0360f-0800-4891-ad90-204d7b8d8d48", "sighting_of_ref": "indicator--d2261c78-d443-4b5f-92ec-bd8a0b84af8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016178be-3fcf-46ae-bd8c-07081e2f67bb", "sighting_of_ref": "indicator--38eedbf4-2302-4147-9d95-7391eb7f2868", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091bd007-a0ea-48a3-ac23-a32edd7b2657", "sighting_of_ref": "indicator--fee4153e-c3a1-4351-9fbd-8b86efe0b36c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcfe132-e7af-498b-906f-98ee2373366f", "sighting_of_ref": "indicator--7e6d4345-a8af-4c42-be12-f2c0301bb81d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c21096-5afe-497a-a9cb-9a865597d4e8", "sighting_of_ref": "indicator--fe258437-50da-47f3-993c-066d2761e6cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2960e856-fc32-4fa0-b47c-5c2dc58f622e", "sighting_of_ref": "indicator--fa8d7321-8aca-4ad1-b3ee-d0cd426b1b0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f214fe55-4369-4a43-80e9-a32fd75f4b2f", "sighting_of_ref": "indicator--0f1d718e-e3c1-4ad6-b803-c6e593efc573", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca0e12d-cc4b-4a06-943c-62248b1cf604", "sighting_of_ref": "indicator--b2ec78d5-7533-45b4-a98e-aa8376f1e942", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8aa832-f3f0-41f5-9687-1fd5609c1fd9", "sighting_of_ref": "indicator--b2ec78d5-7533-45b4-a98e-aa8376f1e942", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748872d2-f9d5-466a-b0fd-cf38797569e9", "sighting_of_ref": "indicator--b2ec78d5-7533-45b4-a98e-aa8376f1e942", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88646700-bd14-491a-b816-38bca4f6b183", "sighting_of_ref": "indicator--a9d7f7cc-c165-455e-90a4-63add0993a1d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da45ba5-ff49-499c-8e93-7660f777c997", "sighting_of_ref": "indicator--e094a4a2-5737-4194-b590-ac1f0d994d66", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb05de21-1905-4185-8815-a93d3a802056", "sighting_of_ref": "indicator--aeaab3e5-2142-4461-bd30-83fce5db733b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b61097-b9ac-4447-9d65-b586e742d5c6", "sighting_of_ref": "indicator--aeaab3e5-2142-4461-bd30-83fce5db733b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f0d3a1-2d30-41b2-b3d9-c606f90f5d53", "sighting_of_ref": "indicator--aeaab3e5-2142-4461-bd30-83fce5db733b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34198799-bed1-496d-b70b-c39939a56e08", "sighting_of_ref": "indicator--aeaab3e5-2142-4461-bd30-83fce5db733b", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352abf5b-a634-4856-894a-486d1a208050", "sighting_of_ref": "indicator--83d9b23e-be56-4ddf-9689-71f0e0d3adc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74215f78-672b-448d-bdd2-50ca0b53d59d", "sighting_of_ref": "indicator--822b3501-4180-42ed-83cc-408cfd399550", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b67452-cbe5-4d96-b99c-84b1b2474aad", "sighting_of_ref": "indicator--822b3501-4180-42ed-83cc-408cfd399550", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e156d5-9077-4d0e-a110-dd20038cb3e6", "sighting_of_ref": "indicator--299c258d-a7c5-4f57-9961-8927e98fa001", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e337ea7-6176-4b4f-9ea1-942b9f733fc8", "sighting_of_ref": "indicator--0c91c750-9400-4261-b4a0-aadb11253ce1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bcf439-2384-4048-bd81-4be8a0818c17", "sighting_of_ref": "indicator--374eed78-f801-48cd-8ecb-efabf1876583", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3e837e-8fd5-4295-85fd-aa7845385cf1", "sighting_of_ref": "indicator--f562488d-2a86-42c3-8e21-c4394a286e19", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0e691c-777b-492d-aa98-3cfe039cfc0c", "sighting_of_ref": "indicator--dec9ceed-0cda-4a6b-b165-f0460da40f8b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec12bae9-dea1-4916-9f31-b8e4bf30b0f9", "sighting_of_ref": "indicator--1a371af4-2fe8-4383-af1f-3a9b27a60a3a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab824393-873f-4ee2-a369-8dea1cdebadb", "sighting_of_ref": "indicator--1a371af4-2fe8-4383-af1f-3a9b27a60a3a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fcfdc1-3336-4433-9a44-590e71608842", "sighting_of_ref": "indicator--11ebb83c-cbab-4c5b-9ab8-227368385e4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569a7794-6c96-4af3-b0b4-1b0d8d813aef", "sighting_of_ref": "indicator--cd631c8b-2408-4419-8a2d-74880ea4b015", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4abb17a-4623-44f9-a6ff-4b8125515bae", "sighting_of_ref": "indicator--0f0e6d1d-0ce1-4bb7-807b-343aa9271e80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7162fa-2f21-44e2-990f-e858b1abf651", "sighting_of_ref": "indicator--25116d2e-da33-447d-a72f-30bf9631e699", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733000cc-38e7-446c-b61e-cb4f33934d58", "sighting_of_ref": "indicator--5fbfaabe-3271-451a-b13e-e16a78c32aaf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7fcf93-202c-4ddd-8405-99c36b7c514b", "sighting_of_ref": "indicator--1f9ef763-8375-42c1-b4e2-b73ed146b84c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2cf02c-70c8-4625-a7ed-8cae981ddf00", "sighting_of_ref": "indicator--1f9ef763-8375-42c1-b4e2-b73ed146b84c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ec1da9-b974-4a57-8853-d337e8de8190", "sighting_of_ref": "indicator--57b56c68-285b-4246-ad37-9b0909966691", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2b01ac-d981-4421-97c8-8aeffd4d5aea", "sighting_of_ref": "indicator--89a56189-633e-491e-836f-f96206c47859", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ca0d4b-2c31-4e0d-9759-46b6ac515fc9", "sighting_of_ref": "indicator--1565cea5-bd53-4b41-a0c6-a65053d04d9e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54df0bf9-6b7f-41dc-a18e-f949990ede00", "sighting_of_ref": "indicator--f890ac10-1265-4fb8-9027-fdec443e0ad8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d200fc-1606-4770-aab0-c19c926f57a5", "sighting_of_ref": "indicator--a16f1fce-8db4-4868-9342-1f664a074e64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5a6bd3-5a17-4f94-bafa-44661c6d6c03", "sighting_of_ref": "indicator--a16f1fce-8db4-4868-9342-1f664a074e64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38263969-615c-4393-be44-73e357ce90ae", "sighting_of_ref": "indicator--93ab19dd-d893-4b69-be75-5005bebece55", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33561ed7-3bf5-42cd-ae72-dc273ef564ef", "sighting_of_ref": "indicator--ecc2810b-efdb-4aab-bff5-d590fbcc8aff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de42ab23-2c92-4a06-99fa-d00bb73b6ccc", "sighting_of_ref": "indicator--b2cd471d-7851-4114-9d46-8be5d459f504", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e1ffd9-e117-43c4-b431-48b1abfefe38", "sighting_of_ref": "indicator--d4edbccc-d0a0-4aea-82a9-fe85fd5a30d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c16680-5efc-4432-a813-a4a74eb3f128", "sighting_of_ref": "indicator--97276cda-2035-44df-b13b-01a035316b1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafcfbb6-9715-469a-aec8-cd106b5b30e9", "sighting_of_ref": "indicator--97276cda-2035-44df-b13b-01a035316b1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2a1f41-8e35-483b-be8e-de4ba82efffc", "sighting_of_ref": "indicator--52bfa155-bbac-490e-aae6-80fa2aac47f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d6e585-bd47-4d3f-ad3d-26a4062f5d35", "sighting_of_ref": "indicator--f39d2877-62bd-4c3e-bcd8-c4d633c3dd1f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caff565e-42b7-4acf-9dbd-eeb5c4d42a76", "sighting_of_ref": "indicator--3a5c687b-7da4-4bbc-aacb-7da777c78206", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5a4a70-1f64-41e6-b19d-c95c21e76280", "sighting_of_ref": "indicator--7516bbfa-5216-4525-a50b-bd73c64dd6f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d8c8a2-1205-4e81-84ce-4e503732f308", "sighting_of_ref": "indicator--7516bbfa-5216-4525-a50b-bd73c64dd6f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab74926-d3ef-4f1c-b45d-4a26e849d810", "sighting_of_ref": "indicator--303c8dc7-6a93-461e-96d9-348ce926cd52", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd324ef1-36ce-436e-9b24-ef4e6776e9ee", "sighting_of_ref": "indicator--8db5d74c-052b-4a41-a45a-b82c19b400d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bbffc2-09d0-421b-9d28-6395be1fd24a", "sighting_of_ref": "indicator--c623c4b1-7474-423b-9933-c0a9502041f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1160d14-a52d-4c21-9957-2c7d42d945cf", "sighting_of_ref": "indicator--8233e64f-75c8-4681-92b5-fdaaab3d2f8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe4a861-b5bc-4583-9469-bd66e06bacb5", "sighting_of_ref": "indicator--5f18ef9b-2c15-4729-9ed2-f7e8b6f2b89c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e89a89-c89b-4c7b-abd6-4fb44e55a899", "sighting_of_ref": "indicator--5f18ef9b-2c15-4729-9ed2-f7e8b6f2b89c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b40f3c-fbcb-4a75-87ba-41593825e0d4", "sighting_of_ref": "indicator--68588bc8-a4e7-4c11-8b06-58a54be52716", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499d7cf3-f105-4bfb-b380-e4cded6208b4", "sighting_of_ref": "indicator--68588bc8-a4e7-4c11-8b06-58a54be52716", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea65870b-b7f9-46ae-94c0-301e53dd6598", "sighting_of_ref": "indicator--ca5a8cf6-7f4f-4d44-960f-8e8fd8cb7631", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502f8196-1b29-4c9a-8d57-e9e19e85b2f3", "sighting_of_ref": "indicator--ab5b5faf-a553-4e56-b472-6e0fecc641bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98e1ddd-2559-4e10-9c00-8ac95b8ac252", "sighting_of_ref": "indicator--4f9a79e4-62df-4a00-8af7-bc41ee600b6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba45113c-1650-43a9-806e-ace760b842f0", "sighting_of_ref": "indicator--94ca8081-e477-4b78-b06f-9016e8bee1a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23706339-288f-414f-ab10-422a1cd3ad22", "sighting_of_ref": "indicator--47acf0eb-17da-4c00-87b8-be54a5bce00c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f871ee9-1c72-4f63-9fda-0041bf167a69", "sighting_of_ref": "indicator--47acf0eb-17da-4c00-87b8-be54a5bce00c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3248cfd2-ae5f-4d7c-a389-9d8864adc0f2", "sighting_of_ref": "indicator--eb88be3c-b760-4345-b9aa-5677881546f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e49706-6fe8-47c2-84bd-5c519a30b20d", "sighting_of_ref": "indicator--a5941505-855e-47e6-a181-81220903a605", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e377bc-0eb9-4550-9bc2-bf1143d889d1", "sighting_of_ref": "indicator--d01cfbd0-429d-4173-a010-365ed6c838d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead1f3d2-119e-431f-8057-244d52dea14d", "sighting_of_ref": "indicator--d01cfbd0-429d-4173-a010-365ed6c838d2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8386750e-69a4-4a5f-b3aa-b2579ee4a33a", "sighting_of_ref": "indicator--d01cfbd0-429d-4173-a010-365ed6c838d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb73d14-25d2-4bd0-b9e1-4c1f19ec370a", "sighting_of_ref": "indicator--0b356bda-1d03-4e28-8685-16add6ecba53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec46541-a5f3-4276-8bee-f0fdf4ad7f90", "sighting_of_ref": "indicator--94949e2b-cce4-45f5-b07f-e3cac27a5f82", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75cf858-7262-4f08-8d46-2277d329ad9a", "sighting_of_ref": "indicator--94949e2b-cce4-45f5-b07f-e3cac27a5f82", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3343fd45-312e-4e7b-af77-1d797f13a19c", "sighting_of_ref": "indicator--94949e2b-cce4-45f5-b07f-e3cac27a5f82", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9193cc17-fd3c-49d4-8951-660a5a8e0105", "sighting_of_ref": "indicator--3f20c013-1659-4b78-a150-b9e411661404", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ca9615-aa85-458d-afb5-d309d6b70e8d", "sighting_of_ref": "indicator--2bf56184-213e-446d-a534-e99270c492dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a0e70b-73ef-48ea-a3e6-733d6697d115", "sighting_of_ref": "indicator--2bf56184-213e-446d-a534-e99270c492dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b45cc52-fb7e-48c0-97f4-a632eba4e5f2", "sighting_of_ref": "indicator--2bf56184-213e-446d-a534-e99270c492dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3c767c-d3eb-437a-8211-824fd50d0d58", "sighting_of_ref": "indicator--981b6cc4-5792-4ecc-8570-9230aadecd2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1b499f-4ea1-4d3a-9c76-7f3d79e81e88", "sighting_of_ref": "indicator--981b6cc4-5792-4ecc-8570-9230aadecd2f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d909c4-b352-494f-935d-c3ac1594b9cd", "sighting_of_ref": "indicator--d2078237-d4d5-4135-95ce-ad4ae6ff7bf9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dda873-83e8-4f50-93ab-150cc01b7c7b", "sighting_of_ref": "indicator--bda76424-d7da-45b3-a9bd-ed1a426113d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6db4b78-6f43-443f-9abc-5f7a4761f78e", "sighting_of_ref": "indicator--cd2ae292-2bbd-4ffe-af0c-48e006b39443", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36ec470-cf01-4ed6-87cc-01c644aed06f", "sighting_of_ref": "indicator--cd2ae292-2bbd-4ffe-af0c-48e006b39443", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4c6546-7332-4228-a9b2-b98fe756abad", "sighting_of_ref": "indicator--cd2ae292-2bbd-4ffe-af0c-48e006b39443", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e8da88-b43f-4428-9fcf-ebf6004deb02", "sighting_of_ref": "indicator--4033a669-f592-4919-8249-8f907ead08dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b2579a-5abb-40f4-b5b7-638919ddad7c", "sighting_of_ref": "indicator--19017187-e632-4ede-b5d6-b63e04d2d99d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b34a644-7fa9-4fc7-90b9-39d99af82d0a", "sighting_of_ref": "indicator--d9b0161e-01a3-45a2-9bf7-29596c844a5c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfc5713-0a30-4862-b397-e869bf9c1888", "sighting_of_ref": "indicator--56aebfca-b1a5-4d4b-b847-aa49a6a0f848", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a151fd3-22c5-4cde-aba1-41aa61eaaadd", "sighting_of_ref": "indicator--56aebfca-b1a5-4d4b-b847-aa49a6a0f848", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bdfad0-0da3-410e-b5d0-029b0c161bf2", "sighting_of_ref": "indicator--cc4b29f9-ed19-4b17-85ed-1121d9d90dc9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76a4fd8-eed1-41f2-8637-0054f6fedee7", "sighting_of_ref": "indicator--cc4b29f9-ed19-4b17-85ed-1121d9d90dc9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f21e76-a0f2-4b47-88d3-9e86eeb9c32c", "sighting_of_ref": "indicator--cc4b29f9-ed19-4b17-85ed-1121d9d90dc9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e58cac7-443a-4d4e-9d69-20903e4b5ac1", "sighting_of_ref": "indicator--f5e52a1c-75d7-4f97-8127-3342b67f6941", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c99a45c-778b-462e-b687-28916b1e12ad", "sighting_of_ref": "indicator--f5e52a1c-75d7-4f97-8127-3342b67f6941", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4611acd-087e-4dee-be7a-28cbdc922ee3", "sighting_of_ref": "indicator--32bf9b87-ad0b-4398-ad28-0bed113a4447", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f302c611-59f3-4e8c-bca6-832ec9b8cfc5", "sighting_of_ref": "indicator--79515316-4f24-48d5-8dbe-3d008bdff942", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0dd3ff-a335-4747-8b3f-9f14a41cde05", "sighting_of_ref": "indicator--79515316-4f24-48d5-8dbe-3d008bdff942", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56946b36-fb1b-4365-904f-4d46f4719d56", "sighting_of_ref": "indicator--79515316-4f24-48d5-8dbe-3d008bdff942", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d1fb7a-ceaa-408f-a392-adb272368b65", "sighting_of_ref": "indicator--040bec9e-ed5a-419c-a821-73f0f0727547", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6bf8da-fa72-4165-8b49-fb0de7e32536", "sighting_of_ref": "indicator--040bec9e-ed5a-419c-a821-73f0f0727547", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dc0d34-988d-4674-8751-384d45b542e8", "sighting_of_ref": "indicator--040bec9e-ed5a-419c-a821-73f0f0727547", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6151832-5af1-495d-9ddb-e7c0c1df7439", "sighting_of_ref": "indicator--be70df81-70d7-4dd1-815a-ce7867640121", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6442ac2b-bff7-45c3-a41d-c765c7fac722", "sighting_of_ref": "indicator--2cfecdbc-3380-40c2-82a1-8b78b4661ed9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f64026-8fe5-4612-85ce-42f0d55b45c6", "sighting_of_ref": "indicator--a2afec4e-da16-400f-be1c-80a017b0c26e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4857a6b0-e200-4e70-8688-b62700a9f666", "sighting_of_ref": "indicator--a2afec4e-da16-400f-be1c-80a017b0c26e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8b9b1a-b2a3-4bcf-8c20-e27950f7ed10", "sighting_of_ref": "indicator--a2afec4e-da16-400f-be1c-80a017b0c26e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb2b01-83c3-4533-af7f-970b10980c67", "sighting_of_ref": "indicator--314b7cae-3ff4-457d-b6a9-10239cd9915d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9e051a-cdc9-4272-981f-c39060f755f3", "sighting_of_ref": "indicator--31c75baf-3ad2-4094-a033-6cd7456b1c5c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c07833-c06f-4a75-b0d5-f694ec792cc0", "sighting_of_ref": "indicator--2b0760ba-ee22-42e8-8089-da77cc933530", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d602449-2e34-49a2-be40-8c5e931945dd", "sighting_of_ref": "indicator--2b0760ba-ee22-42e8-8089-da77cc933530", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed94caa-25cc-45a9-ba17-590d79d94f64", "sighting_of_ref": "indicator--fcd2a815-869e-4fff-91d7-22f5eb078fcb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3e4ffb-f917-4d14-af94-2821e6ea66c2", "sighting_of_ref": "indicator--fcd2a815-869e-4fff-91d7-22f5eb078fcb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087230ba-e6e6-44c4-8f8a-73cfc4883c23", "sighting_of_ref": "indicator--2b94c263-ca1b-4a7c-be2c-e5c718120635", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab4abd2-d56e-4bc0-a240-2bf0d0408f03", "sighting_of_ref": "indicator--70b11261-da22-466d-ac4d-3aced99bf0c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2dbb44-8f16-4d55-91e2-ad1838d404d9", "sighting_of_ref": "indicator--b7795cc4-5659-4afa-8639-790a57d1a5da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebe7481-bf7b-4348-862a-b562c2a9cbc0", "sighting_of_ref": "indicator--379d2215-a384-401a-97a3-058f41d0143d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf2c3e1-a9de-49d6-a562-183563cbce22", "sighting_of_ref": "indicator--49ced253-6446-4d96-b8d8-9caeee74ff8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d31808-3a7c-41d0-9d89-98aef69f9e2f", "sighting_of_ref": "indicator--9b330fc5-72da-453f-98bf-50e433598d02", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2af74a1-e793-4259-8c13-cb3d82250c48", "sighting_of_ref": "indicator--93608522-2f58-47de-a9e2-ea2949f067af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eee50a-66a0-47ed-8370-8047bc034bdf", "sighting_of_ref": "indicator--4da95945-3b96-4c25-9da9-6e90ed810253", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810a7eb3-64d1-4815-8d73-1a7028fbb343", "sighting_of_ref": "indicator--a94d5924-b802-41b4-bbff-a0cbde2f181c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aefe750-1a68-42dd-aa04-796667f39591", "sighting_of_ref": "indicator--a94d5924-b802-41b4-bbff-a0cbde2f181c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f010b8be-a799-4cdf-a130-0dded8ec7d3c", "sighting_of_ref": "indicator--517022a5-dba7-40bb-974b-a3d573a8937d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e17776-e1d5-4f30-abf0-e9805edec731", "sighting_of_ref": "indicator--517022a5-dba7-40bb-974b-a3d573a8937d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad3a965-713e-4276-baee-c1a685f395f1", "sighting_of_ref": "indicator--517022a5-dba7-40bb-974b-a3d573a8937d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3626191e-9cc0-400c-82d7-0afcc19d1c4d", "sighting_of_ref": "indicator--efb7605d-0f8f-4fbc-b89c-33792bb8aee8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645a08c6-8b80-42b7-9296-c79fe71b500e", "sighting_of_ref": "indicator--c8c1bb2a-1218-4243-9cf9-0ed29a7313fb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f3c104-20a8-482e-bf08-b2d895adbe18", "sighting_of_ref": "indicator--e95ec99f-7496-4b9f-86eb-73a81b16a9f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7ca270-5c1f-4339-8d77-a90d1c0a16d4", "sighting_of_ref": "indicator--e95ec99f-7496-4b9f-86eb-73a81b16a9f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf51516-8c96-4fad-9584-3b4841c0f24d", "sighting_of_ref": "indicator--e95ec99f-7496-4b9f-86eb-73a81b16a9f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c9b494-f640-4065-95d7-a2d9aaa92bd7", "sighting_of_ref": "indicator--f9b8a8f7-1988-471a-be8a-65416a59ff42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c48a9e-8368-4071-9c5d-0e10fd0c83ed", "sighting_of_ref": "indicator--14fd160a-5f15-4414-ade5-b46627accd86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680e213a-78f8-4265-afd7-7871e84f4a3b", "sighting_of_ref": "indicator--14fd160a-5f15-4414-ade5-b46627accd86", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee5aeac-3edf-41cf-ab39-76bc586dc711", "sighting_of_ref": "indicator--f2be48fb-80d4-4a43-9343-0685d025b219", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290e50a1-1adb-45d0-9d45-c0a6d59e00a2", "sighting_of_ref": "indicator--f49aa7dc-9d76-474c-99ec-39933d13e0b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879886af-edc6-45e0-b4d9-c5ec6416042a", "sighting_of_ref": "indicator--f49aa7dc-9d76-474c-99ec-39933d13e0b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b2da2b-effd-4eb2-bba7-a38db72a245a", "sighting_of_ref": "indicator--95c3f1cd-41ad-4f10-ad13-27676503d3a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ff7a51-933b-486d-b73a-a0d438ec3a91", "sighting_of_ref": "indicator--95c3f1cd-41ad-4f10-ad13-27676503d3a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a59b52-cc43-4c8e-8c23-d94dc78b0202", "sighting_of_ref": "indicator--95c3f1cd-41ad-4f10-ad13-27676503d3a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eada9b6-1c0a-4f24-9d06-03a14f7a98b4", "sighting_of_ref": "indicator--2e8bac6b-29bc-4c74-ac4f-0cf3ba3125a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd97c459-932f-40fd-8ac9-514ac487ed05", "sighting_of_ref": "indicator--5bc3f58d-de2f-479a-8b8b-898aa9f55300", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0341dd4f-26b9-404e-a663-707f0978bd4f", "sighting_of_ref": "indicator--a3df88b3-95f0-4b7a-a1e1-42f86bc3f8a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b9bb54-3c9c-4fad-96c7-e44695c8d658", "sighting_of_ref": "indicator--a3df88b3-95f0-4b7a-a1e1-42f86bc3f8a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016a51f6-c6a5-4a3e-92e1-d53069e121b1", "sighting_of_ref": "indicator--fd96a9ab-9fcd-4ba0-b799-5f5aa90aa63a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae3d16-395f-4d1d-b2ed-54765b3ab7ae", "sighting_of_ref": "indicator--9953e47e-153e-49ab-9995-2193ebb23381", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772023f5-7740-403c-9ee5-e749366b961c", "sighting_of_ref": "indicator--9953e47e-153e-49ab-9995-2193ebb23381", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1080b0ce-b0bb-434d-846c-f316e0a10f93", "sighting_of_ref": "indicator--3dd8ea04-7918-4e38-b45d-f7ce94716dc3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4ce984-bfc6-4ff8-a80c-1705932011a3", "sighting_of_ref": "indicator--da42162b-b522-4d45-b356-8b0abbd928bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e723375-b8b5-48a2-bd3b-9d25bb9ac9f7", "sighting_of_ref": "indicator--96b3d8bf-8a88-4db8-a83e-99d5130657f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22e79f1-2427-4609-81f6-e7194fdfb043", "sighting_of_ref": "indicator--30609a63-3b69-4d40-ac85-d3c8a7edb6f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a219188b-dc64-45fc-b19c-b73382f6fe30", "sighting_of_ref": "indicator--30609a63-3b69-4d40-ac85-d3c8a7edb6f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc20d2d9-ef4f-495c-81ef-dc3d53ef9f65", "sighting_of_ref": "indicator--30609a63-3b69-4d40-ac85-d3c8a7edb6f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655f6a8e-bdaf-44d4-970a-b7175347d853", "sighting_of_ref": "indicator--93c4da6e-c5c4-4867-bf3b-5575a2ef12a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9db391-1e8e-41f4-96ab-a6d66e4d23e8", "sighting_of_ref": "indicator--ad763668-c090-4eb6-b782-015d9a061bbe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228db6d6-7a47-41dd-ab69-f750ef41c373", "sighting_of_ref": "indicator--02ac8323-5a99-47c4-ad63-31df53601238", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36c9098-1842-40e7-8aee-884d79a34995", "sighting_of_ref": "indicator--f5c42d64-6cac-4659-aaf5-ef7e60a14841", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bd7b70-0f8a-40be-9d21-8d1693814cc2", "sighting_of_ref": "indicator--a6ec162b-b114-47e2-a016-1445029a1b90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710f9086-b3d8-4ed2-a78f-490a9e122caa", "sighting_of_ref": "indicator--421f2582-09a0-40f8-9b93-28a203fd2c4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e12f0e-abeb-40eb-99be-296125007242", "sighting_of_ref": "indicator--490e0bb5-0611-4689-93db-a45543d8a363", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cc9bb7-6a4d-4358-b08f-d325d2e9f2c4", "sighting_of_ref": "indicator--b256cfc7-3eec-41ab-9e70-5f00d87c21d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f93d22d-24ca-4506-bd8e-373bcd16aa0b", "sighting_of_ref": "indicator--9566716f-4f78-44f0-8bdf-fb7f74076964", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb931460-08c7-49e1-acb5-c99281f148cb", "sighting_of_ref": "indicator--1ec70576-565d-4e33-a317-8d4ff5adc3ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e6cf2b-9c9e-46cd-8b2f-a20d9af411c1", "sighting_of_ref": "indicator--26db65cd-38e2-4d37-8ed6-498382b33f30", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8c01e9-c4db-434c-94a6-ca907626a2cb", "sighting_of_ref": "indicator--738c5079-0411-4f86-aa47-b36c8a17c0da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83054d83-33e9-44e3-96f5-fb4c3de4aba5", "sighting_of_ref": "indicator--738c5079-0411-4f86-aa47-b36c8a17c0da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1decb6f6-754a-446c-b72e-611ce186bf9e", "sighting_of_ref": "indicator--dea7c783-522a-4adf-a8fa-3b565ff39c00", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe264e91-6e1c-45e3-8ce5-aea50f14167d", "sighting_of_ref": "indicator--dea7c783-522a-4adf-a8fa-3b565ff39c00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bb0496-e85c-4b0a-bd27-b6636931e2c1", "sighting_of_ref": "indicator--dea7c783-522a-4adf-a8fa-3b565ff39c00", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c283cd20-557d-49ac-9c13-beed895add86", "sighting_of_ref": "indicator--de836d18-b5fa-4bca-a4e3-ca779be5b7a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b19e0d-f8c4-47f5-8c9e-e39604bf08b0", "sighting_of_ref": "indicator--de836d18-b5fa-4bca-a4e3-ca779be5b7a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e076ee-da47-43c4-b51e-7a0d4cf6e2ed", "sighting_of_ref": "indicator--de836d18-b5fa-4bca-a4e3-ca779be5b7a6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35417a22-ea23-47a0-b6df-9e21e1cebdb8", "sighting_of_ref": "indicator--e568634e-2af1-4433-8563-aad0a4b6ef79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e529550d-1a5e-4815-b809-063ecc83a376", "sighting_of_ref": "indicator--e568634e-2af1-4433-8563-aad0a4b6ef79", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156f5433-9c3c-40db-926a-705d1b4fce05", "sighting_of_ref": "indicator--ff339f0d-4f5f-4678-8626-705390f80ecd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3964d036-5e52-4325-beef-f44bafa9debe", "sighting_of_ref": "indicator--cfd0e1c7-90ac-4c3c-940f-9b39c4d527f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd097b53-6e78-4b23-b370-6841dc79da78", "sighting_of_ref": "indicator--4c89cb99-d275-4ec7-bb9f-b65c763a8334", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eed268c-dff7-45bb-8b0b-b679342910b1", "sighting_of_ref": "indicator--f782c5f8-df0f-4be0-8437-5a3a2b74cb11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb38a0d6-b109-43e5-8f57-fbd98444a6a5", "sighting_of_ref": "indicator--6697acc8-c354-4d1b-b741-2c12d771bb64", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edad3986-8992-4b1f-bda4-a4bcda44b8f5", "sighting_of_ref": "indicator--fa1902b6-182b-4b42-a7f7-4ba3825660ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41227c94-e405-438a-ba8b-2e75096397d1", "sighting_of_ref": "indicator--b744da65-2348-4620-b667-b458a538bbfa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91a818f-14dc-42dc-acb3-f2719cf154c7", "sighting_of_ref": "indicator--b744da65-2348-4620-b667-b458a538bbfa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b69379-852e-4fd8-9047-4acce9e0924f", "sighting_of_ref": "indicator--e93b8fb3-98f1-4461-b1bf-d96f5eb971a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f7e8ac-1f9e-4d52-a401-20e73df4adb9", "sighting_of_ref": "indicator--08bbc496-a5c5-477b-a3ca-c708781a2287", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dc58d5-572e-4282-833a-2c89a0d11cb5", "sighting_of_ref": "indicator--e52a201d-26ab-4484-9a34-94a6a038dd86", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb2e2ad-ad7b-416a-993e-c473004b7005", "sighting_of_ref": "indicator--889817d5-a199-4431-b2d0-4ea9c38ed1c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49f9a6d-14a8-40f8-ae1a-b1ad3bd292f5", "sighting_of_ref": "indicator--a8ff8424-7584-4257-b1c1-9552a2c7b4cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d107a24f-464f-406d-b375-9c352a348551", "sighting_of_ref": "indicator--35464d94-fd92-4802-b6f0-94d31631446f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b77332-6f9b-41c0-8472-79a0e9b208a0", "sighting_of_ref": "indicator--3e7f74f5-705e-4e52-bec8-f1c01fc5bd31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28de343-7012-4231-8e9d-a190c91e17a0", "sighting_of_ref": "indicator--b5920279-f23e-45cf-b817-a7879f3d62bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffbeadf-5eed-4723-a5bc-9ea27fc36096", "sighting_of_ref": "indicator--08839cf4-0277-4991-9544-14abba776faa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa255873-71e0-47e2-a123-2ad87886b0bf", "sighting_of_ref": "indicator--39600432-8e27-4c76-9981-8c13f7477984", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aff122-123a-452d-a3f2-6ba13590e268", "sighting_of_ref": "indicator--f2f1fc87-6c65-417b-9e19-c569675c2275", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f8b6c4-a6bd-4523-9fd8-aede2505bb58", "sighting_of_ref": "indicator--68968f49-645b-4394-90be-420c4de8e396", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b75ffb8-d2f3-4179-a264-211faddc23fb", "sighting_of_ref": "indicator--79c5a2c6-ff73-4227-932c-b9b0e5edac32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69721549-6a45-47a9-9e0a-27fdc19b60bb", "sighting_of_ref": "indicator--196321cd-3c31-4f7f-ad9c-23afc0acf8d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96bdb14-e531-4cd0-9f4c-fedaa172060d", "sighting_of_ref": "indicator--3ecb871b-442b-4b09-b7b1-47b8bc6a9eaa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd46a7f7-5d7d-492a-93fc-ea280199ac5e", "sighting_of_ref": "indicator--40113ac5-0673-445b-81b1-435e44ccdf23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec3e5ad-2896-4bd4-a982-42f6fc0ec81a", "sighting_of_ref": "indicator--e78ec1fd-f09b-4928-b7c4-e520a86594aa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b00e0bd-bae2-4b2c-90be-4a07d810ddc4", "sighting_of_ref": "indicator--29ab4f40-23dd-4c86-9418-73401e092929", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a05683-6b5c-4ebd-9db7-1e6eba940882", "sighting_of_ref": "indicator--80093019-fdbb-48a2-bcaf-f4ca89f71784", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ca0c3a-830e-484e-81e1-bd8f8b052e1b", "sighting_of_ref": "indicator--7d1caf38-830e-47c0-a3ad-f83fc2504fb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad267e7-0f66-4830-b1d1-1360c13e111c", "sighting_of_ref": "indicator--1d97b3a4-1ce4-45a5-83b9-683a161f83df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b654e84-0c90-46c5-a423-1aa90442f9ae", "sighting_of_ref": "indicator--4b949e0f-05b7-4843-90a5-b56a769114a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26de64e-54f1-4c8e-a7a7-8b4deb5071f6", "sighting_of_ref": "indicator--4b949e0f-05b7-4843-90a5-b56a769114a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e8e0a8-51ca-4b59-af22-51d121a25474", "sighting_of_ref": "indicator--9b545a02-373d-49ed-99a3-3d39a7996c0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ed0bcb-b10e-46cd-96fe-29fed9f320e7", "sighting_of_ref": "indicator--33a5c93a-df48-486e-a2f0-341faddf9483", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c19d44c-d5bc-44f1-916e-e0dc62141dee", "sighting_of_ref": "indicator--b06fa7e4-8fef-4a3d-b648-54c757eee8af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710786c9-7090-4eab-8375-700e77514681", "sighting_of_ref": "indicator--1ae6b554-9b6b-4dac-9a6f-0faf65f1fa8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e8f471-d712-413a-899a-2a89da5b0e10", "sighting_of_ref": "indicator--6b369994-8ac9-4ea8-9ff4-ac922198a1be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e75df9c-dead-4194-b62a-4b9ec2fb0654", "sighting_of_ref": "indicator--16377d34-f4f5-4e1d-abdd-9a13e5bd4c1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e2948b-4c13-49e6-aabe-e53d0b19c85a", "sighting_of_ref": "indicator--4fea4d6e-7c7e-4df3-83e9-c333fd8e8c1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f53fe9-dd17-4c6d-92fa-7f428248efb1", "sighting_of_ref": "indicator--96687bf3-098c-41bf-9b21-512a54860aa1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c423eab1-5f96-4fe0-bcd4-8a7beb8131b7", "sighting_of_ref": "indicator--aee5293e-16d6-43dd-80e5-49c58e2edf7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25eaeb30-62df-4a79-b999-df578d0c7175", "sighting_of_ref": "indicator--4a4085c0-76d2-4617-b832-3ac2183fe97f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac108195-4e86-4801-9a33-ed5e6e672437", "sighting_of_ref": "indicator--e1652a41-1d1c-402d-a8d1-294e4aac30a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e9ecb7-ce3d-45f7-bc63-ef5e92c8a4d4", "sighting_of_ref": "indicator--5e94886c-4be0-4c51-80c7-a12bd2d132f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb92677-513c-401a-a30e-0691d32ade25", "sighting_of_ref": "indicator--d973600c-8e04-4637-94b4-d232b5faf0a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f506b94-8819-4411-90ea-821244e65097", "sighting_of_ref": "indicator--c16d6cac-71fe-4665-a756-2ef7a9fffc3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de8940c-d5c1-4e88-8860-81fb074534d6", "sighting_of_ref": "indicator--b94e742f-849e-4f20-9e6e-1b4026232538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe442f78-c992-4bfd-8ab6-a2b35ef287e7", "sighting_of_ref": "indicator--b7013c6d-2d0b-41bd-aaac-e0bf43c545d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b889d798-4040-4bb3-86c3-1011d3624639", "sighting_of_ref": "indicator--67c75899-cbbc-44e4-8980-6d5a6f68a901", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7a109f-a524-45ed-aff6-91ec66610f0a", "sighting_of_ref": "indicator--ce64eb55-9eb3-425b-a254-f68c408655c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadf2a06-357c-4c4f-bf3c-72e8d35dbaa1", "sighting_of_ref": "indicator--dbf64efc-4208-4ebb-adf8-839db4451891", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b0babd-ad5d-42bf-b0fe-8a55d0c2045f", "sighting_of_ref": "indicator--7b1456a4-24a0-4e6a-baae-e5a20737501f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddbfdc1-594d-40f2-993a-76d6d8d8a443", "sighting_of_ref": "indicator--23037f69-0c18-4cc3-aea1-3593dd0ac138", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406d27aa-4e11-4456-91b0-243d2d87167c", "sighting_of_ref": "indicator--ff5fb57f-1235-46e1-8307-91425031740d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db522db-68c3-429e-bc7f-5685d6677d63", "sighting_of_ref": "indicator--ff114dd8-4d57-47b9-bca5-929a0b1bdf7c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e07c907-4fc0-4dbc-8080-83c6777edae7", "sighting_of_ref": "indicator--42dd5edb-3251-4de7-8e96-6c2cbd750cbb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc30d45-3fac-4931-afcd-08d5fe13f074", "sighting_of_ref": "indicator--fc148b3f-3454-47b1-b0de-99d433f1c8c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3df9dd-c862-4f84-a15d-51bacf35b95a", "sighting_of_ref": "indicator--c77ca211-3760-4947-8c1d-e76a239f29ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb50d6c-ad8c-4eb0-a3c2-8ee054e6b3c3", "sighting_of_ref": "indicator--c77ca211-3760-4947-8c1d-e76a239f29ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1ff08b-b3f4-4786-8e17-982d075156b4", "sighting_of_ref": "indicator--7d5a50c4-2fd1-4bec-91eb-835da2c2fdc9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08039640-264e-4727-8d4e-e9a59271152f", "sighting_of_ref": "indicator--7d5a50c4-2fd1-4bec-91eb-835da2c2fdc9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8197b4-3879-40b6-9ae0-084fc72d2182", "sighting_of_ref": "indicator--37374050-c206-44f9-b890-4bdebf4d673b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b911696e-90ae-49e8-b19e-6424f3834c6c", "sighting_of_ref": "indicator--6f03b35a-40bb-4698-b7fe-e53603db53f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8731f95-6103-4ef7-9761-4f5f35aab6c2", "sighting_of_ref": "indicator--ea5784f8-bd13-44bc-ba65-4cf4c93f73ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9721d455-afa6-4e11-a8ea-2cabd80b43b8", "sighting_of_ref": "indicator--81873506-8e10-4bf3-8601-79a152272e69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb3805f-0343-4bdf-beb7-8a2db9342a37", "sighting_of_ref": "indicator--0799f3d9-7b45-4ca2-91ae-ac252712a135", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54490a4a-175c-44ae-82ab-c50c576c5ef5", "sighting_of_ref": "indicator--e84b0d31-e105-49c7-acde-b9dcbd4ed881", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d05b3a-e727-4d14-a074-f15e36a7cc24", "sighting_of_ref": "indicator--538a821c-5a1a-41d0-88cf-1d2ef26368a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b869a0c-49b2-4ce1-aedb-e5b911f29ad1", "sighting_of_ref": "indicator--538a821c-5a1a-41d0-88cf-1d2ef26368a9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8182dbc-1ceb-4fcd-a352-802ee7b600fa", "sighting_of_ref": "indicator--b83271a3-c98b-4988-8b78-6e9820ce46de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89716700-c885-4157-9335-c5f30587e820", "sighting_of_ref": "indicator--1480865a-49ca-436f-ab4a-1755adf09de2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908d377-4aec-4080-adab-f116605ab33c", "sighting_of_ref": "indicator--2a687dc5-202b-463b-a06f-d269669133f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9bc82c-0e62-454b-adaf-09c7199352e5", "sighting_of_ref": "indicator--2a687dc5-202b-463b-a06f-d269669133f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb215897-9224-4e44-af79-5789f1efa07c", "sighting_of_ref": "indicator--d66758f4-6e4c-47b3-a6f3-b1d1186bff74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a5bcf7-0fdb-493e-bb6a-5c9e7734bb0d", "sighting_of_ref": "indicator--d9a0446a-5e9d-40d2-beec-482771d43cbd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc38fa41-fc17-4b89-a1f2-5543a2938cae", "sighting_of_ref": "indicator--e1811251-8ad9-48f3-b247-cff22a368885", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d8cbb7-6a6f-47e7-bb39-ebf9f90f16a9", "sighting_of_ref": "indicator--054ce0aa-7ea7-4b62-9f92-e41171241f3d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bbe53e-a153-4916-8827-406c03c7203d", "sighting_of_ref": "indicator--c3d1a051-d6e8-4f9e-a4d1-a9e20625a469", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659576d4-fc85-44ab-8886-cd477e23d555", "sighting_of_ref": "indicator--f8f00382-c32a-40fe-813d-d6f10b32d3c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a618a8-c259-4269-8966-43dc5daaa91f", "sighting_of_ref": "indicator--d9bd5bb0-3e3e-49fd-a494-cfa4920cfe64", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2f2de3-fe11-402c-adfd-c81c2308af61", "sighting_of_ref": "indicator--ef1e517b-c8e3-4264-9cbb-37c699a394cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ec67f3-f371-47b1-af19-6f515a382b84", "sighting_of_ref": "indicator--0fa2b736-6051-481e-a98e-82d9764ae338", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7977f508-4297-40ce-bee8-0b4c350c8689", "sighting_of_ref": "indicator--0c5866a4-e2c9-4850-bdc2-aa55666aa540", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df71d790-40ef-4799-b27b-fd52fdec701b", "sighting_of_ref": "indicator--880d743d-e4b1-4228-a6e0-d11e01fbc1d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631b406e-08fc-414b-9e36-26214d5c26be", "sighting_of_ref": "indicator--028cf5b8-a271-4647-87da-da483dec885f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b79ddaf-8fdf-4dc8-af70-f32b42722689", "sighting_of_ref": "indicator--24521c56-d628-49c8-acb6-5e222c2bfa42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93273812-0ce9-4f39-83f4-a5a3a0e38a32", "sighting_of_ref": "indicator--9ff0ee79-4f7e-4402-b0ac-878392c43ebb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5e50a3-0459-4bce-b695-5e03bc7c489f", "sighting_of_ref": "indicator--c354ff25-3bb7-4eae-b99f-4da62118ccbd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d93877-9a87-4cfe-a19b-651eaeca699b", "sighting_of_ref": "indicator--1fcb25a5-81ae-431c-8045-811f71d1b9c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb44d53-6c26-4eb6-a8b6-022e81e34f99", "sighting_of_ref": "indicator--0feddb58-e6ac-4568-803f-62f3cd9a7989", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fdb392-75c9-4f00-bafc-a6cc431d1815", "sighting_of_ref": "indicator--0feddb58-e6ac-4568-803f-62f3cd9a7989", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dde2374-fee4-464c-880d-a65bfcade043", "sighting_of_ref": "indicator--0feddb58-e6ac-4568-803f-62f3cd9a7989", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb38bb4-33eb-4903-bcef-67bcbdd9643e", "sighting_of_ref": "indicator--db50b451-375c-4614-aa01-fe35670ed85d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f288c35-1ec1-4dc8-b7b8-f2953a898e67", "sighting_of_ref": "indicator--4c00efb2-d33f-4047-9530-cb69f1142217", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7094af73-bfcf-46b4-862b-3121592e7ac6", "sighting_of_ref": "indicator--e4bea2af-9fe8-4510-93af-59a518b12a1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73024ec4-ed3b-4646-8bb6-4ce0a7dc217c", "sighting_of_ref": "indicator--4f3ed462-a402-4773-9bef-ba809bf2753d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f08a97-6bab-41be-8d42-127880185f8b", "sighting_of_ref": "indicator--359fb03d-9ab1-402c-b166-da90a584ea69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8240b-b8ba-4283-8e90-815c762cf32f", "sighting_of_ref": "indicator--359fb03d-9ab1-402c-b166-da90a584ea69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58c7763-1e7e-42a0-aeef-9ef22cd2137f", "sighting_of_ref": "indicator--4d687f38-4d2e-428a-a944-c03903bde233", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d11e71-0ff4-4cc6-819d-96c4be61fa36", "sighting_of_ref": "indicator--46383ed0-e482-427e-a26c-50a8223260db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0709ae30-bb51-4456-b6a8-301b549a0eae", "sighting_of_ref": "indicator--f03185da-1c43-477d-b015-11b519a18ea6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d376126-61a4-4316-b089-cd0d20bfa643", "sighting_of_ref": "indicator--f03185da-1c43-477d-b015-11b519a18ea6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d930f549-cb8a-4c0b-9130-b8c647f36aec", "sighting_of_ref": "indicator--f03185da-1c43-477d-b015-11b519a18ea6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea2eb9e-9c71-4ac3-a23f-15b7fee8b9c5", "sighting_of_ref": "indicator--960f3e25-d41c-4825-940a-f4c3872382a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3d944b-1b17-403e-999d-0accf59f4370", "sighting_of_ref": "indicator--960f3e25-d41c-4825-940a-f4c3872382a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5e5c6d-e9f5-4602-81cc-7ab5352960ed", "sighting_of_ref": "indicator--960f3e25-d41c-4825-940a-f4c3872382a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e76c376-e8ae-412e-8512-02cc832a5a29", "sighting_of_ref": "indicator--7cc1518a-fea7-44c4-8c0e-24e9c4dedddf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a931ec26-8098-424c-a357-bc48c1af8417", "sighting_of_ref": "indicator--5bae6ee8-73d0-4760-8554-7d8b3b53f523", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c0967f-373a-4d4c-9ac7-7714b015a4d7", "sighting_of_ref": "indicator--7017742b-9c3c-4e5d-b76c-28dfe15d8fd4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1458cc5-d03d-4fd3-994a-add91314fe6b", "sighting_of_ref": "indicator--67068066-0678-4043-bc19-0ddf23285bd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832fbf2a-78bf-40e1-9180-75d2ee5e3f51", "sighting_of_ref": "indicator--36c17d6b-c4fe-49be-beb7-b0888ff4e927", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8882eb84-94e9-4624-8040-17f6dd90945a", "sighting_of_ref": "indicator--d0d97b01-dc17-4553-92af-e8fd98b39de2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ad41b0-1677-4749-a088-37c4316ca4c8", "sighting_of_ref": "indicator--118b5f93-df17-4bcd-9e81-9429bb6cdad7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e4354b-6a64-47d6-a50b-7353c8497f38", "sighting_of_ref": "indicator--e349ffb4-9da5-4b81-adc6-27696f22e607", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfb6833-86b6-42e7-8e41-d5fac6d53516", "sighting_of_ref": "indicator--38c266b7-b40d-44e7-94eb-47df46eca99c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d31cbd3-d2e3-41c8-8db5-8d1ca4319985", "sighting_of_ref": "indicator--38c266b7-b40d-44e7-94eb-47df46eca99c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfba4c20-8e6e-46aa-8249-af69c79a03ca", "sighting_of_ref": "indicator--38c266b7-b40d-44e7-94eb-47df46eca99c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef09278-d1e6-4008-b1f6-867e57348bfb", "sighting_of_ref": "indicator--b2b40267-ed4e-44cc-9f38-1ec50f280af3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e3104c-ef7f-4192-8ac4-ac2438110237", "sighting_of_ref": "indicator--b2b40267-ed4e-44cc-9f38-1ec50f280af3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059288f8-9557-45cf-8fac-5ba15a29f97b", "sighting_of_ref": "indicator--b2b40267-ed4e-44cc-9f38-1ec50f280af3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf9bbb8-da19-471d-bc86-daa557f78487", "sighting_of_ref": "indicator--d2b2620d-04cf-4e78-8a87-571ce5be54c1", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f07ddd-ea47-438a-97d4-276fb458576d", "sighting_of_ref": "indicator--894abefb-9b5e-4f8c-9d5f-289a4a02a335", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1adfeb-e955-4374-ba14-910ccd8a30db", "sighting_of_ref": "indicator--0274ded7-018b-4662-8b81-6804fca982d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f943d21b-f15f-4c2f-afa4-c747302d8560", "sighting_of_ref": "indicator--da8a0d82-d49b-46cf-bc80-64f0e692e291", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bc6e9a-4698-43b8-a67e-fc036da11762", "sighting_of_ref": "indicator--da8a0d82-d49b-46cf-bc80-64f0e692e291", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9c0ac7-8817-4469-8cdf-009c3dfee959", "sighting_of_ref": "indicator--da8a0d82-d49b-46cf-bc80-64f0e692e291", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4c60d3-3053-4a32-be55-b6c319ea69e0", "sighting_of_ref": "indicator--1f579e3e-2dcb-40f3-aca2-87d8a470af27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae954d0-74ef-4a5b-b3ce-eb218fc2776b", "sighting_of_ref": "indicator--cff723e2-a881-45f3-b2d7-d8a591a1ed05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e5b683-65c4-4403-a2c8-2e848c14efa2", "sighting_of_ref": "indicator--4ae02c0b-5611-4d45-981c-56ae0fd3d229", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dc4fe2-c8e4-48cc-945b-9c5698aa2803", "sighting_of_ref": "indicator--e67df876-ec4b-4a87-9299-eaa8dda0d59d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0743650-f78b-487e-90b3-2b4befe176bb", "sighting_of_ref": "indicator--8437ebb9-c80c-4d2e-af54-6634457a80fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8af3a0d-631c-406d-b54b-996b83b33a1d", "sighting_of_ref": "indicator--9993d98d-28c1-4329-aac1-fbdcb4feaaf5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3a07b3-2f4d-4639-8fa8-61a40cf23d42", "sighting_of_ref": "indicator--6640f025-3892-425b-9169-2ba3d2fc4d73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86db5983-e834-4d27-b37f-ac570af13e07", "sighting_of_ref": "indicator--5cb865b4-82ed-47c7-9f65-938d74b12ef7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85773151-83be-4f48-89bb-c10edb07572f", "sighting_of_ref": "indicator--c3ce9c80-f95c-4493-a1d0-00196cdb91dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ab70a8-4cd1-41c6-8fce-9ada3e4d69ce", "sighting_of_ref": "indicator--c101f2a3-9197-4a7d-97d5-87181cd31631", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fe7cb0-25fd-43af-a213-f246a8247b7d", "sighting_of_ref": "indicator--565eef76-abd4-45a0-b3a4-64ccaedc88c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5285ac6d-fd67-4b66-8eed-8be9ca89ab80", "sighting_of_ref": "indicator--cfc1f366-4b43-4f05-84d0-39597c62ceee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297f16cb-c3f3-44f2-ba83-5f82cba0f752", "sighting_of_ref": "indicator--e327003e-6a6d-4079-941d-782a2837e87d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b1f58f-90b4-4c6c-a4bc-44ef7a8afad7", "sighting_of_ref": "indicator--62b6213b-be7e-4508-843b-d76001850263", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94606668-1ae6-445b-874e-70906612a60b", "sighting_of_ref": "indicator--0c0564ff-e880-4896-a12c-d9a114e14ccd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25594237-31ee-4ca0-9c7e-28d1a4296973", "sighting_of_ref": "indicator--2b404a55-9241-4b7d-bdcf-d055ed604e87", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcad857-c6d4-40b5-9bb2-6b2a5524c693", "sighting_of_ref": "indicator--590a5823-b584-4a1b-bfc2-6b626b087445", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9cafca-9406-4d8e-bcdc-5b05703f5f5d", "sighting_of_ref": "indicator--f54b25b5-2ea0-465d-9b5e-a01dd02d0f4c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9036cfd-3dc4-4a60-9a48-f97c1f14cd9d", "sighting_of_ref": "indicator--39d7123c-787f-44e0-aa13-8cf8e1fe4eab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20619685-e097-40bf-bc2a-77b58b3ee46d", "sighting_of_ref": "indicator--9930c230-e2c1-44a2-8c25-1f332df87282", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e1d3dd-ea38-4797-bb30-09e6dd88b0ca", "sighting_of_ref": "indicator--d8fa82d7-a588-4734-a845-99e9ed872345", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fd21c5-53d8-4f45-a01d-859b3c4c0ce1", "sighting_of_ref": "indicator--d8fa82d7-a588-4734-a845-99e9ed872345", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4358886e-c9f3-4f62-adc6-4854e10d70a2", "sighting_of_ref": "indicator--d8fa82d7-a588-4734-a845-99e9ed872345", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a3692d-1add-4030-a1c1-e4b7cb7be42e", "sighting_of_ref": "indicator--f95e7181-4980-48a9-8834-6c23e5936577", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d2eefc-7374-492d-aaae-79b7c2154b25", "sighting_of_ref": "indicator--f95e7181-4980-48a9-8834-6c23e5936577", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc971189-0c85-4e44-9d57-498d6d4902b4", "sighting_of_ref": "indicator--f95e7181-4980-48a9-8834-6c23e5936577", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cfd2e1-e55b-4c31-b078-8db6a4c1680b", "sighting_of_ref": "indicator--11cf61c3-ddaa-42a7-8504-ec0e4d404df6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118f6c67-5a6b-451f-a46e-1ad06cccfeff", "sighting_of_ref": "indicator--0bc4678f-a70a-444b-9cc6-d1f87c5046fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dbfe81-03fc-4308-a7eb-6427b33b9adb", "sighting_of_ref": "indicator--ff971ce0-9cda-4249-a7f3-d84a81d8f0ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5619742f-7722-4c15-85c4-129da650fd12", "sighting_of_ref": "indicator--5619d1b2-7941-45a9-a7cf-c017a046faaa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f62aa92-e2cc-45ad-9074-ccfecdcae5fa", "sighting_of_ref": "indicator--ce535fb1-24cf-41bf-a1e5-cf4726979139", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25a4a2c-f10e-4604-9daf-acb05405886f", "sighting_of_ref": "indicator--ce535fb1-24cf-41bf-a1e5-cf4726979139", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235591ae-f984-4f9e-8469-a2c572ce9ae1", "sighting_of_ref": "indicator--ce535fb1-24cf-41bf-a1e5-cf4726979139", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32432016-7f25-47b0-b977-a078826da9a1", "sighting_of_ref": "indicator--0fedcfca-5a91-4359-a2a1-bde6dd40aed1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db2b77a-8828-43fe-ab9b-3602900397a4", "sighting_of_ref": "indicator--0fedcfca-5a91-4359-a2a1-bde6dd40aed1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a6ec2c-2d03-4c50-8206-3fef2dabb39e", "sighting_of_ref": "indicator--0fedcfca-5a91-4359-a2a1-bde6dd40aed1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70005f36-2cfc-4266-b5ef-e9dedbf02374", "sighting_of_ref": "indicator--18da73af-0de2-4022-b4f8-4bede7ada095", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66626e72-d986-4d18-93d8-3f3b13bd0707", "sighting_of_ref": "indicator--3ac13990-a71a-4a8f-b343-8df58ae31ef9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2b77ab-b9b6-41a0-8715-f0504aa38bbe", "sighting_of_ref": "indicator--bd7a4177-d500-4c64-9563-d96e6a96fa62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd470ac-d604-4062-b517-c3c6fe99a2d9", "sighting_of_ref": "indicator--382ceee5-4a6e-4dba-a74a-02b486fe4232", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768b082e-dbfc-4c33-9a1a-6687400929a5", "sighting_of_ref": "indicator--382ceee5-4a6e-4dba-a74a-02b486fe4232", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d370e0e5-c968-49b7-b035-a54e86464612", "sighting_of_ref": "indicator--382ceee5-4a6e-4dba-a74a-02b486fe4232", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6acef8-d160-4c8f-b132-5bacac9793f9", "sighting_of_ref": "indicator--e95cf03c-4ca7-4943-ad89-a7a0acb3fca7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6912cfb9-641d-412f-9816-31ae628c41f9", "sighting_of_ref": "indicator--37ea0837-74f0-4ab7-9a6b-ac86b3178353", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8688a52-bb51-4d3e-807d-66691c16d8ea", "sighting_of_ref": "indicator--97e252cc-b2be-4c10-9f52-471c6dd81c5a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4ec803-0ce1-423e-a0ff-a6ced1adabc9", "sighting_of_ref": "indicator--77d353f9-8bc5-4d64-be43-65b928f6a3d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7823a16-a116-4ac1-a6a6-f212752471c9", "sighting_of_ref": "indicator--365571e9-d61b-4897-b833-d4faa5dcf641", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c60bf51-e964-4a04-b4e7-4575791ebaff", "sighting_of_ref": "indicator--16673043-c6a0-4fd0-b6ef-f49ad8866efb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c887771a-c272-4ab0-80ea-71c5d194cd1d", "sighting_of_ref": "indicator--0d94a133-6c11-46ad-b993-0e050397c1ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49989477-4def-43e3-8716-acb54b6ff95a", "sighting_of_ref": "indicator--1fee917f-b87b-48a7-8a63-8c4911fc40a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2210df2-aa04-467d-b387-30e7a67d8228", "sighting_of_ref": "indicator--1c7562cc-0521-448b-8b57-d0cfcd6bacb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1819535b-6271-49c4-bd9d-d330bbee05b7", "sighting_of_ref": "indicator--704fccca-8aa9-4e2f-9e46-83142ed89993", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3cad01-4dc4-4b26-9c3a-25e7e5e9c301", "sighting_of_ref": "indicator--704fccca-8aa9-4e2f-9e46-83142ed89993", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eba4ae-1652-456c-aa76-2513f7018761", "sighting_of_ref": "indicator--704fccca-8aa9-4e2f-9e46-83142ed89993", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560d8311-0813-40ae-9495-de94123eb7eb", "sighting_of_ref": "indicator--868056e4-1bce-44fc-88b3-607bf6c7ff3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865507c2-8c41-428e-80e6-31ced59f05be", "sighting_of_ref": "indicator--a9b76a44-4c89-4c16-b708-421fc20680e9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3d5fda-fd05-4d38-baf2-4a6d70abea7c", "sighting_of_ref": "indicator--d8041d40-fdf2-4cb9-90d2-33f1ef75346d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0816f48-6627-416c-8fa6-c80bc24d2ecf", "sighting_of_ref": "indicator--ecb0fbd8-f05c-4528-8ba3-08328135b4c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e01ce3-a54b-4005-b158-97e9d877e9ec", "sighting_of_ref": "indicator--1a7cc57e-bfd1-42ea-b1e2-7f253a636b23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c475c3-984a-4f8e-b333-0d3565c40398", "sighting_of_ref": "indicator--fe45076f-6f86-42b7-a255-66dd338acf70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13602b20-ec7b-4330-ba5f-fd1d630ac13c", "sighting_of_ref": "indicator--1b5ee78f-d611-47b4-ad3d-f5594bab8bda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7768c032-5043-495c-b0d6-982b7892f497", "sighting_of_ref": "indicator--984b62f6-5195-4a3c-b552-93d20020cd50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ab1806-c047-4239-92d4-a5c20da2bf8b", "sighting_of_ref": "indicator--d98b9bd3-6cc0-4dcf-a81c-3c1ae29434df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8471e22f-894f-422e-b809-3a84c816c248", "sighting_of_ref": "indicator--123b47e3-0dd3-472a-be66-f30127954d9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2866fa-6599-487e-8d8b-a0b5985c13b1", "sighting_of_ref": "indicator--07e39fc3-4fb7-4db0-939c-db14fb22de21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fdffd8-cc18-4f52-a906-c0096dd38215", "sighting_of_ref": "indicator--6609f072-17b1-46a7-bf57-b23a7fb713db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f60b87-b231-4236-a346-a4f20fea92f2", "sighting_of_ref": "indicator--9f2332c2-f859-4f24-81f3-5120050bc0df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d683ac7f-9533-4d95-809f-ca59c88dd97d", "sighting_of_ref": "indicator--33e42342-7c7f-4d28-bf95-5b57053d986c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3535075-5d34-43e2-a6d7-ad4922d7678a", "sighting_of_ref": "indicator--c08924f4-2199-4b60-bea9-b4426ce145c3", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764c86be-627a-47b0-a516-4427080481a8", "sighting_of_ref": "indicator--1056bf13-5dff-4ffb-8229-0ea68a3e3843", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b890f4f-d1ee-445d-81ff-c502f32816dd", "sighting_of_ref": "indicator--aa55f1fb-9716-44ae-9a30-43aaf4e67733", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beea8f26-378c-4b49-964b-2014d171eb3b", "sighting_of_ref": "indicator--b06a4936-e215-408a-908c-2f74bc9171ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20faf3bb-bbd1-4724-8d78-ddef06543ce1", "sighting_of_ref": "indicator--b06a4936-e215-408a-908c-2f74bc9171ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee15cd6d-1e3e-4f58-aefb-cc6bbf896560", "sighting_of_ref": "indicator--5cfb3542-611f-4e72-90ea-0b49d6b0da39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf55672-6c7d-432c-9f02-58ce54c5131e", "sighting_of_ref": "indicator--dc7e79fd-c2f8-48d3-9da4-51cbb5662238", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ecc323-23df-43cf-8dfa-c768ab46132a", "sighting_of_ref": "indicator--dc7e79fd-c2f8-48d3-9da4-51cbb5662238", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276bf95d-f2e7-4a4b-83d4-436f0321b0a4", "sighting_of_ref": "indicator--dc7e79fd-c2f8-48d3-9da4-51cbb5662238", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e646e8a9-2704-4313-9f84-d79b9b00fa0f", "sighting_of_ref": "indicator--bbd77689-c003-4522-98d0-29757db284c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9220cb2e-c605-4918-b9b3-1a9ccad6b8c9", "sighting_of_ref": "indicator--21fd44fb-af5d-4ec9-8efc-ff020c7cbcb8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966bd858-6d37-4625-bd14-1a5f9d0b58bd", "sighting_of_ref": "indicator--52508fe0-e536-4d58-98a8-444dd76406b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663ef003-ea57-46fb-a98b-92c75f7d13c4", "sighting_of_ref": "indicator--22ff088c-0bb6-430c-837f-c4b390adc0f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac9cc9b-2d0e-49bb-a764-3ca6faf038ff", "sighting_of_ref": "indicator--22ff088c-0bb6-430c-837f-c4b390adc0f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335d11aa-8668-4da0-8e8a-c5506e7ae379", "sighting_of_ref": "indicator--9f719c60-c428-47c6-8b93-d11ce61ecca5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b260979-c127-4e32-888c-fbe5e4d94414", "sighting_of_ref": "indicator--4c68769b-6e38-457a-b8a3-ad403b0d8bc7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99c1fb5-7435-4539-a21b-8e8d42e4c17e", "sighting_of_ref": "indicator--c9bd97af-0988-4356-9231-720691b958e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15de116-f2eb-4c3c-bdad-391d9cdda7cd", "sighting_of_ref": "indicator--c9bd97af-0988-4356-9231-720691b958e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a51d315-1a06-4095-abaa-37e0dcf3c5f9", "sighting_of_ref": "indicator--f0a8e04c-681b-49a7-90e5-b125be3165ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8414acaa-fe77-400a-9712-0b753932548e", "sighting_of_ref": "indicator--74fa5613-0262-4e32-875e-204372dc2bb3", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f96fcab-6674-4c67-a50a-7034b60497cd", "sighting_of_ref": "indicator--201ace46-ba6f-45ce-a7dd-3686c563203e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d37ed7-dc05-40c4-a054-da81ee5e6c80", "sighting_of_ref": "indicator--243b14cd-ced8-4970-8569-0fc8ae92566c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7059dc08-272c-4355-9a6b-6c67f2be7fef", "sighting_of_ref": "indicator--76cd0936-377c-4ddd-84d3-8b31b2f6a20f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de904a3-2f66-4181-9d86-793758871099", "sighting_of_ref": "indicator--a06ce51c-0959-42a5-b420-a395dba3301d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3cbc6e-77bd-4a33-94be-a512d4617e53", "sighting_of_ref": "indicator--4c5d634c-c5b2-44fb-9d2d-6b039d1ea90f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abbaf2d-e926-4f32-9b36-0b54c1666661", "sighting_of_ref": "indicator--c2d25b40-2e8b-4cd9-ba03-779f08f5281e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f60fcd-6e3c-4754-ad1f-c89b8491d1d0", "sighting_of_ref": "indicator--bfbb7aba-e659-41b5-84f1-76495bee2231", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94702d7b-ab21-411c-9b5f-43c12eae03ae", "sighting_of_ref": "indicator--707a0dee-c99c-4b6e-8f5a-dae90021095e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330b992b-38c8-4277-b366-9060b32a372b", "sighting_of_ref": "indicator--c51b9dec-57d7-4f94-a14d-a46917a2f229", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e4bd5e-c86c-4c02-8448-2d22bf63ed56", "sighting_of_ref": "indicator--5c864d58-9a2f-4be4-9cb8-4ef328922c3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea338eb7-3fc3-4508-9258-4eed2207a108", "sighting_of_ref": "indicator--9aef95df-35dd-412c-aff3-e97d5af4417b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c149a46-a3fe-4a54-90c3-575cc93db725", "sighting_of_ref": "indicator--9aef95df-35dd-412c-aff3-e97d5af4417b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1872cb8a-38e4-4eba-b72c-c14159eb521c", "sighting_of_ref": "indicator--818824a2-f297-489e-9248-19de9a06c97a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80a365a-9533-45bb-be4c-9ffcfb4f51a3", "sighting_of_ref": "indicator--9d6fdfbb-7aa1-49e1-8055-4dace65c6b46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321a664b-df81-4cfc-869b-ee3fd94a2f04", "sighting_of_ref": "indicator--9d6fdfbb-7aa1-49e1-8055-4dace65c6b46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec74c1de-7d98-44af-ab7d-7cec4a5f8338", "sighting_of_ref": "indicator--9d6fdfbb-7aa1-49e1-8055-4dace65c6b46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886d96c1-9af1-46d0-90cb-b097d7342813", "sighting_of_ref": "indicator--c2cd18e7-942f-4ad6-b40c-83b100ef5098", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0c22f2-2674-427b-93c5-b41c7d46695d", "sighting_of_ref": "indicator--41a0649b-a000-46c8-9816-e49cb716c0d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed914a6b-73d9-476c-a06b-0a20f94d5b57", "sighting_of_ref": "indicator--cb37842c-538e-4097-a417-aef165b81889", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555a3270-46ac-46e1-87cc-68f098944197", "sighting_of_ref": "indicator--cb37842c-538e-4097-a417-aef165b81889", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abcd903-2748-473a-9442-894e3d107e22", "sighting_of_ref": "indicator--7fbc49de-0434-4795-984b-d91e139231c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f3b60f-25ea-4c5b-ab94-e8ff2036dcc0", "sighting_of_ref": "indicator--7fbc49de-0434-4795-984b-d91e139231c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df5fada-1776-444c-bacd-82782325be05", "sighting_of_ref": "indicator--7fbc49de-0434-4795-984b-d91e139231c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b10e459-3fa7-4f7d-9e0a-77b59f55321c", "sighting_of_ref": "indicator--6b4b90e0-e825-4ecb-9d79-7647d104e4a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a691d8-b36c-4eb7-abf9-f7424cf3c759", "sighting_of_ref": "indicator--6b4b90e0-e825-4ecb-9d79-7647d104e4a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb31407-f34c-4b8e-ae68-bacadd79609a", "sighting_of_ref": "indicator--6b4b90e0-e825-4ecb-9d79-7647d104e4a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6655fda2-f406-4ca7-9c0b-4f00da99a718", "sighting_of_ref": "indicator--45e6369e-3593-4dd0-941b-5838efff0432", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a5f9ac-3ff9-41ac-9a51-5fb4a47b82e4", "sighting_of_ref": "indicator--45e6369e-3593-4dd0-941b-5838efff0432", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06258b88-6357-4bc4-bcd0-e4e143c4fcd8", "sighting_of_ref": "indicator--fcf126a5-90c1-414e-8a53-121e22738546", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd9b995-3d2d-43f8-8763-3d4ce5816616", "sighting_of_ref": "indicator--14a16618-b968-489a-a869-06146b76e05a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c97626c-6684-4d73-a18d-a7a6136fc755", "sighting_of_ref": "indicator--1a6283e9-4d41-4a7f-9be0-5ee07d7ed58e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ed2029-9f06-4528-916a-ad4b8fb8f8fa", "sighting_of_ref": "indicator--5f8dd368-76e6-4e88-bf30-e0c7205b1e6f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eea7ca-b5ec-4555-8b3f-32c5688d27fa", "sighting_of_ref": "indicator--5f8dd368-76e6-4e88-bf30-e0c7205b1e6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a1eb7a-da8f-406b-aad6-43a39bc7011a", "sighting_of_ref": "indicator--5f8dd368-76e6-4e88-bf30-e0c7205b1e6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a50de0-7965-4fa2-ac83-ef2e25fb5add", "sighting_of_ref": "indicator--2df2ada0-ae56-4ecc-9a33-ba9f6e4dbc81", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231fba88-1462-43bd-bbac-88a622bac69e", "sighting_of_ref": "indicator--16225648-5d1c-4fa3-a67c-a7a0da6321aa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e3beb0-f8b6-44dc-9813-2469f32fa641", "sighting_of_ref": "indicator--6305dd0c-1513-4251-96cc-0abe088c45ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77b6fd7-2bfe-4c68-8d75-8d266e4e7986", "sighting_of_ref": "indicator--4713f319-c6ed-43d2-b05b-9a02e1a17f07", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2d7f2e-425d-4eff-b2a5-770ae285166f", "sighting_of_ref": "indicator--4713f319-c6ed-43d2-b05b-9a02e1a17f07", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d503bfee-9a3e-426a-822b-2002df589399", "sighting_of_ref": "indicator--3567c505-4e5e-4d37-983d-09ff4c92c84a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d348e6bc-5569-4096-a0aa-d1ff3ad55358", "sighting_of_ref": "indicator--3567c505-4e5e-4d37-983d-09ff4c92c84a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9addda-53a6-4729-a869-3ac780247fce", "sighting_of_ref": "indicator--8ddb017a-d799-4042-a444-23806f2ba220", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4346960b-5b8c-4b60-a1b3-a61f13a2ad35", "sighting_of_ref": "indicator--a65c5575-5812-484d-88b0-a4f380262e7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d452ff-06d0-4432-8060-4ffa142f27f7", "sighting_of_ref": "indicator--c70af74e-5c2c-4e6f-8008-4db0d066f7ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5e7249-cf59-49c2-b472-7113070e66ed", "sighting_of_ref": "indicator--c70af74e-5c2c-4e6f-8008-4db0d066f7ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dd74b2-c1e4-4597-8341-389691136f59", "sighting_of_ref": "indicator--23c7fc87-ce79-40ba-8d6d-38e0f3e0b006", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bab569-1264-4ec3-8088-56ce64d81ecc", "sighting_of_ref": "indicator--eae8405c-e587-4a15-990e-7162d05496a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f557eb-4ad5-4b4f-b565-a339c9a606e2", "sighting_of_ref": "indicator--eae8405c-e587-4a15-990e-7162d05496a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc859ba9-c9cf-47c3-9617-3fcff4ad28aa", "sighting_of_ref": "indicator--813bfb5c-fb7c-45da-be4e-3fb7c171622a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac5fcf1-9e47-45e6-a1db-49925eb79ab9", "sighting_of_ref": "indicator--813bfb5c-fb7c-45da-be4e-3fb7c171622a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4afb21d-42b8-46a9-b647-c2d0b26ce029", "sighting_of_ref": "indicator--91371ed3-e2b5-4695-bf2b-e591ce5773b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc34df3-0f19-4778-907c-da78e0e9a126", "sighting_of_ref": "indicator--a68f32ca-31b2-4426-a541-6a976913bfb7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886e3cc5-a7b6-4190-8cd7-9f06123d8959", "sighting_of_ref": "indicator--a68f32ca-31b2-4426-a541-6a976913bfb7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d1a566-778e-4195-b49c-08e0e96f3453", "sighting_of_ref": "indicator--363c244f-0228-4695-b449-a30be128ef13", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74796dae-d014-4ce1-8670-dd68325a2312", "sighting_of_ref": "indicator--363c244f-0228-4695-b449-a30be128ef13", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4259bdf9-2907-4325-9c6a-69d0f6c48928", "sighting_of_ref": "indicator--363c244f-0228-4695-b449-a30be128ef13", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c62743c-d2ce-46f5-ad9f-d4b5639d6119", "sighting_of_ref": "indicator--7d81373a-e4ab-4dd1-98cc-75e7d2fccfe8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078d3887-18a0-4929-9b7a-4d13edbba4d1", "sighting_of_ref": "indicator--79b65120-2ced-4eb8-9ab8-66b75c95ac65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a6f20-8793-4065-920c-35f75f4fe382", "sighting_of_ref": "indicator--79b65120-2ced-4eb8-9ab8-66b75c95ac65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae669a32-5922-4258-8236-6a5116bbb5d8", "sighting_of_ref": "indicator--70ef3b15-88b2-4e15-865b-779a027518a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ecdc6e-0824-48bf-aaa0-2dc81a9b1543", "sighting_of_ref": "indicator--cfd07073-9e96-4e12-95b7-71bf2ae46a50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8607e664-7f6a-4fea-90e0-142396f64d51", "sighting_of_ref": "indicator--cfd07073-9e96-4e12-95b7-71bf2ae46a50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c9b69d-3c4d-48ab-9c85-c0e409ca3256", "sighting_of_ref": "indicator--4bb3c1ad-6d88-4ebc-bf37-4c8fd5eea102", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0df9ce-5953-4df3-b603-e4a48560e69d", "sighting_of_ref": "indicator--8e343708-9f77-4ca6-87f7-aeb028f330fb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaa709d-5bc5-46fc-bc13-448d6ad1800b", "sighting_of_ref": "indicator--8e343708-9f77-4ca6-87f7-aeb028f330fb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b33e03-e6d8-4bee-9427-b810defc3c14", "sighting_of_ref": "indicator--8e343708-9f77-4ca6-87f7-aeb028f330fb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3127dbc7-1922-417f-b94e-0bab9e0323d1", "sighting_of_ref": "indicator--126f47ba-25c8-4fcc-87fd-abf5308e3a9e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72caed1-bdcb-4ac5-a1dc-b4f9506017eb", "sighting_of_ref": "indicator--46690dbb-d208-43e3-b76a-62c19f2d91a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68aa68-9449-48dd-a1aa-53d70a49a38b", "sighting_of_ref": "indicator--2f052db1-a829-49c8-9869-52eca3159508", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb53ccda-c52d-4eef-aca6-b67d89d53588", "sighting_of_ref": "indicator--bce5619b-70f3-45db-a01f-c09c083dda89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c54998a-4ee7-4bc8-8353-ea08f3beac8b", "sighting_of_ref": "indicator--56bdba51-a22b-4f64-9d8f-274a00b30ae7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3da40e4-31c1-4a1e-8422-d9f392e0cad0", "sighting_of_ref": "indicator--c0ad67df-6a18-4478-b065-5c4e0c7930cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec80e0c5-fb42-48f4-b233-ce148b069ba2", "sighting_of_ref": "indicator--c0ad67df-6a18-4478-b065-5c4e0c7930cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c145d71c-3adf-400c-91eb-40a48b4b3209", "sighting_of_ref": "indicator--7612b896-8700-4d9f-83af-2243f243f5b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bdedef-f7ad-4d87-872c-8cb6c63ac716", "sighting_of_ref": "indicator--86a22852-0a5c-4653-b4d7-7d6c80f11916", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c89d5a0-7042-4811-8851-3259233cd0dd", "sighting_of_ref": "indicator--86a22852-0a5c-4653-b4d7-7d6c80f11916", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98c742b-20b7-459f-bcc8-30dd3bfe8254", "sighting_of_ref": "indicator--86a22852-0a5c-4653-b4d7-7d6c80f11916", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49004500-4485-4a59-aa36-b9583817b657", "sighting_of_ref": "indicator--f66a60e7-c22b-4058-9505-f4018088e048", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66325d7a-b9e0-429b-a63e-3c06d62f6f1b", "sighting_of_ref": "indicator--81acd9e3-db02-4f8f-8a42-a86cd4522e61", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd9da8e-9197-4308-9e33-ba7bac76bcc2", "sighting_of_ref": "indicator--81acd9e3-db02-4f8f-8a42-a86cd4522e61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42c4b5c-15d2-4de7-9a50-867f8bcfa8ec", "sighting_of_ref": "indicator--af871911-ae9e-4d21-880e-d4cf764a1248", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fa433c-06fd-46c0-9754-022cd59ad357", "sighting_of_ref": "indicator--d70913f3-42ff-405e-9a7f-f340933c9dfb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4b8372-acf5-480e-8887-33ea6ef9239b", "sighting_of_ref": "indicator--d70913f3-42ff-405e-9a7f-f340933c9dfb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce52710-2bbe-4bbf-b4ec-63a95a5813e8", "sighting_of_ref": "indicator--d32db5ea-d82a-4ebd-b585-42d4b8f111e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6b7ccd-aa66-4c56-9b73-3aa499506a7c", "sighting_of_ref": "indicator--a31071c4-660f-4d3d-95d7-6e3ca5a823e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2283405a-7ff1-4549-99b7-0cad65a14f6d", "sighting_of_ref": "indicator--9dd69e3a-dd62-47b3-970b-ce142b0f64b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e19ef4-8d21-4748-be5d-e6a4c5e917df", "sighting_of_ref": "indicator--008d2b44-7aaa-4d9d-b8e9-83b07cec5f74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4412e4-3beb-4aef-8239-e4dd531ca6bc", "sighting_of_ref": "indicator--008d2b44-7aaa-4d9d-b8e9-83b07cec5f74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fff3b79-acaa-4ad0-834d-3389e371edf7", "sighting_of_ref": "indicator--4c74f4dc-edf6-4aa2-baab-64fa64e5a9d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefd22e3-aaec-45f2-9cf0-662bcf5b9467", "sighting_of_ref": "indicator--b7a6fb49-da5c-42a9-83ab-f66484a41756", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed7e611-a72e-41ac-86d2-aeb85bc75bef", "sighting_of_ref": "indicator--18d4a007-8f3b-4220-b32c-1722b5a234bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac695bb9-3faa-444b-a2bd-3a354df2d705", "sighting_of_ref": "indicator--3140bad8-6a84-4410-b4e4-7cf5a6e2042e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4711d7df-952d-4936-a3f0-723f4d12f2a1", "sighting_of_ref": "indicator--e0364ae9-7406-4f4d-9dfb-95b630f80bd6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632dfcf6-d40e-48d8-98f0-b48fab6d4f17", "sighting_of_ref": "indicator--e0364ae9-7406-4f4d-9dfb-95b630f80bd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bb4b8b-87f4-4fd8-b214-b5d2977dc218", "sighting_of_ref": "indicator--681dfcb8-4fe3-48de-9c5e-ef0553b55542", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe840e9-82f3-4cf0-9137-11e02f10ab0a", "sighting_of_ref": "indicator--ea05977d-6aa9-4020-ae92-fda2db30da06", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a63d7bd-dac6-4adc-a64b-7d5fb1902ced", "sighting_of_ref": "indicator--ea05977d-6aa9-4020-ae92-fda2db30da06", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbad7ec1-133a-47f2-9341-1d08e6c7a22c", "sighting_of_ref": "indicator--cdd18f83-de1e-484f-9dc0-7f64f66fb8de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7f2912-55db-49bc-ad78-dd0b19dbf263", "sighting_of_ref": "indicator--15334acc-5e31-4977-ab17-41179be48fde", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3116d8d5-521b-4f77-8125-134ebf158ae0", "sighting_of_ref": "indicator--15334acc-5e31-4977-ab17-41179be48fde", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18da8ed6-b99f-40ac-b343-16a4cb5549d5", "sighting_of_ref": "indicator--15334acc-5e31-4977-ab17-41179be48fde", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982174c2-f767-4116-a360-1d3cee508333", "sighting_of_ref": "indicator--94ce9041-cecc-4921-bd09-803295ffaa09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fffd2f8-2628-433e-bfd9-ca02a5999501", "sighting_of_ref": "indicator--eab33c2f-3540-4cb8-ad75-400c6f4f3618", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8d362b-2bf3-4b4e-b27a-62c2cacef2ca", "sighting_of_ref": "indicator--eab33c2f-3540-4cb8-ad75-400c6f4f3618", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b994e4-772c-444e-9e2a-ce5344c51654", "sighting_of_ref": "indicator--5efc440a-bb70-46d4-9e1c-b04cb6a6603a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9eb2ba-46f3-4e75-9ce8-4e31aafd2222", "sighting_of_ref": "indicator--5efc440a-bb70-46d4-9e1c-b04cb6a6603a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e4472e-9d99-4b7b-a229-2e1610c52298", "sighting_of_ref": "indicator--5efc440a-bb70-46d4-9e1c-b04cb6a6603a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f6b3d4-4039-4a76-9030-91973b16b96d", "sighting_of_ref": "indicator--30161ad5-84a2-4137-990e-3da5b98b0bcc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a100a1bc-5d21-4be2-81ed-9a282099fa18", "sighting_of_ref": "indicator--466c17db-9512-43c8-90ea-e7da14705c69", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6be086e-3ebc-4469-abb2-164d4de25faa", "sighting_of_ref": "indicator--a3b9ddaf-5327-4c9b-a794-76870069a410", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a18270-7ba2-4158-96ad-84ef94aa39e3", "sighting_of_ref": "indicator--a3b9ddaf-5327-4c9b-a794-76870069a410", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24cd3d3-1b67-45f6-9d47-6f1dcffb1082", "sighting_of_ref": "indicator--63878617-a7c4-40ea-b91c-705ff1776e2c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955caa91-6a9e-4ff8-b869-31b3b95f4e43", "sighting_of_ref": "indicator--63878617-a7c4-40ea-b91c-705ff1776e2c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd391e7-59ad-48fc-9a18-8817671e8dd6", "sighting_of_ref": "indicator--e77b4d38-b8d2-4082-8b48-b19417ce1eec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496214b3-b408-4a07-9ea0-1f382ea5124c", "sighting_of_ref": "indicator--8171eb1a-0a57-453a-8325-1080262d9900", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b7dd90-7648-42c6-8b46-82f7399d9ab9", "sighting_of_ref": "indicator--9fc56b3a-d66e-43b3-815b-68561ac2cc64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c643392-2d18-4938-be5b-b90bb44ac901", "sighting_of_ref": "indicator--4daf3176-84d6-45ea-9804-bd681493b40b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af83e7a-f700-48fb-b7a0-85292b48fa5f", "sighting_of_ref": "indicator--59bac86f-474d-44a6-ae5a-c0a766ecdb46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a835e408-81b8-4314-9bfa-616a111fb9e6", "sighting_of_ref": "indicator--59bac86f-474d-44a6-ae5a-c0a766ecdb46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b27b86-9c91-47f3-8153-6fdb9bb9bf07", "sighting_of_ref": "indicator--59bac86f-474d-44a6-ae5a-c0a766ecdb46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79c5321-ea1c-48a7-8919-80e79368ee34", "sighting_of_ref": "indicator--7b5f474a-9da7-49ca-85ee-920a7a0c80d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404d003c-b712-4f7f-9ee4-6fc3fd90f522", "sighting_of_ref": "indicator--f35bfd41-67c7-4295-953c-4ab197b3353c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb35dee4-740c-40dc-9bb5-6b221e236e9e", "sighting_of_ref": "indicator--f35bfd41-67c7-4295-953c-4ab197b3353c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1c69c8-e38f-44d1-8106-22af95459402", "sighting_of_ref": "indicator--8a405b2a-dd5a-475c-8ed0-a6c168e3095f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705e5bf8-c48e-40fd-893d-3703a9b666d0", "sighting_of_ref": "indicator--fd87af29-bc02-4872-b8d1-0eb4d6340ddc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb31c150-7109-4367-b2e7-fa9b5b3c8047", "sighting_of_ref": "indicator--fd87af29-bc02-4872-b8d1-0eb4d6340ddc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0183646-30a9-4ad3-8dcf-743ec19ee352", "sighting_of_ref": "indicator--fd87af29-bc02-4872-b8d1-0eb4d6340ddc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94134be3-6850-4c77-a94a-026b935c3a9f", "sighting_of_ref": "indicator--f680585d-2559-4c7c-8654-0b5f26cb68d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c16eab-094e-4dba-852d-a8de510ea566", "sighting_of_ref": "indicator--f680585d-2559-4c7c-8654-0b5f26cb68d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64481f1-e2b6-4366-bb73-79bbd533ad79", "sighting_of_ref": "indicator--f680585d-2559-4c7c-8654-0b5f26cb68d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1bc932-c25f-477a-9bad-9dbf99f324ec", "sighting_of_ref": "indicator--3696cfeb-6eee-4c9a-bce0-1a08484bde42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32ec933-a17f-4c45-b3ae-c1e969fb370f", "sighting_of_ref": "indicator--bc969591-13ec-440c-813f-e00f11c520ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3853e2c-1416-4193-88bb-1c71e35cd23e", "sighting_of_ref": "indicator--f15c6d72-dd39-48d8-b247-f28a5e4b1253", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ceffa9-3e91-4e28-aeba-846e69cf4e5d", "sighting_of_ref": "indicator--18b0fb89-2a67-4b55-b512-31b589fd8263", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce30b16-727e-47b4-acee-803ad66194e8", "sighting_of_ref": "indicator--18b0fb89-2a67-4b55-b512-31b589fd8263", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e487498-8fe8-45dc-b767-240f7d0ff1ce", "sighting_of_ref": "indicator--7b9d50dd-4834-466a-a358-276671cee3ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85f82c6-df8f-48ad-8ddd-f90b17d3f62d", "sighting_of_ref": "indicator--5cef37a0-b4d6-44bc-87d1-2397ff41a3ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034b54f7-066d-4c6a-9cc3-d1b33cee9f6e", "sighting_of_ref": "indicator--989e11e6-ed1c-4792-ad12-5de438698f66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be84797b-f86c-4bee-9511-7b0c79724377", "sighting_of_ref": "indicator--1c113b6d-a758-4d97-9547-3b1dd03930e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b320095-5506-4b5d-b8da-b427ae9456c8", "sighting_of_ref": "indicator--f054f327-cf92-40d3-9d4c-23275ce43e55", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de381803-5bbf-44bf-8fa9-a9d3ae64a0fd", "sighting_of_ref": "indicator--c8559b77-7f9b-4c10-9d04-e03028b10335", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa556ce0-3881-40bc-84e3-0e69d96b7763", "sighting_of_ref": "indicator--c8559b77-7f9b-4c10-9d04-e03028b10335", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abfc608-4587-4800-bfe2-cd49e20426a3", "sighting_of_ref": "indicator--c8559b77-7f9b-4c10-9d04-e03028b10335", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5fd2bf-2421-4376-8964-319078e04d4f", "sighting_of_ref": "indicator--1e4386c9-b487-4ecf-b604-aa99dc46e4f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d216900b-efc3-4c7d-b6b4-c0972b506a0d", "sighting_of_ref": "indicator--27048840-326d-482f-be90-de2e1df24855", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358b3f8e-bac7-40ff-802e-b9771993e2d2", "sighting_of_ref": "indicator--0e47d89c-135d-4b1f-b87a-9dd685a77b21", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac3aa06-08db-4a89-9eff-2d86aaaa1db0", "sighting_of_ref": "indicator--73e3b641-5f7e-4b0f-8d16-d9851bec35b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd08fd8-b48f-47cc-82f6-bcff9562faec", "sighting_of_ref": "indicator--9ce040b0-9307-4c4c-9b62-b3c7beae183c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b00da6-340b-44d5-927c-d257be47f009", "sighting_of_ref": "indicator--883ffd6f-f369-4f0b-90d7-6a1ded2064a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a056f3bd-2b44-4cf5-9823-c53ca80d10e9", "sighting_of_ref": "indicator--77503e78-95ea-4c3d-9e15-a6776202ce3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aec1876-1186-4c9a-a37d-5f8e212d84d5", "sighting_of_ref": "indicator--77503e78-95ea-4c3d-9e15-a6776202ce3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e44ea2-d025-4100-af0d-bce31cdc99f8", "sighting_of_ref": "indicator--2789ac76-0576-420e-86ce-efdf0a21fdc6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5a1fb1-e010-4c37-ae61-e8eec930ab84", "sighting_of_ref": "indicator--2789ac76-0576-420e-86ce-efdf0a21fdc6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f69af4-8fcc-4c3b-b80f-ab9f1d90b57e", "sighting_of_ref": "indicator--542de637-3821-4269-a413-5c3ed8ea7fa0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9615941e-2f2a-4a1b-ab9a-c7ee0bcd24cb", "sighting_of_ref": "indicator--ff1dfbc3-a6ca-444c-8d1d-a7e36a5be773", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84abaf2-ec52-4503-9c7c-9dc62d8c4db9", "sighting_of_ref": "indicator--29d8ff7d-4f03-4d49-9055-1c5da2711007", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f07524-14c6-4f2c-8bea-d41655b3c44e", "sighting_of_ref": "indicator--01314e04-6d0f-4deb-b8ef-5ea9d48492a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d58c421-1567-4df1-b07a-3841061b0bbe", "sighting_of_ref": "indicator--5d891703-5f2c-473b-b5a0-153afc0ffb1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822041a2-5764-48b2-8c5c-1c7046ce2770", "sighting_of_ref": "indicator--27edb68a-8916-466e-9a35-abf9898a17cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478cf53-36d4-4851-8843-caa517032058", "sighting_of_ref": "indicator--23d4e6c8-08ed-41e7-945c-6ced19667653", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5643f813-6061-4d8e-b8bc-e9d882f67492", "sighting_of_ref": "indicator--23d4e6c8-08ed-41e7-945c-6ced19667653", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30020402-83c8-4f26-b2bb-fa1cffcd188b", "sighting_of_ref": "indicator--12cd3bba-46a4-4fc6-a2ad-bbf28e573d38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78a4057-3a9a-4a9d-be9d-647c8a2b22c9", "sighting_of_ref": "indicator--89af85cd-d878-4b5e-ac5c-02639348884d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1ae71f-d1d8-4cdc-9667-923d18d4f253", "sighting_of_ref": "indicator--cbe58a00-b0db-4d1b-b19f-13191a6d28b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b78609d-92b6-46da-b600-ef60f95f1e8d", "sighting_of_ref": "indicator--39560db6-2ac9-4234-a9fb-f7c567df9d68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c5b0da-6752-4b8b-9132-62fc26a0265a", "sighting_of_ref": "indicator--7253c685-6ece-44ca-8599-499fe8292422", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c340b776-a074-41f0-8196-a5ca9804ab68", "sighting_of_ref": "indicator--9987f076-02e6-4ce3-9c94-6c5a5222c53f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470c31ec-e258-49a0-ae68-bc617114a936", "sighting_of_ref": "indicator--929882bf-200f-4912-9c66-6b0638d55627", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca1627e-c461-40cb-bbd2-33e9dcccfc25", "sighting_of_ref": "indicator--c90834b8-6618-4dab-af3f-520429a621f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482205b2-790b-43ca-8ea3-4b21f6c125dc", "sighting_of_ref": "indicator--cf53860a-50cf-453b-9367-c247546ff1ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e34382a-7540-4593-90ed-899dd155ae2e", "sighting_of_ref": "indicator--a7a56754-bece-4ed6-b948-35be570fff5a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bd1e10-d331-4cf0-8d27-574021114b69", "sighting_of_ref": "indicator--cf399dbe-bd52-45bf-a943-5b647ab02728", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef639230-3147-4285-96db-69875ca2b23b", "sighting_of_ref": "indicator--9befff1c-2b6d-4397-9680-ace27420f337", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366e9b15-2fb6-488c-9ba4-9ddbc6d5671e", "sighting_of_ref": "indicator--e409fc39-c336-4b6d-bf56-086b6d1a95bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82328a8-e450-466d-84dc-07197f2031fd", "sighting_of_ref": "indicator--78c1f684-7704-44fd-af91-8b8909aa2419", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e08725-cd0d-486c-9392-48f12dbac517", "sighting_of_ref": "indicator--ff0b0f18-9a18-406b-8d64-3dac3a75a33d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018f7327-53ab-4606-9a39-bdef7b6e187b", "sighting_of_ref": "indicator--a1093ff6-c601-4413-bcbc-b771e89ce92f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900e4c96-2e45-4ea0-a542-edebe915fe69", "sighting_of_ref": "indicator--056286e4-fc90-4321-96af-1cd3d6b14d53", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc748d2-c42c-4b51-bcee-971fd1bd92ec", "sighting_of_ref": "indicator--9de67f16-33c0-4c3b-b4ee-349c70d35ddb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7029df-ab88-4ca3-826f-448164f21937", "sighting_of_ref": "indicator--bf1316f8-99ea-4bce-9297-5b929034baaf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d6d5f2-51a0-46b2-af3e-f122e7ed0ace", "sighting_of_ref": "indicator--bf1316f8-99ea-4bce-9297-5b929034baaf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd972c58-0ac2-45f2-b950-a092010a558d", "sighting_of_ref": "indicator--a08fa70a-5cb9-468e-8385-6c42bbbd007d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a04712-689a-4391-a1f2-5eb1c125e393", "sighting_of_ref": "indicator--4454a062-0a82-474a-baeb-7ffaa584a746", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f491a1b8-b9b5-4eb2-9c55-e66a6bd70687", "sighting_of_ref": "indicator--4f0a4ab4-64fe-468e-a5b9-515306430d62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696294ff-3fdf-47b1-a5b7-e18851324191", "sighting_of_ref": "indicator--4f0a4ab4-64fe-468e-a5b9-515306430d62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baef5c04-9005-4c2b-b127-715e510a1e56", "sighting_of_ref": "indicator--2c5050d4-c236-408e-9144-bbfa08c932b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8738fee-8789-492d-b698-127a297ec562", "sighting_of_ref": "indicator--d2733bb1-d0af-4706-9adf-200b66dbfaca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb45741-0d91-4f2f-b674-2812c7b73593", "sighting_of_ref": "indicator--ea848770-8745-4d37-a560-e1a188d7590a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6f9fb1-2464-44ec-b2e6-6a08044f6294", "sighting_of_ref": "indicator--887f6ad6-6b8c-4515-8faa-d250290ca186", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df09a609-e063-4e5f-8aa5-13af8eebfeab", "sighting_of_ref": "indicator--afa4fe04-e6f3-4562-9915-6fc1de527301", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5132527-9904-4261-8d9f-7188113de91c", "sighting_of_ref": "indicator--b23bef7e-2d87-47a7-a5f4-9e4a8c8bb0ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aa7a5f-6333-4645-9fd9-8d80245bd8e3", "sighting_of_ref": "indicator--69514775-46ba-4ed9-aa27-a40413a3b0b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199d1538-ffcf-4335-87d2-7327b0605f08", "sighting_of_ref": "indicator--d2fe4604-386e-479b-8085-5e77d7ae732f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19009034-9f53-4caa-b891-51a2c3342692", "sighting_of_ref": "indicator--8a181ab7-935c-4595-82f1-c6c194e99c78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1748861-bacb-40fd-9ce5-e8624007642b", "sighting_of_ref": "indicator--3174533d-2ac1-4d41-b948-493bae981008", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48719aa-4ee5-4bac-951d-976bc59e5a3b", "sighting_of_ref": "indicator--12656ae7-eab8-43e4-975f-077afa600e5c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680afb55-4a30-4167-8de0-8163408ade29", "sighting_of_ref": "indicator--a6a4d69e-871b-492c-87e5-a370dde75d46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445189e4-afe4-4049-a3f0-e05d1693148f", "sighting_of_ref": "indicator--022bda89-2d6e-4997-993a-2b4023bce568", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a85c7e3-6e8f-4948-9630-a7f5fa237069", "sighting_of_ref": "indicator--65d5cba5-d0ef-4532-9364-9b38e5c86427", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20c3d3-9457-4280-9847-5849de432847", "sighting_of_ref": "indicator--65d5cba5-d0ef-4532-9364-9b38e5c86427", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b27c168-a797-425a-ab30-19ca1b8fcdfe", "sighting_of_ref": "indicator--9a4a1598-27f7-4c61-a3aa-a21588b66f62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5329d4f3-bf33-44af-81af-e019e0ffb884", "sighting_of_ref": "indicator--8ff94a13-6da3-4b59-872e-572a8956b2b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a91e99-d00d-4cbb-b2cb-7084ca70ca3b", "sighting_of_ref": "indicator--d5f36dfa-454a-412c-8688-6ecaaed70a15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84c29af-21bf-49d5-b6c4-483664058cff", "sighting_of_ref": "indicator--bbf2d418-e0b7-4ec0-827b-f76209f5fa10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645d03a9-5763-4b2a-81b9-59696227631e", "sighting_of_ref": "indicator--474a30b4-6d35-4afc-b162-ed93e2414f74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658409a1-4dcf-482d-b520-9676bdb78b0d", "sighting_of_ref": "indicator--be6be0b9-6ec1-41d2-a41d-91ec0748e3e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8991fe84-0817-4c22-8b65-261f20059b1b", "sighting_of_ref": "indicator--76c81708-4c4f-4be0-90a7-f91aaa6a25f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ed628f-59bb-4924-8607-c98cfb041a62", "sighting_of_ref": "indicator--7cbfb4c8-ac4d-42c7-9590-3762950e119a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c8ca37-5d05-4549-8788-61cdf0cdaeeb", "sighting_of_ref": "indicator--99e81286-6cdb-4db6-9313-3b698515a280", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71f9791-fe41-4590-ab75-3dd538b16c3d", "sighting_of_ref": "indicator--0442dd1c-5c6d-4a6c-a113-a3924db7eeff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3868500-4724-4f3a-9c2b-4ba4d9160c72", "sighting_of_ref": "indicator--9e6cdb08-2ace-43e7-b37c-e879cae4c551", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee8b2c3-b669-455b-9181-58a615bff135", "sighting_of_ref": "indicator--28da1404-46b9-4fef-9e21-234b2cbccf15", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63baf8e9-1df2-45b2-b120-f89a04a65f21", "sighting_of_ref": "indicator--a0bbc465-9435-424e-b0c6-d0e2174de39f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4626bf-9edc-4de3-8f0f-a35ac94fb0bf", "sighting_of_ref": "indicator--731266b4-02be-4495-9dd6-033a0a6071b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1c3585-4198-4dba-9191-c7e8082028cb", "sighting_of_ref": "indicator--731266b4-02be-4495-9dd6-033a0a6071b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1c317a-b503-4a68-8ccb-9fb852660654", "sighting_of_ref": "indicator--3802c25f-b3ac-452c-b012-68e631bd7bb7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f895906-ac80-4e1c-bb7d-e5510a22018e", "sighting_of_ref": "indicator--af5570ac-463f-408b-b8ee-85a343ae5a77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45a37f3-5f25-4539-adc8-d0fba31ee761", "sighting_of_ref": "indicator--47d2374e-927d-4347-ab8c-f4e1f6b84bf2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0117c63e-7291-4afc-aa83-8f2e0b0ac4eb", "sighting_of_ref": "indicator--2f779e95-cfcc-4fcf-b86e-93dbc8411b8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500bd5e6-b744-40d5-928e-7d6a4de8d536", "sighting_of_ref": "indicator--c340299a-75da-4554-a7e2-6e3027d35349", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4880cff2-620f-4005-b207-b4b75b6d1562", "sighting_of_ref": "indicator--c340299a-75da-4554-a7e2-6e3027d35349", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c342111-7661-417f-a328-8aa9f2b0140d", "sighting_of_ref": "indicator--b60c17db-32de-4c62-ab1c-e04accaab7f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5001fcaa-d538-4d49-b7b8-3d8c83502abb", "sighting_of_ref": "indicator--0d62ea25-f59a-4ee4-a7ed-9af55d807a8d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0ad01e-8a75-4138-907c-3311e87e63ff", "sighting_of_ref": "indicator--0d62ea25-f59a-4ee4-a7ed-9af55d807a8d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3454974-b4ee-46ba-b65c-077f2f79f251", "sighting_of_ref": "indicator--858c0129-cd64-4d94-9652-f3c5ce872d97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b764e08e-4fcc-4b4d-ad81-751d51866938", "sighting_of_ref": "indicator--29b452b3-39da-4a9e-8d65-e1e099a31c81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b9f476-059b-4bf3-8053-ee5f6d8f90c1", "sighting_of_ref": "indicator--6fc3edb4-f052-4e48-a539-d258db1539a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53d6eac-129a-494b-bccc-80921c5475e2", "sighting_of_ref": "indicator--ed502f64-5758-4823-9d9f-cdd242c22f1a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b35ce8f-6978-4ed8-8246-ce9f614c13ff", "sighting_of_ref": "indicator--f465148a-449c-4dcb-b67e-2c76176b049f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af408f13-4c26-4d06-ab3b-666dfc113322", "sighting_of_ref": "indicator--749516c8-9251-49c1-87aa-296e3f881ff9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dc726d-1c21-4053-8351-2fe5f6f80f4f", "sighting_of_ref": "indicator--1e4f5bb7-1ffd-4eaf-bb66-5bbedd95e339", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fbd63e-fe1d-44f4-a12a-043e8eb3cb1a", "sighting_of_ref": "indicator--1e4f5bb7-1ffd-4eaf-bb66-5bbedd95e339", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72402174-d7d4-4c60-b15b-195a81ff7f07", "sighting_of_ref": "indicator--d87a696b-0cde-451d-9e2e-c9003508357e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c0c744-d53d-484e-85a8-ac5fb8747a66", "sighting_of_ref": "indicator--e6ef08c9-d485-45f9-89d7-dcb7c383542f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dddba9-4d79-483a-b1c4-4971041f17cc", "sighting_of_ref": "indicator--9bcb1698-893a-48c4-acd4-2e178c0039b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d087f7-a312-4db4-823e-64adb9a4e375", "sighting_of_ref": "indicator--9bcb1698-893a-48c4-acd4-2e178c0039b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5035791f-39db-4f51-abed-5a5657461b28", "sighting_of_ref": "indicator--602a21e9-cec9-4a06-ab63-55edf32461fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f901a402-bece-4e21-84b0-61b58eba32d4", "sighting_of_ref": "indicator--4d2a4282-1b81-4d0c-a33f-d6e4cfd64f29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db734e40-baa6-4039-9723-e4cdf13960e3", "sighting_of_ref": "indicator--4d2a4282-1b81-4d0c-a33f-d6e4cfd64f29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52517650-ab67-4b24-882a-d26d8d38e4a8", "sighting_of_ref": "indicator--084edd09-9d26-4e78-b8de-57a2aa9e1eb6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d4f3a7-4dbc-47e2-98c5-d61043f36d68", "sighting_of_ref": "indicator--26b187e4-423a-416e-83ed-16af6f0d3737", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3eb850-d5cc-49ec-a4a9-b84b49fd165d", "sighting_of_ref": "indicator--773e4572-333a-41d4-a9f8-45bca371e4ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e331ded-ac4c-4023-852b-e04c7824d2ac", "sighting_of_ref": "indicator--b9274907-aac0-4bd9-bbd9-5b3a97b63e90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44887761-6a0c-4141-a60b-f63ceedf0927", "sighting_of_ref": "indicator--b9274907-aac0-4bd9-bbd9-5b3a97b63e90", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a277cccf-5398-482d-b915-0f809fde5ef0", "sighting_of_ref": "indicator--7ace19e5-efd4-4abc-9aa2-e484c937710b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1225ed-b9c5-43bb-a25f-643979d6a2e6", "sighting_of_ref": "indicator--9f4d261b-d579-40eb-b3da-ea0d3f8c1d5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e277800-39d0-4efe-a177-01e5e49f61eb", "sighting_of_ref": "indicator--5d870494-1005-48ec-8be3-c832fe4f71e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7372b7-29d4-42b5-a839-d0467830cc73", "sighting_of_ref": "indicator--68675eb0-7eca-4799-9a39-b0a424b06931", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa9de4b-59df-4a6d-a677-b5b1256d2aa6", "sighting_of_ref": "indicator--5b3d135f-126c-457c-a8ac-8d91ca00a2dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fe19aa-1a64-4c12-80ba-d72e21cabc0b", "sighting_of_ref": "indicator--fa446bc6-bda9-4f79-b9ff-9fdd594680b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bcd7e6-dbdc-477c-bf05-691faab5aeae", "sighting_of_ref": "indicator--bf418052-53f0-4f75-9ee8-05b93389177c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed65241-f356-4892-a1d0-51b83edac798", "sighting_of_ref": "indicator--16850b98-28e3-481d-b422-9cc5cdb5b8f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3c8bfc-d79e-45fb-a05f-0016647d10d5", "sighting_of_ref": "indicator--25407b08-381b-453b-856b-ce1de14f1965", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cbe665-de08-44b7-af3b-14c08ab1e758", "sighting_of_ref": "indicator--f3c3e289-8b9f-411c-8303-a13c35217127", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2b45ae-05f8-4646-b48c-6d95c3e1ee53", "sighting_of_ref": "indicator--f3c3e289-8b9f-411c-8303-a13c35217127", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb3a4cf-572c-425c-b88c-64b991a4ceb5", "sighting_of_ref": "indicator--71788eaa-0744-4adc-9d6b-681a6470832b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5b2624-aa0d-4ce8-823e-5f44331ded40", "sighting_of_ref": "indicator--6ed80b33-f126-45be-8565-eaf20c2e8dc7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb8d08-3f5c-4c88-83b4-18ad1585c3b1", "sighting_of_ref": "indicator--d322fecd-f220-4a35-8a2b-8d2d7bb70339", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2773b0b0-92a3-4286-82a3-080167c9ba84", "sighting_of_ref": "indicator--02f50231-6623-4a47-be13-615d92b4cb94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3063ce41-44ac-4d91-b0b0-5e35e0d09d07", "sighting_of_ref": "indicator--766328a5-b3cd-4bd4-a00d-df249c4585d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9138d2a9-7f30-448b-b6f0-6c39cd64dca5", "sighting_of_ref": "indicator--6d472baa-7eae-4ec7-8078-81a100d7baf7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86fc4e4-8e0f-4be6-bd12-4a35f0735278", "sighting_of_ref": "indicator--2a903777-eddc-452a-9622-3b51f5eba257", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd533525-0933-4764-aa75-840343425a05", "sighting_of_ref": "indicator--2a903777-eddc-452a-9622-3b51f5eba257", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32de5786-fbd6-463f-8e93-1bc10e9cf8aa", "sighting_of_ref": "indicator--a51febf9-d4c9-4168-bbd1-39b2f3c995e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071250a0-e2da-4b83-9aa9-6c767d3a7ae8", "sighting_of_ref": "indicator--65491e17-e58d-4e32-962d-b9e38a2f773d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7f8b75-8d50-497e-99f0-d56d07b34d76", "sighting_of_ref": "indicator--749c4a87-6fc6-43bf-9ce8-c4bd26a16141", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bf9c4b-915a-465b-b8b2-9200b44cd738", "sighting_of_ref": "indicator--9e16906d-c47a-4a63-857f-8749656e5b62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2cb929-9680-4086-927b-5cb57f5528ae", "sighting_of_ref": "indicator--f8dfed5e-34fb-4038-b24a-0cfabe942f1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192a905a-fa82-445b-8d2e-80a34f21575a", "sighting_of_ref": "indicator--2abfa4ae-d58b-4308-863b-f5397d86cbd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e809a7ab-09af-4a8a-a0cf-3e9f53e571d7", "sighting_of_ref": "indicator--7431b8cc-8392-45e3-a5ba-9ed55feb65a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d94474-1b39-452c-810b-da8b6b8d7604", "sighting_of_ref": "indicator--63bb379f-5a8e-45f7-9fcf-fc45dd6e91e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b330d12-91d7-4d48-9025-d313d22f7885", "sighting_of_ref": "indicator--63bb379f-5a8e-45f7-9fcf-fc45dd6e91e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b164e7bf-091c-4380-95e2-f48872808b65", "sighting_of_ref": "indicator--1c71011b-9b87-4892-9eda-175c7227a56c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a69c3d-02a2-40a2-9dfd-5d87796597e8", "sighting_of_ref": "indicator--43ebd8f4-1efb-46b8-bd73-140cec380152", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c51d1f-d837-4cb3-9762-29cfb4316992", "sighting_of_ref": "indicator--145e0ef2-e196-4bbf-bd27-705eed4212ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c9de8a-0609-4418-bd68-d2068025310b", "sighting_of_ref": "indicator--3d2fe83e-6a9b-4fda-b76c-b893139b94b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f05be3-ae8c-4208-8594-93e3704b3226", "sighting_of_ref": "indicator--3d2fe83e-6a9b-4fda-b76c-b893139b94b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af56946e-40f4-4fa2-83d2-648035cb6f7d", "sighting_of_ref": "indicator--33e4dfa0-65e0-4862-9f99-4407ef1bbe48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00cfd1b-c16e-4873-a116-21eb108ddf28", "sighting_of_ref": "indicator--eabe35b2-3647-4b13-aad3-af62874be7fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9962ae6-39e5-48d5-b421-9b46320b85b4", "sighting_of_ref": "indicator--eabe35b2-3647-4b13-aad3-af62874be7fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62543f44-e926-4524-9141-ca2d43cfb387", "sighting_of_ref": "indicator--beeaa2b3-52ef-49b7-9c24-3ac88517550f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b6a3ff-4126-46b2-b530-55b26575ec3e", "sighting_of_ref": "indicator--dc3e6152-7058-40cb-812e-333590c1ee19", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca97689-2638-4598-9f6a-604af3488140", "sighting_of_ref": "indicator--dc3e6152-7058-40cb-812e-333590c1ee19", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13b3c12-50dc-4e41-a312-815886127c1f", "sighting_of_ref": "indicator--74076a6e-7ffc-4c47-818f-3a8c470c7e55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501fd789-63cf-49f5-b4a1-b36388b85372", "sighting_of_ref": "indicator--a45da1d5-101d-4055-a3b4-245937bd0353", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244da729-3334-432e-9eba-35d186fbe65e", "sighting_of_ref": "indicator--6996e710-0ec5-4eb8-8032-e0552031ef65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbdff1a-f41a-4ac0-b08d-52a7f0b0eb82", "sighting_of_ref": "indicator--94a3a5a6-e94d-4068-b83e-0ad75c608826", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43129f7-12c9-4e54-8970-7291cc4f287b", "sighting_of_ref": "indicator--a23baf62-25ae-45f0-a5bd-9754c7d994ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cd1dd2-2d6a-4b4c-b1ee-2549e6bb9e54", "sighting_of_ref": "indicator--ee1b5b59-93cd-446b-8768-9b2e315d484c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb858d2e-fb48-4477-91b7-7070cf965752", "sighting_of_ref": "indicator--678fe282-d83e-44fe-b87d-6f46fe5b002e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5e1340-2185-435a-9fa9-6193f21fa347", "sighting_of_ref": "indicator--a7f292aa-f7fa-4c03-96ea-0086e3debc4c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac58fa-c538-4afc-8551-4cb46b0f2342", "sighting_of_ref": "indicator--b51d8a08-a268-45ac-8e06-a67380ad7dac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee493505-f281-400c-9da4-b5f99043a338", "sighting_of_ref": "indicator--a0172788-f2ce-452d-b568-6094e0e31f36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f041e254-d5f2-4883-b74e-4f6cd3d73123", "sighting_of_ref": "indicator--eea6ac00-d44c-4e73-baed-d0ef1beccd9d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a91006-29a7-4d03-adf9-d44cea422467", "sighting_of_ref": "indicator--6a124cb5-dc8a-4271-9c6b-5a61dc90563c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9309d6e-d935-4d84-b533-07ba92bb1d2f", "sighting_of_ref": "indicator--6a124cb5-dc8a-4271-9c6b-5a61dc90563c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38d850f-391c-45c1-8d3f-c9a4ee9706b3", "sighting_of_ref": "indicator--949f743c-47d4-4eed-b672-a5cb51ed9fb7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f2f6f1-a254-4262-9bae-e19867501c36", "sighting_of_ref": "indicator--7fefc1e8-29d1-44d9-8882-52df4c3d71fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3fa6a2-30b1-4c05-99d8-d7130fd99df8", "sighting_of_ref": "indicator--94460b10-1a7e-496d-96b8-5848ecf75cab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68099b9c-c644-4942-a17e-324d290595b2", "sighting_of_ref": "indicator--a2617cd2-adbf-460f-9993-27719c262110", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5e4c47-f700-4e44-b178-0457d0139360", "sighting_of_ref": "indicator--e864b365-eeb6-48e1-9106-f56513689e4c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d8d8cb-b65a-49f7-9d07-95c3591bf6c4", "sighting_of_ref": "indicator--036ab9ff-840d-4a6b-825f-299109e3ffad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4166db-f06d-40db-b422-bd713a5ed993", "sighting_of_ref": "indicator--48ac7f93-7c56-4f7e-82ef-3f6a578432cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eba84a-263d-4487-8e6b-1b6bd5088748", "sighting_of_ref": "indicator--4b82a367-30d9-4801-8be8-da8d5d1c0298", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c12702-6d57-434d-bb92-c169fa3c818d", "sighting_of_ref": "indicator--d8e71408-57a5-40f4-b434-972fbaef4a43", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005f0ac8-e288-4126-8ac8-8c5890ac34e6", "sighting_of_ref": "indicator--ee1edcfe-ba4f-4b3b-8ee3-bc7cc92fa1d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dbfe41-3cf9-4d33-9fbb-94cae6ea62ce", "sighting_of_ref": "indicator--6916eb74-0f16-421f-a68b-0fe5b2a9f621", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014de6c5-e555-4fa4-9b2a-cc393a160f67", "sighting_of_ref": "indicator--6916eb74-0f16-421f-a68b-0fe5b2a9f621", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c6e4b7-34ed-4b28-8686-90cf8dc7d383", "sighting_of_ref": "indicator--60b69470-c09f-43a1-9887-9d1a7c61d7b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfc820b-049b-4954-83de-7152264a51f5", "sighting_of_ref": "indicator--df25591d-604e-45f7-a8c3-4038a50a5190", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69794e0a-605f-4a67-a7da-d3f3b8af7e02", "sighting_of_ref": "indicator--2c71ab66-6a6a-4b47-8c51-f99467298d6c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4841e09-7c51-414b-ab81-e9d304c732a5", "sighting_of_ref": "indicator--ee15f46c-eea7-4615-b9de-e5ada94106bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c119db37-510f-4b2b-90d1-2c5cf3887dac", "sighting_of_ref": "indicator--7aa56b4d-a1fb-4993-a759-f1de8e669f01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f37c67e-86bc-486e-870e-d6bc20405a69", "sighting_of_ref": "indicator--7aa56b4d-a1fb-4993-a759-f1de8e669f01", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180f3672-10d3-4cbf-9e0e-1be2cf946a88", "sighting_of_ref": "indicator--23f0bffa-503c-4469-8b48-5ae9fc07dd62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdc28b1-8d71-430d-a6d0-da105ee7e1d6", "sighting_of_ref": "indicator--23f0bffa-503c-4469-8b48-5ae9fc07dd62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41839131-12e7-41ef-ad7b-233b0e409ff0", "sighting_of_ref": "indicator--23f0bffa-503c-4469-8b48-5ae9fc07dd62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4520b3b7-641e-4925-82c8-414f89ff4977", "sighting_of_ref": "indicator--bc39d28c-1d41-470c-9425-418856dd36db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db00ac01-79e7-4b80-9e35-e1fa43722472", "sighting_of_ref": "indicator--d5675713-d6e4-4b00-93ed-c1b28afc74bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369c87c8-1b0b-4aae-8888-e6d7aa851157", "sighting_of_ref": "indicator--d4ae32d7-22e1-4ffc-ad00-e2ca76dae95b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64230a82-a412-4723-8b7e-8e9ca30beaf8", "sighting_of_ref": "indicator--89f9ca1a-b4b6-4423-ba25-d7d929d9a082", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ba6b3a-70a9-4094-bef9-15b42fb6df1b", "sighting_of_ref": "indicator--b905a5be-280c-4757-8b8d-6822b700d017", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eeafb52-84a0-4c41-9e43-3631901ea7b8", "sighting_of_ref": "indicator--a211a62a-9a18-46e9-a4d9-fe4995a9e2d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607fef77-a793-49d5-b8ec-751889420f7e", "sighting_of_ref": "indicator--e92680ef-7128-49b6-8dfd-0306434790df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7467e39-728f-4482-96ce-a40abc5d1496", "sighting_of_ref": "indicator--a56f856c-bc23-409b-b0c6-92c2f93a9509", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd82fbd-9fbc-446b-a84e-5e1dea41412e", "sighting_of_ref": "indicator--a56f856c-bc23-409b-b0c6-92c2f93a9509", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3821fd-c723-455b-90b8-6a1d2a72a1df", "sighting_of_ref": "indicator--456cbb48-399a-4235-b994-0805710d429f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c173552d-2997-49d3-adbf-5beadd6e9027", "sighting_of_ref": "indicator--c5ca7684-809b-4e5f-8944-45d419e4af35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e43efc1-e3d3-42fe-95db-36dd13948b04", "sighting_of_ref": "indicator--c74fb3db-0170-4407-90ee-0ba2df15bc0b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbfb7b2-52ef-4718-92e7-968470298d93", "sighting_of_ref": "indicator--c74fb3db-0170-4407-90ee-0ba2df15bc0b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6188cb5d-2d23-401b-a42d-b5228cd8f80f", "sighting_of_ref": "indicator--478e68c1-bc78-40af-8418-f3ed7f90021b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f21adab-c264-4cd5-b4f0-97e5e09eb374", "sighting_of_ref": "indicator--478e68c1-bc78-40af-8418-f3ed7f90021b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7187f4e5-8f4d-4653-8f95-fa10353738a4", "sighting_of_ref": "indicator--69508988-2022-4c70-bcb0-e36198cbd45b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d01a5d-77da-4b9a-a61b-32b041082c96", "sighting_of_ref": "indicator--d327ca93-94d7-4d65-bee7-4fde3ba55a35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0991f970-a04e-4669-a19e-9738bc2aa00a", "sighting_of_ref": "indicator--8977c812-2da3-4f52-a052-54e4adc6c26a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e30c5b-2562-44c7-a1e2-41b095875598", "sighting_of_ref": "indicator--5f2e37a1-fb3b-43df-bd26-caa8d7bd519d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7162736-b562-4146-b62f-96128a590466", "sighting_of_ref": "indicator--214b644e-38fd-42e9-a847-ca18d556c27c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7029a7-f0ca-4ca9-a7e8-1fd30e137703", "sighting_of_ref": "indicator--46563a5d-9c94-4b9a-9155-ccde73725fbf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13363f54-7373-4508-8bdb-eec075270021", "sighting_of_ref": "indicator--aa02b003-1dc5-4b66-8b92-7abf4c629466", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc430478-96fe-4cfa-8833-2925c8d6abf5", "sighting_of_ref": "indicator--9147ca1a-467f-40e9-a402-974a63dc2163", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b38375-15d0-42ff-a4eb-6102fb8e9783", "sighting_of_ref": "indicator--9147ca1a-467f-40e9-a402-974a63dc2163", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426ee233-9281-4e25-bf73-cf17421c30d6", "sighting_of_ref": "indicator--33d846f9-c6f2-4a39-a51e-9059daffe00e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721c6d95-c606-477f-8929-d1b557b987f4", "sighting_of_ref": "indicator--33d846f9-c6f2-4a39-a51e-9059daffe00e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79448e2-653c-4c05-ac65-5ec9e448fd64", "sighting_of_ref": "indicator--48c467b2-593d-4c85-8df6-5bc2d67acd8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc17f6a8-8b1f-4778-814f-7a849771fa5b", "sighting_of_ref": "indicator--8094b576-4053-48da-b871-869d66f7de1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9c232f-0bb6-4978-a357-837c215eecb7", "sighting_of_ref": "indicator--ba6914cd-b7a4-40dc-b448-8557fbfdecb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b15f36-cc62-45e2-ad52-470f2bd77614", "sighting_of_ref": "indicator--a556d56a-f0f5-4a7a-b5cd-cc5f762ccac4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6adbf98-22b3-4c0b-9c1d-44438074bacf", "sighting_of_ref": "indicator--fa4eb715-4ba4-4e83-9ce0-296a0eff1d99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4fbc7d-0240-4f83-ace9-2ae71a615b4e", "sighting_of_ref": "indicator--a37ab392-e271-4c46-b303-62321467ae36", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7685e4e-82bc-4f50-8eff-be335b141646", "sighting_of_ref": "indicator--64e2c1bc-bcbf-46fe-8b79-7350b011c363", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ab42f4-963d-4b00-8659-005d72e7a7e0", "sighting_of_ref": "indicator--8bea213d-b6d9-4b77-b0da-576b956bc796", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241c1de1-fc29-43b3-9258-1ccb9c427688", "sighting_of_ref": "indicator--16d7816b-38e2-4879-bd76-98d7183155c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd77139-95b9-450c-85bf-ecd3f8b91eb2", "sighting_of_ref": "indicator--225a7500-f3a3-43aa-b834-d05e77123c4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0d136f-14a9-40e0-8b5e-4caf5972aae4", "sighting_of_ref": "indicator--b4fdafdc-eb59-48e4-bd12-424b1f049119", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef63eaf-e41c-4bba-9529-c32e11c60d15", "sighting_of_ref": "indicator--c3054f55-1c1f-4138-86bc-05f401171ecf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd0da96-e08a-42a7-9067-b5c04c8a0b39", "sighting_of_ref": "indicator--1c614bf1-6db3-4c6e-9a4d-fb6d083279b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893c957d-543c-4933-a7f7-aa42fcb39b78", "sighting_of_ref": "indicator--1c614bf1-6db3-4c6e-9a4d-fb6d083279b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b814a74-9c5f-4e97-b300-ec1efe42b4d3", "sighting_of_ref": "indicator--d7a10384-e6b4-40d7-a194-4503e6d698a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abc991d-11a8-4107-8049-f6d11e521334", "sighting_of_ref": "indicator--1db30b41-404e-4335-a2cd-cb8662b41c8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7da2b96-727b-4d0c-8be3-8cd61a43af30", "sighting_of_ref": "indicator--f9d070c0-59a3-44a4-9844-353b638753e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ef7c40-31b8-4898-a902-ad204a031533", "sighting_of_ref": "indicator--0e9259ea-0255-431a-a239-2fc0a7bc6605", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c0aa5b-2407-4721-b29e-d7f78851c0f2", "sighting_of_ref": "indicator--0e9259ea-0255-431a-a239-2fc0a7bc6605", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94125cd7-a6fd-4d5c-93ef-05238dc8297d", "sighting_of_ref": "indicator--32bcc771-138f-4418-a764-913f1a95d0db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cbd2ed-890e-4665-ae46-274509139b22", "sighting_of_ref": "indicator--32bcc771-138f-4418-a764-913f1a95d0db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef60a2f-95f5-4e21-a43b-27c32bc1266b", "sighting_of_ref": "indicator--ad04a567-cf08-4fb9-a794-4d92c3d31d59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9877f58a-7786-4aec-a6ce-d0101581b94e", "sighting_of_ref": "indicator--0554b5fb-3edc-48cb-876c-a7a1cadc7ad7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a26bab-fcf9-4305-9cb8-fc5539654baa", "sighting_of_ref": "indicator--d121346e-5b3b-4294-ba71-3c6955c27555", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef411d7e-d13c-4619-ac79-6eb36e27bac7", "sighting_of_ref": "indicator--0c202a0b-9881-45ff-9756-fbcf99b9ed54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4bd634-3c56-4cc7-88f8-b58106fae170", "sighting_of_ref": "indicator--0c202a0b-9881-45ff-9756-fbcf99b9ed54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e730bbdc-d156-4957-827a-e46146b8be6d", "sighting_of_ref": "indicator--60b66840-1b3f-4e8c-98cd-1afea83c6413", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a99998-67ba-441c-908d-5ebcc8e77d69", "sighting_of_ref": "indicator--f10ede10-5594-4ac7-aa1f-a43d0ab0715f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933e9b41-d098-44f6-8506-cbed49f85d06", "sighting_of_ref": "indicator--3c2de383-c489-443d-9e03-52af5839ba05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23778039-b69a-4133-a3a7-f8b1bc34247f", "sighting_of_ref": "indicator--3c2de383-c489-443d-9e03-52af5839ba05", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9468bc89-b601-414b-90c8-4eb951222ebc", "sighting_of_ref": "indicator--3c2de383-c489-443d-9e03-52af5839ba05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ffaa87-920b-4d55-8f11-02111e1d94be", "sighting_of_ref": "indicator--b6e9c68a-dcb8-47d3-8139-90871c3410ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ccd87e-2170-4d88-943f-cdebe14ce7fe", "sighting_of_ref": "indicator--c47551c2-3c3b-491c-8735-dd29b997c912", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c9028d-8ce9-4d54-95a6-8b2a491b0e36", "sighting_of_ref": "indicator--a77891c0-5a5b-4207-a3ab-25707c66b4bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e8f5e5-5c41-45a2-a6ce-45b3e6990f19", "sighting_of_ref": "indicator--1c27850c-69ce-4785-b4dc-baf17d85548c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41f3e9a-dab4-4876-a125-e2a78a59cd27", "sighting_of_ref": "indicator--3efb134b-4139-40fa-b0f6-5a2903d96418", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ce17f4-4ece-43e1-9a4a-eae39f2e2298", "sighting_of_ref": "indicator--3efb134b-4139-40fa-b0f6-5a2903d96418", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e33159-b211-4e6c-a695-9bf9fd65b27e", "sighting_of_ref": "indicator--3efb134b-4139-40fa-b0f6-5a2903d96418", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87c47b9-8e76-4a09-be0f-b05bee689fed", "sighting_of_ref": "indicator--45da8b93-764e-47ef-bf04-311bd3d087e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d682a4-e2e3-4f1d-8636-53162ce5fe4f", "sighting_of_ref": "indicator--0f72ee47-6f90-4308-bc27-c3d41b48bb9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ae6997-5243-4b5c-bba8-bb6068ec38a0", "sighting_of_ref": "indicator--79feb076-d28e-463a-90e5-193f8a645b0c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f98de6-3cec-44ff-b46e-c48ba47ba112", "sighting_of_ref": "indicator--79feb076-d28e-463a-90e5-193f8a645b0c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb42b79-f878-4f25-baf1-d6f1026fb620", "sighting_of_ref": "indicator--79feb076-d28e-463a-90e5-193f8a645b0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fc4042-4386-47b4-b306-ab021d7e943b", "sighting_of_ref": "indicator--d1718197-ce61-46b7-ac19-27703b40429c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50f2c09-706c-4636-a6f0-333a9bc33131", "sighting_of_ref": "indicator--3f0393da-3a41-45e9-a7b5-acea80a2563b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63461d4-e886-4fc2-8f78-6247df8d1349", "sighting_of_ref": "indicator--3f0393da-3a41-45e9-a7b5-acea80a2563b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad02d2e-1cf7-4c8b-8460-8412169ebe76", "sighting_of_ref": "indicator--eae44399-d54a-4e43-b4c7-ac259926e1fa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ad7e5c-1642-4cdb-8bc4-780128b92067", "sighting_of_ref": "indicator--dd0c3ab5-6071-4a6e-adb2-86456529a0ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adc5552-641c-4c6a-b53e-e9cca702b8ae", "sighting_of_ref": "indicator--dd0c3ab5-6071-4a6e-adb2-86456529a0ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2e85d9-7a6e-4951-9512-317ae00fdb22", "sighting_of_ref": "indicator--bcb936ee-7a85-4468-aeed-259554735fab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bbe3ec-32ca-4cd2-8e90-a7464865e326", "sighting_of_ref": "indicator--4ea1a347-c7c7-458d-8936-6870795f38a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f9a83b-7408-48c7-b357-88bbdf83a2d8", "sighting_of_ref": "indicator--3d3340b1-4ba2-4206-9a0f-aec03636c63c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15b497e-cd76-4a0f-95ff-97ee9a156edf", "sighting_of_ref": "indicator--9f66ad66-5dda-4abe-bd27-d7801110a20a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b96c67a-0d5f-422d-9e88-64d76bd55314", "sighting_of_ref": "indicator--b25d25e2-062b-4750-9440-7b3e531de61e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa81c61-c593-4283-b81e-dac054fffb3a", "sighting_of_ref": "indicator--b25d25e2-062b-4750-9440-7b3e531de61e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f454c6-1b7b-4f59-af6f-1b595be5a36c", "sighting_of_ref": "indicator--b8bd5c74-d4ec-421a-be05-cdd07d3cfee4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b215bbd2-1e82-4c85-89c2-c8d8a6cd1150", "sighting_of_ref": "indicator--5b524f62-bf18-4384-850d-e878e80cd2a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8088eea9-cde1-4a59-aab0-6d564610501f", "sighting_of_ref": "indicator--0af81fdf-736e-4107-989d-7f4bf2516f61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6669cd06-13c5-41a9-8ee7-abc32c97efcf", "sighting_of_ref": "indicator--b27ceccf-92fd-49c8-a6e5-4e94600e030e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c726b97-7701-46d2-9250-3022394a27f9", "sighting_of_ref": "indicator--b2a16cbe-3364-404c-84d2-fd922c28ea54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a82ae52-d6a9-4a47-b8c6-70523375c20c", "sighting_of_ref": "indicator--3acb1e28-712a-4cec-930e-0601eabb4405", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af4eccc-33c6-4eef-b8a8-b785fb447de5", "sighting_of_ref": "indicator--12deddcf-68e0-4d18-acb8-2722712d9d11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818eb9fc-6a6c-4fad-9ca0-dc5d792ad0f0", "sighting_of_ref": "indicator--12deddcf-68e0-4d18-acb8-2722712d9d11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b71ad9e-eca5-4334-87bc-205a513f5034", "sighting_of_ref": "indicator--22f63db0-00e0-4b7c-9cd8-a0c05f62679b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53cd909-c36a-4cf4-86ff-9e8af9b1e869", "sighting_of_ref": "indicator--3fb74ae8-cde7-4712-8235-f6e7bc383d4b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c65d74-ef5b-45b5-97a3-abd2e915533b", "sighting_of_ref": "indicator--3a01f253-b0ec-4d69-bba9-41362767c501", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aeb2b0-8a50-4d72-8fe3-719dd0b7e70c", "sighting_of_ref": "indicator--a5c4203f-df19-47b4-a21d-edf538b299a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9250cbbc-93f5-4066-a5a5-192b9d545cb8", "sighting_of_ref": "indicator--29328ecb-0c96-4b37-a0c3-d1c7e054020c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcb5f45-631d-48af-81ee-c3486de5c422", "sighting_of_ref": "indicator--02a5b2bb-2712-4395-bfe1-dd5475751745", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813a58eb-7394-4233-8c24-104e1c88e6cd", "sighting_of_ref": "indicator--a2effdd1-a8bc-48f7-9b31-1db26f660201", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018623a8-4008-4327-b817-0d8389dd4c9a", "sighting_of_ref": "indicator--6145f9b8-7cda-4ec4-9438-49e125725f85", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260b2849-5332-4f25-87a9-72dbbb8e3e41", "sighting_of_ref": "indicator--aba45152-4f65-42c4-866b-8edd1f733560", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438e9ea6-f8e7-4fe5-85f9-e67929444e8f", "sighting_of_ref": "indicator--05d40fb1-62d5-45c2-b1b1-caed1278da61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9e5bce-3090-4d94-a1ed-7fcdd7e86e06", "sighting_of_ref": "indicator--0636b4db-8650-4504-a786-ca3e9a531873", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b5e00f-6244-4ffc-942b-d690340f3f53", "sighting_of_ref": "indicator--dd4db18e-a806-4d52-b37d-04035e67bdac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ba8542-a2e8-4208-8d59-9187f9d098c1", "sighting_of_ref": "indicator--03814162-d51b-4d97-8c7c-0300ab2a001c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ff6322-282e-4a61-9c7f-d21186440b24", "sighting_of_ref": "indicator--7bf0f9ac-36d4-42cb-8c47-804af2aa8efe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bff67be-4b19-4d32-b44b-c35b5a63805e", "sighting_of_ref": "indicator--2c59262c-ef07-4fc6-bfc0-f3872a88c9fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02e8e80-a4ff-42b3-8000-3724dbf55af1", "sighting_of_ref": "indicator--a747a0c1-72cb-44ef-b738-55fe4bdc901b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27ec98a-81db-4b18-ba7c-e1978b8046ef", "sighting_of_ref": "indicator--c3aec95e-7b24-4c81-aa27-50188e826c1a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a3ca68-4cf4-45a0-8f01-cfab73246310", "sighting_of_ref": "indicator--d29fb63a-a365-440e-a386-3f41be448482", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea3988c-9b36-488e-913b-24ae6a28ed61", "sighting_of_ref": "indicator--8aec2f37-39cc-4dbb-8591-85763202dc9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bd69c5-3919-4167-997b-05caf345212d", "sighting_of_ref": "indicator--77f45bcc-83f9-49ce-afbb-756915e6633c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e41a540-ea8f-4b8e-8565-eb85249363ec", "sighting_of_ref": "indicator--f21c34f5-cf3b-49af-bad0-5dc46701910d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42617163-5531-492c-b98b-a45edbbd647c", "sighting_of_ref": "indicator--10e61a92-fb74-4d84-8c32-7b08d0505fb3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54d1838-5477-4d00-8e30-834298694f7b", "sighting_of_ref": "indicator--10e61a92-fb74-4d84-8c32-7b08d0505fb3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b7ef0f-dafa-4366-912c-79ec8872b204", "sighting_of_ref": "indicator--3af0bd75-57bd-487d-9f7e-56e2013733fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c1dd99-bc71-4eb9-83e1-ecd054c47d21", "sighting_of_ref": "indicator--e88cdb6f-cb79-4a2a-9688-1fa820e37fc4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2090532e-79b1-4ef1-9756-6422ee0ca93d", "sighting_of_ref": "indicator--e88cdb6f-cb79-4a2a-9688-1fa820e37fc4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f2a199-1acc-41c4-85d7-17b12708c358", "sighting_of_ref": "indicator--e88cdb6f-cb79-4a2a-9688-1fa820e37fc4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339501d4-9b61-4619-b3b1-9e07de8761b5", "sighting_of_ref": "indicator--66d92ed1-dcc0-4316-aaf1-f6225a78655e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5153d57b-2a76-4914-8d2b-d49529c15587", "sighting_of_ref": "indicator--b37a7426-6e38-4f27-906f-a804703e659c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47f84e5-af33-4d4c-bb17-46c98bc25d7c", "sighting_of_ref": "indicator--b37a7426-6e38-4f27-906f-a804703e659c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e4e969-01c1-4817-8456-3803f8b881e1", "sighting_of_ref": "indicator--b37a7426-6e38-4f27-906f-a804703e659c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418b8376-27bf-4b82-8e29-3c8bfd732605", "sighting_of_ref": "indicator--0fa64066-853f-4907-a081-7cb38ae1e045", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed284fd-d397-437a-ab35-c1ca57f30e01", "sighting_of_ref": "indicator--b8499062-4f4e-459e-bf7a-b017cb0fac99", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419a600c-190d-4ae0-9fab-c0a40a9917c3", "sighting_of_ref": "indicator--f6446631-20e4-4edf-bd24-3f8b7d22803a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39c4900-0900-4182-b4af-e19fc63ac6aa", "sighting_of_ref": "indicator--d6186b9a-49c6-4d34-9a62-ca312ceccc88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a537e1-ced7-4c53-beef-f89bf74b294d", "sighting_of_ref": "indicator--d6186b9a-49c6-4d34-9a62-ca312ceccc88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edc249c-c790-45a5-af69-5da4779fd5f1", "sighting_of_ref": "indicator--d6186b9a-49c6-4d34-9a62-ca312ceccc88", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c47a5f5-0294-4e42-b2bf-6527311ab0cb", "sighting_of_ref": "indicator--cd27a153-de31-4410-97f3-7b9b3b59b132", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e60bea-b761-49b1-b5ed-24247cb700cd", "sighting_of_ref": "indicator--44c111f4-fe21-48ff-a057-f45a4faa1216", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d88bf32-02be-41fb-bf93-b98fa0915a04", "sighting_of_ref": "indicator--7edb72ba-e94e-4212-9962-216b99e3e672", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5582c900-645f-40e7-9d08-295dc53caa4c", "sighting_of_ref": "indicator--c176fe27-11c4-4fa8-960f-2923dc4f8e92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6de7439-48d2-4c57-8087-f4c84ff68ceb", "sighting_of_ref": "indicator--2bc1d756-5779-4e0e-9936-5f1a6bdfa7d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7e95e4-4a9d-4340-b1e3-038cc272c87b", "sighting_of_ref": "indicator--c8facca9-25b4-4e79-9bb3-c65362c7d51d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd334a1-1ccc-4e9e-842d-214d8ad10349", "sighting_of_ref": "indicator--65c26fd6-d2ba-47e2-982a-f94e109c5e96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6129d2-427f-4b23-9f1d-862d0d150377", "sighting_of_ref": "indicator--d1ab32c0-ab22-4c4a-a48f-39c529491748", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ca2a20-56f4-4ee8-9490-5b2b2da340c5", "sighting_of_ref": "indicator--f3d0638b-eb7e-49f0-b833-6dd95584041d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cde07f-a846-4916-a3c1-e76e582e4304", "sighting_of_ref": "indicator--2417844e-f723-469e-ab5a-df7ed29b05c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f068ef-84a3-4561-b5e5-050ca840d355", "sighting_of_ref": "indicator--2417844e-f723-469e-ab5a-df7ed29b05c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08271ae4-8557-466d-b663-0fe60da6792f", "sighting_of_ref": "indicator--2417844e-f723-469e-ab5a-df7ed29b05c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeafa6d5-bb38-4e37-90d5-af05cbd72a2c", "sighting_of_ref": "indicator--a964d57c-2117-4856-9587-28abc6d86e7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ed4eab-bda1-49a8-9c20-f1da1f932c35", "sighting_of_ref": "indicator--a964d57c-2117-4856-9587-28abc6d86e7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf197d7-6478-46d4-9c44-1da052377416", "sighting_of_ref": "indicator--44faf073-f5a8-4b69-a97c-745ab0b7eb5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c4496e-9c73-4125-972d-d8b8b8fa7831", "sighting_of_ref": "indicator--2def8846-fc53-45fe-9e28-7819ec3158d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1f68c5-8156-4e88-a009-61ed10d283ee", "sighting_of_ref": "indicator--5da20eca-bfdd-4ea5-a7f3-9d5476ea2f94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff1d6d0-d44f-4b43-88cf-ed519a7b7e12", "sighting_of_ref": "indicator--a8ae8ec4-83cf-41f3-9f3a-b5078d292589", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6a7881-a699-4538-b57b-5555cbbf7ff7", "sighting_of_ref": "indicator--3a316ceb-62a1-46b4-a422-ae3cf7905cfa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86072255-b155-4b76-8638-2dfd70fbff6d", "sighting_of_ref": "indicator--7646f842-a0ff-46df-8968-3cbf133ed439", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a67d62-b171-493b-895a-620454b1cf29", "sighting_of_ref": "indicator--61d63a5e-2c03-42a9-94d4-536fc39bebf2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e282ec-47b9-40b5-8ebf-53457ec72337", "sighting_of_ref": "indicator--1b45a4a0-5027-48bf-b03a-8dd29ce92efe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d791bc-4be0-4fdc-9afc-7d03a006dc24", "sighting_of_ref": "indicator--c45ae855-1cae-4375-928e-78e1539895a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0070a0cb-d40c-4c85-8f44-5b02b7c040ac", "sighting_of_ref": "indicator--4b845a97-e972-4194-8d9b-0b0421c856c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14147bce-6ff5-4571-a8d1-9c7b74426041", "sighting_of_ref": "indicator--b855dafa-f55e-4dfa-b146-485290a7523c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08f30e0-b17d-4622-8dbb-08f9dc72c47b", "sighting_of_ref": "indicator--34f973ed-7fe8-4cb4-a543-f76ef90c52e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d930a8-4e4e-4e58-832f-6d98cebafbca", "sighting_of_ref": "indicator--f8cdd589-8573-4752-884e-dbd01096c792", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6caeaa4-a1c9-432b-9f8f-fe5d13c5a65b", "sighting_of_ref": "indicator--017840e2-9f6e-4514-8176-3bc31803f876", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba4dd4b-06d9-4625-a495-36afa8fe77a5", "sighting_of_ref": "indicator--017840e2-9f6e-4514-8176-3bc31803f876", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da918340-63c4-46f9-81c6-8b4dabf9aaa7", "sighting_of_ref": "indicator--ae83ef44-59f9-4b6b-8474-43da6a30c108", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3753ab4-28b0-4b25-95e4-6212b0703849", "sighting_of_ref": "indicator--e36b5db7-811a-4b26-b8e6-e68b9f53da3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cb87d9-9a68-4f53-b82e-f2f12d75dbef", "sighting_of_ref": "indicator--a0b7a282-db6f-4a18-87ef-4b03fdf5a9d1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3e7939-a96c-424a-92c2-2595d170ecdd", "sighting_of_ref": "indicator--5b59052e-45cd-4511-881c-08e15cc0628b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7e11dc-1287-4128-8f40-6bf090d60be9", "sighting_of_ref": "indicator--52d20bb0-05cb-4194-935f-a81573f82e7a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed14bb4-1182-4687-aafe-a54e6745305f", "sighting_of_ref": "indicator--5ad7dcb2-1996-45fe-aa46-da78e061494b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fafe870-e91d-481f-945b-bcb9acc5dd6c", "sighting_of_ref": "indicator--1e47747f-d89e-44f1-91ae-54e3a651e35d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0471a838-ebf3-4d00-b4ba-18f8be3c2f94", "sighting_of_ref": "indicator--1e47747f-d89e-44f1-91ae-54e3a651e35d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c8aa0d-c615-4984-bd7a-ff4600f3e6b5", "sighting_of_ref": "indicator--6b7991bd-3832-4fd4-923c-1b6fe2a229bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efae6a64-f46e-4f22-895e-e198b1dfef3f", "sighting_of_ref": "indicator--479f887e-9bbf-4e61-b86d-072d23a6c777", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26d0b1e-2c2e-42ec-aa0e-ec584af37f6a", "sighting_of_ref": "indicator--9eaee264-cc75-40ef-9409-3800713cdf87", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9887ae52-4fbc-457b-af59-3218585bc0c8", "sighting_of_ref": "indicator--9eaee264-cc75-40ef-9409-3800713cdf87", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5371b6-690d-41b5-8bbe-a0bf5d9b2d2c", "sighting_of_ref": "indicator--d55d1353-ac8e-42aa-8562-19ac80b3a353", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cff035-5f0f-4a8b-ac6d-20c697f52e07", "sighting_of_ref": "indicator--6baa151c-59a6-4147-b467-27f72e6fa2a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7381b0e8-8cf9-484e-9dcf-aa75cff08840", "sighting_of_ref": "indicator--d3d25b05-a34c-428f-a06f-83fb62e75456", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38485836-31e1-47fe-b7e6-5a0f80df7446", "sighting_of_ref": "indicator--57f7d6e4-b428-4216-b7f0-15aec36eb737", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9053c8b1-ee8a-46a3-9819-2dd2d7c1bd5c", "sighting_of_ref": "indicator--ac4aff37-97c7-46cb-a712-2cf058934d54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9680cbe5-fd25-4cbc-a03d-e142118ca713", "sighting_of_ref": "indicator--eb447249-2189-4f9a-9d83-91c8ff868227", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b8aa03-3863-44b9-a454-6fa7416b584a", "sighting_of_ref": "indicator--78c1b1d8-ca5a-47f5-9960-697a4698bd92", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c66eaf3-4171-42a8-99eb-a4540028dd72", "sighting_of_ref": "indicator--d78d7b79-53b0-4deb-b68b-0c82fe8c4a77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027692a3-273a-40d9-85fc-9cb4117146d8", "sighting_of_ref": "indicator--95b1dff8-e0d7-43cf-84e6-237e3b58c61f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3255c348-44e3-4fa0-af38-d0c46f997558", "sighting_of_ref": "indicator--58748277-1fa9-4e69-b4a0-89503f41285e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab235709-d677-44ae-85df-3dad6327dca9", "sighting_of_ref": "indicator--683d3b61-6dd5-4da8-9d30-ec3b9caf3c09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3584cc9d-1f82-4d76-8203-aa0135930870", "sighting_of_ref": "indicator--6b7921c4-55b3-43ce-a404-daf8a1288a81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4634de-0cf4-43b5-8885-f7c5e3b147a9", "sighting_of_ref": "indicator--6b7921c4-55b3-43ce-a404-daf8a1288a81", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed6d0de-4dff-4ad8-9cf8-17d5f4a8cc3c", "sighting_of_ref": "indicator--4445be3b-db96-4a9c-9a84-a53cadfb8121", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac13614-4a2b-4dd6-abf8-78c3450ac481", "sighting_of_ref": "indicator--b1754be7-e559-42bf-be02-a5a9bca6bfcc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf67aed-8b98-4a41-8daf-0789b8ca6a90", "sighting_of_ref": "indicator--4b14964d-ab8c-40f5-8a81-e43fe666cf3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf25e04a-e7f9-4b13-91b8-839846b6bfd0", "sighting_of_ref": "indicator--7002b882-b1e4-4c47-a9ab-88224990d6a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf6a825-1b8e-479c-90f5-d02bb5781990", "sighting_of_ref": "indicator--9bdf551a-90f3-4ef9-9c37-da2f5215c846", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b986955b-0d50-4eca-8dc0-122e9f6eb5e4", "sighting_of_ref": "indicator--3d3cbca6-1300-46b8-ac15-b918b182b1b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120b78d6-2623-4233-981c-6b44877f9927", "sighting_of_ref": "indicator--1af7fc70-dee8-4410-86ec-d19e2d6d17f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf182c6-4e85-442c-b2e4-97b3a0020844", "sighting_of_ref": "indicator--b8bd2219-98ae-4345-a236-95dbede1db55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18817f1-145c-47dd-9940-2a3572b07712", "sighting_of_ref": "indicator--4a10b943-5e4f-42c5-93bf-306f9e17f3e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06fe9c9-24b3-45b7-99bb-26836b4c1195", "sighting_of_ref": "indicator--bcbf4105-c04e-4ae7-94e1-5184f84dae8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d876218-e93a-4897-9680-c3533a3e17db", "sighting_of_ref": "indicator--a108df15-9a61-49c4-9398-d238002e01ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b8e381-61d1-4b79-a694-03c5387940f0", "sighting_of_ref": "indicator--b64c228f-eb40-4280-a510-ac0938a7bbb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6ecb9a-c3fd-46bb-aa3e-26525fe4dd1e", "sighting_of_ref": "indicator--14e86305-bda9-4b7c-9dfa-3991335c5a5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b96287a-527f-4a64-9a5d-742eaddcb8d8", "sighting_of_ref": "indicator--84ae29ef-a08b-4998-81e2-3e8d3ea2db47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7b39b4-5146-47f7-bfd6-0b967809194c", "sighting_of_ref": "indicator--a6c24845-d4fe-49b5-a31f-e361d29bd91e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373d287e-bf4f-4182-855c-b2846f60fdb3", "sighting_of_ref": "indicator--92954292-defe-4533-bf1b-2a29f5c8b583", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc60e93b-ce52-4bb4-9ff6-4b3241b93f4e", "sighting_of_ref": "indicator--92954292-defe-4533-bf1b-2a29f5c8b583", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ca7d0d-c701-49ec-9aed-e168a60ca0b8", "sighting_of_ref": "indicator--956abe5d-9f9a-4d32-871f-d12d123203dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b70234c-a535-49c8-bc9c-1c55b91fd607", "sighting_of_ref": "indicator--d0188c69-25a0-4e96-a230-da03e6c7cb2b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b12ddfc-d577-4008-aae4-f6d39ba62250", "sighting_of_ref": "indicator--accec11a-0d21-4062-86be-3bb46bb083e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022e4e6b-54b9-43f8-a016-7e28d07f6bf3", "sighting_of_ref": "indicator--1c80e0d5-9418-43c2-8b7a-5d8118a19048", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac7812f-65b4-49be-8436-693743dbb5b6", "sighting_of_ref": "indicator--3c8be2ce-4908-42ac-9f85-5f5aa211fab5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d356c56-7509-4238-85cf-fadf265f1144", "sighting_of_ref": "indicator--a7aadd7c-344e-47c5-9f5b-558c1e12e223", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4153f789-3638-4b70-b476-23cd82dfc908", "sighting_of_ref": "indicator--a7aadd7c-344e-47c5-9f5b-558c1e12e223", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2e8ba0-603c-4a78-a641-ffe7a4fd8e99", "sighting_of_ref": "indicator--10c5d21d-b4bd-43c3-b614-7f06b75939fb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b41190-df53-4a86-910b-9fdba626c269", "sighting_of_ref": "indicator--67a7f4a3-35ea-475c-8420-16003c22405e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b053f1-3d5c-4860-977a-86f9ab4ddfb8", "sighting_of_ref": "indicator--c94536fb-11dc-4494-9a65-2fa821f2805c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71787484-bda6-4a19-89bd-6dfed5d047d7", "sighting_of_ref": "indicator--c94536fb-11dc-4494-9a65-2fa821f2805c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5f52bf-5560-4957-ae4a-2f5c1444b8a0", "sighting_of_ref": "indicator--39b0ca52-b2d1-4a76-9069-6e68572d323e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fdff1f-b9d5-4f9a-b1ca-36f4cd0ed668", "sighting_of_ref": "indicator--26293e8c-29df-4629-9324-5cfdff319a4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07650942-24f9-43ea-98e6-feab2d138ac8", "sighting_of_ref": "indicator--26293e8c-29df-4629-9324-5cfdff319a4a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c3f026-222e-4a09-a91c-21cbfd7b959a", "sighting_of_ref": "indicator--26293e8c-29df-4629-9324-5cfdff319a4a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c565e4-4549-47b2-8f86-1f344bcc70b9", "sighting_of_ref": "indicator--1bb67acb-9a49-4ee2-9d77-563d1de5573e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf2cd6b-db84-4413-bea1-d44347d30486", "sighting_of_ref": "indicator--a96872f2-c58d-4bf2-a78a-b83ca2d89f42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dfd1c8-b544-4d13-8cbf-544b90d25049", "sighting_of_ref": "indicator--107808b6-aa4d-4241-abf3-640a6c05a090", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34765502-e0a4-40ca-bd94-c930c10ea282", "sighting_of_ref": "indicator--f0c3e975-1d15-4b7c-85ee-fb79d61005ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a24529-3ac7-43be-a931-f5d6e3aed7c7", "sighting_of_ref": "indicator--331322e3-6897-41e0-8695-1a1dae1d9918", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf3e47d-ffec-4dff-9e3f-b3be5609a865", "sighting_of_ref": "indicator--331322e3-6897-41e0-8695-1a1dae1d9918", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8238761-0634-4f13-905a-28eaeb8b32d1", "sighting_of_ref": "indicator--a8418cd2-fe68-4e95-9de6-f97110690eaf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20e6318-baec-4108-8c47-01fddfc6fe77", "sighting_of_ref": "indicator--cd7f8005-e6bc-4816-bc09-8749c723bec1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a184b65f-3e9f-429c-aa5e-9fac378adc7f", "sighting_of_ref": "indicator--7fa6e7c3-fae6-4ce4-b51f-9a3de8279b15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab36e8b5-8f10-4906-9760-085d6983e4db", "sighting_of_ref": "indicator--cba80295-bff1-4821-b7f1-8e54084abc1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3f666d-07ae-4180-8059-66489130fb0a", "sighting_of_ref": "indicator--6e3aed03-3fa0-4245-bc12-745e0e5c0e82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368fa4c9-237a-4805-b489-3354fd112190", "sighting_of_ref": "indicator--b63e4258-d1f0-4c7d-ab9d-222187d45673", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167659a9-4318-4501-bddd-617e53682afd", "sighting_of_ref": "indicator--0997596d-a2d8-401e-b6e1-5a7e51fa4350", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fab9a5-460b-4cad-844b-6d284e6050f8", "sighting_of_ref": "indicator--8a0b4e95-4d29-4801-aba3-d3348178eda6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fe9c43-ce18-4a83-92a1-c0442fb6b3d3", "sighting_of_ref": "indicator--0bd33aef-a248-4483-b2d7-ebfaef034dda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029b3186-e1a7-4c87-9a61-58162495dac9", "sighting_of_ref": "indicator--56f5681c-2790-482e-9aa2-3f9395973704", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8655bd8f-148e-4bcc-aa71-a07c913ed637", "sighting_of_ref": "indicator--08774937-7be1-40ce-8429-707f9d1d5505", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163bd8da-1527-4d23-8b82-cc28fba6464e", "sighting_of_ref": "indicator--25118bd6-e677-4795-9e67-d431e2f53d6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90e55d8-4a45-43b4-a7ba-768fb34c6843", "sighting_of_ref": "indicator--ab93c89e-b066-4370-b50e-71936b1e5cd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3be83e4-b8aa-455c-ae86-d638ad881c13", "sighting_of_ref": "indicator--16a5b35f-b687-4b0f-ab93-2d825186f4fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99113b-2c22-43cd-8385-6969df5e4482", "sighting_of_ref": "indicator--e3fcde37-d058-4100-bb69-88abc23a9890", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57dc274-1f6e-4b69-8da2-fc763a6b6919", "sighting_of_ref": "indicator--a6c0bd75-da7d-43c3-a188-2344dfbff696", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294e3629-cb5e-4409-8161-5f74a40e9e1c", "sighting_of_ref": "indicator--7f205b25-1c3e-4f03-8a26-9ea56400aa47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9441d9ae-8a76-4c82-8748-17f0bbfc4064", "sighting_of_ref": "indicator--7f205b25-1c3e-4f03-8a26-9ea56400aa47", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffa9251-815f-4853-aa27-15396d9b8629", "sighting_of_ref": "indicator--c6a1ba47-016d-4879-8222-83f05b31274d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56f2382-d730-41ba-bd1e-ddb3e5a12549", "sighting_of_ref": "indicator--15c41b1c-2927-46d9-b9eb-6ba96d335e9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0e4f03-7ae0-4ded-9669-0f2326dbe798", "sighting_of_ref": "indicator--5ea1abd0-5dd5-497a-a693-f80cec373f3f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a38f662-de5b-41c5-b1d2-058ecf6277c6", "sighting_of_ref": "indicator--072998fb-1088-445b-b72e-d4f7e184418d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db3a319-84e3-44bf-ab19-8a571ded29e6", "sighting_of_ref": "indicator--3adefd3e-3f4e-496e-af5a-fdd8aefaf7c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37834858-bf03-4a94-838c-f56387876fff", "sighting_of_ref": "indicator--ea3229b0-b57d-44e3-ae80-4dad2b11f3f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a71002-75c1-4920-8568-2e691b50a512", "sighting_of_ref": "indicator--bdc999b3-867c-4238-9cc0-06d62d3cccda", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b737ce-fd28-4e04-8d9f-ed5b381d8b9c", "sighting_of_ref": "indicator--651cf60d-bd5f-467e-8524-50f98d154ef1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf28d63b-8b32-45a1-a038-30a7cc6cd3d3", "sighting_of_ref": "indicator--71b7fc0b-c76b-4fa1-8d70-b2ee31c452b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938250d5-86b3-407c-8896-2b81daa8b12b", "sighting_of_ref": "indicator--bdf208a6-767e-4759-b6c9-aabb24e27745", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1721df48-337d-4d99-b202-b920328e007d", "sighting_of_ref": "indicator--aea43a22-75a7-49aa-bfc3-a7d33efa31c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9653c3ba-1c43-4920-a8e8-f42cbe098cf2", "sighting_of_ref": "indicator--33410a70-237e-4342-82c0-bbee81289b77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1c2fc0-7c09-4507-ab54-edbc92cd50c4", "sighting_of_ref": "indicator--bfcbaa9d-c048-4dba-ac05-62f4bd405ae5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ac3cb6-60c2-4ec0-86f9-7896049b6b98", "sighting_of_ref": "indicator--246fc43e-18c8-4fc8-b0b4-160bdd5d4755", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b5409d-3282-4a19-9887-30ac72a2ab2a", "sighting_of_ref": "indicator--1828c1ae-caf6-49ae-a4eb-f95a1ec7fc7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68673f6-097e-4c0a-9be6-b5e21b046b07", "sighting_of_ref": "indicator--0060a841-689b-460c-901c-3c781fbe6ffe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5db256-72a6-4488-a29e-ecc59a784ca7", "sighting_of_ref": "indicator--ad48938e-2f4d-4e43-9b7b-441827e38453", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9697739-6ad7-48bc-a2e8-fbddbcf682eb", "sighting_of_ref": "indicator--e281b6dc-69b3-46f4-a668-4bb2dfbfd50c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2ecea2-13b0-43f2-a3ba-66dedc120857", "sighting_of_ref": "indicator--e0c0becd-73c0-4a59-9e92-ca933fd7b4a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592acf20-a083-4b7a-9769-6564cde8e899", "sighting_of_ref": "indicator--e0c0becd-73c0-4a59-9e92-ca933fd7b4a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fd6372-c868-4d76-abad-70fd7cbe0f6e", "sighting_of_ref": "indicator--618329a4-351a-47ca-ac32-9ef62decb11c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73273ce1-eb29-4bed-a209-0aced61e44ae", "sighting_of_ref": "indicator--96d14502-06df-45da-af4d-002e4d4f4df4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffdfa61-a21f-49a1-a977-f3ff02aa24ee", "sighting_of_ref": "indicator--a5ea534c-b203-415c-b689-32a73a8081fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950fd989-e353-4962-a747-ac7402cbf391", "sighting_of_ref": "indicator--a5ea534c-b203-415c-b689-32a73a8081fe", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be091dff-52fd-4d28-82d4-b113bc70dc03", "sighting_of_ref": "indicator--c879b389-fe8e-4b58-9a2d-8fb76ed83248", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6483ee-7013-44fc-b11d-bfff58a1d797", "sighting_of_ref": "indicator--a4e98568-0ced-48b4-9276-0eb621e6f0be", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0333fb-dbce-46c4-8056-9050d22fdcf1", "sighting_of_ref": "indicator--a4e98568-0ced-48b4-9276-0eb621e6f0be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d8998a-5aa8-4cb9-86a0-98ef2d6897c1", "sighting_of_ref": "indicator--a938d8a4-37f7-4505-8382-d03cc6cc63f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acade218-7139-46a9-b872-d9806c968091", "sighting_of_ref": "indicator--7250e3af-cb7e-49cd-a7c8-e40fe497c710", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e70387a-df29-4103-8b2f-bd1c01af2dc8", "sighting_of_ref": "indicator--f8da1620-f236-47ff-ad1a-7244b7d0e202", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9598f6a-3d96-4408-a225-d51fc64065d9", "sighting_of_ref": "indicator--2a261d19-bee3-424c-96c0-a16c77deb580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385fbd87-1159-4456-9f7d-35a41a3e8f76", "sighting_of_ref": "indicator--dffbbbf2-e55e-4f45-9aa9-fb9b822ae5b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed46aba-6cb0-4d26-a119-16fa4d28c55f", "sighting_of_ref": "indicator--93b38421-a083-4111-8c15-c6d23f037434", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0515a828-e15b-42d1-a2ad-7b12fa3e570a", "sighting_of_ref": "indicator--3278be4d-40a2-4df5-9dea-ba3b68108922", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076bf104-8aaf-401f-8181-757fc5fbf62b", "sighting_of_ref": "indicator--6b65a98e-23df-4f1f-b754-614e95e721ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39905681-f2b9-439f-9511-6c4f8f9dbdcd", "sighting_of_ref": "indicator--bc8b2e38-d1a1-488e-ac7d-c02f3ce60fa1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4887a815-4f00-4900-8ae6-96d883c3d8fe", "sighting_of_ref": "indicator--0c06f116-56d2-422d-a7a2-a848a427c70a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c626924-7bfc-4ef3-9388-fcdc1dcca3fe", "sighting_of_ref": "indicator--5a84bf81-f3c4-4714-995c-fc802e3128d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d848028a-33e4-4ffc-aaa0-4a897fb67e92", "sighting_of_ref": "indicator--49bfab22-2958-410b-9135-dd3341f1e6cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73befd5f-b047-4c8f-8c6a-947482150f0a", "sighting_of_ref": "indicator--be169abd-327e-4bcd-9a04-274d4d8edb5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14d4f4a-17b5-4ff8-905f-c25eecd213e4", "sighting_of_ref": "indicator--21cff134-6684-4b27-854e-8e13c8a7fdd6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a25a2d-2a60-4404-b6e1-4976db63127e", "sighting_of_ref": "indicator--ebeca444-2196-4c48-877f-5d125312f5c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bae5c59-d0bb-4388-a8f3-0f83ee42f0e5", "sighting_of_ref": "indicator--400626f1-86f8-4f11-bed7-7ff1940a2d3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db42c2ca-c044-4a8e-a47b-69c0c0de9da0", "sighting_of_ref": "indicator--ae75f753-fdbe-4de2-bc20-15f7ced79d8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f7713-70c5-48f6-a883-fb1f9b4c2513", "sighting_of_ref": "indicator--37f08166-3f1e-4e38-8924-d6e488a93524", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587436cf-3529-4e2b-a6c9-4c3265ab3da1", "sighting_of_ref": "indicator--4284dee2-0372-40a9-9c4c-a7c7d4b56be6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9799ad-66cb-422c-932e-b0b8e0f04bcb", "sighting_of_ref": "indicator--662ec107-53fa-4edd-9885-4b8f655d7e54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92fec5f-5e48-4a57-8010-bd835fd4ddd8", "sighting_of_ref": "indicator--71cbb76c-79e3-4f1b-b197-288296b7183f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e06a60-f50a-4ba6-b726-18545adb9091", "sighting_of_ref": "indicator--c61b8f93-8c1c-4d14-a00d-0b081d450989", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f252a644-292e-46ce-9234-0d29f03633b5", "sighting_of_ref": "indicator--f5a3539e-4cd3-4554-bce0-ea75eeb59ea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecabf73e-a218-495b-833e-7008f631fe29", "sighting_of_ref": "indicator--826f40dd-6ab8-4f13-bebe-59f40d2299ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fb7fa4-f038-4bd1-a2ce-28576de01659", "sighting_of_ref": "indicator--3198847d-ac4c-4d5b-adf3-e19eb148b72e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1326dac-606a-49ec-bfc4-e9014a84e3f6", "sighting_of_ref": "indicator--bad0927c-d87b-475a-85e6-44cfdd1b466f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec3915a-4a23-4ee6-969b-42d93ea5b1a2", "sighting_of_ref": "indicator--9016c250-cebf-4647-a199-85a8ce90a1ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aea3ae8-532c-482f-b0f5-bfacdc21b0d7", "sighting_of_ref": "indicator--0aa4e3f5-aec1-475d-9458-d53dd1dde5a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2467fd2c-8b7e-4602-a5a3-70cd575e2174", "sighting_of_ref": "indicator--d176a472-532b-45ab-9e26-788e5f9a71dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6129a743-c1da-4eee-acab-628bf0e6cc5b", "sighting_of_ref": "indicator--1f2c3878-051b-433d-9400-b111803dfdca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1530ba-1d14-4248-aac3-b7342cee0ea8", "sighting_of_ref": "indicator--e52d7794-ae8f-488b-935c-f414472bdd1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7586e944-9c56-4ca4-8b4e-0bdcbbf45585", "sighting_of_ref": "indicator--529acb29-d870-448f-84fd-da58696498ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a2a329-d297-4ad3-bfac-44931b12bac3", "sighting_of_ref": "indicator--34590f06-065e-4433-a4b6-6a603dbbbf2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c4175d-fb2f-4926-ba0f-3a33b8016ff1", "sighting_of_ref": "indicator--1d65ef06-0e4e-4297-9a41-01384b62c127", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ea7b41-ac90-4843-a06e-677fec42c757", "sighting_of_ref": "indicator--a8e8f3ef-a184-40d2-8017-3fa52066f02f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d47d15-3251-40b3-841d-806122c783f8", "sighting_of_ref": "indicator--7e30185d-729d-4c2f-ad6d-603cb7ec20ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738cf9d2-6893-4738-906b-1ddeea9cf7aa", "sighting_of_ref": "indicator--b4db17da-db69-4de6-90c9-c3018d435881", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1961cd-b002-411f-98e8-16cd93950129", "sighting_of_ref": "indicator--3975c072-0854-4887-b918-98bd4f5f92d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2045914e-0e18-4276-8124-84f5de887bc2", "sighting_of_ref": "indicator--0c8039c4-b17d-438e-88f6-6ab25d131954", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e29474-e8ee-4b4b-b1f8-ddb12e6fec92", "sighting_of_ref": "indicator--51a846fc-9ed4-4ae4-9e77-06c4d2f34389", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04cfb05-42cc-42ef-ae72-6c9d516b8fc4", "sighting_of_ref": "indicator--dca85dcf-94b0-4cf7-99e8-8d41aefc0064", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63d1045-3564-427d-9335-210cbe23e3b6", "sighting_of_ref": "indicator--e96a7258-73e7-4e87-9ef2-3ebb6deae7da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a50de58-8302-41e4-846d-a61ff66fd584", "sighting_of_ref": "indicator--200983b7-2793-4fdf-ac93-53d3deae271b", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d327240f-33ff-4462-a54d-af8d6cade572", "sighting_of_ref": "indicator--3f58a03c-db7d-4b0d-b241-a20ef0a34923", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d7995c-fe75-4c1c-b895-e66fcd25a0ca", "sighting_of_ref": "indicator--40629577-a551-4303-ad6b-9b968d6ef053", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13a3573-35a1-43b6-9a7c-e4551881496e", "sighting_of_ref": "indicator--a9141abf-b446-48dc-86d3-7d3a03dc9265", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a4f9a2-31e9-46f2-84be-44b8f02bef54", "sighting_of_ref": "indicator--66341079-6299-44d5-b878-395da8dfb591", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac4543b-42d6-4347-9cd6-0e93c55da4ee", "sighting_of_ref": "indicator--f55a5f24-1f7e-4898-8647-12a2f676192c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68324e38-21a1-4096-b5e9-793f2ff67d80", "sighting_of_ref": "indicator--fc7bfa5e-b82e-4e23-9608-e95cbe425827", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c01bd84-3f7f-4af5-82da-0a66679c974b", "sighting_of_ref": "indicator--eff53aba-c802-48c1-8116-4311aa6ddc91", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306af8a7-9df6-495c-9af2-c99cf39071f9", "sighting_of_ref": "indicator--bc0cc14f-2269-406b-8082-ca1f4dbb864c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc51a04-7f51-4a5c-9b38-2ae169c53f71", "sighting_of_ref": "indicator--8fae6142-d7ae-47a0-aab6-53fc99b50d71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031c85dc-a464-48ee-9f5d-09ca755243e0", "sighting_of_ref": "indicator--8fae6142-d7ae-47a0-aab6-53fc99b50d71", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d209bf5-6720-4422-9d52-284bd29462af", "sighting_of_ref": "indicator--8fae6142-d7ae-47a0-aab6-53fc99b50d71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d3fa26-95d1-402b-83b8-88941f004628", "sighting_of_ref": "indicator--58346d69-685e-40d6-bc49-acd9f783240b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede19f53-bd71-4c5f-b7c6-df8d096c1e98", "sighting_of_ref": "indicator--58346d69-685e-40d6-bc49-acd9f783240b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e678126-bb30-47ac-8e91-71631c49c552", "sighting_of_ref": "indicator--58346d69-685e-40d6-bc49-acd9f783240b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316b1d6e-d811-45f0-8c74-31e99fe7765c", "sighting_of_ref": "indicator--79cfe46a-ae54-4fab-a0ef-ef53430095e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586aeeca-896f-46a6-89ed-4c10a80d40d1", "sighting_of_ref": "indicator--79cfe46a-ae54-4fab-a0ef-ef53430095e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0bdff1-e813-4059-ba5c-ebfa24dd3728", "sighting_of_ref": "indicator--79cfe46a-ae54-4fab-a0ef-ef53430095e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563722c0-f989-4ad2-adb3-93c85b4d1125", "sighting_of_ref": "indicator--03ba5bc8-1aa8-41a2-987a-8581832400b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bdbe64-7acc-4c2d-9e1f-22db70139510", "sighting_of_ref": "indicator--3ac08269-8ba2-43e4-91e6-573c05dbe8ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02e3ced-8ccf-4526-9496-1872352b4117", "sighting_of_ref": "indicator--66e00792-59c5-4bf0-ac0e-de0d3703f0a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5efad8-efad-4403-963c-9161aa1f5b90", "sighting_of_ref": "indicator--66e00792-59c5-4bf0-ac0e-de0d3703f0a2", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c6f3a2-2b16-41a7-8681-ac351b612d7f", "sighting_of_ref": "indicator--00c11563-4be3-4ff4-be08-50d26a16319e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97018e72-ce1f-4675-9243-b8cb218663d3", "sighting_of_ref": "indicator--3fbed7d5-021d-48da-8bab-c39996c3bfbc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01abebba-5eb1-439b-ad26-ea610c04feeb", "sighting_of_ref": "indicator--85371240-be68-47e7-87df-c5ca751d3df3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c5bd4f-0114-4bd7-9b05-6244d516e1be", "sighting_of_ref": "indicator--3a8f77ab-86be-4c65-9408-63faf225306f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59569b74-7d18-44e9-a178-10820bc20e7d", "sighting_of_ref": "indicator--f283abba-50f0-43e2-b2c8-809a79e9c7bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc41efd2-cae4-43db-8830-6873b72c8d5f", "sighting_of_ref": "indicator--f8c3e104-1319-451a-9a89-7881007d59ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327e0562-9cc4-4bd4-9812-fac62bd679fb", "sighting_of_ref": "indicator--f92f3dce-1128-4e54-97c0-8835a3c112fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cc554a-9e9c-4bfb-b0ca-e04602d13b31", "sighting_of_ref": "indicator--2a47b737-bb75-440e-8317-5b7b901ff668", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4ed0ec-9d95-4640-b448-c08d6ac92d1b", "sighting_of_ref": "indicator--593910c7-fa8c-482d-9692-a1951bbf3b12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34d0de5-674f-47d2-bdfc-9649823ea455", "sighting_of_ref": "indicator--2d2e2475-7617-458c-8b2b-5a05b0a43272", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053101be-d895-4658-aad6-c8dca8109215", "sighting_of_ref": "indicator--c92e6e24-f2a4-4dff-8340-a0b0f2dbea4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df467c5d-2d07-4b5a-8c57-055e5a0a2735", "sighting_of_ref": "indicator--438dc732-cd61-409e-a39e-c4db23a8cf53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafcd78e-f2a5-45c3-a31e-fa7f654733e6", "sighting_of_ref": "indicator--c587452f-d1ac-4ab5-9bf5-3f54a0db3989", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532618fc-b8e2-4b04-bea7-c1915673838e", "sighting_of_ref": "indicator--e3db6cec-46f0-4051-a14e-dfd6519a95ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296234eb-780a-4ebf-9b1c-7bace7fd7722", "sighting_of_ref": "indicator--e3db6cec-46f0-4051-a14e-dfd6519a95ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c706398-40f0-4b64-8726-ce79822c9e3b", "sighting_of_ref": "indicator--5e5c6905-d69d-41f4-87e0-83213b4830c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096a2ac4-c69a-4422-b76c-ca28ea7e6094", "sighting_of_ref": "indicator--ac66ce49-a51d-40d3-b7b5-95bdb39c497a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba3cb9e-aa86-4ec0-a294-18aab207628a", "sighting_of_ref": "indicator--ac66ce49-a51d-40d3-b7b5-95bdb39c497a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36eeb3a-1e4f-4a26-8eeb-778e34b99084", "sighting_of_ref": "indicator--c598172c-89ec-4c34-a309-0ca43a0e80a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d276f205-9777-4bdd-a9b7-87c116ce9277", "sighting_of_ref": "indicator--eeefcb2b-ac11-4571-9efa-11782cfe24b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c6429c-6cc0-420c-aa1a-a5bcc4fdb965", "sighting_of_ref": "indicator--eeefcb2b-ac11-4571-9efa-11782cfe24b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6babe3c2-e2c9-49df-81d4-d681768825fc", "sighting_of_ref": "indicator--eeefcb2b-ac11-4571-9efa-11782cfe24b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecce571-099c-4247-979c-5a15772ba289", "sighting_of_ref": "indicator--1f17b93c-d13a-40a2-be08-f2e16bc9cac1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c78c341-c2f8-42f7-b297-bef5b87b406e", "sighting_of_ref": "indicator--ef97e7f1-1a35-4a71-9f7a-27c41284325c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416796b2-b38d-469c-9f70-2ced9b92b220", "sighting_of_ref": "indicator--fad3c586-420c-4ba0-a0b5-16027ff7e47b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd5b5c-595d-411e-8cc0-21b8beaa2e0d", "sighting_of_ref": "indicator--60ec31f2-1aec-4478-abed-1f928ad7c581", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d89aa6e-a0fb-4e89-9dc9-de1594394a94", "sighting_of_ref": "indicator--60ec31f2-1aec-4478-abed-1f928ad7c581", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b8df33-4130-41ce-9b2b-de4b5ce94fe2", "sighting_of_ref": "indicator--076a6f53-fb4d-46bd-8433-420d31e778d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56f5d47-bbd5-4237-a1cb-48543e1466ae", "sighting_of_ref": "indicator--c9c28ca7-22f2-4452-9a06-563f87eaf5c9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d0b0ff-a27e-479d-b669-1da55b53a969", "sighting_of_ref": "indicator--516c1ca0-92fb-4f17-8dc4-28a19ae8ab95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bd2791-8f49-4963-856a-b8a72204840a", "sighting_of_ref": "indicator--516c1ca0-92fb-4f17-8dc4-28a19ae8ab95", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2e5131-1c44-4741-9693-31cddd8960ea", "sighting_of_ref": "indicator--516c1ca0-92fb-4f17-8dc4-28a19ae8ab95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e21d0c-7136-41c5-a515-b7863522d393", "sighting_of_ref": "indicator--8ebfa237-3a1b-45eb-a155-608d305b8c8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c812031a-42d1-49b4-9696-ea3454ef23a2", "sighting_of_ref": "indicator--8ebfa237-3a1b-45eb-a155-608d305b8c8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5512eda7-dd9f-4d38-baaf-554e884b1c79", "sighting_of_ref": "indicator--8ebfa237-3a1b-45eb-a155-608d305b8c8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4de9033-cde7-4ab6-a675-94ac3fa6255a", "sighting_of_ref": "indicator--d20cc093-1a93-4029-bef2-0c309f7f7920", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8244b4a-fd28-4203-8f9d-2bfff7bd646d", "sighting_of_ref": "indicator--3ccfeb27-2324-4705-b874-c1a6d236b117", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e629e5e-c2be-46ef-86a5-960749b60fb0", "sighting_of_ref": "indicator--28a106c1-609f-4cd8-b015-d2fce387c0c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af34aa0-5227-4f26-b9db-4d469acef4f7", "sighting_of_ref": "indicator--78f6edfd-43e1-4eee-895c-138f48bfedad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f94f2d-bc83-40ae-9333-00ad4371744b", "sighting_of_ref": "indicator--78f6edfd-43e1-4eee-895c-138f48bfedad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c570bdf1-1e99-4b99-87a6-d567a8867c42", "sighting_of_ref": "indicator--78f6edfd-43e1-4eee-895c-138f48bfedad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b431815-1348-4c19-bf88-7f3d8ab148aa", "sighting_of_ref": "indicator--8aeab028-a01e-4577-8a99-64cf4c4476a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d77578-9085-4f9b-a2fe-05d4b43d29b9", "sighting_of_ref": "indicator--8aeab028-a01e-4577-8a99-64cf4c4476a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0451a1c7-c0ca-49a1-9095-c6edc9021b5b", "sighting_of_ref": "indicator--b46ac2cb-284e-48bb-8399-812ee974043c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921e768a-052f-4188-9195-aecad6783c8a", "sighting_of_ref": "indicator--b46ac2cb-284e-48bb-8399-812ee974043c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e16fc7-f87b-4238-a9ac-56b978e7871b", "sighting_of_ref": "indicator--b46ac2cb-284e-48bb-8399-812ee974043c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63772112-4ea3-4ee5-9b21-a74666a8bd3a", "sighting_of_ref": "indicator--c9664ced-bab3-4992-b02f-e29d109aa25b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30939d27-009f-491c-9873-fab8f567e564", "sighting_of_ref": "indicator--c9664ced-bab3-4992-b02f-e29d109aa25b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb933ab-96d7-4c1a-8b5d-e360b19f69e3", "sighting_of_ref": "indicator--c9664ced-bab3-4992-b02f-e29d109aa25b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d156ed-040a-4653-b239-9c1e11822bf0", "sighting_of_ref": "indicator--1c3c57bd-d678-4d6a-aa80-f6a4dafc765e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc31358-e4e4-4190-92f0-996bc9b7d4ca", "sighting_of_ref": "indicator--1c3c57bd-d678-4d6a-aa80-f6a4dafc765e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266055f3-6f38-487c-b0b5-8f1580e2d2eb", "sighting_of_ref": "indicator--1c3c57bd-d678-4d6a-aa80-f6a4dafc765e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2123f2-3319-45b0-9714-acb521063ce5", "sighting_of_ref": "indicator--ba12d1f8-6e38-4151-aaa5-7a4253086423", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4ddcc-7d56-4a39-9246-07f19080f685", "sighting_of_ref": "indicator--ba12d1f8-6e38-4151-aaa5-7a4253086423", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518f23db-352a-47c8-8f22-dd782b391103", "sighting_of_ref": "indicator--ba12d1f8-6e38-4151-aaa5-7a4253086423", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4e4adf-75d2-4d8b-9392-4464c1c98f73", "sighting_of_ref": "indicator--d85f66d7-8999-4280-9e30-524120589559", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2040c724-8f65-47ab-9b5b-d6c7059e2781", "sighting_of_ref": "indicator--d85f66d7-8999-4280-9e30-524120589559", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06512aff-564e-4bcd-b4d2-bb6e6b1134a4", "sighting_of_ref": "indicator--d85f66d7-8999-4280-9e30-524120589559", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ee9a4f-fa55-482a-a16c-b973ca4ddbbb", "sighting_of_ref": "indicator--a84537e1-e729-482d-8b9d-f160a3f71e69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bd8723-e2c5-4534-8311-40a844a7ab28", "sighting_of_ref": "indicator--a84537e1-e729-482d-8b9d-f160a3f71e69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd1a90f-3db4-4bc0-83e7-75fffa4629d6", "sighting_of_ref": "indicator--a84537e1-e729-482d-8b9d-f160a3f71e69", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43629d5d-27ee-4ab0-b77d-2942db99549e", "sighting_of_ref": "indicator--e62e30a4-b6bd-4088-a109-8d25c13ec406", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a31f79a-7f48-45de-8bd1-5d4fe2cb7b3b", "sighting_of_ref": "indicator--e62e30a4-b6bd-4088-a109-8d25c13ec406", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eccd44-0274-447f-9ec7-fc5b618170b3", "sighting_of_ref": "indicator--e62e30a4-b6bd-4088-a109-8d25c13ec406", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51f2c46-df4a-452f-ab98-e08fc8aa853a", "sighting_of_ref": "indicator--e52d54f6-5a34-4a10-9385-10ce69ff6cf9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c02a7a-1995-4ff1-b673-c8f6524f6f1a", "sighting_of_ref": "indicator--7ca5f948-11cb-4c67-9980-26da908224a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fcb619-c362-4883-b4ac-8342fd1505fe", "sighting_of_ref": "indicator--7ca5f948-11cb-4c67-9980-26da908224a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637304bb-7adf-41b0-a72c-55ac79e96d03", "sighting_of_ref": "indicator--7ca5f948-11cb-4c67-9980-26da908224a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef890a85-6345-4d8a-bfce-43d2b165044c", "sighting_of_ref": "indicator--f79cfdd1-c758-4085-bf44-f8c8f4b37884", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f746b8-cb34-40cf-a922-820f5fdceb20", "sighting_of_ref": "indicator--f79cfdd1-c758-4085-bf44-f8c8f4b37884", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee89637-2d71-4be1-adb6-270493c15be2", "sighting_of_ref": "indicator--f79cfdd1-c758-4085-bf44-f8c8f4b37884", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5109edd-f5f0-4b0e-b1a6-fe6044256253", "sighting_of_ref": "indicator--e89d7a6a-c1c1-46d7-bf3d-7e0efd87345a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6511ba7c-d48c-4044-a90b-b92919ce627a", "sighting_of_ref": "indicator--e89d7a6a-c1c1-46d7-bf3d-7e0efd87345a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff4b703-d1f1-461a-82b5-d11c89adfe1b", "sighting_of_ref": "indicator--e89d7a6a-c1c1-46d7-bf3d-7e0efd87345a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd69ecf-4171-444c-93c2-aef63519607d", "sighting_of_ref": "indicator--a55b60ff-c31a-4324-91aa-60e590c8b8c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2034712c-d585-4db8-a011-4b15462559c8", "sighting_of_ref": "indicator--a55b60ff-c31a-4324-91aa-60e590c8b8c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710cf2e1-f542-416b-80a5-7648016c7354", "sighting_of_ref": "indicator--1cc5346e-ed92-4d11-8d97-654cf8a9b0fb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b84c8-25ec-4a00-8735-b969c0b0414a", "sighting_of_ref": "indicator--1cc5346e-ed92-4d11-8d97-654cf8a9b0fb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2cbdc8-0814-48f4-8dee-c9f34ca4b8ab", "sighting_of_ref": "indicator--1cc5346e-ed92-4d11-8d97-654cf8a9b0fb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0a9218-a559-4059-bc9a-abcdd9a51088", "sighting_of_ref": "indicator--066e1047-48f7-48fe-8511-0f8b6935ee44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c492ff9-51ce-4b1c-b669-55a033d1b61d", "sighting_of_ref": "indicator--066e1047-48f7-48fe-8511-0f8b6935ee44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b671d00e-1457-4af3-9cc2-42f1b551eeb3", "sighting_of_ref": "indicator--066e1047-48f7-48fe-8511-0f8b6935ee44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e0fa08-f994-4a1d-9ca0-f3ee8e7eafd0", "sighting_of_ref": "indicator--3aab5e56-677f-4520-a855-c152bd632e0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cae637-5337-4a62-a089-45b2c9194211", "sighting_of_ref": "indicator--3aab5e56-677f-4520-a855-c152bd632e0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3966436-92db-4f32-aea0-ad580ba395ab", "sighting_of_ref": "indicator--3aab5e56-677f-4520-a855-c152bd632e0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b80a4e-9e4b-4054-ab04-a41630ae7685", "sighting_of_ref": "indicator--dde55056-3370-44cb-ab6e-4e5eb985c7d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85e9f62-4810-4641-85c2-3bb662fec365", "sighting_of_ref": "indicator--dde55056-3370-44cb-ab6e-4e5eb985c7d2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6bbd86-8215-4483-af93-c587f561cb76", "sighting_of_ref": "indicator--dde55056-3370-44cb-ab6e-4e5eb985c7d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ceeb49-1176-4d00-b334-22ceeeaea83c", "sighting_of_ref": "indicator--ede2c707-b4ed-41c7-be97-3f27ebb39ad7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9709873d-d6d3-4fdf-b1aa-42620ac2bc8a", "sighting_of_ref": "indicator--ede2c707-b4ed-41c7-be97-3f27ebb39ad7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6a705b-14b8-4c34-9a31-5bbc3dd4af03", "sighting_of_ref": "indicator--ede2c707-b4ed-41c7-be97-3f27ebb39ad7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d81b4cd-b20f-4afb-acde-b116c1901d26", "sighting_of_ref": "indicator--7efed1f3-b2e3-47da-ab63-6b7d66534b67", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429db9a5-4dd0-4fb3-8786-3116943061d9", "sighting_of_ref": "indicator--fa9f4c29-d23a-4d1a-9c65-ae42c11d4ebf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9904a50-73a5-4525-b43c-a775585ead63", "sighting_of_ref": "indicator--e967271a-cc95-4ba9-949a-83588da9985c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebbb8a9-4195-4728-8f70-96738e6e192c", "sighting_of_ref": "indicator--8a2e206a-ff07-4f60-ac6a-be3b503a9014", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3051742-88d0-4abd-9fe0-78bd87f2eed1", "sighting_of_ref": "indicator--8a2e206a-ff07-4f60-ac6a-be3b503a9014", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6332aa3-a29c-4aa5-a966-54d368188f50", "sighting_of_ref": "indicator--8a2e206a-ff07-4f60-ac6a-be3b503a9014", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8853121-b94b-47d5-8ab9-7104e0094dba", "sighting_of_ref": "indicator--8a2e206a-ff07-4f60-ac6a-be3b503a9014", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4585b4-5117-4a00-8493-61c987995e28", "sighting_of_ref": "indicator--910c7034-507b-431c-b8c2-ab7ced057caf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43538cd8-22ce-4496-8c9f-8afdc7a6925b", "sighting_of_ref": "indicator--910c7034-507b-431c-b8c2-ab7ced057caf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8267719d-ff7b-4073-925a-481f27627cd7", "sighting_of_ref": "indicator--910c7034-507b-431c-b8c2-ab7ced057caf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50230fea-2fa3-4bb8-aab9-b5fb7586c2a3", "sighting_of_ref": "indicator--55cd94ce-4326-4ad7-afda-0d2d35e9648d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b9b173-81f9-45b9-8bf3-ea759b4d324e", "sighting_of_ref": "indicator--55cd94ce-4326-4ad7-afda-0d2d35e9648d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa63a96-033d-4d59-854b-42dce871a119", "sighting_of_ref": "indicator--55cd94ce-4326-4ad7-afda-0d2d35e9648d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3959384-09ac-49af-982c-83a59d29294b", "sighting_of_ref": "indicator--55cd94ce-4326-4ad7-afda-0d2d35e9648d", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34638771-dabb-4a50-b465-5b2ec95ae2d6", "sighting_of_ref": "indicator--4e5b1271-ef00-4fb9-af84-9d56a98b6638", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b9275e-7b7b-4344-ac5f-cfbf924fd091", "sighting_of_ref": "indicator--4e5b1271-ef00-4fb9-af84-9d56a98b6638", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b89d171-9aa4-4490-963d-2add388f42db", "sighting_of_ref": "indicator--4e5b1271-ef00-4fb9-af84-9d56a98b6638", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2734294-18b2-4327-9c39-9015ef74b9c7", "sighting_of_ref": "indicator--4e5b1271-ef00-4fb9-af84-9d56a98b6638", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9190baf1-4b6c-4f3c-8593-ba6ec048853f", "sighting_of_ref": "indicator--8c9e3521-9117-44c1-831d-f7c49a3756ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ab6ef1-77d8-4a8e-a311-9409166481e2", "sighting_of_ref": "indicator--8c9e3521-9117-44c1-831d-f7c49a3756ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b59e4b-d488-41a0-8fd1-e45fdb81d6f4", "sighting_of_ref": "indicator--8c9e3521-9117-44c1-831d-f7c49a3756ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b254da9-5472-4ac7-a224-d8a582050224", "sighting_of_ref": "indicator--8c9e3521-9117-44c1-831d-f7c49a3756ba", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c808cbdc-4519-4d9c-8e49-759b6bc7fd45", "sighting_of_ref": "indicator--3b7d070d-763d-4850-8673-3dbc472273ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2d0bf6-d392-4233-8632-d683c7514a25", "sighting_of_ref": "indicator--3b7d070d-763d-4850-8673-3dbc472273ba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff1981a-e753-43fb-80d2-16650228a790", "sighting_of_ref": "indicator--3b7d070d-763d-4850-8673-3dbc472273ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2682d224-a08f-4396-acb0-9d46d8bf30c5", "sighting_of_ref": "indicator--3b7d070d-763d-4850-8673-3dbc472273ba", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be0ac5f-a814-42fd-ad2a-215fa1f3e6d9", "sighting_of_ref": "indicator--767b68de-4479-4c57-8188-16d14d208e19", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559e4e99-5531-467a-a1b7-7f3715d06c85", "sighting_of_ref": "indicator--767b68de-4479-4c57-8188-16d14d208e19", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d671b2b-0fa9-470d-b6a6-d66bd90eb3c6", "sighting_of_ref": "indicator--767b68de-4479-4c57-8188-16d14d208e19", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12a1acf-3536-4fd1-9494-140a80f752de", "sighting_of_ref": "indicator--767b68de-4479-4c57-8188-16d14d208e19", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf72046-3a3d-45a9-8d37-0071dde6f2d0", "sighting_of_ref": "indicator--f7eb304d-893d-4813-8859-47d00263d122", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f9784b-bdb1-4637-9f38-d0b0f557dd11", "sighting_of_ref": "indicator--38800637-4edd-4994-bfb8-7cd229c360d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f71bd4-53f5-43b3-b5b8-301e5a7c3549", "sighting_of_ref": "indicator--38800637-4edd-4994-bfb8-7cd229c360d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a382c28f-a55d-4262-8592-8eaac39e6f62", "sighting_of_ref": "indicator--aa7be442-8bbb-4059-ba36-f5049e45cc60", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1baa19-43cb-491f-b729-4a2b31dd6036", "sighting_of_ref": "indicator--aa7be442-8bbb-4059-ba36-f5049e45cc60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a500a09-bf9c-496e-a37c-aa36b9addfdf", "sighting_of_ref": "indicator--aa7be442-8bbb-4059-ba36-f5049e45cc60", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97f740a-ae69-48d5-b7c2-96926dba83c2", "sighting_of_ref": "indicator--b25a2a6b-b4cb-43d0-9047-0272b94746e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b6ee9d-d0be-4ebc-801f-98ed3f276946", "sighting_of_ref": "indicator--b25a2a6b-b4cb-43d0-9047-0272b94746e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec7180d-8350-43bc-9cb4-6f5c5f9b25ce", "sighting_of_ref": "indicator--b25a2a6b-b4cb-43d0-9047-0272b94746e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd2f3df-f4ba-4431-aee9-d020436d324f", "sighting_of_ref": "indicator--97c38d02-213d-47b9-845d-bef0aedc5c96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edda91ba-071d-4d82-a8bf-f0dfb0ff1e4f", "sighting_of_ref": "indicator--97c38d02-213d-47b9-845d-bef0aedc5c96", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8737bb24-bd62-487f-bf90-e5fff6fb7f54", "sighting_of_ref": "indicator--97c38d02-213d-47b9-845d-bef0aedc5c96", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a6473c-b2f6-4104-b3cc-d4b0e4a68aee", "sighting_of_ref": "indicator--4628331f-4441-4e8f-8045-dbab4678b057", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12de0c6b-d0be-45fb-8996-4573358ed07e", "sighting_of_ref": "indicator--4628331f-4441-4e8f-8045-dbab4678b057", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b470c93b-d80e-4b57-90a4-83e179b6dae6", "sighting_of_ref": "indicator--4628331f-4441-4e8f-8045-dbab4678b057", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d74b64b-1afb-4fa1-95b2-d89a79fea2fd", "sighting_of_ref": "indicator--37a968fc-dbcc-4c39-8f8c-ce7673d79044", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe24fe60-cc0d-4b2a-b410-0df19e8622b5", "sighting_of_ref": "indicator--e6713250-da14-4ecf-96ba-865069bf3894", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10709187-556e-4d20-be66-4c455a988779", "sighting_of_ref": "indicator--e6713250-da14-4ecf-96ba-865069bf3894", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e44f5e-add4-4161-a040-049205eb0b12", "sighting_of_ref": "indicator--e6713250-da14-4ecf-96ba-865069bf3894", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44a26cb-7eed-4866-b21e-c2781dfb848b", "sighting_of_ref": "indicator--e28815ab-ef24-4f2a-b064-b1baccf44a03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7278db54-17ae-4da4-812a-2111b94387b1", "sighting_of_ref": "indicator--e7380dc7-3cb2-4fe5-a5a6-351f7384796b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70513997-3391-411c-a7d0-a4f4804c648d", "sighting_of_ref": "indicator--e7380dc7-3cb2-4fe5-a5a6-351f7384796b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a669d19-bb15-4e28-ac80-04380bf890ac", "sighting_of_ref": "indicator--61ef5f33-7e80-441d-add3-83e234eed694", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a742df-562a-4ffa-aa6a-3affe6f6facb", "sighting_of_ref": "indicator--900e470a-ea32-4ef0-b041-9f02a4d23293", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c9b4b1-e911-42dc-9547-c2e9abd87db9", "sighting_of_ref": "indicator--55d962fa-de90-4838-b7db-403fa677ce94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c4442c-815b-4864-b958-8328e28ecbef", "sighting_of_ref": "indicator--55d962fa-de90-4838-b7db-403fa677ce94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0e28af-b58d-465f-8723-0d7895de2936", "sighting_of_ref": "indicator--55d962fa-de90-4838-b7db-403fa677ce94", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6d08a6-5ed9-495d-849a-0af506282033", "sighting_of_ref": "indicator--cc0f9f1e-49c6-4d73-817f-e57b3ad65363", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d9456-1a96-4ed8-8b67-81d35e7a2c53", "sighting_of_ref": "indicator--ca58cf14-e6dd-4874-9bcd-465345404a9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5e80d4-f983-4353-b4b1-3b8fda0b6d03", "sighting_of_ref": "indicator--ca58cf14-e6dd-4874-9bcd-465345404a9c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafbd0c3-0e0c-4bd6-b12c-a0f2a559772c", "sighting_of_ref": "indicator--ca58cf14-e6dd-4874-9bcd-465345404a9c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4558eaf3-1a14-4efe-9c59-d38d488a2dbf", "sighting_of_ref": "indicator--fa9a3cc9-3174-4579-9567-b2be0605a9df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc2100d-9ded-4b09-a152-1028ffa50a05", "sighting_of_ref": "indicator--796ffc67-90d0-4f8f-aab5-81f5fb089ca5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf089c-862a-4bf1-876f-429c73e3ba52", "sighting_of_ref": "indicator--047fc85b-7e63-4ecc-b7cf-96f78112659f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848e6b15-c9c5-4451-917f-b00d86671b4b", "sighting_of_ref": "indicator--5bc482f3-c861-4ab5-93c4-5d7afbeee218", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96d816a-874a-4b93-958d-c6f2d927fef7", "sighting_of_ref": "indicator--5bc482f3-c861-4ab5-93c4-5d7afbeee218", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab52c75-ff9f-4266-92c7-9811a9fab3d2", "sighting_of_ref": "indicator--53cef285-862a-449d-845d-7fe897ff38b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885fca1e-7d10-4b5c-8af8-907cc94fe0dd", "sighting_of_ref": "indicator--53cef285-862a-449d-845d-7fe897ff38b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc7f7af-6b37-4827-a9c7-a56ba70b319a", "sighting_of_ref": "indicator--7cf10b2a-235a-4957-b4aa-bee0b4b63041", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87289b6e-67f7-4af1-82ee-c1812f591f50", "sighting_of_ref": "indicator--9d9cefb6-5963-4f8b-ac0f-87b07fe279ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467b4be6-e9f5-469a-b776-35643ec88b4d", "sighting_of_ref": "indicator--f876a927-4d7d-497d-b175-5bedc295f2b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b520d31-0175-4af4-818d-3adc4c4597d6", "sighting_of_ref": "indicator--4c8699ec-be10-498e-bbc0-3107898beb8a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8c434e-a872-406b-81d0-c28123c13f16", "sighting_of_ref": "indicator--4c8699ec-be10-498e-bbc0-3107898beb8a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8e2e01-c7f3-4a4e-a9bb-33248d518046", "sighting_of_ref": "indicator--83e3aa27-dcc2-4afd-ac5d-024c1b54548a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ef83f8-b8ba-4ae7-8a33-4031dce1394c", "sighting_of_ref": "indicator--83e3aa27-dcc2-4afd-ac5d-024c1b54548a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b200150f-92c1-4a5e-badd-7f3057300d43", "sighting_of_ref": "indicator--717e54d2-c2c0-49ac-935f-fa5d81894a96", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd188de-d504-400f-8be7-c735be0aa3ca", "sighting_of_ref": "indicator--3bab961c-0f0f-4883-a020-2e09ff556371", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46f43ed-3829-411d-a3f9-7004989b2987", "sighting_of_ref": "indicator--b663dc5a-9aa5-4444-b5bf-e1044f0699a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201edde2-3f97-46c2-91da-06cf08fe2457", "sighting_of_ref": "indicator--c193838c-9f38-4956-9846-96c13e59fb56", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c182ba0-b6f1-4424-8204-33214d5b55c8", "sighting_of_ref": "indicator--ba68ed24-4cd2-4ae1-a339-9c1ea393485a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e22a76-9aae-442b-a71d-33d2d831d1cd", "sighting_of_ref": "indicator--fc7b28d6-3551-4323-a010-284ab86caf1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e8d4b7-a4b5-420a-8b32-77194dae32ed", "sighting_of_ref": "indicator--5637748b-0788-4902-b213-13b0f5c106a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fe325a-3360-42f7-9e52-67f7fc1a67d1", "sighting_of_ref": "indicator--39a1e4bf-cc89-463b-bc32-f5432ca2fad2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d66e61-2d9b-447e-8196-a4fba2767bc8", "sighting_of_ref": "indicator--39a1e4bf-cc89-463b-bc32-f5432ca2fad2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bd1e30-25f7-452b-9bf4-36d36cff698e", "sighting_of_ref": "indicator--9d1d0d03-7f7c-4575-b01f-ebf18a0d548c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb206fac-00e9-44cd-8e1b-09d5c082b61e", "sighting_of_ref": "indicator--6169cdf8-446f-47de-b47c-f95800b0ec56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa17e821-9792-4703-8174-7e5f3509506f", "sighting_of_ref": "indicator--6169cdf8-446f-47de-b47c-f95800b0ec56", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc08fec-052b-43b4-a145-4652543b2228", "sighting_of_ref": "indicator--b2587156-58f4-49e7-9b0d-5448b2fbb9e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9983a74-eeb0-4f76-91ee-1e7ecb7b4ce3", "sighting_of_ref": "indicator--0ecce0d0-a3c9-4292-89bd-ebd25769ab34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb64dc5-e14f-4bfc-be41-292898bf5c7f", "sighting_of_ref": "indicator--30196508-d27d-470c-b9c2-bb30d6b49d8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f623dc-1a2a-4c4e-a22b-d3b7abc655f1", "sighting_of_ref": "indicator--9cf0005a-73c3-4ec6-9588-ccc489a3f7b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab417376-ca88-451d-9f13-56834caf7c79", "sighting_of_ref": "indicator--6b092aa9-9b85-49cb-9e55-49777094652e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fb7df5-0961-43bc-8f86-b773453689f0", "sighting_of_ref": "indicator--6b092aa9-9b85-49cb-9e55-49777094652e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6f105d-4db1-42cf-b23a-b486092383b2", "sighting_of_ref": "indicator--e6151344-c96c-4230-924a-d8c5cebfa86b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704194f-448a-43d1-a3af-01d42f5809c4", "sighting_of_ref": "indicator--670bb525-8bba-49e2-a6ec-63ecec1e763c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3b2280-8ff7-4e5b-81cc-c6bfdbbd41b4", "sighting_of_ref": "indicator--8b53c538-bfc1-4d1c-8b26-22af022df6cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c0b2c8-5ee6-4741-ab5d-77fba1a564cc", "sighting_of_ref": "indicator--6d257b2c-d89d-4624-bea7-7c8e7deb2afc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e5e654-0ba4-4def-9b99-3df4290f176a", "sighting_of_ref": "indicator--6d257b2c-d89d-4624-bea7-7c8e7deb2afc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c468ce35-7fb5-4733-8236-df3dfbac093d", "sighting_of_ref": "indicator--b43789d1-3e8a-472a-8ff8-de0367e16325", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5261d3f9-9523-4133-bd8b-421a30bf65cc", "sighting_of_ref": "indicator--6f6ec43d-1730-4033-b21c-3a561124a2e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f540a0b9-22c0-4c1c-9c17-5eeb63209a54", "sighting_of_ref": "indicator--d9f6abc0-52a0-4e04-a2e9-5f55de6b9bac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e226d5f4-1015-4cc4-92f0-ec2de288e5fe", "sighting_of_ref": "indicator--d9f6abc0-52a0-4e04-a2e9-5f55de6b9bac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d704bae2-26a8-4cae-91de-8853f3573d94", "sighting_of_ref": "indicator--d9f6abc0-52a0-4e04-a2e9-5f55de6b9bac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5210b6a2-b475-40c6-b316-2683497ec687", "sighting_of_ref": "indicator--851c632c-06e1-45f1-b6cf-cff16440f5ac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e171d116-03f2-4bf7-a5df-9e08e630346a", "sighting_of_ref": "indicator--ee779a33-bf7c-4342-94b4-3c884328ea2b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e01426-a86b-41c7-94c7-9f1ed7e8f9b7", "sighting_of_ref": "indicator--6ac701e7-54cd-4db4-8b0b-9ff4496b6999", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4033da4c-7304-49e0-8cb7-a6a32d561fd0", "sighting_of_ref": "indicator--c7004a21-8567-474f-9096-8517c87e533d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b97d78-bb44-40e8-a94d-dc0dbb60d207", "sighting_of_ref": "indicator--925b1f92-bb6f-4a6e-9040-3a27ad3b4c61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8802298-d669-4eb1-b543-915b54ec5c46", "sighting_of_ref": "indicator--90925cae-53d9-46e9-b22d-15d631fc6a94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f194967-c670-40b2-939c-5400e92a98e9", "sighting_of_ref": "indicator--7f16c332-0e49-4ed3-90ef-0922d19544b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c06519-2f80-4437-b7e4-b7df08cdc6fb", "sighting_of_ref": "indicator--3923174f-cfc6-4b7e-b663-a8a39fc92edb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcddff1-5b68-4a7c-8b54-44d6237b35d6", "sighting_of_ref": "indicator--14fd6b4b-e4a7-491e-9040-d14af70217b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9134d8-b3f4-48ad-9e53-c10ac508b926", "sighting_of_ref": "indicator--14fd6b4b-e4a7-491e-9040-d14af70217b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38231c5a-41b5-4d74-8256-d73ada95a8c9", "sighting_of_ref": "indicator--14fd6b4b-e4a7-491e-9040-d14af70217b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5001e8-aba9-4251-a97e-3720af495163", "sighting_of_ref": "indicator--8c29e66f-e11b-4f29-9ad8-bc97d1ea10d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354b15c3-7da8-44ef-abce-485de6bca91f", "sighting_of_ref": "indicator--8c29e66f-e11b-4f29-9ad8-bc97d1ea10d1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532238da-f65d-449e-b214-7684f0414693", "sighting_of_ref": "indicator--8c29e66f-e11b-4f29-9ad8-bc97d1ea10d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd0454f-82c5-48cd-9550-4b6939110912", "sighting_of_ref": "indicator--57327cf4-0c12-4720-8a28-71c8c4e4c5f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed33f91-a6c1-43a8-a1e5-20d72beccb71", "sighting_of_ref": "indicator--77974f4a-1afc-424d-a6ba-91af04e5619a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc92d03d-a341-4a5f-8f6c-8dd15e754a9c", "sighting_of_ref": "indicator--77974f4a-1afc-424d-a6ba-91af04e5619a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3c68c8-5333-40b9-8d40-3be78569f0d7", "sighting_of_ref": "indicator--6a137678-5caf-4bc6-ab74-b8ea3f4d96b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4f006f-15b5-4e9d-91a1-1f3e89625f40", "sighting_of_ref": "indicator--6a137678-5caf-4bc6-ab74-b8ea3f4d96b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5203aecd-4767-47a5-b88c-1b31b8c2c693", "sighting_of_ref": "indicator--53f4bb52-429c-4feb-9aa8-35d590686fad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cff868-ad5f-49af-9513-8861c123d44b", "sighting_of_ref": "indicator--53f4bb52-429c-4feb-9aa8-35d590686fad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0882b837-e10c-4e9d-ad28-1839daac5641", "sighting_of_ref": "indicator--638e395b-b5c5-4699-8bb0-e6b8fe42120b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cdb4cb-5aa0-4e9d-b225-489d5fed05bb", "sighting_of_ref": "indicator--638e395b-b5c5-4699-8bb0-e6b8fe42120b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763c9c79-7c04-4a96-8725-48327b1088b7", "sighting_of_ref": "indicator--6ac4e98f-eb97-48cf-8ea0-9455da4b06eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d472b56-54f7-480e-bf3d-c4cf20135371", "sighting_of_ref": "indicator--336e918a-0611-4f27-9df8-9a224e7e8915", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a824db0-8db5-475b-9ee6-bdb814dded13", "sighting_of_ref": "indicator--cf1d5970-7d35-4f8e-a792-6a9b7e8bcf0c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3212e027-975c-4b2f-8fae-25ae18830cca", "sighting_of_ref": "indicator--cf1d5970-7d35-4f8e-a792-6a9b7e8bcf0c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323a9099-0731-44d5-a6b2-3c2bab231489", "sighting_of_ref": "indicator--cf1d5970-7d35-4f8e-a792-6a9b7e8bcf0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acc4d53-5a94-4341-83dc-ac9f9772de5e", "sighting_of_ref": "indicator--91ea5b2e-ee71-4506-9c8b-efb00d493a41", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10027ec-6d10-4fa2-97f0-ccdb72587dc0", "sighting_of_ref": "indicator--91ea5b2e-ee71-4506-9c8b-efb00d493a41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781e2d80-4c2b-493c-8470-c514874ecd50", "sighting_of_ref": "indicator--91ea5b2e-ee71-4506-9c8b-efb00d493a41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7a56bd-8eea-43f9-ada0-a2073bbea4db", "sighting_of_ref": "indicator--5ce4fe5d-46bc-4da2-bb02-762cded3ee13", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4126f64a-8318-4344-810a-9c61434cab55", "sighting_of_ref": "indicator--953af4a4-0ba0-465e-bfc0-701a6b223da6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317391c6-2a8b-4ea3-ad97-7966a61f5314", "sighting_of_ref": "indicator--953af4a4-0ba0-465e-bfc0-701a6b223da6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9125cdfe-2b42-475c-80a8-8e0e223ea0a2", "sighting_of_ref": "indicator--953af4a4-0ba0-465e-bfc0-701a6b223da6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2583ed5-100a-42ae-9cdf-aa67ff599e79", "sighting_of_ref": "indicator--2350b707-0d63-4960-856c-2fe9ee89d3db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8cac91-5915-4e8e-b95d-6ae3451207c5", "sighting_of_ref": "indicator--2350b707-0d63-4960-856c-2fe9ee89d3db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc78cf3f-fdb6-4f24-92fe-2cfd0c82810d", "sighting_of_ref": "indicator--2350b707-0d63-4960-856c-2fe9ee89d3db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f40fc78-d767-4d10-9689-608e35210a58", "sighting_of_ref": "indicator--472c7375-0806-47f7-868c-81491f22d311", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f240dd-0386-475b-acfe-89c440f12ebe", "sighting_of_ref": "indicator--472c7375-0806-47f7-868c-81491f22d311", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3306744c-2d39-47ef-8059-aa8bb13cffa8", "sighting_of_ref": "indicator--472c7375-0806-47f7-868c-81491f22d311", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b22cca8-567f-47ad-85c7-51db86e723aa", "sighting_of_ref": "indicator--bf4ef6a5-454c-4f31-a2f9-ef062350da26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb4a9d2-f1d7-414a-b866-7804b7936517", "sighting_of_ref": "indicator--bf4ef6a5-454c-4f31-a2f9-ef062350da26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5999f20e-6167-428a-a926-699167e03307", "sighting_of_ref": "indicator--bf4ef6a5-454c-4f31-a2f9-ef062350da26", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af1cc58-fa3b-4b7b-a33d-7e7f4d9a7749", "sighting_of_ref": "indicator--e4ac2bac-23df-408d-ac13-d77870f8fb5c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43123c56-aa17-4003-a222-811ac8bb2d30", "sighting_of_ref": "indicator--e4ac2bac-23df-408d-ac13-d77870f8fb5c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67cb3df-5499-45e9-9870-b46e9a310a27", "sighting_of_ref": "indicator--e4ac2bac-23df-408d-ac13-d77870f8fb5c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7551e02d-9b53-4096-be6f-6fd66303a6d9", "sighting_of_ref": "indicator--b556dee4-01cb-4667-9313-78783e397517", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9db069-3711-4e27-ade4-c7e55a7bba18", "sighting_of_ref": "indicator--b556dee4-01cb-4667-9313-78783e397517", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98b2268-5c91-4d08-84f0-6bd1622500cf", "sighting_of_ref": "indicator--b556dee4-01cb-4667-9313-78783e397517", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d25dd6-c2c2-4afa-890e-827bc2552cbd", "sighting_of_ref": "indicator--28b86bde-41d9-46da-a5b8-a643457ebd02", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a424333-e26f-4416-af9a-ad0055cd0a1f", "sighting_of_ref": "indicator--28b86bde-41d9-46da-a5b8-a643457ebd02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380a001e-4f65-40e4-aeed-a991eeafeb05", "sighting_of_ref": "indicator--28b86bde-41d9-46da-a5b8-a643457ebd02", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dab530-b6dc-427f-a400-b85709615c30", "sighting_of_ref": "indicator--0a8c8e0b-e5be-44cf-94af-20c554781235", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9255ee4-9b88-4e7e-b8a1-92ee4e43d864", "sighting_of_ref": "indicator--0a8c8e0b-e5be-44cf-94af-20c554781235", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ad6bf-e2bb-40e3-838c-6e849d02844a", "sighting_of_ref": "indicator--0a8c8e0b-e5be-44cf-94af-20c554781235", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e80dbb-7abb-4531-9fb1-ffe5e3925931", "sighting_of_ref": "indicator--fe312329-74d6-454c-a6f8-8d883a68f17a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0156406-1753-484e-89f4-1f36e21e797e", "sighting_of_ref": "indicator--fe312329-74d6-454c-a6f8-8d883a68f17a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64f4c90-c8f7-4c20-afd1-7f08d0526db0", "sighting_of_ref": "indicator--fe312329-74d6-454c-a6f8-8d883a68f17a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c1f15b-9691-4687-9ebd-bdd3e0c2d438", "sighting_of_ref": "indicator--6ac4f2fd-50e1-4c4e-81af-e5a40c4c9f08", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650c299c-8154-4c05-8d50-0c7bc6ad0a31", "sighting_of_ref": "indicator--3cf9e48c-cb7a-465a-b44d-472c549f3abf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b6a87-2268-4c96-8188-0116857291b5", "sighting_of_ref": "indicator--3cf9e48c-cb7a-465a-b44d-472c549f3abf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b102fa1f-9987-46d2-813b-37f6cbc11d5a", "sighting_of_ref": "indicator--3cf9e48c-cb7a-465a-b44d-472c549f3abf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eace20-c1e9-4e13-90db-1afb8be6329e", "sighting_of_ref": "indicator--ab5badb0-db13-4d8c-aa21-2f2718cff533", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f7eef7-3e7a-425b-be35-37e38546804d", "sighting_of_ref": "indicator--ab5badb0-db13-4d8c-aa21-2f2718cff533", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2781b1d9-cdc4-4397-a58d-9d111c1251b3", "sighting_of_ref": "indicator--ab5badb0-db13-4d8c-aa21-2f2718cff533", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3347d38c-6cb2-4af7-8fc5-c814e1f016a5", "sighting_of_ref": "indicator--691d26b8-2e27-48fd-85ba-6b39f1402874", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467c567a-a48d-441c-b009-8541f454b985", "sighting_of_ref": "indicator--6fe7ae77-266e-411d-8123-8e230a0e8956", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20d6835-78da-4f0e-94fc-b104e145f714", "sighting_of_ref": "indicator--3aa572c8-f03d-459c-8c06-7566ed320b30", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcb283d-da2d-44d9-9cfb-eb360b99f78d", "sighting_of_ref": "indicator--5804e321-31ba-47dc-b972-485f16ac9a3e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9dac39-fc66-4501-8f4f-661b3b20c946", "sighting_of_ref": "indicator--237e5e23-aed6-4a8f-94bc-47c700f5ebde", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed186c3-b3cb-4bf2-9ab1-6d911de573e0", "sighting_of_ref": "indicator--3714a272-95de-4f7f-805c-003b58aee991", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059baef-d36a-48ba-934f-1ffa3e90111b", "sighting_of_ref": "indicator--7dffae69-50ab-42ec-a160-cc7dd2d0a6d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75f945c-1513-4096-8d40-ced123480426", "sighting_of_ref": "indicator--967b47b3-73a6-4d5f-afc8-b8f6eee1f719", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03b7a16-917d-4cab-bdd6-83d7c0ad1359", "sighting_of_ref": "indicator--c5242ce2-2922-4741-9c30-794de0b7de8d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c001bf-a8ed-4f8e-be48-1a27e09e557e", "sighting_of_ref": "indicator--c5242ce2-2922-4741-9c30-794de0b7de8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09082b0-ef76-41a2-93bc-e0eb55154891", "sighting_of_ref": "indicator--c5242ce2-2922-4741-9c30-794de0b7de8d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28231ae-b7d4-4137-9984-88e27ad81e39", "sighting_of_ref": "indicator--c5242ce2-2922-4741-9c30-794de0b7de8d", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce55a63b-19b5-4dc3-8829-3178a298b4ea", "sighting_of_ref": "indicator--73dff096-5976-4cab-abc8-6b002ae9bd13", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2126e526-0bc6-419a-affd-6d47faf9a86b", "sighting_of_ref": "indicator--73dff096-5976-4cab-abc8-6b002ae9bd13", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ad788b-518a-49e1-87cf-7e45c58bd388", "sighting_of_ref": "indicator--73dff096-5976-4cab-abc8-6b002ae9bd13", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7260f77-8f72-4bc9-936e-8ed7b72bbb2a", "sighting_of_ref": "indicator--8cd3e799-f7bb-48a5-bbb2-39fe15187b29", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b90d75-5f60-46b0-a572-45e4605f5516", "sighting_of_ref": "indicator--8cd3e799-f7bb-48a5-bbb2-39fe15187b29", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d68cce-cbe5-4fba-83dc-73f17444d1c5", "sighting_of_ref": "indicator--7cf83e5d-af07-4edc-ad1a-5a1b6355d5bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e492d0f8-1a02-4254-870c-c2a5e893cf2a", "sighting_of_ref": "indicator--7cf83e5d-af07-4edc-ad1a-5a1b6355d5bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c394eb3c-6236-444a-8566-6a12037a08c0", "sighting_of_ref": "indicator--7cf83e5d-af07-4edc-ad1a-5a1b6355d5bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8aea9b-97db-4897-8ce7-11ad28dc3da3", "sighting_of_ref": "indicator--caa85306-0632-4a6c-812e-95e4c6c6fc8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18a7f7f-f69c-4a67-a2c3-a92d107733a6", "sighting_of_ref": "indicator--caa85306-0632-4a6c-812e-95e4c6c6fc8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7a15ae-b6b1-487d-88c7-02934773649b", "sighting_of_ref": "indicator--caa85306-0632-4a6c-812e-95e4c6c6fc8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16de887e-44ce-40fb-8d15-276a4d4e563b", "sighting_of_ref": "indicator--1d61ae17-86dd-4517-9d3d-a5a2f8c365ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfd51a1-9ccf-4793-912f-ffe098897f8f", "sighting_of_ref": "indicator--765a5ccd-adc9-4564-a919-6a83db2ee369", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1894cc-b6ae-47d6-a6e0-0268b1e9023f", "sighting_of_ref": "indicator--a03421b8-6002-41c8-b966-40e00f120579", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63cb8c0-9408-4da6-9636-f9043f529d3a", "sighting_of_ref": "indicator--a03421b8-6002-41c8-b966-40e00f120579", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bae5c41-c614-4b93-bcd8-c52003ddee98", "sighting_of_ref": "indicator--a03421b8-6002-41c8-b966-40e00f120579", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec3a767-81df-4101-b6ad-5ccedbad6585", "sighting_of_ref": "indicator--c5302631-709e-4e95-a2e9-1d41d46da395", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59393a0f-6eaa-4b50-85ef-64c1ac90ce7f", "sighting_of_ref": "indicator--c5302631-709e-4e95-a2e9-1d41d46da395", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fad981-c7d3-4f90-9710-9122c07a7d75", "sighting_of_ref": "indicator--c5302631-709e-4e95-a2e9-1d41d46da395", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee5785b-2c23-4ee9-b379-4ce8902a2dc7", "sighting_of_ref": "indicator--02996b40-a46b-4377-b5fc-7434921aaa37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c043ed7-dcc1-48d1-8461-e2b8dbe3e43e", "sighting_of_ref": "indicator--c7786c6a-a76e-4be1-91ca-aa5266ae0729", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efcd832-d859-4801-9efe-11ea4d66b3cf", "sighting_of_ref": "indicator--c7786c6a-a76e-4be1-91ca-aa5266ae0729", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce0c7b2-a7f2-4a51-bda2-e6f921cd5362", "sighting_of_ref": "indicator--3de7c493-8b81-4772-a77a-52f477178cca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba7024e-e5ee-4c8b-80a7-03b9dc3699d3", "sighting_of_ref": "indicator--3de7c493-8b81-4772-a77a-52f477178cca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086b5635-1e5d-4dfc-9833-231c9687f3f4", "sighting_of_ref": "indicator--3de7c493-8b81-4772-a77a-52f477178cca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca1a12b-b8b3-4c38-b518-f274026157e2", "sighting_of_ref": "indicator--5c3687b2-2b16-4591-b740-66ef9ddc3a6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f575a159-fa3c-4ad6-9507-cc4781203248", "sighting_of_ref": "indicator--5c3687b2-2b16-4591-b740-66ef9ddc3a6e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa899ba8-2e85-42b9-9d12-0a0f4f35789e", "sighting_of_ref": "indicator--5c3687b2-2b16-4591-b740-66ef9ddc3a6e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893b0098-e0c5-4555-a276-de81799eb82b", "sighting_of_ref": "indicator--74bd546a-fadf-40a5-9499-b8b88ea5ad59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229a6a02-f36b-487a-9b68-364a9e0d6cd6", "sighting_of_ref": "indicator--74bd546a-fadf-40a5-9499-b8b88ea5ad59", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec520de2-c63d-4c21-8d76-2f5047cb52f8", "sighting_of_ref": "indicator--399f737a-0967-4990-aa0f-868d52f7b784", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80f67c4-6458-42ce-8cb2-b877a8b4b135", "sighting_of_ref": "indicator--6d071200-00e9-401a-824c-ffee15bb86a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaaa1c8-54b5-4fba-9cea-8ad188948164", "sighting_of_ref": "indicator--931d5045-8672-4330-8076-9300f8236987", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0145ba3-09e0-42a5-b2b9-73e756b5ff71", "sighting_of_ref": "indicator--931d5045-8672-4330-8076-9300f8236987", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd37ab52-2935-4205-a40e-ac8d56050b13", "sighting_of_ref": "indicator--931d5045-8672-4330-8076-9300f8236987", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2995a7e0-6e08-4066-b263-ffde1b4c0704", "sighting_of_ref": "indicator--8f3453ac-5262-4794-b975-51ec1440a703", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e3e716-a18a-4bbd-b9da-015f72511d09", "sighting_of_ref": "indicator--8f3453ac-5262-4794-b975-51ec1440a703", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b586fba-baa1-40eb-a33c-a50b9219d83a", "sighting_of_ref": "indicator--8f3453ac-5262-4794-b975-51ec1440a703", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d8fc27-86e0-4f4a-8af8-081e29456913", "sighting_of_ref": "indicator--3b2029e2-ad3b-43e1-8c20-4242086544bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6da588-a549-4862-b948-64bc1463cc33", "sighting_of_ref": "indicator--3b2029e2-ad3b-43e1-8c20-4242086544bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64b99e9-2262-473d-b66d-e16e9a1c1fa7", "sighting_of_ref": "indicator--3b2029e2-ad3b-43e1-8c20-4242086544bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b82efc-513f-4276-b529-1dae429d631d", "sighting_of_ref": "indicator--896cc8e2-f9ac-4384-a3f5-236853c479dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2b0840-5ec5-447e-94dc-c755cfb99833", "sighting_of_ref": "indicator--896cc8e2-f9ac-4384-a3f5-236853c479dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbbca84-a475-45d9-b9bf-3d338f31a0f7", "sighting_of_ref": "indicator--896cc8e2-f9ac-4384-a3f5-236853c479dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e271df6-9e3c-4388-8c58-25c66fd476b3", "sighting_of_ref": "indicator--3b2acceb-7b0a-46c1-82cb-2279be9f9949", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41f3a15-498c-4b58-b897-2f17b829743e", "sighting_of_ref": "indicator--3b2acceb-7b0a-46c1-82cb-2279be9f9949", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f6c05d-dab1-494e-9619-c83eef2147d8", "sighting_of_ref": "indicator--b2c615fa-9c9a-485c-be9f-8418c3ffda0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3644da3-2198-4265-8459-04af8948adb9", "sighting_of_ref": "indicator--3a69de37-2173-45de-828d-5759a510a9c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b494c6e8-e748-4995-81e1-2515f4da5d84", "sighting_of_ref": "indicator--3a69de37-2173-45de-828d-5759a510a9c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd147ff9-3591-4cac-aaf1-aa3b08d61836", "sighting_of_ref": "indicator--3a69de37-2173-45de-828d-5759a510a9c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f146e0-4bdf-42b3-9d93-59c75cd990d5", "sighting_of_ref": "indicator--ce766c23-7cac-41f6-9f80-add7c079c4d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aacd349-d558-4607-9d0b-75a729b4bdf4", "sighting_of_ref": "indicator--ce766c23-7cac-41f6-9f80-add7c079c4d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ed87ae-4bc7-43bf-b0a6-2923530ba7c9", "sighting_of_ref": "indicator--ce766c23-7cac-41f6-9f80-add7c079c4d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781c2d52-adc8-495e-a1b4-80936fd3656e", "sighting_of_ref": "indicator--1abe9f36-8fc0-4f27-a9b2-68e65163889f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6755c4fc-b6c8-45da-af91-0c0d798da4f6", "sighting_of_ref": "indicator--5c0fc02f-da6e-4b08-a6db-453dfd7beed1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a7a1bd-12e9-47c3-b5b5-eb36b5133ced", "sighting_of_ref": "indicator--40aee8f0-b983-463f-a661-8d145f4d98d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c6ab0e-ce51-45bd-b4c8-1c7aad1de279", "sighting_of_ref": "indicator--40aee8f0-b983-463f-a661-8d145f4d98d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a3d69b-c91d-45c2-a7a5-27446fcc83b0", "sighting_of_ref": "indicator--40aee8f0-b983-463f-a661-8d145f4d98d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88026e55-dbbb-4352-be51-c78f4f962543", "sighting_of_ref": "indicator--7f7f3ed3-c24c-454f-92d4-e74146f9a87d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754310ee-ce4a-40d8-94ee-1af0807b2aa4", "sighting_of_ref": "indicator--7f7f3ed3-c24c-454f-92d4-e74146f9a87d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5021cca2-e950-46f1-bdcf-eca55862922d", "sighting_of_ref": "indicator--7f7f3ed3-c24c-454f-92d4-e74146f9a87d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e705164c-84ea-4f21-b557-c892516cff1a", "sighting_of_ref": "indicator--4147abb6-1212-4653-83b7-caa89315ef8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6970619b-ec8b-44fe-839c-a70a64e4ba73", "sighting_of_ref": "indicator--4147abb6-1212-4653-83b7-caa89315ef8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069b861c-dece-4228-9c44-b70072e36af2", "sighting_of_ref": "indicator--4147abb6-1212-4653-83b7-caa89315ef8e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1488aa71-d7dc-4ff5-8577-08dff2deb03b", "sighting_of_ref": "indicator--43c83e16-331e-42b1-9259-13d1118700e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0e1419-550f-4f3d-b17d-d64d0d286f9c", "sighting_of_ref": "indicator--2572dbc9-2263-4cc3-837c-509daece09c9", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f90dfa5-b9c1-4c77-8199-5210efcef045", "sighting_of_ref": "indicator--4d5f044e-7e74-4d77-a780-8f50ff001507", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0710e6-3b15-45f8-ba29-1a1fa1d0a30f", "sighting_of_ref": "indicator--daae5f61-8caf-4417-b285-8a19e7714cfc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4c583c-8c0c-42ba-b924-5f110ceb59af", "sighting_of_ref": "indicator--daae5f61-8caf-4417-b285-8a19e7714cfc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951b17d2-1f67-42f6-bc91-c6392631ff26", "sighting_of_ref": "indicator--daae5f61-8caf-4417-b285-8a19e7714cfc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60029af7-722d-4fea-b2af-818f4e6679a3", "sighting_of_ref": "indicator--3b75720c-7f66-455e-b7af-3659cf04902c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68da2181-e76d-4174-b9da-54fdf1b9a96f", "sighting_of_ref": "indicator--3b75720c-7f66-455e-b7af-3659cf04902c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2078ee27-bfcc-4ec9-9ded-c74a67839633", "sighting_of_ref": "indicator--3b75720c-7f66-455e-b7af-3659cf04902c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6b4e27-1529-484d-89b1-620a81bb0acb", "sighting_of_ref": "indicator--0de358bb-49ab-4a78-8cd8-64a798c0e3e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4375ac-60e7-46f1-bce3-6be6e213ab53", "sighting_of_ref": "indicator--4e1d2b8c-7ced-4782-814d-c7bddf698166", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a300e1c-1958-43c2-a531-2a5aac6da919", "sighting_of_ref": "indicator--4e1d2b8c-7ced-4782-814d-c7bddf698166", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05f10c9-2ebb-4a5f-8451-b188c5ad4121", "sighting_of_ref": "indicator--4e1d2b8c-7ced-4782-814d-c7bddf698166", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf7edf2-ff84-4b0f-a439-70ea2fd53d97", "sighting_of_ref": "indicator--83c91375-3be0-4e0a-8755-45cdc00fef21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510457f3-dca3-41b6-ac18-e9b568908fb5", "sighting_of_ref": "indicator--ead3a228-30fb-457b-990b-757b301d4256", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bd8821-8b5b-4e97-8267-aac90b468511", "sighting_of_ref": "indicator--67d680e4-9524-4ea9-9d3d-4a32a71b126c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a712ce0-f01d-4879-a512-f645fd73a429", "sighting_of_ref": "indicator--d1d95cb4-fe27-412f-a415-93062c04ed47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4241c87f-d1de-4ee6-8d60-e6471644dcc7", "sighting_of_ref": "indicator--25ccf41f-9bf4-481d-b235-a0c570554617", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca202f5-7b53-4ad2-8770-2220b2e10353", "sighting_of_ref": "indicator--9a3eb82a-c944-4346-9934-1a56be7049d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bfdcbd-7ee4-4d82-82a2-d59712aa8c34", "sighting_of_ref": "indicator--9a3eb82a-c944-4346-9934-1a56be7049d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ffa76f-3a25-406d-80e8-695118ac16eb", "sighting_of_ref": "indicator--157719d3-c466-49ca-9dbe-7d5eef1e43f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee72a566-278b-4c09-9503-625842a8a978", "sighting_of_ref": "indicator--08728229-432f-410d-b26c-9a6dbbccb242", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42725aa-aedc-4d1a-831e-a61c4af8a0e5", "sighting_of_ref": "indicator--fa0ec63b-03a3-49bc-8fb6-ae0e4b1b0718", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e91bcb1-24ce-42cd-8b09-a03b92b11cd0", "sighting_of_ref": "indicator--fa0ec63b-03a3-49bc-8fb6-ae0e4b1b0718", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e684de96-869d-43cb-8c6f-1db1b360a022", "sighting_of_ref": "indicator--e6084549-b13c-4ac9-9dcc-70fdd878ee76", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adcd06f-39c7-4f89-ba60-05d073191bb2", "sighting_of_ref": "indicator--e6084549-b13c-4ac9-9dcc-70fdd878ee76", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2496d7a9-17fc-4fdc-8ad7-74463f513a62", "sighting_of_ref": "indicator--e6084549-b13c-4ac9-9dcc-70fdd878ee76", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8762b08d-252b-47a8-b24e-7e608bd1fdcd", "sighting_of_ref": "indicator--69835e05-7a28-4413-ae46-bbb6cd3f479a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d16061-128f-494f-b54c-2133d1c77f3d", "sighting_of_ref": "indicator--69835e05-7a28-4413-ae46-bbb6cd3f479a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d3c3c9-9d3c-4263-ad79-afd25c3cbe27", "sighting_of_ref": "indicator--69835e05-7a28-4413-ae46-bbb6cd3f479a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab7a6ad-54c2-4a94-a161-f558a49a95a3", "sighting_of_ref": "indicator--5b7f1460-f52c-47b8-8137-f2f35588bc52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26f5251-4e46-47d8-a020-dbcc885f4c0e", "sighting_of_ref": "indicator--5b7f1460-f52c-47b8-8137-f2f35588bc52", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f38e9c-004d-4e96-834e-90d4ada517db", "sighting_of_ref": "indicator--5b7f1460-f52c-47b8-8137-f2f35588bc52", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d590e893-57de-4a5b-a9b6-4079a4193557", "sighting_of_ref": "indicator--bf44b236-a2ac-4a1c-bffb-a8432486fbf0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32db0ce-30c8-4f7d-808c-489dee9874a4", "sighting_of_ref": "indicator--327e9a58-dead-4929-b3b2-5bbf88ffc991", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27016131-edf8-4ced-8c81-342358f21dc9", "sighting_of_ref": "indicator--9acf407d-83f2-4676-ad63-ab29f0a74875", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed2a997-1071-4900-aac2-55c44b3eebf5", "sighting_of_ref": "indicator--cd10c49b-dc89-4a63-8879-fe34ef3062b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31675ae-42eb-4c83-83f5-3846e94823bf", "sighting_of_ref": "indicator--5a35b8cf-40b5-4e2b-9331-9c69012b1717", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af137aa4-f36a-4e23-9263-b8d463a1aa9a", "sighting_of_ref": "indicator--5a35b8cf-40b5-4e2b-9331-9c69012b1717", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d909839e-e8ff-4a65-99c8-164cfef2315a", "sighting_of_ref": "indicator--651e5ee6-9007-474f-99b4-fa14409f4a2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a430c9-4669-42f6-a9c4-1e7c4f3d4989", "sighting_of_ref": "indicator--dbae2673-9932-4cbb-9da5-ef0250910b3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a36c9b-83b1-422f-8a51-caf9c7a1e592", "sighting_of_ref": "indicator--dbae2673-9932-4cbb-9da5-ef0250910b3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03d4f0f-c390-4896-a5c8-e8d31467c759", "sighting_of_ref": "indicator--a06d65bd-b3e3-4820-a5dc-477e96bcfcd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1060f2-5e83-4fe8-aca1-7c2018e38a56", "sighting_of_ref": "indicator--a06d65bd-b3e3-4820-a5dc-477e96bcfcd3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c1526-d95a-4d57-99fe-f39831625e85", "sighting_of_ref": "indicator--b31b5e3e-4789-4443-8d96-e475cc0c1355", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5222f3-ef88-481d-8988-8770d1850400", "sighting_of_ref": "indicator--d622bdd7-96cf-4a07-905a-65c7acb0b52b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5821d96-1d5b-4af3-8009-8560ae2432ea", "sighting_of_ref": "indicator--d622bdd7-96cf-4a07-905a-65c7acb0b52b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e3c88f-a945-43c2-8c07-0176aa42fcbe", "sighting_of_ref": "indicator--d622bdd7-96cf-4a07-905a-65c7acb0b52b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fba8b7-bcde-4982-97db-559d74e3165c", "sighting_of_ref": "indicator--83f0ada3-8913-465f-ac77-08fb5b7054b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09835425-b4bf-41b1-b65b-089b0d7b903a", "sighting_of_ref": "indicator--9ca1fe2c-c8ca-4ba0-afb7-a6f32e270811", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba008cb-c514-45ad-b58a-608927d0d774", "sighting_of_ref": "indicator--9ca1fe2c-c8ca-4ba0-afb7-a6f32e270811", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b7db18-9493-4e25-8e42-cc29d323c7fc", "sighting_of_ref": "indicator--9ca1fe2c-c8ca-4ba0-afb7-a6f32e270811", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec3494c-06b8-4e23-ad9d-2824dccaaced", "sighting_of_ref": "indicator--a312bead-6c18-4dff-8c54-2b9e11a88f48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cb06f5-5e3a-413f-aba6-f37443442859", "sighting_of_ref": "indicator--a312bead-6c18-4dff-8c54-2b9e11a88f48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fece35-af22-4125-b070-0dc9acac058c", "sighting_of_ref": "indicator--a312bead-6c18-4dff-8c54-2b9e11a88f48", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d66f470-389a-4709-a4a6-189945a32a92", "sighting_of_ref": "indicator--d156cd87-7f8a-4606-ac8f-f2013faf5beb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf034fd-18b4-4efd-8552-b4f1068b0b5d", "sighting_of_ref": "indicator--d156cd87-7f8a-4606-ac8f-f2013faf5beb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a5708b-dff9-4bff-9403-527096e74e6a", "sighting_of_ref": "indicator--d156cd87-7f8a-4606-ac8f-f2013faf5beb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c906f373-fab7-4ad2-96f3-ec01435b7ba9", "sighting_of_ref": "indicator--39e3af5e-af7a-4c10-88ee-474da904fdba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1686ead2-810b-4460-91b1-ccb41f180bc0", "sighting_of_ref": "indicator--39e3af5e-af7a-4c10-88ee-474da904fdba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6141e391-b9a1-4307-86ae-ad72fdcdb66c", "sighting_of_ref": "indicator--39e3af5e-af7a-4c10-88ee-474da904fdba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da94d46c-0b36-44e8-91e8-d23c76eeabb5", "sighting_of_ref": "indicator--d7ef0169-0ac5-477a-b3da-7af4d6d89cea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aff666-9bcc-4df5-ac78-7b31200fe904", "sighting_of_ref": "indicator--d7ef0169-0ac5-477a-b3da-7af4d6d89cea", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbd830c-2b44-4a7b-83e8-9a8a7e098a5b", "sighting_of_ref": "indicator--d7ef0169-0ac5-477a-b3da-7af4d6d89cea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f2113e-03cd-4e11-bf56-7d5865bbb089", "sighting_of_ref": "indicator--4f2b2c30-f426-4ebb-ba05-7ab1bb9279bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596da615-9df2-4ab8-a3ec-290123bd35d9", "sighting_of_ref": "indicator--4f2b2c30-f426-4ebb-ba05-7ab1bb9279bb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483366cc-6d97-437d-814f-fdf73ad63560", "sighting_of_ref": "indicator--cf0ebdc9-7a4e-4f9d-9c84-cda432fa3cde", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f7f25b-2b52-4331-8069-3b1a75bd3f6d", "sighting_of_ref": "indicator--33f75121-2c3e-4c7f-b802-6b55fbb1c720", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb0a4c6-33cb-430c-bb50-e8bd8342482f", "sighting_of_ref": "indicator--8a2c0b59-07ac-4644-b3ac-bc861199e86d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646802d8-11be-4813-b304-129c71385c85", "sighting_of_ref": "indicator--73ba5026-e97e-4f33-bc33-90d15e6ca285", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f9e12d-c542-40a3-a635-b862cdfc672c", "sighting_of_ref": "indicator--93f6c0d4-258b-429b-b6dd-f588eb2c8489", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de68818-5914-4f92-a0a9-1d9e3aa333c8", "sighting_of_ref": "indicator--93f6c0d4-258b-429b-b6dd-f588eb2c8489", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0979c3a4-aab1-46bf-bda3-3b15a206ad75", "sighting_of_ref": "indicator--93f6c0d4-258b-429b-b6dd-f588eb2c8489", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5ec01b-2ba4-49d8-aaa2-e9599a91e009", "sighting_of_ref": "indicator--47aad0bf-9a54-4d83-bc06-4241775ca649", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dec135d-4269-4815-976b-adc1670e34f4", "sighting_of_ref": "indicator--47aad0bf-9a54-4d83-bc06-4241775ca649", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75ffaa0-4d1e-4669-b18c-92317b2fd9e0", "sighting_of_ref": "indicator--47aad0bf-9a54-4d83-bc06-4241775ca649", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33799b9-1b7d-4a96-9856-22be6c544bee", "sighting_of_ref": "indicator--8b8eb3de-ccb1-46c0-861d-a415cf311e54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f5ddd9-5613-4e2c-9b76-9c0602feb097", "sighting_of_ref": "indicator--8b8eb3de-ccb1-46c0-861d-a415cf311e54", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875d6ae9-9d04-4376-a9bd-456b4020602b", "sighting_of_ref": "indicator--8b8eb3de-ccb1-46c0-861d-a415cf311e54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e182b076-1108-4cfe-bf5d-5044e8837a27", "sighting_of_ref": "indicator--f052a224-e56c-420f-9271-f91e262744bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bac1933-7cd3-4b3e-841f-06d5704661b1", "sighting_of_ref": "indicator--f052a224-e56c-420f-9271-f91e262744bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e84ae4c-a109-4846-b579-77eebc94037d", "sighting_of_ref": "indicator--f052a224-e56c-420f-9271-f91e262744bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbe91ef-78d7-46dc-901d-75e8f4c695cd", "sighting_of_ref": "indicator--1c3c48a5-bcd2-476b-9c44-739722858f0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5d0da1-9324-4a95-92c5-81a48faa4e67", "sighting_of_ref": "indicator--1c3c48a5-bcd2-476b-9c44-739722858f0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdad7015-ab2b-45e4-9b83-df3164770f3d", "sighting_of_ref": "indicator--1c3c48a5-bcd2-476b-9c44-739722858f0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848a1838-5847-49da-a50f-77d0c0953a75", "sighting_of_ref": "indicator--f9be4115-dc95-42d3-a3d0-08689115879f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976f9a2c-c968-4424-9094-c3c2fce4cd64", "sighting_of_ref": "indicator--f9be4115-dc95-42d3-a3d0-08689115879f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d08fdf4-59c9-41c5-b880-8faeb41670a0", "sighting_of_ref": "indicator--f9be4115-dc95-42d3-a3d0-08689115879f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04bd6b2-a5ad-4b58-bbf3-e2d022252bf9", "sighting_of_ref": "indicator--a6f13d26-ca21-417c-8f25-c56babb7557e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5a6a74-e4e0-4fe8-8806-24a97552e7d9", "sighting_of_ref": "indicator--a6f13d26-ca21-417c-8f25-c56babb7557e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63ab636-c9a5-4cd2-8b05-e1f67d56096c", "sighting_of_ref": "indicator--fceb17db-5b3d-4a59-96de-285d0db9c8f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3380432a-36f4-4839-aa90-dfcdd37f9945", "sighting_of_ref": "indicator--fceb17db-5b3d-4a59-96de-285d0db9c8f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23be337e-e37a-408c-a6b1-a10de5a674d3", "sighting_of_ref": "indicator--dc3dd1f6-a245-4b67-8670-56a5f46bd22c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecca3ab-109a-46e1-9d32-a57045ed572d", "sighting_of_ref": "indicator--5c1852c2-cbc9-4650-869b-ea5b20f8d588", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78991917-06b7-4707-a446-b7c8a0a01597", "sighting_of_ref": "indicator--5c1852c2-cbc9-4650-869b-ea5b20f8d588", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb94bd7d-dbde-4333-8564-cd5ab9b9d201", "sighting_of_ref": "indicator--b6f511ad-e0a8-48a6-8e2e-fa6994a863fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f171c2-c4a5-4ac2-80c3-5d5817acdd6f", "sighting_of_ref": "indicator--b6f511ad-e0a8-48a6-8e2e-fa6994a863fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a614622-ef48-4b7a-8228-16c468f41c07", "sighting_of_ref": "indicator--6e10ee35-0417-4c8f-bea2-eff3085111f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b8df06-0455-4dc3-a9dd-07fd38925dcd", "sighting_of_ref": "indicator--e56f646e-8960-43cb-b8b0-1aac26abeee4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b058efbd-fba3-4a74-812f-156ff1e0c348", "sighting_of_ref": "indicator--e56f646e-8960-43cb-b8b0-1aac26abeee4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef108f0-6b3b-48bc-b23a-3c216e621320", "sighting_of_ref": "indicator--6a71ac8e-8987-497e-a191-2578c4b1ee42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e7cd76-d726-4df0-99c5-33465f9d2701", "sighting_of_ref": "indicator--c365234b-310c-4e4d-a07a-22f955c15ea3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b496dedf-44c6-4683-b004-b3fcee6b3dfa", "sighting_of_ref": "indicator--c365234b-310c-4e4d-a07a-22f955c15ea3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b046dc-64e9-4d7c-926a-a49ef9db3982", "sighting_of_ref": "indicator--d93c5d5b-06f1-45a8-8b66-bea9d2d3f425", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c685dc-0fc4-411d-941f-22bf3de09e4b", "sighting_of_ref": "indicator--661b7356-8d0a-481c-b15a-ae2bda44f3f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f4d8f8-b144-4601-8613-588caaf44b5b", "sighting_of_ref": "indicator--661b7356-8d0a-481c-b15a-ae2bda44f3f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cc5d1c-c244-4474-a44b-9c5de3a0370a", "sighting_of_ref": "indicator--c5cf938e-a2be-458b-a338-92e241a8e167", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0385029f-64ae-4612-9b7f-10019e71d489", "sighting_of_ref": "indicator--34ee5092-2547-4a48-bf0a-4e6795eb27c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4b015b-cf15-4f61-8805-eb3041a5e3aa", "sighting_of_ref": "indicator--34ee5092-2547-4a48-bf0a-4e6795eb27c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc42d1fa-8bc5-43eb-80bd-c184505f25ee", "sighting_of_ref": "indicator--34ee5092-2547-4a48-bf0a-4e6795eb27c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ad731c-dc7f-49da-8f42-56ee43d3003a", "sighting_of_ref": "indicator--4a1e762d-5c82-44c6-98de-489b8bbcc0f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09df2b96-20f2-4d45-8075-aaf43dbc66f2", "sighting_of_ref": "indicator--397d8376-31ac-453a-97a8-f4a06cef8e82", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac41a67-953a-44a7-9f67-d36e570d5044", "sighting_of_ref": "indicator--837d425d-7b75-47f0-afa3-af40273ee55c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439ea686-7208-4c3c-baca-fa982334fc7c", "sighting_of_ref": "indicator--837d425d-7b75-47f0-afa3-af40273ee55c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7f5bfc-4802-4f82-9581-585c7935bcc6", "sighting_of_ref": "indicator--8aef47f7-8c1d-4bc6-a661-4ced714494a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8b067f-1053-4307-b1b8-3e3cb49c50ef", "sighting_of_ref": "indicator--b7c585e5-4aa9-44ac-8af9-c9d8582205d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92af79bc-474b-4f0a-b968-e8f45359efc9", "sighting_of_ref": "indicator--b7c585e5-4aa9-44ac-8af9-c9d8582205d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b4ff6-3248-45ba-9cab-95697450d9a3", "sighting_of_ref": "indicator--f3b691a6-d66e-401a-8d9d-62cc747dde20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfdecd4-43b3-4f10-9338-70ea107fca39", "sighting_of_ref": "indicator--f3b691a6-d66e-401a-8d9d-62cc747dde20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adf4539-eada-429d-9aa2-96d03d6a570e", "sighting_of_ref": "indicator--a078e777-ec0a-43c1-957f-ddba94f79b9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bb6bc1-2fac-4fb6-93b9-51e2ebf49dda", "sighting_of_ref": "indicator--38e44162-52ba-40d2-bc9e-e20a3332a31e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7525441-6245-4d01-ab21-48f72d06c01a", "sighting_of_ref": "indicator--38e44162-52ba-40d2-bc9e-e20a3332a31e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcf1d84-0db9-4f30-b780-61063b4a596d", "sighting_of_ref": "indicator--38e44162-52ba-40d2-bc9e-e20a3332a31e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173d736e-8278-49c3-a8c7-053578ea3d71", "sighting_of_ref": "indicator--24f8fadc-2e17-48d6-9f85-f316f5db7b28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc2e181-cac0-4252-a7e9-6644be4ca6a7", "sighting_of_ref": "indicator--24f8fadc-2e17-48d6-9f85-f316f5db7b28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35ab562-a439-4ab1-b066-0e919debe4a2", "sighting_of_ref": "indicator--24f8fadc-2e17-48d6-9f85-f316f5db7b28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34770cbd-1c08-4917-9523-698e212d6407", "sighting_of_ref": "indicator--f023be70-9e67-444c-88b6-3d78a164c947", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2b10e-cd04-4a11-beb6-7c66f88b9f42", "sighting_of_ref": "indicator--023ca6b9-b050-4748-9aea-dbebb4171616", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8ce8e7-66d3-4781-b0dc-aa044b3c0a54", "sighting_of_ref": "indicator--11298def-8e7f-4983-a5b0-b3c8a92f4ba1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d1bb7d-06c4-4814-b4ce-73a51c1f7dfd", "sighting_of_ref": "indicator--7439c0bb-0e9b-4c63-92b9-c22209e2ca72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b66a065-d7c8-4a5b-8fff-6d8e749f0454", "sighting_of_ref": "indicator--8d8a6f6c-c4d2-41d5-a2af-254b43e632e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b800df-ea7d-4de0-b9de-80fdd27d2c91", "sighting_of_ref": "indicator--e155e4b1-9b93-4256-988a-2d5ca568ada9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47b4de3-32fc-461a-8630-12e58dd6f5b9", "sighting_of_ref": "indicator--3df8a298-8455-4461-b3d1-b374cbd135f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a7a6bd-618e-4dd2-b2ae-baa2291623bd", "sighting_of_ref": "indicator--5272e33f-f435-454d-97ae-1112f0c62639", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a8ec4d-e50e-4cee-ab07-b8f58a706490", "sighting_of_ref": "indicator--5272e33f-f435-454d-97ae-1112f0c62639", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b75078-4825-4235-86d7-23d74d486af0", "sighting_of_ref": "indicator--5272e33f-f435-454d-97ae-1112f0c62639", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e67da29-5ffa-4f10-bb82-eb8acb1a5f9f", "sighting_of_ref": "indicator--f3da3ea9-9981-4c8d-8a62-fbe409d0185d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8c70e8-a046-40c4-96d1-15f8d62617c5", "sighting_of_ref": "indicator--f3da3ea9-9981-4c8d-8a62-fbe409d0185d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4767efa4-645e-48fa-a952-01ad965d7f86", "sighting_of_ref": "indicator--af171af6-28b2-4aa2-8606-4aa908f14f0a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaded50-6fbc-4ddc-a5eb-4287098e9a68", "sighting_of_ref": "indicator--af171af6-28b2-4aa2-8606-4aa908f14f0a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad85fa6-c467-4811-b9f2-0774df41e9b1", "sighting_of_ref": "indicator--af171af6-28b2-4aa2-8606-4aa908f14f0a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13ae412-49bf-489f-996c-a69667856100", "sighting_of_ref": "indicator--154699ed-23bb-443c-b1c1-fe55da244fa1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a667ba-a16d-4d9e-af26-da3a1a43ef47", "sighting_of_ref": "indicator--a0364e96-b59e-4398-9d93-31a0e8b6c1b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6031d2-d26e-428c-a502-44c173afe518", "sighting_of_ref": "indicator--a0364e96-b59e-4398-9d93-31a0e8b6c1b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e2e8f-5e29-4c77-a7d1-8988902e56b0", "sighting_of_ref": "indicator--1ac9e26d-4e89-439a-8f2f-5c3513ddfc17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0fd744-99fe-45af-87e5-d5816230ad64", "sighting_of_ref": "indicator--54120873-2045-478b-9cc6-527095788042", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672b77fe-7ca7-445f-aaa2-2e40739e5ad1", "sighting_of_ref": "indicator--54120873-2045-478b-9cc6-527095788042", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754870d2-dc24-4628-8697-572015c13147", "sighting_of_ref": "indicator--5994044d-9790-4caa-b082-fec28c7c7e66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f7ec9f-232a-48e1-8606-7339faf2541e", "sighting_of_ref": "indicator--a41a2369-55ec-4589-9409-2b08e3de0585", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cdca93-bb4b-4724-936c-b331fb0edd96", "sighting_of_ref": "indicator--a41a2369-55ec-4589-9409-2b08e3de0585", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f23169-7eea-4b8c-a332-b86bede1cd70", "sighting_of_ref": "indicator--bae5c21d-14b7-4e4b-8f61-6e43ea933dc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cab801-c7e3-4ee1-8864-17836bb399fc", "sighting_of_ref": "indicator--bae5c21d-14b7-4e4b-8f61-6e43ea933dc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8261a752-0de7-45d5-83a7-d157d77b121b", "sighting_of_ref": "indicator--161c1913-486d-4a3b-85e9-093a97aa4104", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f37340-c0fa-427b-b41b-40921a08e1a1", "sighting_of_ref": "indicator--161c1913-486d-4a3b-85e9-093a97aa4104", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4833eb-bc92-45fa-bf7c-815c9a1b3d0b", "sighting_of_ref": "indicator--161c1913-486d-4a3b-85e9-093a97aa4104", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae62267-a89b-4155-8483-2c6de4e77304", "sighting_of_ref": "indicator--90850897-504f-420b-91b2-cd659be19aa5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e48f32-f88e-451b-85d1-a6121e947df9", "sighting_of_ref": "indicator--90850897-504f-420b-91b2-cd659be19aa5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efab2e8-7caf-4d8d-ad7f-23032c32eb85", "sighting_of_ref": "indicator--d745b820-2aa5-46b5-93b5-9beec8fccc3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84717b68-273e-4c97-bd3d-313ff22a98bf", "sighting_of_ref": "indicator--756e10af-7830-40cb-a693-8799b4bb1a2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d502fb9-5451-415f-bdaa-ed5839e18a6c", "sighting_of_ref": "indicator--756e10af-7830-40cb-a693-8799b4bb1a2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1527103-576e-4dfd-b1d7-1682eaaebba3", "sighting_of_ref": "indicator--756e10af-7830-40cb-a693-8799b4bb1a2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11282b2-418d-4f51-837a-8bf70c955ab5", "sighting_of_ref": "indicator--bb486315-cc3c-4ff5-8f37-039a91ebb8e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d58cba-b397-43d5-abd0-0d5b3567cbaa", "sighting_of_ref": "indicator--47cd8be5-0c9c-424c-8a33-d95a8ebfb1e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc871b97-e6e6-4108-b2ee-ac8e3a7d269a", "sighting_of_ref": "indicator--47cd8be5-0c9c-424c-8a33-d95a8ebfb1e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f411a71-33ad-4d61-9ca4-78a69e92aeed", "sighting_of_ref": "indicator--47a41bb4-0afe-4939-8d4e-c24cbcdb855c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693775dd-f349-4ea7-b34d-a622aee88f8e", "sighting_of_ref": "indicator--10d65db8-5c87-40fe-8696-942946a3ce3e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f882ea5-3783-4d80-9d92-08197ed68688", "sighting_of_ref": "indicator--3789ca14-e1f8-4149-9a28-7d235c650224", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e60081-ff41-4dae-924b-86de30ef7f96", "sighting_of_ref": "indicator--617e2202-6322-479d-94d0-8d906c77b5b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bf45e3-69b6-43a5-9696-b25f8b51bd2c", "sighting_of_ref": "indicator--03f731c8-9f7b-4cc4-b684-21c551667083", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a0e1df-3397-41f9-8cef-b86b00345584", "sighting_of_ref": "indicator--a610b407-aa56-4801-9bce-cc9eba2b8ae1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e8578a-f7ba-48aa-b482-fab070c11f1a", "sighting_of_ref": "indicator--de64053a-a97e-4044-ada8-f80684a2c42e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00973010-f3ee-4ac4-96b2-4fa4ba1af35f", "sighting_of_ref": "indicator--de64053a-a97e-4044-ada8-f80684a2c42e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3a1526-ec2b-4a99-9725-6cd631abbf14", "sighting_of_ref": "indicator--de64053a-a97e-4044-ada8-f80684a2c42e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f62f8c0-5c98-4da0-88b3-f16d784520fa", "sighting_of_ref": "indicator--2042b810-badc-429a-9095-ce39353dcb68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0770d386-4a4b-4315-822c-d46143625fa8", "sighting_of_ref": "indicator--e837bf30-91cf-43c0-9a3b-ad42d9a9eaf3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65de13c-f288-4c58-9490-f56672d7ca39", "sighting_of_ref": "indicator--e837bf30-91cf-43c0-9a3b-ad42d9a9eaf3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1eb8f1-9e87-4127-9e16-5198e1cb78a3", "sighting_of_ref": "indicator--e837bf30-91cf-43c0-9a3b-ad42d9a9eaf3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3274655f-a0ae-4d92-aeaf-05db624defac", "sighting_of_ref": "indicator--9a0b81f0-35b6-463c-b7a5-91ef7193827b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cda0dc-f8a8-4724-b638-99169a46402e", "sighting_of_ref": "indicator--9a0b81f0-35b6-463c-b7a5-91ef7193827b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5785ff-9012-466e-a98c-9f3550a382d7", "sighting_of_ref": "indicator--0ec7ab79-a31b-4d55-ade4-196ece930e1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b63d03-020f-4896-9336-33dc1094def2", "sighting_of_ref": "indicator--0ec7ab79-a31b-4d55-ade4-196ece930e1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241fa984-7365-48fa-960c-8e0b4eb8bc8f", "sighting_of_ref": "indicator--0ec7ab79-a31b-4d55-ade4-196ece930e1c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823d4f21-18f4-4835-8736-f8d731c99ef1", "sighting_of_ref": "indicator--b37f3ec2-7f02-4c0a-92ac-005560b99d90", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03d2b33-db68-48b8-bfc0-de7fcde226a8", "sighting_of_ref": "indicator--05d9d08b-903a-4edb-96b6-0f1e38de13a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6bfc17-cf10-423e-be55-88cfd9b12de1", "sighting_of_ref": "indicator--05d9d08b-903a-4edb-96b6-0f1e38de13a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf45f318-c241-4cd7-9dc4-81f3de90fe67", "sighting_of_ref": "indicator--7e069724-da9b-44a5-b660-bcc92940a66b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd577f72-ef52-445e-9540-be084c4d16eb", "sighting_of_ref": "indicator--7e069724-da9b-44a5-b660-bcc92940a66b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7282c6-09b7-4878-9154-e52020c19850", "sighting_of_ref": "indicator--7af2d43d-de37-40ee-8343-784d3ac62038", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb07d46-d4e2-477c-b24a-f96fd8f3c331", "sighting_of_ref": "indicator--7af2d43d-de37-40ee-8343-784d3ac62038", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b96868-49d1-4574-80ea-5a602cb46ea0", "sighting_of_ref": "indicator--c1a5186f-e1bf-451a-8d53-40f69eebe133", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ed69a6-a6cc-4828-bf72-5048de55d7cd", "sighting_of_ref": "indicator--c1a5186f-e1bf-451a-8d53-40f69eebe133", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d2d8f4-4c9e-483c-81d9-d91432a30844", "sighting_of_ref": "indicator--c1a5186f-e1bf-451a-8d53-40f69eebe133", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d59ccd3-3690-42be-90d4-01341da0c069", "sighting_of_ref": "indicator--80401436-7a66-46fc-810f-bb5c6e345b56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cfac13-4e5b-4ca8-9769-c80c31992642", "sighting_of_ref": "indicator--80401436-7a66-46fc-810f-bb5c6e345b56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19097eae-6824-4dd4-ba2b-25df94f831a4", "sighting_of_ref": "indicator--80401436-7a66-46fc-810f-bb5c6e345b56", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444bf665-9a77-412e-948c-5c921f870b6b", "sighting_of_ref": "indicator--851f31b8-8876-4538-8063-260f54786e78", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a81baf4-e683-452b-9cde-a137ecd1bf22", "sighting_of_ref": "indicator--851f31b8-8876-4538-8063-260f54786e78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609c1c68-c454-426d-91a0-c5dec4ab52a2", "sighting_of_ref": "indicator--851f31b8-8876-4538-8063-260f54786e78", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7838f12c-3622-49b2-9cda-f01f0a38b07d", "sighting_of_ref": "indicator--ac474cf8-64bd-49c4-a887-7c4d9f4e16c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a1a07e-37b0-4fbc-8de6-52dbb674ea57", "sighting_of_ref": "indicator--ac474cf8-64bd-49c4-a887-7c4d9f4e16c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518a21b-e2d6-499d-af76-1313ee74853c", "sighting_of_ref": "indicator--545905b8-5d1c-48f7-ac92-7aa436484331", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dca90bf-50ff-49b9-870c-a1f1557ddefe", "sighting_of_ref": "indicator--b0e75a2a-c900-413e-9feb-a1525aa37cf7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10f66b3-cf22-49cf-863f-cc6c088c8851", "sighting_of_ref": "indicator--b0e75a2a-c900-413e-9feb-a1525aa37cf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1192cd4a-a0c3-43e4-875e-26d55bb1d4de", "sighting_of_ref": "indicator--c461fca9-50f3-42d1-b887-8e417ec9d5be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df86ccc7-217f-4304-b8ca-b57d7d4a7d0b", "sighting_of_ref": "indicator--c461fca9-50f3-42d1-b887-8e417ec9d5be", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcb2fd4-32c8-4635-8512-0dc199b65d36", "sighting_of_ref": "indicator--c461fca9-50f3-42d1-b887-8e417ec9d5be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1553b80-4c02-4080-b70e-b4c45eded0c3", "sighting_of_ref": "indicator--f42d73cd-da3f-49f2-83be-ca06cfa6a014", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823d61c7-859f-4755-800a-03716ae0be2f", "sighting_of_ref": "indicator--f42d73cd-da3f-49f2-83be-ca06cfa6a014", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bd9287-78f5-490e-bde2-75b25ec367cc", "sighting_of_ref": "indicator--f42d73cd-da3f-49f2-83be-ca06cfa6a014", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c81cb7d-113a-4fb9-a8de-542857c5fd8a", "sighting_of_ref": "indicator--5a55f3a4-964b-43b4-a59d-85acd03f6c9c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab2e4fb-4ddf-4d30-b883-36af4301e335", "sighting_of_ref": "indicator--ea93ce86-15e8-4a67-9871-5b128a98ab39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b088f8-15c3-4b5a-b25f-c7d11ef2b585", "sighting_of_ref": "indicator--ea93ce86-15e8-4a67-9871-5b128a98ab39", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49205daa-af81-4ef1-a6e3-52b5983d8644", "sighting_of_ref": "indicator--ea93ce86-15e8-4a67-9871-5b128a98ab39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43c7be1-3013-4b9b-9866-863a7a458970", "sighting_of_ref": "indicator--0897f61e-4df6-4fa6-a899-02c6811bf13d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b45250c-41f2-4bfc-9294-2f81f36c6c4c", "sighting_of_ref": "indicator--0897f61e-4df6-4fa6-a899-02c6811bf13d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b57852d-f4b6-445e-9e93-3e0e11a0f29c", "sighting_of_ref": "indicator--85ae1984-dafa-4a21-9fed-2c13b0712411", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabfaf42-e7fa-4ffa-891e-1b645dbf2149", "sighting_of_ref": "indicator--85ae1984-dafa-4a21-9fed-2c13b0712411", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0f4fdb-9088-40b2-8fca-26c87466b3c9", "sighting_of_ref": "indicator--85ae1984-dafa-4a21-9fed-2c13b0712411", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc40e708-b0d8-4f57-87d2-6a759e73a6da", "sighting_of_ref": "indicator--f3e180cf-8b72-4ab7-a0f8-140a148a72fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03adc536-773e-471e-a486-ad5c8c374e81", "sighting_of_ref": "indicator--f3e180cf-8b72-4ab7-a0f8-140a148a72fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cad3cf-59dc-4769-94ec-bfd8b4f00785", "sighting_of_ref": "indicator--f3e180cf-8b72-4ab7-a0f8-140a148a72fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954e7861-0410-482a-9d0d-faa65c741d1e", "sighting_of_ref": "indicator--42fc1f6a-171c-418a-8faa-10bfccd62781", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5face04a-3524-46fc-b91e-653ab4921913", "sighting_of_ref": "indicator--02c49800-72c8-4681-8dc4-23fffaf9c104", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd13943a-1599-4c80-9a1d-16f6c639cb60", "sighting_of_ref": "indicator--02c49800-72c8-4681-8dc4-23fffaf9c104", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e90a019-9ce2-4b8c-aca2-f792f9482fd2", "sighting_of_ref": "indicator--fd31f9ab-5988-4ece-963f-032fa8207f11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948c0e97-3827-4259-9d7b-ba32516c3a0c", "sighting_of_ref": "indicator--fd31f9ab-5988-4ece-963f-032fa8207f11", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64557561-e0d9-4e3d-af5e-be022332be24", "sighting_of_ref": "indicator--fd31f9ab-5988-4ece-963f-032fa8207f11", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abb8a39-9981-4233-b27c-7e64a79c3616", "sighting_of_ref": "indicator--4229a094-52ea-4232-9e19-082de9550530", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151b5ced-9139-4224-bf89-b6d0fcc0755f", "sighting_of_ref": "indicator--4229a094-52ea-4232-9e19-082de9550530", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bda8eaa-e13b-4d5a-bb47-104d8448011e", "sighting_of_ref": "indicator--4229a094-52ea-4232-9e19-082de9550530", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388a2cfd-c3e2-42ad-944c-ef8d858e0ea3", "sighting_of_ref": "indicator--45d3c7f8-ff38-412f-a401-6565c09b2499", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8301729f-5bf4-4aeb-a268-cd4a7981c6d5", "sighting_of_ref": "indicator--45d3c7f8-ff38-412f-a401-6565c09b2499", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dc071c-a8d2-44fe-8081-298590969c39", "sighting_of_ref": "indicator--c86330a2-640b-4f94-a803-af93f48f77d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b964b7ce-6b0b-4afe-a49f-7f9c74df9cc6", "sighting_of_ref": "indicator--c86330a2-640b-4f94-a803-af93f48f77d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4140eb9-b3a4-4837-a10a-7297fcd46a6b", "sighting_of_ref": "indicator--b5cf0782-1d0c-4df4-b634-99b091d83faf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2c47eb-56ed-4760-80bb-8647abacddbc", "sighting_of_ref": "indicator--b5cf0782-1d0c-4df4-b634-99b091d83faf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a925f1-9e36-4578-9315-9d9fa6c73fb5", "sighting_of_ref": "indicator--f7b69b96-86af-4b76-be0c-08270cf36a2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d28ec09-b6a7-4e36-b31c-5275b9009cc9", "sighting_of_ref": "indicator--f7b69b96-86af-4b76-be0c-08270cf36a2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c037c27a-053f-427a-b333-7baddbb9fbaf", "sighting_of_ref": "indicator--f7b69b96-86af-4b76-be0c-08270cf36a2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fea03de-bb27-462f-9e22-6e202353cd2f", "sighting_of_ref": "indicator--d851aa1d-e93e-4f1e-80ee-72403316b911", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bcf3ed-d07f-4b00-8343-23cfcf16d56a", "sighting_of_ref": "indicator--d851aa1d-e93e-4f1e-80ee-72403316b911", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10313bbf-b03f-4a15-8cf7-de91a4fbb8d3", "sighting_of_ref": "indicator--63c926e4-6c98-411e-81ed-95de7628ceac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1ee6ee-5a9e-4e07-b6a2-6ef298f3549f", "sighting_of_ref": "indicator--01df18ba-95c5-4b1e-829f-480477cfe930", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c67021-8672-4422-ae3b-28e5c1bb704e", "sighting_of_ref": "indicator--01df18ba-95c5-4b1e-829f-480477cfe930", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbca2890-b1a3-4b7f-ba95-fd1c8c3adc65", "sighting_of_ref": "indicator--2b67b5e3-845a-49d3-8993-767d58cfa338", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e239bb9-c308-4b1d-94db-4b8ed6aee5d0", "sighting_of_ref": "indicator--2b67b5e3-845a-49d3-8993-767d58cfa338", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc07321-d5a5-4424-85e7-0f0209846100", "sighting_of_ref": "indicator--9111a985-2cd8-4d50-a652-75ecec9ab6c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b750ac-bde8-4a39-a0a8-b52fc772162a", "sighting_of_ref": "indicator--9111a985-2cd8-4d50-a652-75ecec9ab6c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0edff8-f746-44ac-b860-b8d8745772f8", "sighting_of_ref": "indicator--f44c5cb8-18d0-495f-8f85-b4ff10dd303d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab654f6-453f-4372-9e19-dfb98fbac1e9", "sighting_of_ref": "indicator--f44c5cb8-18d0-495f-8f85-b4ff10dd303d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75ed7dd-6dcf-4f0e-af7b-5df18a320c55", "sighting_of_ref": "indicator--56db1b80-8bde-4ba8-a5fb-1fe74abc5574", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156d83b6-8547-4883-b53f-446202f1dd09", "sighting_of_ref": "indicator--56db1b80-8bde-4ba8-a5fb-1fe74abc5574", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdec0802-7acd-47cf-8285-a3b22c4e9269", "sighting_of_ref": "indicator--3f96f504-5ed3-40ed-8963-ff205d1980b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12219e90-0d01-4f24-943c-3b54e395faef", "sighting_of_ref": "indicator--3f96f504-5ed3-40ed-8963-ff205d1980b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b00c8c-bfb0-4c1a-9826-be52a30c611f", "sighting_of_ref": "indicator--1d28a048-4202-4f38-b5b4-99b18ffd4a3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9ac7b3-26f2-4401-994c-7e6e0dfbbbb4", "sighting_of_ref": "indicator--1d28a048-4202-4f38-b5b4-99b18ffd4a3c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1be298b-0425-4d19-9da5-70196c5cc706", "sighting_of_ref": "indicator--874620b5-a00d-4605-a1fb-8f8f9b103434", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e830fa0-a71f-4431-8433-0b0182e0d8ad", "sighting_of_ref": "indicator--874620b5-a00d-4605-a1fb-8f8f9b103434", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bce90c1-2c06-4e1c-93c2-6b2c684a41c2", "sighting_of_ref": "indicator--874620b5-a00d-4605-a1fb-8f8f9b103434", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db8e063-3698-4e20-be04-4401f359c814", "sighting_of_ref": "indicator--523575c5-4042-4585-ba91-f87c53dd38fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baa1f58-07fa-4d59-9caf-19c8d569839d", "sighting_of_ref": "indicator--d72da078-9167-4b6a-9f98-1f005122d1b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b5a5a5-20ef-4c21-aa0f-89600a5177d8", "sighting_of_ref": "indicator--d72da078-9167-4b6a-9f98-1f005122d1b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e080795-c61b-458f-a437-7e619a994b26", "sighting_of_ref": "indicator--b559d984-02e9-41a6-a4f3-e35945427cfc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3defa7-e55a-483e-a9bf-89c7af38b635", "sighting_of_ref": "indicator--b559d984-02e9-41a6-a4f3-e35945427cfc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8610fb04-17f2-4905-8e09-0451c7caa2be", "sighting_of_ref": "indicator--b559d984-02e9-41a6-a4f3-e35945427cfc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ce8235-7460-4afa-ada2-8cc70e5e295b", "sighting_of_ref": "indicator--cc94211a-33cd-4886-a41f-e62427587725", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809e84a4-0719-450a-bd26-760f0446967b", "sighting_of_ref": "indicator--cc94211a-33cd-4886-a41f-e62427587725", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283a7980-43c5-4a35-9d9b-1a8d430276db", "sighting_of_ref": "indicator--c1eaa0bb-1fd1-476a-acb8-e7c3e5ae0ea3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28430edb-a5f9-4aac-a6cd-721bcaf567d4", "sighting_of_ref": "indicator--656b4739-8ed4-42c4-b64f-c3cd840f2e70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6cca08-2948-4080-9498-7cf6774cabb2", "sighting_of_ref": "indicator--656b4739-8ed4-42c4-b64f-c3cd840f2e70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81d3def-4040-4f2a-aed8-7a888d6160f5", "sighting_of_ref": "indicator--b9242f8a-7ae2-40c8-95ac-0aec34a9db8b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ea99af-0b3f-493e-9ec6-3b4f8a2df0c0", "sighting_of_ref": "indicator--b9242f8a-7ae2-40c8-95ac-0aec34a9db8b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bc8ff8-1c10-4364-abf5-1989d1777495", "sighting_of_ref": "indicator--93800650-8453-42d3-b70f-60357b713adb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a55a31-d861-44d8-8f72-d9f070f64c92", "sighting_of_ref": "indicator--93800650-8453-42d3-b70f-60357b713adb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc84cb7c-4721-462d-aa90-2e5bdc0ac280", "sighting_of_ref": "indicator--8c0af190-9037-45b9-94e8-4e3341faa825", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bcd601-fe0b-4c19-a1a0-5de7d6dafa8c", "sighting_of_ref": "indicator--e829c41b-a8d7-4512-9f0e-f44a81ce8545", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0560ee2e-8f21-44c8-aa76-e3ae76b34790", "sighting_of_ref": "indicator--e829c41b-a8d7-4512-9f0e-f44a81ce8545", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f1ff42-6040-4ab6-b059-a30f91027997", "sighting_of_ref": "indicator--99faa288-4459-45f3-a765-3840345404f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ccc941-900b-402e-9e6e-44bdb4e3dfe1", "sighting_of_ref": "indicator--99faa288-4459-45f3-a765-3840345404f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4fd089-b947-4b13-bd80-206b0f5f2bdd", "sighting_of_ref": "indicator--99faa288-4459-45f3-a765-3840345404f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23d2f09-9c85-4fbd-97d3-7e3ddb50c710", "sighting_of_ref": "indicator--a94d85b3-b7cc-47ad-8677-537d48dd40f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5935c9f-cd29-4534-9243-fd2de10a4f3a", "sighting_of_ref": "indicator--a94d85b3-b7cc-47ad-8677-537d48dd40f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64f59ab-75f2-49d1-b0f4-939ba12e7c05", "sighting_of_ref": "indicator--a94d85b3-b7cc-47ad-8677-537d48dd40f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b77b161-9946-44ad-98fb-f6a09b284fca", "sighting_of_ref": "indicator--38fac105-00f7-4948-a587-47b2672b25f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c57fef-44c0-4ae3-b0e9-64e73ca5474b", "sighting_of_ref": "indicator--a131e4a1-9e7d-4ccb-8019-1b9594d34c42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a273bd8-1a16-4fa8-a7b5-6422cef56166", "sighting_of_ref": "indicator--a131e4a1-9e7d-4ccb-8019-1b9594d34c42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a12d0ea-893d-454b-9e99-6c0f55ce30b3", "sighting_of_ref": "indicator--5cf973b2-77d0-4801-9170-17779eddce6a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e64641-5c1d-47e3-a227-43c9d6b617c3", "sighting_of_ref": "indicator--71bb9cdd-a9cb-49ff-87c0-3387f81d1a7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0213882-010b-4bd1-bbed-0ef17b4e5d7c", "sighting_of_ref": "indicator--101254cd-5d0b-4ef4-b69c-a5bc29bbd63f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4349b6-1955-4c5a-a7d3-87b81617a492", "sighting_of_ref": "indicator--1f888ae0-b647-4cd5-bae8-2159aca3314b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1109ee53-7b75-4911-85ad-ceacbf96ded2", "sighting_of_ref": "indicator--ce331a9c-368b-4fb0-94d3-3f75b537e5fa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f8c945-ba98-410d-b2e2-45611e79fad0", "sighting_of_ref": "indicator--eb92371f-fd2f-47b9-95d5-f39b86b443b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cb278a-6d58-430a-8bc7-3a140d93a04a", "sighting_of_ref": "indicator--eb92371f-fd2f-47b9-95d5-f39b86b443b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c50d8bc-c021-4809-8f4d-998633fc349c", "sighting_of_ref": "indicator--eb92371f-fd2f-47b9-95d5-f39b86b443b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a006827-3f85-4810-9281-b6e03f7a6322", "sighting_of_ref": "indicator--f6095c4c-09c9-4631-868b-a59475ad8e82", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941c394b-260a-4c7c-b56b-1bdd9619e568", "sighting_of_ref": "indicator--6b2b2d1f-f896-4b79-bdb6-9725dd8adfce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569f1a3e-c6e1-47ec-8ed7-e61a696de0ee", "sighting_of_ref": "indicator--e528bcbb-bf52-43a1-99de-89f16dde8892", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706ca562-0a3e-494e-9cbf-ff885f5746e3", "sighting_of_ref": "indicator--bb1d3a46-9b7b-4cfd-b02b-b8bd5f165a21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295d2658-94f5-44e1-b330-992c9a59cac8", "sighting_of_ref": "indicator--bb1d3a46-9b7b-4cfd-b02b-b8bd5f165a21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705980f7-c289-4de6-af7f-d83338ce80e3", "sighting_of_ref": "indicator--bb1d3a46-9b7b-4cfd-b02b-b8bd5f165a21", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b6998d-1c81-4815-88a1-bc008bd946ab", "sighting_of_ref": "indicator--c346b6ae-9ca9-4c99-9762-0b669f636df3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ec3ef5-3d05-4c90-94e9-123f58120ecd", "sighting_of_ref": "indicator--2be7f2b9-3610-471f-b342-5a09cb329477", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17f40c1-20ae-42a9-b0b7-05181b0e40d8", "sighting_of_ref": "indicator--2be7f2b9-3610-471f-b342-5a09cb329477", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f511569e-a533-4576-8d30-092cfd0de178", "sighting_of_ref": "indicator--2be7f2b9-3610-471f-b342-5a09cb329477", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6198be-f57b-49a3-a8fe-9c3063870c67", "sighting_of_ref": "indicator--ebbfd2b2-f887-407c-8146-e8d3fb7ad0c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c18841-a524-4492-9593-e852744358bf", "sighting_of_ref": "indicator--ebbfd2b2-f887-407c-8146-e8d3fb7ad0c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9be6a31-b767-46e1-baf2-058906b31b27", "sighting_of_ref": "indicator--d168a2af-275f-4743-b1e0-9834cf712461", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f807f1-740d-4887-8138-1aadeb08b953", "sighting_of_ref": "indicator--8202b241-d6c4-4941-9e33-c5e68d35a228", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fccf3d-d10f-4d88-a5c1-ab93c19fba11", "sighting_of_ref": "indicator--cb817fa3-d420-49a0-a1ef-a5f0d82bd4bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411607d0-6a4f-4991-9b8e-581219848e7d", "sighting_of_ref": "indicator--4150d4a5-7733-4404-994c-53b0faa07d75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf4ad67-5a68-47d5-b7f9-c7eb4b6d6f55", "sighting_of_ref": "indicator--4150d4a5-7733-4404-994c-53b0faa07d75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647a482e-8dde-4664-8ee2-3ddbcc1e2c89", "sighting_of_ref": "indicator--5ab68422-ba5b-4e5b-a987-f2e8d7c5755a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f972707b-7a8b-40f9-bde9-64466d358770", "sighting_of_ref": "indicator--57f684c4-5020-4300-bc1d-689486fea0a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35aac2ea-1a33-4f33-8d4d-d986a12cbd2c", "sighting_of_ref": "indicator--c9e83c6b-fe38-4a97-8d00-3c13d30e2c70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856c7bcc-3ca4-4e09-8d11-c6e4297b8a32", "sighting_of_ref": "indicator--fd8eb413-5c00-4ba6-bdae-62e8d3c36f09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaec67f-6324-4201-b092-a061b3fc2021", "sighting_of_ref": "indicator--302b5c77-f609-40c5-80e6-c19b5ff11305", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3760d2fe-2baf-40fb-87eb-d779cce554aa", "sighting_of_ref": "indicator--fccea0a7-7edc-44ca-b83d-4556f7fbb388", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b9a639-d98a-471a-8ee5-8d9092d2959b", "sighting_of_ref": "indicator--ea290cba-1bbd-4110-a738-2e791320d79b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe5297c-6252-434d-887a-bfa61970f145", "sighting_of_ref": "indicator--c435640a-bdb6-49a9-9e11-eb6f343b08b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541e3958-ca35-48ac-a540-eaf0806bad6b", "sighting_of_ref": "indicator--f411d563-6608-4480-9ecd-3614a1289285", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc5fe3a-c9ee-4494-970c-459cf0faec6b", "sighting_of_ref": "indicator--f797c751-00b8-4da4-9349-e18d5b4e287a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c7cb3f-3dd0-4d4b-bff1-93901c1a84e1", "sighting_of_ref": "indicator--734288fd-aca1-4cb6-8e17-7c39010e4b41", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85eb4ad1-873e-4126-adb3-ba929ca72cc9", "sighting_of_ref": "indicator--8fbbcc37-6b40-4e57-bec9-6503def46f98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e995f3-ab8f-452e-9483-18aa319c9ac3", "sighting_of_ref": "indicator--5b81bf67-e655-4662-8820-db065ac7e84f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533ed1a1-f51a-4deb-934a-2045007a669a", "sighting_of_ref": "indicator--ef8183ae-eefb-41c5-a280-8e8b852dea6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a8e74a-8217-4fcb-bf04-989837b299d3", "sighting_of_ref": "indicator--100e7404-9988-4f25-b785-ed9bdcde3f44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68497cd3-c6da-4042-8132-ed691761c070", "sighting_of_ref": "indicator--7a5e5096-b9b5-4042-aaf6-66f5564cd826", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f36791d-cccf-4065-9364-e798d00778e7", "sighting_of_ref": "indicator--7cf15a9e-b5e0-4ba0-8b16-e3e216f1e0c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f84223-61e2-4db9-9ecb-3eccefda8fa4", "sighting_of_ref": "indicator--9451f80e-71cf-43cd-9881-4946957712ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500a2e88-95b3-4660-8f20-1f1c41e0307a", "sighting_of_ref": "indicator--9451f80e-71cf-43cd-9881-4946957712ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bf3960-8dbe-4b86-ac27-af1675239fd3", "sighting_of_ref": "indicator--f4670f18-4638-4130-878f-b61b7c7ceccf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c29463-dab7-4857-9d1d-55afac5b1da9", "sighting_of_ref": "indicator--f4670f18-4638-4130-878f-b61b7c7ceccf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78c37e4-8961-44b1-9758-332c7587caab", "sighting_of_ref": "indicator--f4670f18-4638-4130-878f-b61b7c7ceccf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc253f85-e09a-48fc-9192-7676666565e8", "sighting_of_ref": "indicator--e766dfc4-3609-4988-9e2f-72e2357a5ea7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cef883f-5776-4722-8c2a-1f31f8179b01", "sighting_of_ref": "indicator--45dec433-3a11-47d1-986c-2a101f564167", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1805e412-5ab8-4372-b3fc-014c5112217e", "sighting_of_ref": "indicator--1f377e43-f7a8-4471-b522-6fe0303eb470", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44df163-aaf0-4648-a944-fdad159afcfa", "sighting_of_ref": "indicator--66448f31-0961-49a4-af8c-29dc9024cadc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef43121-cbfb-4623-bb29-faa7a2cfa959", "sighting_of_ref": "indicator--abd09ad5-fab8-403b-b82c-236cda40eab7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4350a5d3-3a95-4044-a524-7e5414746ae6", "sighting_of_ref": "indicator--5831fbbf-9603-461d-881d-3a186ddf918e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2960d7d4-184c-4c89-b408-cdf05cde9244", "sighting_of_ref": "indicator--b8903911-223f-412d-a647-a03481704cb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b3ba82-e2bd-438f-836d-855cfba8fdee", "sighting_of_ref": "indicator--18f570a7-2587-41f1-8cd5-00dff03c2d52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9178886e-3439-4700-a8ef-2e243dc38104", "sighting_of_ref": "indicator--3b46d946-1667-40ea-a6cb-e68c3a60efaf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76687f3-eeaf-4df1-b9b8-8fc3be917441", "sighting_of_ref": "indicator--c5fc1d6a-92d7-498c-8ab7-b77a4c430f27", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427eb3f8-fa15-49e6-aad7-58329eb0aabd", "sighting_of_ref": "indicator--695bcea9-9ff1-43dc-ab4a-c4b632543eb1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5572cc15-d687-46c6-a71e-99dee752eb6d", "sighting_of_ref": "indicator--695bcea9-9ff1-43dc-ab4a-c4b632543eb1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b88564-4fc7-4cef-992b-33fe2fcb668f", "sighting_of_ref": "indicator--b578de1c-2782-433b-bb96-c7a469014ddf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779caaae-1dc7-4212-8d5d-6b5aa62d78aa", "sighting_of_ref": "indicator--3b36e385-3881-40f7-a777-89d0db5dcd17", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa6fabc-305c-40f1-883e-56e71b16f81a", "sighting_of_ref": "indicator--ccb16ca9-3587-4903-a16c-9ab53e6fdf14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad4c3d9-6bea-457c-85cd-0add9ed4e536", "sighting_of_ref": "indicator--d5cf38b4-130b-4c98-b716-4d9a076f14fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf510ea2-63ab-4f74-aabb-48828f53ba4b", "sighting_of_ref": "indicator--08e6b661-8718-4ee3-bdb8-cd5512a6144c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f73ec0-d7c2-4efa-8ac1-c22b068796f4", "sighting_of_ref": "indicator--b55675fe-e55e-49f1-b577-cfd2f04a7059", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa34c92-145d-48eb-b978-ed918a0a528a", "sighting_of_ref": "indicator--6273789a-c2d9-448a-8343-6e7dafb6944b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db992ba7-f3c1-47eb-a98b-d80dd7052a0b", "sighting_of_ref": "indicator--47b5b579-7786-4456-9fcc-951541646fc9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ec94c1-dabf-408a-a603-edca88fa13be", "sighting_of_ref": "indicator--277d5f39-35a5-4c6e-bda4-4324efb23ec1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c509a32-9957-4f76-a7fb-01281da57330", "sighting_of_ref": "indicator--7cbe279c-4358-4b1d-bd33-e69d85457f79", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845cec00-c4e3-4b8c-b499-905d0064bf7b", "sighting_of_ref": "indicator--945dcc14-5086-4df9-bde8-60ec8bf73f08", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e3a4f8-d7a7-4e66-8de9-089e7194a2a5", "sighting_of_ref": "indicator--e7507288-1c21-4b5b-ba9f-41e1fbecf274", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087de0d3-d176-4458-8cf6-b928bcc13c7b", "sighting_of_ref": "indicator--6485b4f2-da8a-4597-b238-26f0a7b2ca66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedb5d6e-be30-473c-99c7-a15056a335b2", "sighting_of_ref": "indicator--d0e3376a-6a0a-493b-8a89-1e83d2492211", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957759be-9171-4102-8ea7-a68801ee486d", "sighting_of_ref": "indicator--ff5bc412-e93a-4758-bbe9-55d9f7b53997", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56b2b32-b7e4-481d-8287-fe150c77302d", "sighting_of_ref": "indicator--30cffba6-91cc-43b2-937e-17d21360f51b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac699cf-7d4f-4d22-8dcd-5780e588d87f", "sighting_of_ref": "indicator--ed9d8759-8d99-47a7-9310-4bc4560bcbf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a424eba1-f03e-4d51-9186-14f3d58b04f5", "sighting_of_ref": "indicator--027f72a7-cea8-4dbf-a9f6-043a2acc2541", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec859413-e451-4cc4-8664-deb106ebc253", "sighting_of_ref": "indicator--cb099208-4fc2-4272-9744-6d1f92176889", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a09fc7-fddf-46f1-9440-83c11badb04f", "sighting_of_ref": "indicator--07232d79-d91d-4f00-81c5-df5eb00b8983", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cb1a35-e14e-48e8-b15c-8b33cc12a537", "sighting_of_ref": "indicator--07232d79-d91d-4f00-81c5-df5eb00b8983", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf4813c-119f-4a7e-8f77-8de6ff73b0f5", "sighting_of_ref": "indicator--b637e382-f76d-4d69-a885-c9e19c0d2de0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326eac3d-7ae0-48bd-bd9e-45d5e4a04853", "sighting_of_ref": "indicator--acd3a998-9b6c-445a-9df4-864576687966", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7ee77d-dc24-48c8-82d5-fcf604aebc36", "sighting_of_ref": "indicator--be5a8643-f03c-44ce-a70d-8b5df81173af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc85e0f7-9505-4bb8-8738-e5c07f398f0d", "sighting_of_ref": "indicator--7d26e5d9-de04-4e55-981a-7892a73351ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13534e98-0575-4f1f-8c1b-3bfd92f4bf51", "sighting_of_ref": "indicator--9dbc4b85-21a6-4672-bba3-80fe2860ca7b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92402ebd-17a8-4ad5-a70b-6b24ea1541c8", "sighting_of_ref": "indicator--4b771169-62e5-4f21-86e3-fcdaff61f405", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ece53a-fe36-4506-9869-ded515315fc4", "sighting_of_ref": "indicator--35e3d1b0-2548-4265-86e1-e54268fea07f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797b378d-d764-48fb-9a9d-ed229d640013", "sighting_of_ref": "indicator--7077f0be-165a-4e7d-b494-ee7c4a838dba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3944cbd-59c4-46ba-88ff-8dc59a62b245", "sighting_of_ref": "indicator--1742cc4e-d8fc-49ce-8361-932a3363e1a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db59ca1b-c66a-4e15-b1ab-720c896da339", "sighting_of_ref": "indicator--c0a4984c-d772-4177-a59c-3c57200683c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e4d9b-caa0-4846-8875-c761ef579931", "sighting_of_ref": "indicator--a4f6bd9d-befe-406c-94f0-9539cfe519de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f0aced-b4ab-49d2-98aa-7079004b1b7f", "sighting_of_ref": "indicator--9a39f820-de5e-43dd-950c-2f8ddda8d91c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a0d38d-732f-4544-af43-7fe3bd5bd5b8", "sighting_of_ref": "indicator--e38453f7-2a6b-4c91-ad55-07bed13eaeab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242410be-524a-4efd-a1ca-8333b9900ba8", "sighting_of_ref": "indicator--fc5d7f6c-860a-439c-b778-c3200bdfd8e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061b3f42-bfd9-4923-8107-43c5179edca5", "sighting_of_ref": "indicator--ef9a9108-395f-4eb6-8876-65be9da4bf15", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32132f4e-0108-4eef-8ff4-5e9093696c11", "sighting_of_ref": "indicator--6b8f0983-045c-4200-9be6-adc997fe08fb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa398170-2fe1-4d0e-872f-ac471773fb8a", "sighting_of_ref": "indicator--ced9bbc9-477c-43dc-955b-fc5780b9776b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7654d0f2-fa94-460f-b8aa-a056eb26c2f1", "sighting_of_ref": "indicator--8def4fa1-8af8-45ce-952d-b7e81f141306", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2c96a0-cd6c-4d58-9295-137938b41297", "sighting_of_ref": "indicator--5010a714-0fc0-45b6-be88-63c9bfba462d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b12340-1565-4216-bd17-da77592a63f5", "sighting_of_ref": "indicator--a742b856-89f8-44b1-99d3-f06f8df64e9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57db00d-691f-4395-972a-5cec1a9cfdd8", "sighting_of_ref": "indicator--8dbddea0-6f7c-4f25-ba9e-320d04ff1237", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea56c8a7-4926-43fe-a984-c339299874a6", "sighting_of_ref": "indicator--9b4277bf-2a8a-4e9b-878c-f12c1490da80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee76d03-40bd-4b8c-9df4-75e5c95b20f5", "sighting_of_ref": "indicator--855d7cf3-f815-458d-a171-2c79c92eefdd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8736cb87-2f89-467d-ab27-b8fbd76a0caa", "sighting_of_ref": "indicator--3037015e-ccaf-4497-af89-bbbd0fdbd319", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7661e2-093a-4d54-b303-9a315295d245", "sighting_of_ref": "indicator--c8f167d4-1bec-462f-8f50-5912a53ae957", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137bcd6e-770d-4837-8d01-e26faf6f256e", "sighting_of_ref": "indicator--d90ddf9d-49dd-485f-a3b5-fb57ae4ec8f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e0d539-449d-4079-8e80-230babf6598a", "sighting_of_ref": "indicator--4d97c805-c206-4bcc-be6c-86be27d93a2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba0daaf-c012-4020-be93-b9640b21cbf7", "sighting_of_ref": "indicator--006ab97c-43f8-43ea-9759-ff0e1e30a219", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c148047a-59ce-4e7e-b535-8df0bc48acb1", "sighting_of_ref": "indicator--56911052-9112-481d-8854-f0b223033c9d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346ec2d7-7691-4d4e-819d-94c93a076742", "sighting_of_ref": "indicator--0354bd64-14a9-4fc8-a0e9-abff0daf4898", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf05983-2696-42b5-b37b-5f8a4e63c724", "sighting_of_ref": "indicator--7fd15384-0f5c-42cb-9f39-c14395de7c1e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d9aa1f-5d23-4243-bf37-6b5cda7b41cf", "sighting_of_ref": "indicator--334bc5ba-99fa-413d-bfd4-93f4f801bd1d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c94568a-fbd8-475f-bbb1-e4a6f9bfb4ad", "sighting_of_ref": "indicator--01680210-4171-4f82-a3e1-d78397fc81b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2f1468-dbd7-4e86-a2ce-d03469937962", "sighting_of_ref": "indicator--f94fd334-28e0-4ab5-bab1-b36d5545ddd4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f6b050-c75a-44b6-ac63-9632de651595", "sighting_of_ref": "indicator--ab790c8e-a79e-48d7-9d47-b91735e8e2be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9499e000-66b5-4828-bba3-4604611b2e62", "sighting_of_ref": "indicator--30d3cf4b-bebd-49eb-a544-819701754632", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1ac5a2-ac3f-4f0d-b8a8-c972e2b840cf", "sighting_of_ref": "indicator--944deb2f-396c-498f-99b8-0ad43d3bb13a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b25e5bc-06a4-44d4-8776-ead999800716", "sighting_of_ref": "indicator--4714bde1-fa75-4371-b45c-399e5f52e769", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ac5603-3781-4cd3-bd35-b4651c5aed5f", "sighting_of_ref": "indicator--814a20b0-d257-4c02-bba7-ecfe679d26a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5562ab4-72da-4326-ae56-a95cefe77fc6", "sighting_of_ref": "indicator--b6338dc9-2b86-40bb-a934-6e7023ad53b5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed074d99-f5da-4380-882b-49bf535695d4", "sighting_of_ref": "indicator--a410271c-9f85-40c7-b9a5-924e5cd06449", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f5d103-61e4-4a26-a9b7-e646c206725a", "sighting_of_ref": "indicator--ba599de2-7218-4438-88b7-6e94c575e937", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2dc0e9-7cfb-49c1-9e16-e9989318a17d", "sighting_of_ref": "indicator--c43518d3-c4e9-4ea6-9479-3559ae85d4af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66142199-2ad5-4164-8f96-19ed674683e9", "sighting_of_ref": "indicator--aec84e3e-4c6b-4971-b418-cd742d5a7cc4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0e422f-cc3e-4534-8480-49f9c0b080b8", "sighting_of_ref": "indicator--816c6a83-a6b0-4fc5-bd37-51e77c5e4435", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f38cb-d29a-4beb-b98e-276ceb6db99b", "sighting_of_ref": "indicator--816c6a83-a6b0-4fc5-bd37-51e77c5e4435", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3868f77a-bf78-46a0-a445-307f52c879e6", "sighting_of_ref": "indicator--a7bb6d36-8517-4035-86c7-7f997b28327c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0341a1b3-4703-498b-a620-f5aba4ee1a6c", "sighting_of_ref": "indicator--9edf7308-5210-42b1-993f-accbcc4322b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4c9f0f-e101-4be4-8eb4-5442bbdcff12", "sighting_of_ref": "indicator--29d0a117-e75c-4627-a407-133270796465", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3e7113-ec44-4d4e-987d-55dfe35b6818", "sighting_of_ref": "indicator--30d36118-6b84-4676-8604-f6f896ad29c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f7b8da-6bae-4d04-9639-3aed71aaeb26", "sighting_of_ref": "indicator--baf897ed-7fdb-46ff-a4e1-0c37abb1d35d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd531aa-1c95-4888-ae8a-f5b3b858f5b5", "sighting_of_ref": "indicator--6f39df9d-565a-4827-b58e-6198f6e70fe6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed135263-05af-44d1-bd69-2ae9ff2caa75", "sighting_of_ref": "indicator--bfc51d13-a4e7-4416-8b25-b35b2a3834dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c14d0-6658-47cb-a8ea-c458d57c629a", "sighting_of_ref": "indicator--bfc51d13-a4e7-4416-8b25-b35b2a3834dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339a1113-a236-4368-a2a5-27c0c7c4c221", "sighting_of_ref": "indicator--9d2d5eeb-c987-46dc-969c-d87989edb5cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a91907-0851-4c24-94f2-a57153c54cb8", "sighting_of_ref": "indicator--b083a6ec-c0e0-4a73-a3c9-56010e99935f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ab1131-8387-45c1-a71e-a18d84ce6255", "sighting_of_ref": "indicator--57fb54ff-62c2-4593-ac69-8be20403743c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35aef90e-ff0f-4658-9fbf-c328f1bf7bcc", "sighting_of_ref": "indicator--5ac557e5-a6c1-4ccb-b77e-1466f7e6a2be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20de8965-e7e6-400b-b907-b5869c4ed7d6", "sighting_of_ref": "indicator--a623c488-5bbf-41f1-9500-0ec12f4e0b77", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b123fe01-021a-4e63-b18f-fb2e842677d7", "sighting_of_ref": "indicator--ba7db95f-25ef-4f85-9517-1be7737e5653", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9f174b-668a-4246-8756-df546286fb5f", "sighting_of_ref": "indicator--2bcbe2b0-1076-49f3-ba6d-f44d02654ed3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e973e2a-98fc-4990-9d32-f621b52b48d8", "sighting_of_ref": "indicator--cfdee360-5a3f-423f-99c8-89abd6756de3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cf7c48-e980-4ff2-8592-e2aa47bea2c8", "sighting_of_ref": "indicator--08b8e461-f3ce-44e4-b6be-6a01ef80b859", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913d098a-5919-40ac-8cbf-f5e55f51025d", "sighting_of_ref": "indicator--18fa559b-94ab-4f7e-b572-d52730c590b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7913ead4-c110-4bef-b420-68f8564af215", "sighting_of_ref": "indicator--a3fdeb27-56cf-4db6-83ba-42f1ec28463a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403d2a7c-8e86-4bff-a107-834ffa1c6199", "sighting_of_ref": "indicator--32c28516-5301-433f-8373-029555c14aa7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b027df51-6dfe-45d0-9900-392b1bfa107b", "sighting_of_ref": "indicator--19953847-52f3-4be0-a829-6dc0a1ec8fec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407124bb-b9ee-4e18-8f5d-640f9b086b08", "sighting_of_ref": "indicator--3f606a06-42a4-4846-af52-1a1e169b4422", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c686b8-2f8d-4140-8684-5a2ab65fd81d", "sighting_of_ref": "indicator--7a9a2c9f-8cdf-4292-bfda-837f66884631", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19ea502-3c39-4c59-8879-19661c62b9f7", "sighting_of_ref": "indicator--c8fd749b-3da3-4e33-9442-f5668314fb60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d06040-a9f6-4cc3-8ceb-21fc1679d9a8", "sighting_of_ref": "indicator--36690255-6460-4607-947f-9ce2c91a9bd1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590cb4ae-02d0-4e0f-b922-354d664e765c", "sighting_of_ref": "indicator--29370e44-2e50-4b46-86b5-37aa79974e2c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ff235d-a8f0-42bb-845b-220fdc06918a", "sighting_of_ref": "indicator--9293ff0a-6586-4577-80e3-462fc0114ecf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f246710a-ae65-4392-acb0-78e9025acef6", "sighting_of_ref": "indicator--c73c6f5a-2e4e-42bb-9c41-57f85e233099", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca368d9-9a42-46b8-b486-76a21d8fc460", "sighting_of_ref": "indicator--5b6b95da-221c-4f99-9895-cc0f6d2d9147", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df263ef-45e6-4e4d-b3d3-0016bfd01122", "sighting_of_ref": "indicator--7aa5993d-ead6-4657-8fa1-ac8b440750a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881833d6-b06c-4a46-9940-56d983036418", "sighting_of_ref": "indicator--6c7deee1-a256-4f82-9f95-cdbdccbf36a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c026bb-5238-47c0-9ba6-aa48ba62b7c8", "sighting_of_ref": "indicator--38e682eb-8f1c-4a14-a5a2-7d7d24cb01c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce41248a-11b8-4647-aeae-4aff3139174b", "sighting_of_ref": "indicator--84e23816-a1c8-48be-9964-c88ecfcb9647", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c6612e-7aad-4d7a-9b92-15e00f7669c4", "sighting_of_ref": "indicator--72014b4f-cde0-4716-a9af-111993ef176e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea4653b-41ed-4c51-8e98-4196b9751fb0", "sighting_of_ref": "indicator--9baced00-56f0-4624-b069-72c3da16ad74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcae3a83-cab4-413c-ae76-a3be3abcf163", "sighting_of_ref": "indicator--6f521580-21fc-4fdd-8010-73955c1374fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e950479-1537-4f73-b62f-f0da907bed00", "sighting_of_ref": "indicator--cafa2d88-a33d-4cec-8688-0d6b8a326056", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59f745a-c6fd-4074-87ba-ecb0be75c857", "sighting_of_ref": "indicator--76a94b6f-fd9f-418e-8728-92c401cf7bbc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0299057-c4ab-4da7-ad0d-32930f1fe56f", "sighting_of_ref": "indicator--aca4993a-5268-4935-968b-4cb8b18070f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbf38e1-9678-45e9-b274-2eac4651cbf8", "sighting_of_ref": "indicator--5628ee77-fe30-4d15-82b0-2fc77b51e843", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c89e21-02f2-4176-bd06-5c01d00300bb", "sighting_of_ref": "indicator--6423de68-babb-45e2-9148-6dda138bde75", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d1844c-ad33-4861-84e2-125c3a57e5a6", "sighting_of_ref": "indicator--ec53c4a8-0653-4ff3-b89f-e768a526e14f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66823774-784d-4606-88f9-b345e27c8ba0", "sighting_of_ref": "indicator--f6bac4ae-a5ef-47b2-ab02-5a0f86de2023", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418151ff-e2f2-4954-823a-de56934f2dc1", "sighting_of_ref": "indicator--f6bac4ae-a5ef-47b2-ab02-5a0f86de2023", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049135a4-1eee-4ca1-9ed2-c8b42dd3b7df", "sighting_of_ref": "indicator--e26760ee-4dc6-49b0-ad9a-0fcfda62e083", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500c950c-f6b4-4fc9-b7e2-0cabd700a829", "sighting_of_ref": "indicator--647059f6-e717-4bdc-85c9-ec236194aac2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a177b02-15b2-4090-b5d3-aa2d13fac8ec", "sighting_of_ref": "indicator--91d10682-88dc-4c22-8129-27f34b4ed0ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba34527e-3c02-4815-b626-569a6cdbb13b", "sighting_of_ref": "indicator--dd30abae-5368-4bc7-b985-8106e5dc3402", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9c6250-13ba-4527-8ffe-c7b9dabbb2a3", "sighting_of_ref": "indicator--298c1a96-e7c2-44d3-af19-31805711ce06", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b9dedc-7146-4698-802b-2403025a1c6d", "sighting_of_ref": "indicator--4426adac-155e-4914-bd1e-1f6f0c698a07", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc80c6a-743b-4be8-8fec-b5e9f8f0075d", "sighting_of_ref": "indicator--22aae9af-5bcf-47ab-ad79-36ddb616437c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58252d8-ea19-4795-87d4-a33bd22a835e", "sighting_of_ref": "indicator--3bd4b003-36b2-45df-b962-52ca95636e99", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162ba465-0c1f-4550-86bd-9a7803b664eb", "sighting_of_ref": "indicator--f299017e-8cb2-45d5-8f6b-fcf20c863353", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d0f165-6ff7-4f02-a083-087fb226d950", "sighting_of_ref": "indicator--37b6a7c5-5f16-489e-9900-7aa47ec4c4da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63514d4-e53e-4fdc-b002-9351f0b99da7", "sighting_of_ref": "indicator--4e414f9c-eb9e-4710-9123-512799b42ed6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b50ca2f-9753-46b0-bd58-047ef2a3630e", "sighting_of_ref": "indicator--7b70d19f-2c76-408a-9672-2e7e476c1a51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b697bda4-0a15-4bed-a9c9-a83dba84b1ba", "sighting_of_ref": "indicator--e3cc5d37-f8ef-475c-bae6-060706c92502", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c8c3c7-a922-4930-9442-3b1925af927b", "sighting_of_ref": "indicator--e3cc5d37-f8ef-475c-bae6-060706c92502", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9b8033-d21b-4342-850c-00fe217c2d2d", "sighting_of_ref": "indicator--0cf88c42-c0fd-49f6-ad4e-3c28424157a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dff165-5e40-45e9-b2c3-06d8cf2221b7", "sighting_of_ref": "indicator--b24169a0-1554-428b-8c3a-c091886d281d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0844fb4b-e111-4e15-9418-6a6d13920265", "sighting_of_ref": "indicator--bee22ffc-7e15-441d-876d-4e4509872d1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad9a94b-dc75-4088-b967-f538f3fa2a5e", "sighting_of_ref": "indicator--95dd677b-2fcd-4707-9b2a-fa8c8c043aa6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba9c198-fbe6-4df1-a334-cba4a105a76b", "sighting_of_ref": "indicator--86c39b82-ae62-4c3c-8013-2e283802c741", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0aa5b1-05cf-43b6-ae99-5a7bca164f64", "sighting_of_ref": "indicator--ba02cb2f-ffe3-44f6-8af1-dd4268d630e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c674b6cc-e495-4821-aaaf-a876e8dab67b", "sighting_of_ref": "indicator--e83e882f-27be-4b64-9357-d35d4ee95d24", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e179f1dc-aa03-4482-8862-dc134697231c", "sighting_of_ref": "indicator--e903b712-b4b8-4ebb-96cc-940ff1ed4eb4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab2203e-1764-48d6-b9ac-3b2328484270", "sighting_of_ref": "indicator--14893755-2c7c-47ff-91bf-bb7e9ea371bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982f71f8-66b2-4ae2-8fa5-3ee5a9dab47b", "sighting_of_ref": "indicator--10d80ea8-114a-4627-be92-034651e49cb2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00571a5a-8ccb-4789-a462-470faf34b841", "sighting_of_ref": "indicator--c0329525-6514-4ca9-995a-a54526f4cf99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea08ab2-9f1d-4315-ba26-ebf4c69ca897", "sighting_of_ref": "indicator--8a17fe52-acdd-4491-b859-e9fb7950fb9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe4b7c2-fe11-4cdc-8c6c-7f5734b43163", "sighting_of_ref": "indicator--8a17fe52-acdd-4491-b859-e9fb7950fb9f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6c2b32-5253-4093-85be-f30f888e0e1f", "sighting_of_ref": "indicator--ec7b6c75-6b93-4d5e-9f27-9f70501cf854", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca36b366-5632-40f1-a823-970b9856e998", "sighting_of_ref": "indicator--ec7b6c75-6b93-4d5e-9f27-9f70501cf854", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf153974-28b1-4cca-80b2-76c57ebd7197", "sighting_of_ref": "indicator--2586a38c-8756-403f-86ee-fa9b00197697", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5ae8e6-e3db-461b-a2c2-02e8295f5c1e", "sighting_of_ref": "indicator--f03dcf49-4271-44f9-ab7d-64bdb13a9a04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1318821-3245-4461-a7ec-42260729fdbd", "sighting_of_ref": "indicator--dc95a15c-68cf-474a-918a-86550d3a31e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e244f7-7398-43e0-af43-a9570bc7384d", "sighting_of_ref": "indicator--17a2520c-a7a1-47ba-885c-6722c83d3d9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afce5311-2adc-4594-9114-14b0683a5ebd", "sighting_of_ref": "indicator--17a2520c-a7a1-47ba-885c-6722c83d3d9f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d275ea-164f-4aa3-86fd-45ba19c9091f", "sighting_of_ref": "indicator--99adfec1-2643-41f0-8692-db97cb8352d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69564dd0-18f5-4489-866a-10149704b2a6", "sighting_of_ref": "indicator--34250479-33f3-437e-b932-5c72c65b778d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6a9cff-9ac6-4ae4-8d67-6881003a563e", "sighting_of_ref": "indicator--1e63db43-b5ad-488f-a8d2-990b481020a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310f2fd9-efbd-4ab9-b4fa-474dd9454112", "sighting_of_ref": "indicator--98f6933b-f11e-4fe2-aa08-31c819047b21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdf4420-7162-4db7-9e38-4548e800a962", "sighting_of_ref": "indicator--98f6933b-f11e-4fe2-aa08-31c819047b21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d76a85-4486-4074-8daf-94def1816d47", "sighting_of_ref": "indicator--ff850ec1-f130-4d07-bbf3-c2b1ff29f7ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1b8f14-2f89-4e2c-aa0b-4c5efc941a5f", "sighting_of_ref": "indicator--2454a83a-ad23-48d4-af4f-273ef2baf24f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b924ed-587c-4ce4-8fee-ae852d38a02a", "sighting_of_ref": "indicator--4ba9e511-9df5-42cb-9bcd-462ff49fef59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c949b72-05f4-4ba1-81fd-788f4ec377e7", "sighting_of_ref": "indicator--64a9bdb3-119b-42e3-9811-38660485ddd8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a03df90-4d73-4250-9360-5080c8dc43a0", "sighting_of_ref": "indicator--a57296cd-2c23-4118-ad33-206043bfeeb4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bf8c0a-ea21-4a5a-aa4e-644f22670215", "sighting_of_ref": "indicator--3f85eda9-008d-4648-9743-20d67177bc44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc258b4-c254-4934-aa8f-860a7af5e6b3", "sighting_of_ref": "indicator--cd16eea6-6120-43cb-95f0-35ceb8fa6e5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b105812-51ef-43ab-a0ab-e13dfa8eea03", "sighting_of_ref": "indicator--820b37a7-432a-4063-abfb-2525628338d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd12f48-bd99-4355-86f9-88488f91c552", "sighting_of_ref": "indicator--b35bc141-42ce-4bdf-8b47-9592eba1378e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c528712-358b-4465-9f94-b11c8b3a204a", "sighting_of_ref": "indicator--9ef2d977-92e5-4c6d-9f2e-5b33308e5a08", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e47cca-6dec-4307-aee0-066e4c8f620f", "sighting_of_ref": "indicator--4734af09-969e-4f52-8cb3-f2fe90df142e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6393922-b544-429b-bd6d-d3eb1249d467", "sighting_of_ref": "indicator--65df40e5-6171-441b-a7a7-6ea5e38fd196", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cdfe3f-0f33-4b06-8f7d-b39b80d9f540", "sighting_of_ref": "indicator--4f0931cb-cc59-4d1c-add8-6798c3c2aabf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93474c00-adfc-4e9f-9160-f3e9ecc7c659", "sighting_of_ref": "indicator--a547adbd-b1b7-4310-9329-21ee7fe6983b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5863ab8-48c3-40a4-b740-2ed7145441a8", "sighting_of_ref": "indicator--3118270d-f5fc-4caf-9bfb-02aa00a56716", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d887d0-7314-45d0-8232-d3cb9ae0b3ea", "sighting_of_ref": "indicator--bfe058b2-557c-41a2-ae56-2d5ddb700484", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f0d22d-7f0a-4880-b8b6-6d87caba9d7b", "sighting_of_ref": "indicator--600a585b-03c3-463b-af0a-8abb19a0e08f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acb2fcf-b001-4217-92d5-0168e8fd6750", "sighting_of_ref": "indicator--c5e977e6-55f5-421c-b5a4-00401dde24a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e2ff6c-cf0a-40bf-9914-e988cd8ecc4e", "sighting_of_ref": "indicator--1d06fe40-a019-44cf-ba19-62f209301d33", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60baf332-9559-4adb-936d-45eef942e08a", "sighting_of_ref": "indicator--1ac08c81-552b-4a77-a036-cb50716c6baa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40253856-6708-42ec-8a19-b45a366a775c", "sighting_of_ref": "indicator--f3528352-bc37-4140-a720-74ee10234507", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5116b786-8357-438f-acb3-49aff17dbde9", "sighting_of_ref": "indicator--f733be69-b112-422c-9695-ca50bf911d65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f377d1-75e6-49ac-8703-cd3155e32b68", "sighting_of_ref": "indicator--c2b6501d-b20b-42d4-8a1f-b051658838e4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fbe0ee-0763-438d-a148-ff64d18620f0", "sighting_of_ref": "indicator--847fea8e-8333-4b60-ada0-6aa8827a4ac8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2374c7b-004e-4972-85d5-61919fe5370a", "sighting_of_ref": "indicator--847fea8e-8333-4b60-ada0-6aa8827a4ac8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957230ea-7972-4776-a1dc-7a90252e2940", "sighting_of_ref": "indicator--42fd0b79-d3aa-4066-b4f8-2a65d2c2228c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725689c3-f05a-4c89-9aa2-8964bf65c91e", "sighting_of_ref": "indicator--33f632e6-4f18-49d5-9d90-62ccfb38a3db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d1fc2d-4e5b-4efb-bfe9-a54b04f34c39", "sighting_of_ref": "indicator--6a0feb5d-090a-4921-b87f-b0c9899e24d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe60390a-fea2-4bae-bb83-bae06c1e7054", "sighting_of_ref": "indicator--ab200e55-8e31-4ce9-af1b-a6af172b00f5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e623bc6-9ee2-4ed0-9058-c01bfded7a91", "sighting_of_ref": "indicator--f730c0ba-8e10-45bd-8611-f80b4efbf145", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8067f21-68bb-49cf-a363-5a3abebf53e1", "sighting_of_ref": "indicator--13e1d229-584d-4317-9856-22f33815932b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5e1d0d-9e06-497f-a9f9-30029fe8cc04", "sighting_of_ref": "indicator--18fe7a71-3030-4bfa-b52e-ec2007aed4eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b0f247-d58c-4895-a367-51a8fe433663", "sighting_of_ref": "indicator--bec36fb6-f607-46d2-8bfb-1b1e9314b00f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af16da94-b5d5-420b-b4c3-97937b3fcf7c", "sighting_of_ref": "indicator--75cdc824-7a40-4cf9-ac2e-8c66634ac6d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103d683d-11e1-4d88-8dbf-a865a6c03806", "sighting_of_ref": "indicator--8a5568f8-3e59-4ee1-98d0-013b9cd6e56c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e277f68-1e95-4d0b-a04b-dba22f7d1d8d", "sighting_of_ref": "indicator--264b030f-8cc2-495e-8433-231533efb8b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86082bff-59e5-4582-90f4-71d73ac4dcad", "sighting_of_ref": "indicator--5118f8a6-f513-4ed6-a127-8b1dfb801d58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d20a71-4612-4b85-b8d8-53dd78720546", "sighting_of_ref": "indicator--9d9b162a-0d43-471b-94fd-a7fcfb806959", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537a95d2-13eb-404f-b654-d5d237f2c6e2", "sighting_of_ref": "indicator--fc622db3-a6d4-4616-9f45-d91bc2e50242", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37289edf-f483-44ac-b4b1-3890eb512bbc", "sighting_of_ref": "indicator--bdd82456-e3a8-4851-85d1-6a9ba6d7cf6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd9856f-22ac-4605-a1f1-ff553d17f6b1", "sighting_of_ref": "indicator--090b3d1c-c53d-40d9-ba1d-eaad3ca707f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439fd5eb-b8b6-4015-8525-bc721b49b891", "sighting_of_ref": "indicator--5dace645-0ea9-4a7e-88c5-ac4262733461", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a14f5e8-de1b-4b40-b173-59076b0ef3a2", "sighting_of_ref": "indicator--8f6de653-bf30-40f6-95d1-48c42ded17a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93aad87-f6a9-44ce-bd7d-2308554275b4", "sighting_of_ref": "indicator--d5d8b497-df18-48d2-845e-4fbb1520aa21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4141e6-df5c-4012-8e7a-77305ba98c62", "sighting_of_ref": "indicator--d5d8b497-df18-48d2-845e-4fbb1520aa21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5d3f6f-f0ee-4c58-92ec-fd9b51daa341", "sighting_of_ref": "indicator--07b7e85b-675e-4350-919a-31a7911c20a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ac161a-1a73-4b1f-a418-35bbd1efd734", "sighting_of_ref": "indicator--dfb95823-aff3-47b0-a31b-2fbe36c866d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3527016-624a-485c-ba1c-02493eb76c8c", "sighting_of_ref": "indicator--10db85b8-27b6-478a-ad78-3ad8b10010e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecf876b-88bb-40f2-b2fb-7594255844ad", "sighting_of_ref": "indicator--1adf3835-f75e-4f96-9599-6226c42ed3db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a138f20e-c74e-47cf-ae60-acd214fb6549", "sighting_of_ref": "indicator--3b0ae1e8-e963-4f69-9d9f-e628850739fb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77089234-0733-4532-bab9-3c4e29c90f3b", "sighting_of_ref": "indicator--8ca07866-1735-40a3-9c8a-d2c31baba56c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d578bfa2-d57a-4bdb-92ef-22f80c551a14", "sighting_of_ref": "indicator--2abfa51a-ff6a-4990-859a-df4d0f7b79f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdce8eca-9ca5-49fd-94e1-221c3d85d3c5", "sighting_of_ref": "indicator--87547c90-6f52-4a81-82c4-b17a5ec789b5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd177be-b2e3-49dc-b96e-375a90863650", "sighting_of_ref": "indicator--c5f6a357-50ec-46b3-b842-7c47151502e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814af069-5b57-4ea8-8771-596754a6af50", "sighting_of_ref": "indicator--a21c6f9a-318f-45d4-92c2-697632d779c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d6ef2d-770d-484c-a4a8-1704218a2150", "sighting_of_ref": "indicator--d505ce13-38ea-4be6-abca-d5fe0c464292", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5340d76-f9d4-4640-89a1-f0ade28c9a5e", "sighting_of_ref": "indicator--d92f4f9d-47cd-48f4-955f-76d712eaa7c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564e801f-d62a-4a4e-92cf-440c5fbbbf7d", "sighting_of_ref": "indicator--42ad5a31-9b95-4404-8e1d-d6a6c12de06b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1074d9a-817c-49f0-847d-03eae8ee64e7", "sighting_of_ref": "indicator--b6cef408-85e1-4644-ac4d-3c35cf150a25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207330b9-ebb7-4dab-95e2-94d1ed643c2f", "sighting_of_ref": "indicator--2a753fa9-a22f-4357-a4ab-ec34ec364d04", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191034b9-d0d7-4e89-976a-8601386d7378", "sighting_of_ref": "indicator--fd872799-09a7-4dd3-b8f3-ee5c1617aa10", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7157ba48-c21d-480a-8782-561037183d49", "sighting_of_ref": "indicator--0e4a6b94-a50f-4226-9489-f539f65d6c26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56d636c-87a0-46c2-8e64-e63538a065b7", "sighting_of_ref": "indicator--ea958bb4-b505-49d4-9f75-17f541e2c7bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5208b5-98d9-4a2d-8752-285da1d8f3aa", "sighting_of_ref": "indicator--cfdbf71e-5e72-4641-9ca1-deb150e01321", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a27976-8922-4a41-a256-8012db2032ab", "sighting_of_ref": "indicator--1095fee5-4ba2-4d75-a3ca-520271d81523", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fc9ad2-52c6-4586-b63e-e6a5110c66e2", "sighting_of_ref": "indicator--e5c3a841-c572-4491-ac31-1aeb6080d44a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf89143-a4bc-4a10-880e-303d47f507ad", "sighting_of_ref": "indicator--5530298d-5b2a-47a9-9399-adee28ffed81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fb0d51-a757-4520-ab59-16c2f2592952", "sighting_of_ref": "indicator--f9da4dad-e299-4f7d-9e9b-b49a859965d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb4486d-0f1f-4b33-9df9-886f187ac5fd", "sighting_of_ref": "indicator--eef2c739-37fd-426d-aae2-9c8843ba6ffa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbe9f98-803c-4667-9b79-50a837c36bea", "sighting_of_ref": "indicator--eef2c739-37fd-426d-aae2-9c8843ba6ffa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87146578-2c40-4e6c-9b48-85b3e0259f4c", "sighting_of_ref": "indicator--cc1fd826-4a4d-4c01-8257-35760ab3a40f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4788211c-1024-4118-82ec-99fb190d5e30", "sighting_of_ref": "indicator--5daf84c5-1c8b-416b-81f9-2273245c2c9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e7fa9f-aa43-4bff-bc2a-5991a435ea35", "sighting_of_ref": "indicator--c4cc1007-0c3a-4dc3-a2de-83cee13375cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb933dbd-2489-4d61-8afa-cb8440f3d328", "sighting_of_ref": "indicator--8960db21-2591-4773-905f-7c7f2ba52c74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26f59e0-a730-4afd-af13-b59b3146e44a", "sighting_of_ref": "indicator--1c095a00-d419-46cd-af59-64977d5e5540", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bf5a67-2670-4dd6-a04e-70dd92cce443", "sighting_of_ref": "indicator--0145bd9e-b5a0-4880-a20d-6f496d5644d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f35dba-8453-4557-9ebe-575162c6df78", "sighting_of_ref": "indicator--115feda9-0927-4b30-bb80-c5f65e78b43a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d6d483-a7a4-482e-bcee-80e80785199a", "sighting_of_ref": "indicator--a74205d5-f8ab-4814-b9b1-3cc58e2153db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7782d-392f-4a55-919f-9cf76abb2b9a", "sighting_of_ref": "indicator--6cbc5980-06ca-4a52-b548-771840175e80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7622896-ce12-441d-ac11-da3f41dc7dae", "sighting_of_ref": "indicator--3a291a59-3ae6-4d28-acb8-9594d5d123a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee701fa-c690-4291-b25f-234c928234ff", "sighting_of_ref": "indicator--fc425343-ad57-412c-8197-1d4b568a6dfa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcb34f7-78a8-4e17-b827-5d767f4d5a8a", "sighting_of_ref": "indicator--9a12425c-4e50-4298-b7c5-d981b81dad24", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2645d0d3-d127-44d6-a3ed-0261f24130bf", "sighting_of_ref": "indicator--020a8f6f-2a76-43c5-be44-a225141759e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c006f76-5e6a-479e-b43e-e4c1e65a0207", "sighting_of_ref": "indicator--242e9188-ad90-4a75-964b-20532ad3a750", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c20e2c-80ec-49ae-a7e9-e2b05dbf45df", "sighting_of_ref": "indicator--3c19c80a-ffe5-4354-aec1-351fa9f2ba3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81465d68-ded2-4515-a1b8-666987709845", "sighting_of_ref": "indicator--a4f615c3-1512-4f45-a2e9-893026d3e7c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b685cc-e1d8-4b56-835b-68b8d59aafb7", "sighting_of_ref": "indicator--19943faf-661c-427a-9802-07a616768a36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47014519-99f2-4a63-ba7d-ae1f28ed2fc6", "sighting_of_ref": "indicator--fb60d6ff-0c90-46f2-980c-1c83c5b56509", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f868c07-fbbb-4cac-b13b-a5c70cf657c6", "sighting_of_ref": "indicator--ef3e0862-79b9-4ed0-807a-5c107167f601", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd39dd-7601-41f1-a08e-392a19de4fe4", "sighting_of_ref": "indicator--ef3e0862-79b9-4ed0-807a-5c107167f601", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d06764c-1450-4e1a-ab06-6b96c87942ce", "sighting_of_ref": "indicator--ff5faa6a-a467-4e0e-adae-bba6758417ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d40bde-40a9-42fd-acee-cce277e86914", "sighting_of_ref": "indicator--6171861b-b6db-40f4-86f1-9f134c5b9602", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295ef7df-3070-4969-9870-0b4561e9d01f", "sighting_of_ref": "indicator--493cc193-7924-4a3c-91b2-56580f7a23c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e71dab2-0563-455b-b316-eb6c05f5b5ce", "sighting_of_ref": "indicator--e65da87e-88c5-4c09-9d8e-08993335dfd7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cf2ee7-7802-4f7a-8d77-72ceb203b4bb", "sighting_of_ref": "indicator--ee809e67-f0d9-4bb1-bd0a-fb1131048e8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3ce885-5dce-43f9-97a2-5c396f64f6c3", "sighting_of_ref": "indicator--c1bc5ca9-e144-4fc4-8f0c-587747d49157", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf3f1b0-ed09-43ed-ae3c-5e3ae7ce3841", "sighting_of_ref": "indicator--c1bc5ca9-e144-4fc4-8f0c-587747d49157", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826518d2-0bfd-4710-b0bf-a3fdce7624c0", "sighting_of_ref": "indicator--f19fdbe6-e824-4690-9621-8d91850cee35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2539121f-80e1-4e00-9a70-f7669914a658", "sighting_of_ref": "indicator--e8cfbb76-1650-4f92-9b02-ca99759ae1f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7464207-9b55-4894-8783-f8e5f8559d90", "sighting_of_ref": "indicator--007f51f1-d003-4173-b171-f12f4d956615", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fbf930-9fa6-4b56-bb3d-ae22fcc8b0d7", "sighting_of_ref": "indicator--7797f2f6-811c-4e6e-bcc7-49d894dcf561", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb61ed84-c0a1-4da6-b7e2-b5faa8d9048d", "sighting_of_ref": "indicator--2f3dbdd3-7262-40da-9bd9-31d5ed7090b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb79794-6b1e-467f-a407-6134bda801a8", "sighting_of_ref": "indicator--e0e093ed-604a-450e-a6b7-3905fd9c5dc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6cd661-29ba-477f-96fa-d94cabbd7528", "sighting_of_ref": "indicator--5d128a1c-18ca-46f7-be2f-0f63cc732173", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a025fc76-0696-4fe9-9de0-835e6105f132", "sighting_of_ref": "indicator--5d759420-9a39-456b-9ab1-1759a6294bad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e3eb5b-3976-461d-9068-504b55b9aab9", "sighting_of_ref": "indicator--8c62b402-2663-4008-8deb-ddf421cb53d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7347f328-8dff-43de-bf99-de4a856fc80c", "sighting_of_ref": "indicator--ea615c89-0555-4c27-a046-5423a5043d99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb67a882-3fc9-477a-92cb-da63ebfdb465", "sighting_of_ref": "indicator--04162e39-e38b-4b3a-ad8e-9cefb27d99c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b96e94b-0dd0-45af-be98-a3176c49840c", "sighting_of_ref": "indicator--c1fff5ba-e16e-416c-b78e-80dddaf9a518", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712dfcaf-97d1-4a75-acfb-e16465886636", "sighting_of_ref": "indicator--b30f83b6-66cf-48e3-81d0-43ea619c62ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b012ab1-7a78-4819-8a0f-0e64ee3d3a08", "sighting_of_ref": "indicator--1a094394-802c-4347-94c3-552e419f9a45", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012e11da-3ff9-4093-aa6f-9ea5b43bedbc", "sighting_of_ref": "indicator--3f5d897a-718d-4eb2-ae29-fe5fbe611db4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759ac2a1-1a28-49b8-b304-b451bff70278", "sighting_of_ref": "indicator--45ca05e0-7457-4fa4-bef7-0097cda21b49", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7795848-341e-42bf-8b55-c087ec1a2f49", "sighting_of_ref": "indicator--5416852a-6821-4db2-9621-8aa0b4043a26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8d3253-8272-4b7e-a1db-cee32764e6cc", "sighting_of_ref": "indicator--52a4d9b5-6122-435f-9898-3bcdd791dd06", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8380b683-63d5-45a6-a3f0-f29f82aeb86d", "sighting_of_ref": "indicator--b10bcc5b-07c5-43de-9b9e-abb997205960", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca11a1f-8eb5-4e0f-87fd-3f814cb512e7", "sighting_of_ref": "indicator--b10bcc5b-07c5-43de-9b9e-abb997205960", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151347ef-3b7a-4755-bd24-fc22efdfeb41", "sighting_of_ref": "indicator--9c47c6a9-a6b5-4d4c-8bd8-243baeb2ea5e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565652eb-f2b9-42c2-b94e-9ea9deb44c6d", "sighting_of_ref": "indicator--2186fe7b-5640-4798-b826-e13149d9ce1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc72c10-7b6e-4da0-8d65-02830757360c", "sighting_of_ref": "indicator--2186fe7b-5640-4798-b826-e13149d9ce1d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5290ca57-e863-498e-acdc-1f501812a85b", "sighting_of_ref": "indicator--562a73dd-ccfd-48f3-8f33-73a52ab4bafd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15eac95-d805-4268-ba16-3b1f592519b5", "sighting_of_ref": "indicator--e1a806b9-eff2-4c67-8b0b-bee5c69dd149", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43823201-3e73-42b9-8b9f-0159a4255525", "sighting_of_ref": "indicator--75b58445-502b-42dd-a2c7-29d78668e94d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bdf6a9-3a2f-4585-bbdb-17f77f500475", "sighting_of_ref": "indicator--06bbd4d6-b124-422f-ac89-7633af0e9fe5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7777f5-ed5f-41c9-9629-4f4b8c15eae2", "sighting_of_ref": "indicator--019b1ed0-6b55-462f-bc95-6324aa4124e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39776fb-6168-4612-98dc-62a1fbe620e7", "sighting_of_ref": "indicator--e32e879e-feb8-41b4-b935-28fd6b45477e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d73f26-6514-43a2-a033-3ad118ae14cd", "sighting_of_ref": "indicator--c65e549f-9b1e-456c-a3f5-2a22d4cc13f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022d64e1-4c5c-4455-88d2-e15874e2eaf4", "sighting_of_ref": "indicator--db1a5fa8-72df-4e93-8761-81ff27aea4fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd1a637-e19f-46c2-acc7-d16bfb70460e", "sighting_of_ref": "indicator--27b07948-5814-41c4-9bff-ceadaa4ec48c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98891d8a-0fb2-4016-9d58-5d97b33969a9", "sighting_of_ref": "indicator--b1d45c1d-156d-4d04-bcab-d4f4796dc26d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8735e5-eacd-4b6f-b606-ac36c2a5c0ad", "sighting_of_ref": "indicator--2a273fb7-39c3-482e-807c-dbd896f5e75d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0cf70e-e025-470c-bd89-c45f1e707e86", "sighting_of_ref": "indicator--308819e4-b017-4984-b943-40c51298753c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e6753e-0d2d-4a94-870d-3a1fbbb255ba", "sighting_of_ref": "indicator--7969aee2-5729-43e5-b282-e218f5eafac8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f0e283-cd15-42d7-9fe9-edcd707695b3", "sighting_of_ref": "indicator--2c0c870a-e37c-4d95-9663-b2c8d28ac03c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e0406e-103a-45ba-bd14-0e2c1092fbbc", "sighting_of_ref": "indicator--a3d90210-92b2-491b-a233-3413ff4df6df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91769fa2-58c9-4830-b84a-f4eaad0867c7", "sighting_of_ref": "indicator--bde0c3f6-f756-4320-a96e-d6b45c88b8f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b783bbe-871a-43db-937c-ba7aaabd8f1f", "sighting_of_ref": "indicator--bde0c3f6-f756-4320-a96e-d6b45c88b8f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f13cd7-8e2c-4cfb-90ff-9c18a8021271", "sighting_of_ref": "indicator--c86a8c0c-82de-41f3-be3b-eac5e2212e39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aab1207-90bf-47fa-a16c-d20ee876443d", "sighting_of_ref": "indicator--0e992331-9802-4e96-aed5-926607326674", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1440a71-ad0d-4243-8bc1-ff019c726cd7", "sighting_of_ref": "indicator--01df9dfd-d553-4835-9f31-7b0388eba9be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03ea6ed-d270-497c-8bde-1315c4cb45d9", "sighting_of_ref": "indicator--d36d3506-91ac-41f2-a33f-247e8c45cc6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ea79e8-ff3f-42d2-8f2b-fed5fd385372", "sighting_of_ref": "indicator--45eb723f-037f-4e32-9baa-98b3ff40b604", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8812ef65-45df-4b35-9a65-36762a1dac8a", "sighting_of_ref": "indicator--db6590e1-ac75-440a-9dd1-a26993478ce5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56327041-4c07-4b26-b71f-6ae952654550", "sighting_of_ref": "indicator--fb5d88b4-9f41-4805-81a9-5ec8c87fec48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0861ded2-df63-4afe-81c5-fc271cc3e478", "sighting_of_ref": "indicator--f2eb50a3-5b05-43b6-86eb-4819613226d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e78c026-4d12-4a4b-81d0-8a7b0198088a", "sighting_of_ref": "indicator--fe8bf1ec-70a8-4f59-8b35-12f39260a385", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f59612c-53e0-4537-852e-77ee701f1527", "sighting_of_ref": "indicator--b5ca9014-a4be-46d3-a219-f2f0be08182d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60fda46-3781-4bc9-9a6d-231f4e082684", "sighting_of_ref": "indicator--c23ee479-541f-4c1d-ac01-f7d1bbd7c45a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb630bb8-7c34-4580-a7dd-5367afbc823c", "sighting_of_ref": "indicator--19fd4604-77ed-4da9-bbca-d5b9e9177e45", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8806897e-4bb1-41ee-9b1f-94077d4e9a34", "sighting_of_ref": "indicator--fe3459f6-503a-4128-98de-e5a16691b1ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972e0313-2da0-4da3-bfbc-b301cac008ee", "sighting_of_ref": "indicator--89725a1c-6b44-4938-a683-484dcd060d7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f34b478-54cb-446c-b606-8c910a89cb0a", "sighting_of_ref": "indicator--89725a1c-6b44-4938-a683-484dcd060d7b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4e46d7-895c-4069-b234-27db2ae7d118", "sighting_of_ref": "indicator--e1d421b7-4a28-472c-bb94-4c478b025e27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7d1e6e-1afb-447d-8e9f-1b90fe6c7392", "sighting_of_ref": "indicator--77b0c909-cee4-4f00-b26d-7ca2c90b01bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8539b4c1-05aa-4e2a-b404-5ae1e7ef0dcc", "sighting_of_ref": "indicator--08cc29f9-3e84-42fe-9be2-6c288561d47d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5e7629-e6c7-4f03-908c-b41fbacb44f9", "sighting_of_ref": "indicator--fd134224-a536-4350-852d-f04c6cd98eed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a46c31-baa8-411f-a535-934f6ae4d626", "sighting_of_ref": "indicator--52d7d184-4c18-4e5b-b7a7-a0bd8cf58ebc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27898e3b-8c0f-4d1f-a378-5d77ab928864", "sighting_of_ref": "indicator--392581de-1c77-4f40-ada3-74de3b88ee65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e84384-6e86-46ba-9c6e-e0f5cc801017", "sighting_of_ref": "indicator--0287b90b-7e8b-4a6a-afe2-cdfef5ba2aae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5214fa-4f3c-4f95-a0ef-8a51d7791faf", "sighting_of_ref": "indicator--7dec825e-984f-44dc-bd90-b4b9b17ae7b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb23438c-7111-4f01-bb02-1f4d3be6f86b", "sighting_of_ref": "indicator--45b3177d-589a-48ac-adf0-b17149324059", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144bbae0-2a43-49d1-8e41-4d344a940f84", "sighting_of_ref": "indicator--e34f0245-9def-41a7-93da-dd07411ddf8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039de0b5-7724-473a-843b-0e3d92e3f98c", "sighting_of_ref": "indicator--e34f0245-9def-41a7-93da-dd07411ddf8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423375cb-d49c-4607-be03-0828a2987d69", "sighting_of_ref": "indicator--2b609c87-aa81-4e49-81c4-447dd9f841bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae645787-71ff-4ad4-a912-e82aea0c688c", "sighting_of_ref": "indicator--47529e45-6d56-407d-90e9-092d889809e6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d188985-9f71-48b5-9872-7a1028cb3909", "sighting_of_ref": "indicator--5665727b-38ae-40b6-a541-3b556c2d69e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec1e6fb-41a4-42d9-a9b2-405a15d53bc2", "sighting_of_ref": "indicator--fdaaa445-6f72-49de-9f7d-cebadd9b1f68", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bdbde2-9a3a-40fd-8ae4-5af1dbc20c6f", "sighting_of_ref": "indicator--fdaaa445-6f72-49de-9f7d-cebadd9b1f68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8eac11-6e9f-4e52-a387-cc111759a3aa", "sighting_of_ref": "indicator--4100db09-c114-485f-85ec-658ab32e43d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1675460-f90b-4252-b543-8ab86d932e6b", "sighting_of_ref": "indicator--2dfa5383-be16-4cb4-9c3c-3b522d8ca785", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f826b6a-bad5-430d-915c-71c1bf2cccd5", "sighting_of_ref": "indicator--80fa24ae-758d-4d15-be46-f37d891366e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d44ff32-4886-43a5-b2c1-a157a5d587db", "sighting_of_ref": "indicator--48cc4910-25f7-4eec-9a46-587862cffd16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9b6843-197c-4bbe-9ace-750a60306e47", "sighting_of_ref": "indicator--e3926f1c-f2c8-4e47-b6e4-73543acdd713", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bddc4fa-f879-4f30-ad61-d949cfae3384", "sighting_of_ref": "indicator--897f2f78-c6ad-4810-aea0-3ef6a56c9647", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc3652b-0c94-421d-a8a0-d85bb71683e2", "sighting_of_ref": "indicator--7b751cf4-25e9-40c1-9fc6-deefd219abaa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279f0c90-6b3d-4812-abe8-2c153c374475", "sighting_of_ref": "indicator--40c97c4f-fddf-4512-896c-cfa0bdd62686", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ca6713-55b9-4128-b565-7dea1716066e", "sighting_of_ref": "indicator--2c8c51b4-35d0-4b9b-a9f8-9ca862c487f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081b211c-0cc9-4d4b-a3de-e4eb60a163ef", "sighting_of_ref": "indicator--bbc3a231-62f0-4955-ba23-db8fc0840a92", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494738a0-1c61-43a9-a935-fd43669c14f4", "sighting_of_ref": "indicator--b1c3bcf5-a10c-493f-a71b-d00c6b8dd39e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0b8465-b2f3-46d2-afdd-951797c6de5b", "sighting_of_ref": "indicator--2f1aaa0c-aaba-48ff-9e84-620c73431d7b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403dfeaf-52f8-4a7d-bc60-e7421c13fff0", "sighting_of_ref": "indicator--86e02e7a-6bb8-4eff-9d40-651182a01aa7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6602dc4d-2241-4977-a51d-688183abc16f", "sighting_of_ref": "indicator--d9686a27-8aa3-441f-a50e-428c80b598ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec740ac-d4c8-463d-a8a5-3a0461d24e2c", "sighting_of_ref": "indicator--d9686a27-8aa3-441f-a50e-428c80b598ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579dde5a-44cd-4cbd-908d-84ef326a9040", "sighting_of_ref": "indicator--a11f0de9-5da8-45ea-b4f2-099c41091928", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11983d45-a47e-46d9-b6c6-2e89950520b0", "sighting_of_ref": "indicator--c8cf1e35-3613-4acc-85c0-215134bf30ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031343fd-b6c4-496f-9dbe-23ed0092b3ae", "sighting_of_ref": "indicator--0d22ed1f-4913-4cea-a8aa-0f7f06a1e1eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa5cfa2-c972-47fd-98dd-35918cf2beec", "sighting_of_ref": "indicator--68e1a3f4-6db1-4357-bda0-6cfe3eeab923", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0e4c21-c619-4407-872a-089757aa6112", "sighting_of_ref": "indicator--29511463-adf7-42e8-8c7b-b7f8b61861c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f20c0-23f2-42e7-8c55-dda3eb3be84d", "sighting_of_ref": "indicator--24ea71f7-fcfa-4709-94c4-c38f2d6f66f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98204329-b98f-4b6c-b193-63256fea644c", "sighting_of_ref": "indicator--24ea71f7-fcfa-4709-94c4-c38f2d6f66f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eddbb3-b3a7-49f2-84c6-25c76fbc7087", "sighting_of_ref": "indicator--2c374a67-f7bc-4f6e-8e4d-1f0d5f8da28a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fe5187-8847-4bcb-b2e8-e6c97e026712", "sighting_of_ref": "indicator--53cd7a7d-2bcc-4429-a788-c41f8fad2840", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d841f445-1169-4b48-aa41-d6be282b92e0", "sighting_of_ref": "indicator--992613c4-6047-47ec-96ad-76faf148e57b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89e7138-140c-4ad8-82e7-f5ebb6f677db", "sighting_of_ref": "indicator--8a683946-fb3b-41fd-8f5e-1aebf2bd6794", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2bab20-3d0d-4519-ade2-3f58839a3017", "sighting_of_ref": "indicator--3b518fb9-7287-458b-90c3-b02ce669b7d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d50951c-8146-4d46-a369-65afeffd4c09", "sighting_of_ref": "indicator--e000e82f-369d-4913-8bbc-e7fd08603ecb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667af1a3-4436-4381-8a84-1e9ed598e56b", "sighting_of_ref": "indicator--76f22686-a8dd-44c2-885b-cf7bd4de985e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3563da17-d88e-4f2f-9677-5005956e70e2", "sighting_of_ref": "indicator--1b3d3dc5-f16e-4326-b46e-609da5331d14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea650f74-6aa2-48e1-a243-15ed8d51c95b", "sighting_of_ref": "indicator--65b98baa-0ed5-425b-bebf-bb1e4d09b7dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dca732-7dbc-49c3-8411-cb594e4234a6", "sighting_of_ref": "indicator--6f279cb0-d364-47dc-8280-d2a3940946fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afd1075-519b-4c06-a795-4859cbacfe5b", "sighting_of_ref": "indicator--4764e2bb-c37f-4dd1-8dc8-bc600b58064c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea095ef-640e-4ad6-8a53-3276a32ac4ba", "sighting_of_ref": "indicator--e5d7c76d-3705-4cca-b92c-5c1729cf9e60", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f572109d-ad88-4319-8df8-46e638322f33", "sighting_of_ref": "indicator--d2274e6e-6d81-495e-8f6f-2538594a6b10", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa74131-41c7-4e75-b210-5ffc978a7eac", "sighting_of_ref": "indicator--d0a6da96-8bab-4cbe-be8c-10cc3d4201d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd2e7ee-cfdf-4612-bcc3-c75e21fcefd7", "sighting_of_ref": "indicator--93ce688b-f3ad-46b1-bade-0aaefd8920dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46e17ec-18f2-4c0f-a523-f0300ce2edc1", "sighting_of_ref": "indicator--085a08f4-e165-4e21-872e-0b47550ef086", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d967d67-8653-4140-b60f-e3a701ade0bc", "sighting_of_ref": "indicator--39ed5008-eaaa-443b-80bf-e4da3aed42c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef4085e-fba3-485c-95bf-ac54afb5bb47", "sighting_of_ref": "indicator--b9bb7cf9-6579-4c48-896e-b7bf057aad02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bc5654-9b99-4ff0-98ca-7e4a231612fa", "sighting_of_ref": "indicator--b9bb7cf9-6579-4c48-896e-b7bf057aad02", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47a8be4-8519-4749-8793-c96b431088dd", "sighting_of_ref": "indicator--fece1531-b500-44d2-b9bf-3e26e5c915b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610c1058-01cc-4e2a-9fe8-dbdf0ef2528e", "sighting_of_ref": "indicator--7299d9b4-a858-4f0e-b809-eb452fbfb36c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a73a88e-a407-46c6-b086-72966c0a5e87", "sighting_of_ref": "indicator--b8fac093-765c-4463-a1af-f00ed6ecfc4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2908e0-7eba-4edb-bce5-f74eb4a8410f", "sighting_of_ref": "indicator--9512fb56-5736-495f-957b-91ecca0c8ed2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e7626a-5277-4645-9ffc-d7cfaf65268d", "sighting_of_ref": "indicator--4e7c2a26-3f53-4697-8271-42b8b8efd4dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cb4026-4a79-4764-8ad3-a9fa990e3fb7", "sighting_of_ref": "indicator--c2673dff-ae07-4ffb-b8e1-c76b87f2e171", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd18c75f-3e37-41e7-b27c-54a4727a1564", "sighting_of_ref": "indicator--3609b875-7e5d-4a19-a0d0-47f21a0dc36d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f593b8-b6c5-4c32-b388-ccbac4b60499", "sighting_of_ref": "indicator--1d7c32de-50ad-4f81-a6d6-4b539c12297e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6581f7a1-49ff-4ce9-b712-b94d04d03f42", "sighting_of_ref": "indicator--1d7c32de-50ad-4f81-a6d6-4b539c12297e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8e7fe9-2799-418c-9a57-22b785a66bcd", "sighting_of_ref": "indicator--cf1218f6-fcac-46ae-a69f-a0c7f481a8f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8730bffa-d270-4041-b00b-b8104bf2655f", "sighting_of_ref": "indicator--6d6598e1-9c8e-47b7-bd89-0cd8afc8f4d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e339b5-d5f9-4423-8340-e4530165b237", "sighting_of_ref": "indicator--3b433016-2030-4925-91c8-1c9c423ebd0d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0687c42-40da-4a8c-9ba0-1d0977a8ebf8", "sighting_of_ref": "indicator--ef5a4e5e-b1b5-4bb1-aa97-07acb566edcd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13b511a-e639-42df-8b3f-b701f0bc2384", "sighting_of_ref": "indicator--2c403e7c-78a8-48e2-89ab-46c3df0e87c9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e70debb-201d-4ffe-b8bc-1b1c508afa21", "sighting_of_ref": "indicator--24442c76-bc06-43d9-9961-640f4876dee2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753073bc-4b87-4e8b-bf6d-8f5db2027d41", "sighting_of_ref": "indicator--f6cdb8a7-1aca-41c0-9fe1-5078d91306fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12f7be1-a477-4478-84cf-dbccaa9a276f", "sighting_of_ref": "indicator--f99749a7-7e2d-41d9-8dd6-5b3178d92be0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb5a2fb-d17d-451f-8e61-fc2933a6e4fa", "sighting_of_ref": "indicator--85f24a2e-d4f6-4850-967f-35297096f229", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2614b0a-2d66-4810-954f-be32553279a8", "sighting_of_ref": "indicator--eef15f2b-b5eb-4c8d-934c-ecc8704e40bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a2cd1c-af87-4a82-bc5e-92ce02fca572", "sighting_of_ref": "indicator--e2d24845-ad5c-4a71-8b08-20b97b633961", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0287eb79-9350-4094-a5f1-f6ac3c9d8616", "sighting_of_ref": "indicator--91748ec5-a7f8-4a1e-b011-cc4e95aec679", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d73ca2-ebec-483e-959e-aa62ba5c19c2", "sighting_of_ref": "indicator--cebb1293-011e-4154-9a2f-a6454d8f9fe5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774c1438-27d1-49ae-8c75-aee260c81bf5", "sighting_of_ref": "indicator--5eed52ed-725f-4101-b753-3dfe0d9bab14", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922273e2-9230-4f1c-8e24-6a64b703abc3", "sighting_of_ref": "indicator--915e6103-18e5-4440-8812-45a76c491b94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79735ccc-2e79-40d8-9720-81b913402d64", "sighting_of_ref": "indicator--e1f098ae-0a09-4745-bf76-54d0d921ae39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38edb9c4-fdd9-4faf-b822-b8312fd167fd", "sighting_of_ref": "indicator--b91f51a8-d763-40bd-b9f5-b804e1218055", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5ee58d-b0a7-4a6e-af0f-149581b45841", "sighting_of_ref": "indicator--b339e55c-2213-487c-b538-0ab64f84f667", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a380922c-84fb-4f83-8414-59ca70d17447", "sighting_of_ref": "indicator--166bd9f1-5d96-4f44-8ae8-ca860b6b082f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c594737-e3e2-4189-a332-4fc885a46912", "sighting_of_ref": "indicator--91975c2c-4481-4d29-a566-56cc5bdb715c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27de1360-aceb-42ea-8535-66cc0c090ca9", "sighting_of_ref": "indicator--91975c2c-4481-4d29-a566-56cc5bdb715c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6572c086-7c58-4bc5-9e83-97456918b8c3", "sighting_of_ref": "indicator--346c3057-53a4-4716-bed7-270e00740a6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521320e6-b1b0-4700-b2d8-29c35f5bf649", "sighting_of_ref": "indicator--39e24d10-275c-4ae6-80ec-44b85acbfd4b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba5468f-5d54-43f4-bf61-db91bdf9c5c3", "sighting_of_ref": "indicator--39e24d10-275c-4ae6-80ec-44b85acbfd4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e4b09b-df9a-4afc-a247-b21054240d00", "sighting_of_ref": "indicator--6975e8ad-9cc9-4aa2-a739-14a5224a737f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf43d05c-5946-4454-b10a-4fd7faebd1ed", "sighting_of_ref": "indicator--f2858cd0-dd0c-48b4-8bc0-1abea689a726", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0102e9-e35a-4d35-b55e-a33a9030a822", "sighting_of_ref": "indicator--096b31c8-5d7f-4583-8b53-a96fece02a27", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5861e826-abe6-47ca-bd71-2ead71ba87de", "sighting_of_ref": "indicator--28377605-3517-41cf-ae9f-1108bc9ac52f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f8f546-6906-473f-bf97-4876e005a3a3", "sighting_of_ref": "indicator--ff543301-f602-4550-84e5-1565dc6aa3b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc009647-6c8d-480b-8ce3-d89a058fba4e", "sighting_of_ref": "indicator--ff543301-f602-4550-84e5-1565dc6aa3b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5f46c0-0452-4428-b45f-7d17527c47a4", "sighting_of_ref": "indicator--5356d99a-9651-4d7f-8fdd-e39ada86a688", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583e331c-c8eb-47e0-9006-3d058946d000", "sighting_of_ref": "indicator--000f8c2c-5c2c-42f7-8151-a43176870c83", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b3fa6c-e084-4fbf-9eb8-cd564db9916a", "sighting_of_ref": "indicator--02c3e1d7-36f4-4066-9695-beba66796936", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df83bbf9-ac48-476b-96d5-f64a6be7cd24", "sighting_of_ref": "indicator--f48be459-d2b3-4fcf-aae8-df1541b3316d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147dd08a-9e69-41bf-9130-951fbd658114", "sighting_of_ref": "indicator--73c80a64-5226-4538-b827-d4d43b605f34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9b35b6-163c-424e-937f-88fda3073919", "sighting_of_ref": "indicator--18ac7a7f-e885-4bda-9772-f5e20ff8ba5c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb8fb76-79d9-4297-b4f8-bd097bfb68d9", "sighting_of_ref": "indicator--2d8d074f-e974-43ff-b866-1ab9ede7ed6c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4deabba-5dc6-4067-a65b-83f4917cc577", "sighting_of_ref": "indicator--941a7857-4293-48c4-a503-c6e8b5c3b006", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33afee-e0d1-4706-b5a3-c41661f3161a", "sighting_of_ref": "indicator--27463416-3948-4c67-911c-936916febc60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0de669-c5f1-4e64-bec0-5da5fac9b471", "sighting_of_ref": "indicator--876e50b8-d182-4081-80b2-7ae6ba9a75bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050b0a1b-d128-44b5-9676-5b7ff6545965", "sighting_of_ref": "indicator--467126b5-ea39-4089-9ec6-703a19671631", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47000d24-4e31-40cf-89ed-56e16d5ca505", "sighting_of_ref": "indicator--637934ae-b99b-4113-b16f-b75d90988ccb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1418c9-2393-4911-93da-6046f36e69c6", "sighting_of_ref": "indicator--08554609-5080-4579-ae8c-846140fc59ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db34d08b-2e44-4f28-b94d-751eb585d013", "sighting_of_ref": "indicator--115879cc-4e63-4c97-9d1c-29900d3d5825", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5be9027-82fc-497c-b899-07eb85cda066", "sighting_of_ref": "indicator--5ed07f81-3686-430b-874c-ef5ae6f76eae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6185dd24-eb08-414d-b77d-e4332d451b89", "sighting_of_ref": "indicator--5ed07f81-3686-430b-874c-ef5ae6f76eae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ac7944-b963-43ba-a6dd-b96c898a33f5", "sighting_of_ref": "indicator--32b09c00-9ec8-454b-8fdd-582a97b37a7c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a87eaef-c791-4a19-a3e6-afa981f2c909", "sighting_of_ref": "indicator--4c9aabc8-5671-4e7f-a3e1-7419330c07b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd501c15-6219-451b-9248-4d429d01fb59", "sighting_of_ref": "indicator--db80ae0e-8349-4689-a533-d95a53e09c6d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1051d224-e40c-4467-9adc-8e5a1af811d2", "sighting_of_ref": "indicator--bbaea51e-30d5-40ad-8b43-088192c9e16b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5da1561-3f8c-4855-9a10-df4aebc444eb", "sighting_of_ref": "indicator--1e1cd6ec-b8f0-449f-900c-539712921960", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78956f6-6bf4-4327-9369-67bac6b184fc", "sighting_of_ref": "indicator--ba49e0df-76fc-4e6a-a9aa-05a3e24e4e90", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57f1c4f-0241-4dc8-94a0-1d0756fa7fc1", "sighting_of_ref": "indicator--943c7762-8a97-4abd-94cd-d5c194a3e180", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a55e99e-99c8-421c-adbe-25314084edb1", "sighting_of_ref": "indicator--943c7762-8a97-4abd-94cd-d5c194a3e180", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b739cf-def5-4772-9850-0b4d8c3b846b", "sighting_of_ref": "indicator--a545d226-5b36-48fd-a651-f593bfe4b925", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21800b8e-50db-4697-919b-86afc73f2991", "sighting_of_ref": "indicator--d2cd7cfc-0707-4971-8f15-620be67124cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743a17cd-98c4-48f6-9c24-74d21f6437f2", "sighting_of_ref": "indicator--25d9ac25-2ab9-4265-98d3-78e2767536d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae636d-101f-4979-89ab-f32a21135107", "sighting_of_ref": "indicator--1870d596-83b5-47ac-a389-4697c2b41718", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d97aee5-588f-44d9-a59a-843b626a5560", "sighting_of_ref": "indicator--9be19773-b203-432b-9c0a-cecdc21e3826", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c655f021-fbdb-47de-a024-10b1f1b68456", "sighting_of_ref": "indicator--bb811291-afd6-4c43-8949-93429d48bbb5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc85e35-2d0e-4c3d-8689-d461b6c96b94", "sighting_of_ref": "indicator--d8d1f957-9eb2-43e0-bb1a-098b774ec1c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175fd24b-f426-4caf-bbbc-c1d5596592ec", "sighting_of_ref": "indicator--2f523e05-d572-4fdf-b56e-2aae3b074381", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6ffe33-bfd5-4781-bdc7-ccbbb14bbd5f", "sighting_of_ref": "indicator--4c5da0a4-03c1-4679-b221-88eaac854639", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3953a9e0-af72-40ea-8824-4b0d5221b103", "sighting_of_ref": "indicator--d7bbb216-5a74-4e3f-8bef-a4234ee73e63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a013776-26e9-4a0e-b115-5ef1d14868d0", "sighting_of_ref": "indicator--ff1ac7dd-9a80-40fc-b4fc-2bf05ca1bda6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1928d8a8-f8c2-4922-a4a5-8598b9f5c3dc", "sighting_of_ref": "indicator--7ee98fb7-e149-4e12-89f0-22edb2a01115", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc47bf4f-ad82-47cb-819b-049b55bfabda", "sighting_of_ref": "indicator--1aa282b9-cb53-42f2-b347-903c6b65d0ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ad9d58-915b-4cee-a06b-f7e418b31f1b", "sighting_of_ref": "indicator--1c8925ba-8efe-4e3c-8fc1-6214c8c7c769", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35140ed1-5e17-4e11-9b41-8ce4b99ad83d", "sighting_of_ref": "indicator--9231c991-53aa-46f2-95d7-f724ba381389", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66937244-1b3a-41d3-a9fb-e0bf794fc49b", "sighting_of_ref": "indicator--7a94042a-b15d-455b-a64d-2a004ec44b9e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c68ec3d-69ce-4b02-a674-e42dfb4bb0d6", "sighting_of_ref": "indicator--53f6f45e-12e1-44b7-be11-0a3ee6960599", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81789f9f-601c-4e11-bc52-9faa9a17342f", "sighting_of_ref": "indicator--40c9b14b-e598-484a-850f-0a85120598bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1661c7-0631-4bd4-b7a6-0ccdbf60645e", "sighting_of_ref": "indicator--40c9b14b-e598-484a-850f-0a85120598bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30347b6-fd32-43c4-bed3-fbe71478b1c6", "sighting_of_ref": "indicator--fb5f42fc-d7ee-4b5f-9916-727c000397cf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8080c7-8463-476c-a7c9-3d2f3ea5839a", "sighting_of_ref": "indicator--fb5f42fc-d7ee-4b5f-9916-727c000397cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df353799-a61c-4a64-889b-170a580cda9f", "sighting_of_ref": "indicator--7aaff957-e6d0-4572-9514-fc9b2a847bf6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8246d62-6af3-4358-bd66-d29066962456", "sighting_of_ref": "indicator--50f9ba6d-b816-46ea-b196-b4d834189590", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33919920-c03b-4b3d-b74b-0115306aa335", "sighting_of_ref": "indicator--e13c482f-c864-4fab-a3d5-a17b00443b71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf8e6c8-dad9-4616-bd16-990531c5f1b8", "sighting_of_ref": "indicator--fd40f3a6-c92f-4504-a6ca-b059f7902100", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b86648-0c2d-46e6-a97d-1e8f8614e993", "sighting_of_ref": "indicator--d818d7d1-7858-42cb-a64c-ebb7e733e5d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d19453-ffb1-476c-9879-a4e7e4a58107", "sighting_of_ref": "indicator--ad442cd8-72aa-4726-84ad-b53ca674f1bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98875b8-6b93-4604-8027-93df5a98b6b6", "sighting_of_ref": "indicator--2b21c68b-24fb-4cde-a3d7-a56f4fbae298", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ea6a32-4a11-47b3-b364-c9ae43e01e6a", "sighting_of_ref": "indicator--2b21c68b-24fb-4cde-a3d7-a56f4fbae298", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b791d04a-16ae-401a-9ee3-3fd7af81bbfb", "sighting_of_ref": "indicator--5d299291-c62c-414c-9298-0df93e7a3973", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63357af1-93e4-48b3-a801-e84e93740cad", "sighting_of_ref": "indicator--847a6e10-041e-4d40-8f45-d770cdd906a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440062a7-04c1-445f-982d-47fa4e4c3461", "sighting_of_ref": "indicator--52ab9d34-8f4f-4b6a-811d-5341233af033", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2361667-35d2-4570-a531-d96cea01a92b", "sighting_of_ref": "indicator--87935c43-b12f-41b0-8d95-ef247f60463a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fc2745-bdfc-478a-9174-743fb2612571", "sighting_of_ref": "indicator--e5dd2b16-5921-415b-95f3-13be11e42c91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42fc332-3b91-4b37-bd4b-da170e76f9ae", "sighting_of_ref": "indicator--8dea19e5-eb41-4020-8f51-92c33c867306", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fd0686-a52b-4a3a-a79e-8cf4d42ee551", "sighting_of_ref": "indicator--079d852c-5dcb-48b0-84f4-390e1f55af5a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0bdb11-a784-47e9-bc51-ea4690e8570f", "sighting_of_ref": "indicator--f6812438-9875-4881-a369-3bc8b77a2b24", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ba3931-676c-4f2a-808c-28cd45a3cfab", "sighting_of_ref": "indicator--3d391a4f-31ac-4352-afa5-7274be46504a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f902f02-2db4-4087-8b6b-b20fe8753187", "sighting_of_ref": "indicator--389b917d-6b07-448b-9bbd-83c655e89df4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee928bde-7964-454d-9bc8-f99ac51c1b98", "sighting_of_ref": "indicator--8af097c1-c972-4b9f-9be5-e86e0e60c8e8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58018bd8-70cc-4ae5-b366-f44b8a224a0b", "sighting_of_ref": "indicator--cb594238-4fc3-4bf0-a666-0dc5275a6b6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1009d83b-3cc3-430c-b486-beecb0b3b53d", "sighting_of_ref": "indicator--487e9212-296b-48f2-a661-837ba993a94b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fb9c23-a41c-4264-ad9d-10f0062fc9fa", "sighting_of_ref": "indicator--487e9212-296b-48f2-a661-837ba993a94b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57437a7a-3bba-4754-83d6-d10358a5207b", "sighting_of_ref": "indicator--004fcdf1-d0da-4607-b7d5-b0897378193d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36df0d6-f8fb-4637-85d3-e704200c0de3", "sighting_of_ref": "indicator--3fdd886b-c477-4a24-8963-ad10f23f5625", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3674e0-8517-475e-8c04-94075898b868", "sighting_of_ref": "indicator--3fdd886b-c477-4a24-8963-ad10f23f5625", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9065381b-1045-4d67-953a-9b75ef16b35d", "sighting_of_ref": "indicator--95eab6f8-eea2-46d3-a28a-32a45a5aa963", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6fd950-eb52-474a-a981-f9ea7814bd98", "sighting_of_ref": "indicator--95eab6f8-eea2-46d3-a28a-32a45a5aa963", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b596eae4-1a01-4e66-ab4a-eb700e379aa2", "sighting_of_ref": "indicator--3cc5d39f-698e-45fa-81c2-f573ea47d7bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bce7856-2f75-47c0-ba02-e694d942f889", "sighting_of_ref": "indicator--6c62cc20-22a5-4a43-ade3-957b7ee0f33a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fe754c-7dd1-4828-a4b3-2200a1544480", "sighting_of_ref": "indicator--55ace87b-83b8-4744-b9f9-17480fe4880e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5543fa1b-ba16-4ebf-913f-221246fbd04b", "sighting_of_ref": "indicator--d3ca24a6-312d-4de5-a1d0-5cca810e7abc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c29503-3883-45b9-945c-7b356baa1f78", "sighting_of_ref": "indicator--ed925b0c-a6d4-430e-9edf-794d7d86cdce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffa7ff4-4e76-42fa-b653-7a3ada0ccaa0", "sighting_of_ref": "indicator--ea3f7d8b-37bc-46e4-977f-6ace7fd96201", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4e9014-b87b-4404-9528-fd823bb179d4", "sighting_of_ref": "indicator--ea3f7d8b-37bc-46e4-977f-6ace7fd96201", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8d7e22-105c-4338-87b8-65286790a8c8", "sighting_of_ref": "indicator--fab9e3eb-1145-44d8-b4b3-e1aa8471317a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dd8a33-db60-45cb-af71-8b936c44ebec", "sighting_of_ref": "indicator--3a49432b-bcdb-4b75-b3bc-515788dbf469", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0591bdb1-f31d-4be3-a565-77f38c8b74d0", "sighting_of_ref": "indicator--3a49432b-bcdb-4b75-b3bc-515788dbf469", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f324bd15-fb79-451d-9856-6213db356632", "sighting_of_ref": "indicator--5d83148c-c17f-489d-b11b-44183d49a126", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd1e78f-127c-4136-ab00-df4c16e58cf8", "sighting_of_ref": "indicator--266f2be1-3f64-4ad9-bc83-bc6a342e30d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a424d7e4-dff4-4158-8450-b2d792bc558e", "sighting_of_ref": "indicator--70e40a8d-ca13-4c56-a9f5-e470b5d52ceb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93eb026e-cb1a-444e-b6b4-b2e50bdc1749", "sighting_of_ref": "indicator--f6557fa8-9f49-46c1-ac61-be5148b774cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d800c4be-6704-4dff-a115-fe2d4bfb83d9", "sighting_of_ref": "indicator--a3898494-1607-4615-850a-25feaa529d92", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46e6fe6-93db-474c-b60e-8cd30c9a9ee1", "sighting_of_ref": "indicator--e48d3672-87dd-4f3d-aec8-7a6ec02a5fef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db54a2d-47b3-486f-bc8e-6ebdfacb7dd4", "sighting_of_ref": "indicator--c48db5ab-214c-4516-98b8-b183929cef21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ebcc6e-fc74-462d-8d21-c5fddc4870fe", "sighting_of_ref": "indicator--c7b194f1-32b1-464a-b925-43ebc8242eb3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be351da-7996-45fc-a8dd-4d547e74d964", "sighting_of_ref": "indicator--6be809ee-4836-4d93-b38b-5abf00a2bee9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a996a56a-6046-470d-ac93-f62f9f62540d", "sighting_of_ref": "indicator--6be809ee-4836-4d93-b38b-5abf00a2bee9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06c83ab-8585-4fde-ae13-497a36dd0fde", "sighting_of_ref": "indicator--493cb018-5e7d-4d85-b6ac-4d6d5911ca8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d78708-124b-4b56-b951-2d8afea7da41", "sighting_of_ref": "indicator--02aa7113-ea5e-47d5-9019-161f2b1b386b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4448fd36-f3ec-4da8-95e6-7286553a8a09", "sighting_of_ref": "indicator--51136ce4-7116-427f-9416-5af860b9e449", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f4f62d-14ad-49dc-8ab3-5417c888041a", "sighting_of_ref": "indicator--80cb3fee-0de5-4ef6-9b91-2acb0f0386eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2573d3-0d44-4b14-8c4d-e5c7d24ef96f", "sighting_of_ref": "indicator--7b0b33b7-e628-4085-9635-a6113b549aa8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0e8637-5ca7-4305-8dcb-8686e9f860de", "sighting_of_ref": "indicator--866bd892-2f09-42fe-9e98-e81ba4e43beb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0cb5d6-78d7-44b2-b90c-d0a793dcc8cf", "sighting_of_ref": "indicator--5bf4e83b-d11f-4341-9d24-0144dbf82e5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dd2487-f9c2-4d55-ba74-9ffbda9eef6e", "sighting_of_ref": "indicator--8b45dec3-88e5-4667-82df-01b386dfe617", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af814a3a-2a5a-49bf-81d5-eda15cfd6a76", "sighting_of_ref": "indicator--b235dee1-033e-4c69-b3d4-19a87e45dc84", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa0df72-7a50-443e-b98f-da6cca623510", "sighting_of_ref": "indicator--7a767b76-0aa4-4555-a852-f6ce238c8b0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baa7e6e-b258-4b31-af18-c9490b9dc2fe", "sighting_of_ref": "indicator--7f847e19-8ca8-4bac-9e09-e91c97444b59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5d44b5-f4d1-4e5f-9cf2-a63ba547c0c8", "sighting_of_ref": "indicator--78cd614a-e5fc-47e5-bda2-77ee2c994595", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397f9dc4-3d5e-4b1f-880e-18249fafc9df", "sighting_of_ref": "indicator--63f59180-9c05-4de1-a4c5-846092dbdae3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d340072d-360b-4ecd-97ab-f187c8442921", "sighting_of_ref": "indicator--e451520c-526c-4a09-9f40-6edc2618de3c", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9b54f0-5e8d-4266-9e60-d65a1843ed5b", "sighting_of_ref": "indicator--adfeb6f8-01cf-4681-8ed6-8df40b297217", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0d213e-03b7-44c0-ac53-13c817b49ee6", "sighting_of_ref": "indicator--adfeb6f8-01cf-4681-8ed6-8df40b297217", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c584c48d-c10f-44ab-b48a-83294d540902", "sighting_of_ref": "indicator--ac83621a-a655-49bf-b897-b52b13ff6f02", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c49417-0f86-4e9d-b717-f3ac17346603", "sighting_of_ref": "indicator--343e9a47-18af-4bf3-aec2-d189cbfc95fd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162e2529-c2a1-419e-871a-b8479b431bb9", "sighting_of_ref": "indicator--343e9a47-18af-4bf3-aec2-d189cbfc95fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c33cef5-5ebe-44ec-ac16-180a8e17dd7c", "sighting_of_ref": "indicator--39261fa3-c9f6-4428-a5ae-c9354eb93627", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651e2971-34e4-4365-b601-4080366124d8", "sighting_of_ref": "indicator--28a42480-d790-4534-9c45-36233b9a26cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d687036e-a077-459b-90fd-19c8ce157451", "sighting_of_ref": "indicator--1f750009-0af9-4d2b-a4da-3e829fbf8543", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8058fd33-f183-424f-a8d2-4767b314971a", "sighting_of_ref": "indicator--93b69e71-7486-4a9c-a1c6-b26b0a23f666", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f1ea5c-b831-4375-807b-e3360ff3209a", "sighting_of_ref": "indicator--fa263cbd-f8ae-4861-919d-39075141bf3d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6ba47e-6347-41d4-9967-5e9ab677c8b6", "sighting_of_ref": "indicator--a05d99c2-c6fa-4346-9377-a6c67dec46c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e78c28e-5af3-4881-bb48-022a0ab82d44", "sighting_of_ref": "indicator--a701ee4a-19b4-44f4-bd76-558a56a51119", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbd110f-106d-4b1f-861a-42651a059c1e", "sighting_of_ref": "indicator--12519b18-633d-4a88-89f7-fb5fbd779c76", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7267a341-92b2-4b80-ad00-3c32f0f63578", "sighting_of_ref": "indicator--12519b18-633d-4a88-89f7-fb5fbd779c76", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb84732-92ca-4477-9533-cb357fa067db", "sighting_of_ref": "indicator--12519b18-633d-4a88-89f7-fb5fbd779c76", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46babab5-b3d5-4009-8fd0-ef7bcda6debb", "sighting_of_ref": "indicator--816b33e2-39b0-4616-81c8-bc9b10534706", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa557f3f-c0f5-4541-bc46-91d1afe897eb", "sighting_of_ref": "indicator--1076d315-9327-487a-9517-e887371bdb22", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5301681-20ad-4325-ac45-c2e7a498c929", "sighting_of_ref": "indicator--3bfebe6d-bdad-4190-973d-04178972105c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee968a-2845-4ce9-8229-8e9da8e99d51", "sighting_of_ref": "indicator--3bfebe6d-bdad-4190-973d-04178972105c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0671380a-9890-49da-ad07-11e07bb9f9d9", "sighting_of_ref": "indicator--3bfebe6d-bdad-4190-973d-04178972105c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d22743-b172-40e2-ad62-6c43b531903c", "sighting_of_ref": "indicator--be862988-8401-4ad9-a81a-72328f9c566e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18c7421-cd53-423c-a0a8-4c729325dbcf", "sighting_of_ref": "indicator--be862988-8401-4ad9-a81a-72328f9c566e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96de475d-d66c-4424-bb71-3052e19ce723", "sighting_of_ref": "indicator--be862988-8401-4ad9-a81a-72328f9c566e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef5d844-665c-486d-af8f-c95e8a2b4459", "sighting_of_ref": "indicator--fae2d315-da9d-48c1-9d28-9b062725e705", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f65183-1687-400a-86a4-dd2cbab2930f", "sighting_of_ref": "indicator--fae2d315-da9d-48c1-9d28-9b062725e705", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529b2f83-ba71-487f-a772-e03c681c3109", "sighting_of_ref": "indicator--fae2d315-da9d-48c1-9d28-9b062725e705", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096276c5-f15a-4ece-8921-34876f9b4a9e", "sighting_of_ref": "indicator--3cd1e493-503b-4cd2-bcaa-cc47fc8fdb5a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2280a9-e466-43cc-a268-bf888dda8f56", "sighting_of_ref": "indicator--bfe05750-5c26-401f-a8b6-500e113acfd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2dba9f-a496-4d86-aa90-52b97db19560", "sighting_of_ref": "indicator--189b3c6b-a8e9-4136-81fd-631da161a89f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddd6e02-cbf9-418b-b174-23c67ee9aadd", "sighting_of_ref": "indicator--9a4364a9-a769-42fe-9700-d1a7778820ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245aad31-1d29-4d90-b86d-ca4cdbf41608", "sighting_of_ref": "indicator--d6ec8423-1fe5-4dcc-98e0-559b6f90769e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f1c8de-f8b9-44bf-8875-094d4d2ecc81", "sighting_of_ref": "indicator--5821020e-4a16-4919-8396-ee7ab28dcac4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145debbd-11fd-461e-b125-6f8c5d8a62ee", "sighting_of_ref": "indicator--b3d11759-a662-4b3a-b646-446c3d27bc5f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68408071-008c-49d9-a29f-1ad4c43406ac", "sighting_of_ref": "indicator--82e49af2-e7df-463f-a9e1-a1247fe5fd83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03db1ab-b85c-4cb0-9836-4fc1fd025aa1", "sighting_of_ref": "indicator--4f8fb557-2b6f-4084-9534-a0dbede0231b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1e802a-ce46-4e45-a132-995be3b87d27", "sighting_of_ref": "indicator--76faec61-fa3e-4912-b462-511050ccae39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317ccfe0-b728-4be1-8fa3-99c2105f8d92", "sighting_of_ref": "indicator--090bfc87-a1bb-4730-8d1a-fe0f74376d7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ff08d0-1fe0-47b5-97bb-5d40a95f4bd6", "sighting_of_ref": "indicator--090bfc87-a1bb-4730-8d1a-fe0f74376d7c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d78b16-f88a-448e-b7cf-a89e7707e68f", "sighting_of_ref": "indicator--74f0acb8-9ff2-492a-aba2-c788d55a77c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b7b5da-03df-42f8-9f63-950312061035", "sighting_of_ref": "indicator--0638e391-7717-4fa9-841b-fed5c649cffc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc6dff8-0413-4334-af49-42ecf5c8aefa", "sighting_of_ref": "indicator--89b4b161-6e21-4e7b-bd63-18e280d344b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e87d7b3-61a3-4fe5-b3f2-ce3927e8f148", "sighting_of_ref": "indicator--d4a5b814-d721-449d-9a97-13076bfe8c2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c7fc30-840d-40c2-8e0f-86f79276a16c", "sighting_of_ref": "indicator--7c8baa83-60ab-4c6a-8c88-2f5681e07f5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9139665-4c10-4699-b176-335a8b282bfc", "sighting_of_ref": "indicator--be471553-2970-4d3d-84a1-eb3717ed0a2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f38f57-acbf-477f-8412-12e6209c2089", "sighting_of_ref": "indicator--ba1df08f-e75b-415c-bec5-ae47108232cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7985a3-6921-43f9-a159-4949477c11b0", "sighting_of_ref": "indicator--2c751fcc-99f1-478f-9581-8350aa62f734", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5439475-36fe-4ba3-8a92-3b5bea944080", "sighting_of_ref": "indicator--8b71ca1a-36be-4fbd-ad8d-17afb585ac4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082249ae-e3f8-4af9-bdcf-a56bdd26dacf", "sighting_of_ref": "indicator--2bf7f3aa-8870-40ec-97df-6e6ee1eef05c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0ce708-0a04-4af9-834d-1c77426af2f2", "sighting_of_ref": "indicator--2bf7f3aa-8870-40ec-97df-6e6ee1eef05c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd1aa66-41fd-487c-a436-720645c8f0f6", "sighting_of_ref": "indicator--2bf7f3aa-8870-40ec-97df-6e6ee1eef05c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e807a1-e47d-47ef-ae1c-1f76745169b1", "sighting_of_ref": "indicator--1a07e7de-dff0-4d90-a7f2-8e3b3f4acff3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d120f3c-1574-49a0-8af4-4ca119765fdf", "sighting_of_ref": "indicator--88e0b0b8-940a-4405-9f70-c0117828f66d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9af651-79dc-42e7-820e-71187c0971e5", "sighting_of_ref": "indicator--88e0b0b8-940a-4405-9f70-c0117828f66d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f83a05-bde1-43cb-a975-5e66abc21790", "sighting_of_ref": "indicator--88e0b0b8-940a-4405-9f70-c0117828f66d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0f159b-f435-4d99-82e8-42cd029df093", "sighting_of_ref": "indicator--1105e524-6326-488b-a950-a1a3a72a0891", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282d93d7-7216-4858-8961-65cda81cd880", "sighting_of_ref": "indicator--1105e524-6326-488b-a950-a1a3a72a0891", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb3baea-f1dd-4245-b90b-54794d5fe275", "sighting_of_ref": "indicator--1105e524-6326-488b-a950-a1a3a72a0891", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efea841c-650b-46e6-8df6-510c4a19286c", "sighting_of_ref": "indicator--d56f8fc5-5de0-4a83-af86-4067639c3f41", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38724ec7-fc9c-4d8d-9fff-b700b409c344", "sighting_of_ref": "indicator--d56f8fc5-5de0-4a83-af86-4067639c3f41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa201af4-538b-4852-85a0-6ade3b3aa3e8", "sighting_of_ref": "indicator--d56f8fc5-5de0-4a83-af86-4067639c3f41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2254a000-253e-49b7-9a48-c519f9ba8ab0", "sighting_of_ref": "indicator--7b6e4bcf-326c-444c-bdc2-0dfe8bb065c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fbac7d-f1bc-484a-bc90-a2c44964b455", "sighting_of_ref": "indicator--7b6e4bcf-326c-444c-bdc2-0dfe8bb065c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff486d7-3b2f-4e31-9148-f265d19d0b23", "sighting_of_ref": "indicator--7b6e4bcf-326c-444c-bdc2-0dfe8bb065c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bd9e7f-4c48-46fc-aa66-dc688b2ddd77", "sighting_of_ref": "indicator--2b08e1fa-f190-43b0-bb04-80136a2683c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6735c672-c1e5-4579-ac85-94699f36e5cd", "sighting_of_ref": "indicator--5761a529-e3e1-4779-a333-2232b65e0dd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f68758-5bbb-4d1a-8ebe-88671fc72acc", "sighting_of_ref": "indicator--ee1502be-3fef-4393-9791-11dba872fa74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affa3996-397c-40e7-b848-d7705c9fa672", "sighting_of_ref": "indicator--c31c76a9-1d28-4a2d-ad9e-bfb9a45e1d46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292a01e0-319e-42e4-b372-568febd14c2b", "sighting_of_ref": "indicator--997106e3-2ee7-4831-98ec-445d5868c8c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cfd826-3c77-474d-b0e0-1ae78e063314", "sighting_of_ref": "indicator--cb453aec-5372-462e-ad14-3447d4fc0bfe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9461e0-f664-4eeb-9f7c-fcb1a1c5d8f5", "sighting_of_ref": "indicator--fb31c910-44d1-453c-8b76-19ecb6876c95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deda2f01-39cf-41ab-a2d5-8b309b8ed3c0", "sighting_of_ref": "indicator--c1dd4625-229f-4780-8615-ee70f04caa73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ebe845-53f1-4fa6-9b85-8ad96f9b70ab", "sighting_of_ref": "indicator--9fb3b3fa-d844-42df-9c14-033166d77ec9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7131f3-e27f-4e2b-8897-7208cc860126", "sighting_of_ref": "indicator--9fb3b3fa-d844-42df-9c14-033166d77ec9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04109f4f-9e53-414c-84a3-ccfae32ab733", "sighting_of_ref": "indicator--8acae12d-5b5d-4216-afb0-a307a1578527", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b146502-d270-4120-9ff1-9a4e663d259e", "sighting_of_ref": "indicator--8acae12d-5b5d-4216-afb0-a307a1578527", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d20171-a235-4fdc-a813-862698c7a654", "sighting_of_ref": "indicator--8b688106-61ff-40c5-825d-444aaf79b0ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301c8e61-3fb0-4409-a211-5e1e01c708c6", "sighting_of_ref": "indicator--9c912c80-5208-4d80-81e8-61149710c9c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54a188f-0769-47db-b909-d8b476689a69", "sighting_of_ref": "indicator--24540111-0f39-41bd-baff-0a184ecf30a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47af0ac0-ebda-4515-800f-120910332bf1", "sighting_of_ref": "indicator--24540111-0f39-41bd-baff-0a184ecf30a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dba0d3-5436-48de-85fe-21ef95517066", "sighting_of_ref": "indicator--0189cbbf-e3d6-41f6-b872-02bc9777b409", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e721eda-ca7a-44f0-950c-f5fa3516cda8", "sighting_of_ref": "indicator--21dd5c0b-5114-4a28-88ba-f85199a73045", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cc1c70-16f0-4bcb-b963-39bf1ce2b475", "sighting_of_ref": "indicator--f4aee4ad-4419-4477-8522-bb2ed4e079af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5b96e8-4db4-4900-9ef0-087a5a638943", "sighting_of_ref": "indicator--c1530892-0f8a-4f26-aba8-4e397197f57a", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3b03b4-51db-4720-a051-d05830cbbbca", "sighting_of_ref": "indicator--66b7a4c9-442d-4e90-bed7-f69c95e04b2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a975d5c-22e7-4055-bf1a-4e63e231d711", "sighting_of_ref": "indicator--f907a7bd-4b08-4904-af10-4b15f17a2649", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f539c59-2f31-42cb-b62e-61f9502f2501", "sighting_of_ref": "indicator--34949990-db42-4cff-ae73-29047701c62f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7923e298-f0fe-4e58-bfb7-4c9540873500", "sighting_of_ref": "indicator--34949990-db42-4cff-ae73-29047701c62f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e104d6e7-0642-4b06-9dce-2afbd753e8a6", "sighting_of_ref": "indicator--34949990-db42-4cff-ae73-29047701c62f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805acc8a-91cc-4cba-af26-f5670234bb67", "sighting_of_ref": "indicator--f2bd76f5-73c6-44bd-bf42-a2aeb9f9633f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf8f2e9-7969-45e9-9766-7e0576492c62", "sighting_of_ref": "indicator--f2bd76f5-73c6-44bd-bf42-a2aeb9f9633f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7c1fa5-79f1-4142-9ac4-d3b98f96b192", "sighting_of_ref": "indicator--f2bd76f5-73c6-44bd-bf42-a2aeb9f9633f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d29d07-bdbf-4bbc-bf53-8418a896e7e8", "sighting_of_ref": "indicator--521147de-21c2-42cf-a2e8-d2f1c6250fe5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d928d9-4716-40c9-b752-98568d8fc6a3", "sighting_of_ref": "indicator--521147de-21c2-42cf-a2e8-d2f1c6250fe5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a902334-2d64-4f2d-bc5f-dd957b8223a5", "sighting_of_ref": "indicator--521147de-21c2-42cf-a2e8-d2f1c6250fe5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee1645f-17e6-4660-9ada-018a9b844c89", "sighting_of_ref": "indicator--0586ffd6-46f2-4d7a-96ef-f6b748bf23bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41055eec-c44f-4883-8ee2-1afd8d7c2744", "sighting_of_ref": "indicator--0586ffd6-46f2-4d7a-96ef-f6b748bf23bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e80fa8-f69f-4d22-a636-237006accd20", "sighting_of_ref": "indicator--0586ffd6-46f2-4d7a-96ef-f6b748bf23bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134e0293-c858-4b04-9fb8-62b9cf3a1084", "sighting_of_ref": "indicator--459ce06f-257b-4617-85be-9b6dec4d8c33", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8114d033-6b51-4f79-9aee-0c81ccdcb770", "sighting_of_ref": "indicator--33d8650a-a7f7-409b-8fb7-9e756d927fb9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cb0f3e-10ef-4b11-87e2-47063fb2a137", "sighting_of_ref": "indicator--c78b5f1d-c9c2-46ea-8c04-9778b2d34cde", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bbd4b5-946a-4301-a0c2-fc860c924a56", "sighting_of_ref": "indicator--c78b5f1d-c9c2-46ea-8c04-9778b2d34cde", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee1197a-b185-4e14-b754-b33a551423ca", "sighting_of_ref": "indicator--c78b5f1d-c9c2-46ea-8c04-9778b2d34cde", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488b9081-1d24-43f0-be64-8de607136fb2", "sighting_of_ref": "indicator--1f449464-56bb-4b75-8165-ab0ad1920678", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc82271-90dd-497e-a681-7d653b5be6be", "sighting_of_ref": "indicator--ff76a632-0b12-4d6f-8dc5-fd1bf2ecd50c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81bcb0b-370f-4c1c-ad3f-f93f204f014a", "sighting_of_ref": "indicator--a0731f45-6913-4501-847b-d3076120da64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fef992-80d5-4214-a7f7-c1bd20265dac", "sighting_of_ref": "indicator--a0731f45-6913-4501-847b-d3076120da64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0986265a-af60-4f99-baa2-0ebbbadc68fc", "sighting_of_ref": "indicator--483c49c1-72f9-456d-9dfa-902e3d6d86a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37b89a0-b280-4c64-aff4-e07988dc8654", "sighting_of_ref": "indicator--59f1b12e-53ab-496a-8a4b-94a0518ec34b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c0307f-d7bb-4bfe-bcb2-e7e11199ce01", "sighting_of_ref": "indicator--d14ba0bb-319c-46a6-b102-669ab232a9bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f596ae-f9b4-4b78-b2a0-75dea09d9ca5", "sighting_of_ref": "indicator--349452f4-0968-4d00-aa85-2ec1c0083838", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263d546a-83a4-4f43-a0e4-494a08cc0637", "sighting_of_ref": "indicator--4373d277-a77d-4771-b1b0-796bfc7dacba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd426d1-f402-4940-8703-7f0b99bf3d69", "sighting_of_ref": "indicator--92a18977-5087-467c-84cc-0590979d50a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364c9816-2502-47c0-97af-5fa553bd5e30", "sighting_of_ref": "indicator--e99dc3d7-870b-4f3a-8f2a-77708654dc9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf20101-d914-41ab-9cb9-aa2270ecf0ed", "sighting_of_ref": "indicator--e99dc3d7-870b-4f3a-8f2a-77708654dc9b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb1170a-3607-481c-aabe-26e13d6c453e", "sighting_of_ref": "indicator--e99dc3d7-870b-4f3a-8f2a-77708654dc9b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb54387-c2df-4235-a96f-b7b674c973d7", "sighting_of_ref": "indicator--6af0f3bd-20a1-465b-871d-fa2e26fc2553", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d67d777-ce34-4a25-a902-d724ae79117d", "sighting_of_ref": "indicator--6af0f3bd-20a1-465b-871d-fa2e26fc2553", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38337f7f-6da4-4c1f-98ad-073643f89776", "sighting_of_ref": "indicator--77c24f84-c960-4fa3-a468-f811ab34b0ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a05b2a-864f-43be-93fa-398b728c6130", "sighting_of_ref": "indicator--3019650b-1a9a-4455-a714-ad871dfea579", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e7bbae-4667-4b91-b362-1d26e8766b7a", "sighting_of_ref": "indicator--b25cbcad-2984-4a12-bfb8-e3291a9b7cc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed5eabe-79c5-430a-a330-849dd155291f", "sighting_of_ref": "indicator--0b350ff2-eabe-4679-ba0c-b5339bbd59b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e474c3c-2f92-49d1-b012-63bdc0cada35", "sighting_of_ref": "indicator--c9e329c3-8e5c-4712-9f3e-9af5ece41d75", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c389871-cd66-4c55-a81c-bf50af5b6318", "sighting_of_ref": "indicator--c9e329c3-8e5c-4712-9f3e-9af5ece41d75", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78980ebc-4d74-4a23-b3b0-aeb1e21f040a", "sighting_of_ref": "indicator--c9e329c3-8e5c-4712-9f3e-9af5ece41d75", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea167e2b-b745-4ca3-8acb-edef16eb42e8", "sighting_of_ref": "indicator--2f7f966b-dbbe-4c14-b0d5-72f9352d027f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278a70e9-9e66-4d8b-a425-4da7cf854f2a", "sighting_of_ref": "indicator--5bd2a2fc-f754-4d33-aa25-07910227383c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e4e864-2573-4878-b9d4-b4358141072a", "sighting_of_ref": "indicator--0d7e3147-bdb6-4264-85ab-5d6a160a5d03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f8c140-84d5-4f66-83e2-502d5f359531", "sighting_of_ref": "indicator--cbc7c2f9-1d49-48ba-9b89-7be56b543669", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6196c4-e1a4-4dca-89fa-a219f92b6985", "sighting_of_ref": "indicator--2e9e3b20-af55-405a-99b3-9b7274b6686a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6ea7fb-f0b3-470e-82a4-8abeb823259f", "sighting_of_ref": "indicator--2e9e3b20-af55-405a-99b3-9b7274b6686a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e83ce9e-7e5c-4487-bc22-5224e2dfdd4a", "sighting_of_ref": "indicator--da40d94f-8637-4e12-b1c0-50eec9c242b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c912b0fa-2748-4853-9d24-32be25601a0b", "sighting_of_ref": "indicator--c0a00791-81dd-42d3-840e-b6d891b6d573", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0870fcb-1780-4f41-8cd0-3638bfc9d3ad", "sighting_of_ref": "indicator--b5ab152a-cf53-402e-8094-605b853ba43e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bafb30a-635d-43b4-abd0-619096ae262a", "sighting_of_ref": "indicator--bcba4adb-34c2-4557-9abd-117ce028a4af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74f5c84-725a-4b9a-901e-606e4369bced", "sighting_of_ref": "indicator--ee81e719-2113-4608-bcbb-2e207f533bf7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bdb038-0577-4ab0-949e-b10a29a4508b", "sighting_of_ref": "indicator--92c7c507-da88-46b4-ba7f-ff4749c5ad5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b760552-7363-4919-a7f4-1ba6d02837d3", "sighting_of_ref": "indicator--92c7c507-da88-46b4-ba7f-ff4749c5ad5d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8030756-680b-4069-857d-6e43f0ada41d", "sighting_of_ref": "indicator--87119b9e-0c4a-4112-8731-ccb3a13802ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd4a7fb-1f5a-4f5f-a1a5-6182982df9bb", "sighting_of_ref": "indicator--d8b12e04-916a-40f2-a7ff-c142cb2ee50b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ad78ec-71e7-4ca9-97a2-b95a922eb1f1", "sighting_of_ref": "indicator--39fb6fa1-bc67-488a-b137-2c250f2cf75c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df295b5-0a26-4eaa-886b-b84a5d513f5c", "sighting_of_ref": "indicator--3a85b3b2-d5d4-4993-b8da-21d0b15f3fad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b68fc7-c9a0-4c41-ad80-bb38f8c81fcf", "sighting_of_ref": "indicator--b464e97b-f941-4f2f-b6e1-e592a3ae2276", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012defda-dda1-4bf9-846c-e859c76b5ef4", "sighting_of_ref": "indicator--e4b94e2f-9e64-44ab-929c-c4e58e464d05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a83382-7b3a-4dd2-9755-c6d23bd54500", "sighting_of_ref": "indicator--2fa455bf-a549-43d9-aaa4-bf1b254fbf4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0c0391-0aca-4396-9ae0-c4dd49192f03", "sighting_of_ref": "indicator--82de1e2a-27de-4b2a-a42f-cee5d22c9005", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44e1c05-f91b-4f4c-b584-c8e5e05c3f4d", "sighting_of_ref": "indicator--b4e004c7-825a-448f-ad3d-fc0f9dbf4f6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a4393d-4f86-4990-8a58-9e358b8d63bc", "sighting_of_ref": "indicator--c30d7f8e-ad84-4834-a5db-137a5b7cff9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d39d39b-ef44-4949-a1fe-351052e83373", "sighting_of_ref": "indicator--536f4227-c122-49b6-8e5e-544aa7b2ea8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e779ee0-5f73-40fd-850d-9bf91e177ad3", "sighting_of_ref": "indicator--42517f7b-e1a4-42cb-87f5-a209410f2174", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f4a984-5435-40de-b6ba-0575ae510c15", "sighting_of_ref": "indicator--9e013209-5718-48f4-b6ad-543a3c41f555", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4488c6b0-0d36-4386-b997-7d1a9b2b51cd", "sighting_of_ref": "indicator--14a12ee8-6174-4713-ad9b-3514dce54d94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48aaabf-3e9d-4c6f-8ef7-418dc49a8c4f", "sighting_of_ref": "indicator--3856196c-ae2a-4a0d-acad-d63b5621f143", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b47aacf-ce61-4662-afbb-ab25e3bce844", "sighting_of_ref": "indicator--0dfde107-3ef8-40a2-8025-72274561f3a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc93638-78d1-4f18-9d2d-5af660c4c279", "sighting_of_ref": "indicator--32e560fa-df4e-49fd-8ad2-d7745ef3500e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c7e721-4224-4f06-8a5b-29eb7d471ca6", "sighting_of_ref": "indicator--a1c7dd4f-e006-40c3-a9cd-956aec04da0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44839ad2-f539-4eba-b8a2-05d20baae38b", "sighting_of_ref": "indicator--a1c7dd4f-e006-40c3-a9cd-956aec04da0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6736ddd-dc7f-4b5a-9769-ec01488c6edc", "sighting_of_ref": "indicator--207ba79a-37e7-4b2f-9d4b-db75447c3b00", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2d500e-f172-45ce-8de6-5021317b2284", "sighting_of_ref": "indicator--6677a35a-1afe-40d1-ad10-fb62fb552ace", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cca2291-ebf1-481c-9ad1-98d6f0b624ac", "sighting_of_ref": "indicator--26d2425f-f686-4e6a-bf69-3d4b1753c0bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07be86ef-8024-4497-8e45-3ba0f1a2d5da", "sighting_of_ref": "indicator--902e304d-ed65-4e06-a56d-e2c686166d05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910ece6b-32ab-4136-a2a6-53913c94e6ca", "sighting_of_ref": "indicator--1c24cc51-a91e-4576-aaf0-4da2d2abb59e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d57674-54b9-439f-bcd4-d3570c45e585", "sighting_of_ref": "indicator--4ef51187-cc9c-4464-ad64-bd110c85da85", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c1ddd-d239-4211-9e01-8c362abaefa8", "sighting_of_ref": "indicator--e76c55a8-eb18-4301-878f-796214f28d00", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f757a0f7-7773-4b13-8cdb-cf2a2789e299", "sighting_of_ref": "indicator--4304251a-2c46-4e9d-b299-945060eb8de5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579ea5fc-e8c2-4d01-a7dd-60adcb6a7c9f", "sighting_of_ref": "indicator--4304251a-2c46-4e9d-b299-945060eb8de5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa098c60-e30e-42b3-b4d0-554a337552a2", "sighting_of_ref": "indicator--4304251a-2c46-4e9d-b299-945060eb8de5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9a8a1e-2f54-44d4-a7f0-ba69bc2f5f37", "sighting_of_ref": "indicator--47174c00-95c1-4368-a42b-9301ad129805", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67991379-bba5-4c7a-9a1b-2ef44609997d", "sighting_of_ref": "indicator--d700a054-7459-467e-893e-9f9b9ebdaef4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f147196-5b49-4d7a-bfb1-1d9f5f6f0da4", "sighting_of_ref": "indicator--c55d9929-3b0b-402b-9634-52c73b36f47c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea11194-cd3d-40d6-9e4f-de163cf69c2b", "sighting_of_ref": "indicator--88fca430-62b4-4b47-831b-dd5bd9d2b7a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43d1ff8-1457-41af-8e36-1277f4f32874", "sighting_of_ref": "indicator--88fca430-62b4-4b47-831b-dd5bd9d2b7a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b72e46-0029-489a-a068-4d3bbeb11588", "sighting_of_ref": "indicator--f3e007b2-02e4-43d5-86a8-da2660cf988a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01c9196-1ef4-44f8-9e97-1b39cc6106c0", "sighting_of_ref": "indicator--bda3965e-3a76-4692-9bcd-d4d4897a051c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1b46b1-0773-4b78-9c45-78db9b1526b9", "sighting_of_ref": "indicator--7f15e44f-504b-4bc7-893a-f7ea993811c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171b1654-c21d-4c13-854f-58501ba4d0de", "sighting_of_ref": "indicator--701cc31a-2363-4803-9f12-0264cf10535a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7d8e0b-8d8b-4078-8888-2a16cd8df0c9", "sighting_of_ref": "indicator--3f42d373-eca6-4d34-b2e3-722746b7be10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c162b5-90bb-477e-8d62-5aa4433f485f", "sighting_of_ref": "indicator--39124915-2486-4e89-9b50-2044d11bb6b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c353c48a-83e9-4f1b-8df6-a29552e36a13", "sighting_of_ref": "indicator--fd70234e-576d-4afa-ab6f-39ca6fe9c619", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2650d8e6-bbc6-4367-9740-cd54ba0b0652", "sighting_of_ref": "indicator--aff9645c-550d-454a-8081-11cc6efa9455", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce764c4c-efb1-4dd5-9359-5aeab544de08", "sighting_of_ref": "indicator--70e92643-e984-4330-97f3-9290ebfac7b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294cc0da-c82b-4bb8-acb5-6bf506e9c195", "sighting_of_ref": "indicator--ce0ddeae-7ebd-4721-9ce1-30bd19e1630a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cf85e1-7b28-4a9d-8a1a-ebfeba29cf9a", "sighting_of_ref": "indicator--a3ad460d-d546-47a8-95be-69deb08cf556", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac485793-ad9c-4053-ab93-ab67f4b693b4", "sighting_of_ref": "indicator--69f22dc9-d79d-41fa-a367-fda0caebb742", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9950d17-17cd-4eca-aba3-16330c5aa50f", "sighting_of_ref": "indicator--8371c514-527b-47c2-9ad3-14bb5b2f2787", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782a9b30-cf21-43ab-9844-e75f1d1ea3f4", "sighting_of_ref": "indicator--64335b8c-6f67-4303-b0b2-212d4cc5573a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2317ed-b1eb-4927-b040-6e8570f83f77", "sighting_of_ref": "indicator--c5ecf6ce-f43b-4014-8355-b360a04705ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df00cef9-b472-4546-adad-f541a23cba87", "sighting_of_ref": "indicator--b0203c77-325c-4b3b-b9c8-cd71a44b3f13", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ee118c-1813-4e92-9b93-10f5322bfc92", "sighting_of_ref": "indicator--a630a1c9-e722-428a-b317-76d2416ba479", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f64688-f97c-4744-a227-654fbb77df6d", "sighting_of_ref": "indicator--62b8e149-2857-48c8-a6c1-5c99aaac35cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801b24e8-cf90-471e-922a-e1354a20e445", "sighting_of_ref": "indicator--d0706f3d-e160-4794-9e1d-dcd9a501cd09", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f0cc2c-8f01-49d6-a5ac-9cf51c343ed4", "sighting_of_ref": "indicator--a574fe99-daa6-45d7-892b-070abf2919b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c69fc4-9391-4f96-9f10-6a55e820827b", "sighting_of_ref": "indicator--d460a69b-96a4-4d18-8c01-fba4bf0abad0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a5a6c-082b-428b-aded-54accf5f0ab2", "sighting_of_ref": "indicator--7f2ae5ca-5495-4b71-a4aa-7a1b7c5f5d06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af569a0b-c5bf-4fe6-a491-87991eb803c7", "sighting_of_ref": "indicator--4bc76634-8a82-43c4-9159-9df2402358ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efeeca5-ecfb-4d0e-9168-336fa6577289", "sighting_of_ref": "indicator--dae8e225-62e2-4e97-9754-96cfc8e6bff2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5225124c-76c8-4f00-a79e-26cc435d5b5a", "sighting_of_ref": "indicator--b09ad00f-d156-4940-afd7-43035af76fda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23039ea1-32b8-4ab4-ad57-2dce8280a437", "sighting_of_ref": "indicator--e83bb77a-c083-4678-a5af-ff9d84ed57b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e891a9b-a12a-4b3f-887c-736f24e27337", "sighting_of_ref": "indicator--17fb051d-2c82-4ef8-a2c4-564b6b741a79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e47584e-7261-429f-8759-e8aba489b69a", "sighting_of_ref": "indicator--418d6ad0-b4eb-4eba-af61-964406e70ee7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b251b8-3a35-45a8-ac1c-c2da4b89bb10", "sighting_of_ref": "indicator--df5eadbf-0929-4770-8c11-349c21b27742", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948d32dd-cefe-4c2b-ba40-27f25aa9b60c", "sighting_of_ref": "indicator--3e9614ad-550c-4afa-bde4-9f5dec53700d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d081e5-4228-4d8d-b667-f181fc11e2d6", "sighting_of_ref": "indicator--47e9109a-8f36-4cdb-843b-fd4c27571df6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032b765a-7a29-4292-b771-3d764284a00a", "sighting_of_ref": "indicator--b6672bfb-4560-402d-9d34-95992940d663", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5abc82-4a03-43ef-9543-afe3217db575", "sighting_of_ref": "indicator--3028ce10-4332-4dfa-a1b6-6bb97f28e756", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dde09f-1d9e-4a5a-b50b-fa9bfeaa4bf1", "sighting_of_ref": "indicator--bfaad11e-af30-4d47-ac1f-a6462b692b9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca549692-43f4-48ba-87f3-5bf22273fdaa", "sighting_of_ref": "indicator--f923ed15-11cc-453d-993f-65ea8a6b299b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d6059d-f154-4ce2-b264-ecc751527ddf", "sighting_of_ref": "indicator--15619a55-2207-45eb-8292-c2a3d334cfda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02e2319-b3ea-40d9-8d01-852b964a0f01", "sighting_of_ref": "indicator--25dda1e8-5844-4a7a-a8c3-86ec4f359c88", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cd1501-a6b9-4e89-9bf8-ea887333d992", "sighting_of_ref": "indicator--a792f550-e60b-42a4-9893-6b3d73e9f125", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97edac6d-57e9-4116-9341-0563b84acb88", "sighting_of_ref": "indicator--390a5c90-601c-4730-8c0c-0c1b27fb1a94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a1d101-5c06-4feb-83f4-b4aaee92ce52", "sighting_of_ref": "indicator--390a5c90-601c-4730-8c0c-0c1b27fb1a94", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ecdd79-6355-4e12-abb5-6fe3f5eda94f", "sighting_of_ref": "indicator--ea5f350d-688f-413b-87ef-627e3fe56fcd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64b182e-8431-4b5a-8a02-042301a0da50", "sighting_of_ref": "indicator--a0a47fa2-a826-4754-9c18-2d9ff791ff34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59eb1db-e764-440c-9a55-de87410e5584", "sighting_of_ref": "indicator--4e9f7a6d-b90b-4f16-a069-4a2c84d382b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb4998-8bf5-4236-b9f4-7476577276e5", "sighting_of_ref": "indicator--17aea85a-6689-41a8-a602-9d86982865b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d44c46f-0cb2-48a1-9988-36dcee87a9d3", "sighting_of_ref": "indicator--0844c466-bd54-45a0-bafb-fe4287fa2f02", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0b8a6c-d31f-49d5-ab00-8474a04f9d2f", "sighting_of_ref": "indicator--b071e028-1dac-4d3b-8be6-d5dc5ad6fc44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12516a2-feeb-471f-8ddb-daaf8c1a62c9", "sighting_of_ref": "indicator--7c77658a-79d9-4a76-b2b5-ba2c74ff2bf7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c8c112-ec05-4c8e-a52f-9368572270c2", "sighting_of_ref": "indicator--e840446d-4711-4a8a-9ff4-8d7ddca7f464", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7657e099-204f-4d9a-9655-8b0c69a2cf85", "sighting_of_ref": "indicator--305b004a-cca9-4e5a-8430-dabbd3bcc7a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84428f75-8261-4b3c-9885-212e05ca40b6", "sighting_of_ref": "indicator--b1a1790b-017a-4580-a2df-4bc7cdb762b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6315a60e-24dc-4953-9c3e-f688a42b2cfe", "sighting_of_ref": "indicator--9475c56e-ef3f-4494-a5c0-9726ab59cd06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb20df3-252f-4744-8b29-2c6017e1fb4b", "sighting_of_ref": "indicator--e69e5457-7223-45bb-8368-bd21020939de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80732653-7ad5-4444-b92d-dc9dbb97886b", "sighting_of_ref": "indicator--68f37b52-43de-4441-a206-e7c7c8385a4e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b1ec06-77b3-4243-8b07-bfbf0426ce5b", "sighting_of_ref": "indicator--ee6233c9-521c-403a-9874-350025a233d5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba91723-eac2-4cda-9db5-8bb26009bd84", "sighting_of_ref": "indicator--9e7ce598-7ee2-4c00-a60d-8dd5555c8257", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0f3914-0fc3-4eab-b263-d32fa65f8dd7", "sighting_of_ref": "indicator--70484c8c-a9ce-426f-b29f-10ca5b8dbc25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a71c0-3a50-4658-9267-cc4f2d394b58", "sighting_of_ref": "indicator--f7edb92e-3755-460f-810a-c574bae74950", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd3d59e-39d2-48fd-bb85-3393e329eadb", "sighting_of_ref": "indicator--30e9a648-9567-483e-bc19-e141a76fd0c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6223b4e-e9ab-474a-b497-c83b1a345aac", "sighting_of_ref": "indicator--99add0ff-f198-4b66-a0e5-bbbb13ac5e0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd71fac7-69e7-46b4-b635-861cec35df08", "sighting_of_ref": "indicator--cfcaf1ce-2cd7-442e-8cd9-1f31bef4dd86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba2c0d6-af75-4780-af41-93b39ddf843e", "sighting_of_ref": "indicator--df09dcf0-d95c-4d2a-8c0d-1fe20dc6e270", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f53078-b848-4f56-a0b6-66a1b8fd4c04", "sighting_of_ref": "indicator--38ebbac0-99e2-40c6-ab9f-162656ad5215", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce34a80-923b-43b6-94f3-3741f7c8af4a", "sighting_of_ref": "indicator--04e05896-1551-4ebd-8e43-034dda6348a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de4cdf-c177-4553-a6d3-8143302fad8f", "sighting_of_ref": "indicator--fdd49732-f062-49e7-a3e5-9baaa11519fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d658f5-fba8-49f8-b45b-1fc5fb0957f8", "sighting_of_ref": "indicator--333d7b24-1144-49fb-9b99-1a34c74b0ea6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4e863-8b4f-4424-8e0a-cedf0cc7d895", "sighting_of_ref": "indicator--4b88d944-be22-45e1-a538-2673e25f8c42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fd75ba-8b70-48b1-89b1-0b87a5ff5f3d", "sighting_of_ref": "indicator--449da0e1-b9e0-40d9-b2d9-1a8d24302c0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5c1208-2f2b-4fb0-8e0f-45e17a6d697e", "sighting_of_ref": "indicator--9073421f-d8f6-4aee-b2cb-ef8acc24d207", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1240209d-16d6-43aa-9956-bd82c93d2e7d", "sighting_of_ref": "indicator--fd7086e9-2420-41fd-adb4-2cc52e53026e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ac6c4c-8b67-4326-826d-d089bcbffb79", "sighting_of_ref": "indicator--ca11cd8d-167b-494a-aec9-0568de73399b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f217ef39-18f7-44db-9f21-9b1970fa0001", "sighting_of_ref": "indicator--ca11cd8d-167b-494a-aec9-0568de73399b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9196244b-2606-4ba9-8678-c28b1523955c", "sighting_of_ref": "indicator--ca11cd8d-167b-494a-aec9-0568de73399b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690f6bc3-a0b9-40d6-8368-cbef7c57d4bf", "sighting_of_ref": "indicator--4fd44fa1-fe2f-4d7b-9459-cde4180af54c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8439a71-4261-4067-8827-f65971d19a40", "sighting_of_ref": "indicator--d38000f1-3225-4cb0-9c71-bb932c7c9f44", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b236938-2cd4-4032-8e84-f910d56158bd", "sighting_of_ref": "indicator--3a3896f2-1769-41c4-a744-b28da15f08d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afcf76a-5a9c-40ca-ac29-695062df664f", "sighting_of_ref": "indicator--917abd7b-c0f1-487b-a3cb-d59bf73b65c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e6b0e4-f047-4fbd-8610-c65d650a2e69", "sighting_of_ref": "indicator--ed8fb800-f3d5-4149-ae21-29414cc63fcf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b500a9d-ae16-4e38-8691-8832849ce633", "sighting_of_ref": "indicator--54542fc4-152b-4fd0-ad79-e03a6b79be37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c05886c-0591-41b5-993d-8f5974638536", "sighting_of_ref": "indicator--fbd49c17-0a6a-4abe-8627-146510c012e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b4a2c7-33d9-4371-8a6d-5cceed7ad215", "sighting_of_ref": "indicator--fbd49c17-0a6a-4abe-8627-146510c012e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3b563c-9ea2-4be2-9a35-d124a25d0615", "sighting_of_ref": "indicator--fbd49c17-0a6a-4abe-8627-146510c012e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97db3def-1543-4bc6-9d03-1cc394073eb4", "sighting_of_ref": "indicator--fdf65c9c-8e00-4359-8ef0-1e11b761de6b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acf96a1-7faf-4b3b-98bb-e06d9bf3cc9f", "sighting_of_ref": "indicator--2cafc7c3-4d35-413b-a04e-a0546124e935", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fff330c-91bc-41be-ae56-bf8e9ba75e95", "sighting_of_ref": "indicator--2fc8fece-cb92-4732-9447-7fa4ab6a2884", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009160d3-952d-45d0-b480-88f4b38f7e0b", "sighting_of_ref": "indicator--f97c7bdd-f9c5-4994-984a-2f3b999236f4", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5f377f-f67c-4ae4-b0f5-1a091af13d99", "sighting_of_ref": "indicator--280c0b68-9b3a-4d4d-8d74-7ffe2f75e3c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687f456b-a14e-4e85-8379-f6673ebb82f2", "sighting_of_ref": "indicator--280c0b68-9b3a-4d4d-8d74-7ffe2f75e3c0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8138e86a-9d37-44c1-937c-71e1a4fca534", "sighting_of_ref": "indicator--8717c67b-49cb-41cd-9ef6-1b390983f346", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690ed08f-fad5-4b00-b621-b516cce8d9c9", "sighting_of_ref": "indicator--8717c67b-49cb-41cd-9ef6-1b390983f346", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef297d4b-14e0-4e8b-b7b8-32d17c97c51b", "sighting_of_ref": "indicator--2e5f42e9-e2a1-407e-9981-1c1d8f25c7e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fd78ce-f4c7-4e31-b895-c09334af5115", "sighting_of_ref": "indicator--2e5f42e9-e2a1-407e-9981-1c1d8f25c7e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e954c46c-7deb-444c-90d9-56252acc600d", "sighting_of_ref": "indicator--2e5f42e9-e2a1-407e-9981-1c1d8f25c7e7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993fc9f3-2748-4040-ad70-70dfbda06174", "sighting_of_ref": "indicator--d0c1d431-18b0-4633-94d9-6e1b3685bca4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54d3424-8021-40e5-9a45-cf1405a93bc6", "sighting_of_ref": "indicator--49ccfd09-966a-4830-953f-d9fbd7305a26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3db65b9-6168-4e6c-9f1d-56197f21dca4", "sighting_of_ref": "indicator--eb0e4ad2-7284-4b1e-b579-b5bc12ce50ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4681d9c-ab0c-470a-bee7-7f2a21cfc4d5", "sighting_of_ref": "indicator--3e868c98-1824-4626-b1fe-1b32c673792f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71a7a81-6b94-4071-9fb0-1291a4845fcc", "sighting_of_ref": "indicator--3e868c98-1824-4626-b1fe-1b32c673792f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fb4599-fdde-44bf-b8d3-7c8233aa4dcb", "sighting_of_ref": "indicator--9cb86b8e-06e2-48ff-8ac6-3366b9f4436b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05b8616-130c-4f1d-8354-f4835239518d", "sighting_of_ref": "indicator--b2a57e83-c4b9-4140-9f1d-db1e17b9eace", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c99a212-b6fa-4d5a-a5c2-98b6ed61cd1a", "sighting_of_ref": "indicator--8fb5ee10-16c5-4888-86ba-2505c0be232c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72fb02c-603c-43f4-a451-0c36ebfb6563", "sighting_of_ref": "indicator--db4b46b4-7433-463f-b55c-069cfbdc675f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa04964-18ba-48e4-a0f8-8e3f9344f441", "sighting_of_ref": "indicator--87e2f73c-bb87-42df-af98-85ae70704994", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf554119-cdd6-4fc9-981b-340b6999c7f5", "sighting_of_ref": "indicator--fb7826ca-3166-42b6-a37d-d89d5f2e3542", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e993e85-d009-44ae-82ca-5b2ee23b6c48", "sighting_of_ref": "indicator--47e3a4f5-d386-4ac3-8e15-d1e34346081b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bd02de-6cb1-41c5-9f26-b8f8cf872ab4", "sighting_of_ref": "indicator--625b9ee8-2f87-4e08-bda8-a95c319808e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbf9a6f-8842-4710-aa32-8c5345216c01", "sighting_of_ref": "indicator--540a7c4d-8564-44eb-8b92-4a814d4f147a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d5718-5e72-4788-8a26-46b1c5824a02", "sighting_of_ref": "indicator--540a7c4d-8564-44eb-8b92-4a814d4f147a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691094ae-22a7-4bd0-aeff-054dc023a3c4", "sighting_of_ref": "indicator--540a7c4d-8564-44eb-8b92-4a814d4f147a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682fc15b-93c1-448d-bb4e-8b35a50c0c53", "sighting_of_ref": "indicator--a2393c87-0568-41ae-b4db-e1abe0b02ff3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bba40ca-1230-4980-94da-956e48f3b278", "sighting_of_ref": "indicator--a2393c87-0568-41ae-b4db-e1abe0b02ff3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4246c369-1a48-4470-bd24-8bbc5ebc201e", "sighting_of_ref": "indicator--13eb3f78-7f11-4189-88b4-4a4e934ac364", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb888f0-aa0c-402a-92a9-dc573176ca14", "sighting_of_ref": "indicator--17aab756-57d8-4f22-88eb-d86304523b43", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a77d79b-8396-4ad6-9e9d-415c9519bb0c", "sighting_of_ref": "indicator--8003da03-9b30-470b-bd90-43d7e5bf33b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071cc65f-fd18-4204-b99b-62ab339fc92d", "sighting_of_ref": "indicator--c96c33b5-9d05-49ea-ae37-a2354243a315", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d4ce51-562b-4633-9eb7-87751073c9c3", "sighting_of_ref": "indicator--49b86930-0642-4671-ba32-d3170f3d3a31", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f182d8bf-80d7-49af-9628-987b29b24e0f", "sighting_of_ref": "indicator--8a93f119-b551-4a06-8fb6-00041371f353", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85767452-27e9-4fac-9cde-8eed1cf08343", "sighting_of_ref": "indicator--8a93f119-b551-4a06-8fb6-00041371f353", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd256a19-46e2-47bf-a6e7-8483766cf0ca", "sighting_of_ref": "indicator--b0c09d44-fe34-4126-bf54-aa27f09142bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cab7706-5ad0-4382-8bfd-b1688fe35bf5", "sighting_of_ref": "indicator--9b1deb86-f2b4-4d08-9e8e-2d76e01c9b2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd30610-e7c5-473f-b5d9-0a057c3874c8", "sighting_of_ref": "indicator--45b1b857-e809-4c1c-b71e-1787ebf9cf62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81138c23-eaba-47ad-9c07-71051ac8549f", "sighting_of_ref": "indicator--a3b876ba-f337-4ca2-ab97-c5ddb28f750b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be45f2b8-ce31-45e7-afda-9ce9d0ed805c", "sighting_of_ref": "indicator--c530d6da-f82d-4cb6-9bf5-86b396558c33", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbaed81-96ef-420a-b807-70756595bb5c", "sighting_of_ref": "indicator--2e07efb9-99ee-4caa-a0af-86d1d8b5e3c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70505b83-a0b7-407a-8fda-9b1dc049bef0", "sighting_of_ref": "indicator--6cab28e2-d7d6-4c94-ad98-57989d6f88eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb94dcd-7ec4-41a0-b712-dce9264cfe5d", "sighting_of_ref": "indicator--25922ecf-1073-47b1-bf9c-1f6e1accc0cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a572bbb6-fdc2-4f90-aced-2101d3b5f755", "sighting_of_ref": "indicator--1b5077f1-d482-42b8-9e5c-0f564ad9fdb5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d4cd74-77f3-44cf-a473-9e01cf48432f", "sighting_of_ref": "indicator--d4ff982e-a516-4f6d-9d60-fd693b95760d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8064880-0cda-4aff-9ba0-5d0aa5766ac7", "sighting_of_ref": "indicator--f29b3b0a-a0ce-43b4-b557-8565bd4f7dab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062c2edb-b5f6-4214-8dee-1b7f8e7ecd7f", "sighting_of_ref": "indicator--482a5b85-5e43-4511-a566-ab088796177f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab0b03e-20ef-491c-ac51-f8414fb1f333", "sighting_of_ref": "indicator--7835f6f3-63b1-4e48-a4b2-0634fc432ae5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a31fe1c-22c4-4a39-8459-8ea4bbf5efd7", "sighting_of_ref": "indicator--7835f6f3-63b1-4e48-a4b2-0634fc432ae5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21ac53f-4253-42bb-a20f-d5c8c66fb74a", "sighting_of_ref": "indicator--d0582941-f4dc-4275-a6ab-522285ddc378", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ef0d6b-98ca-4a41-9dbb-5ec64d20be67", "sighting_of_ref": "indicator--5386fe49-2763-41a4-854a-7e2476d16941", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497a490f-cacb-4851-b9dc-06f6f07cbb27", "sighting_of_ref": "indicator--5386fe49-2763-41a4-854a-7e2476d16941", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650c0bca-8e2b-4be2-b646-06ed5304914e", "sighting_of_ref": "indicator--5386fe49-2763-41a4-854a-7e2476d16941", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debfd620-3964-41b6-80eb-0803d19f832d", "sighting_of_ref": "indicator--5a837a62-27a3-4a7c-bfc0-a09aadbdb907", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93af0263-b091-4111-81b3-71e4ecce5580", "sighting_of_ref": "indicator--8741862d-1537-4113-90d1-41b26d33bf8d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5108ee-1544-46fb-8647-cc569223170d", "sighting_of_ref": "indicator--8741862d-1537-4113-90d1-41b26d33bf8d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1006bb07-a16c-496e-8153-98e0bba64cf0", "sighting_of_ref": "indicator--6f955174-3c9e-4cf9-b937-d08938edb6fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3cf7f7-da9b-4d4f-ba3f-1675c4fa6e5a", "sighting_of_ref": "indicator--6f955174-3c9e-4cf9-b937-d08938edb6fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf08c31-cb7b-4db4-aa3d-d8ab6e4f97f3", "sighting_of_ref": "indicator--8369991a-beca-44e7-abdb-6c2c188f142b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80943ed-4c38-4a13-b2cd-62f3c287f76c", "sighting_of_ref": "indicator--eaa73352-a618-428b-9e15-d57a989f18bb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5539698-3106-4af7-9a0d-18ebe005b326", "sighting_of_ref": "indicator--2f4d8109-8f46-4998-adf0-3f29881558f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e51dbf-1448-44bb-81bf-503e92efce9b", "sighting_of_ref": "indicator--9e499c06-739a-455f-9bad-12b4322cb066", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1633d3f-58ac-495c-9263-87d7f968fbe7", "sighting_of_ref": "indicator--f5f72d3d-8a2e-4902-aa00-f052817b1d7b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2b0964-50a9-4ee2-b738-f1cc4944d092", "sighting_of_ref": "indicator--8d63b715-ffa9-4ad9-96ab-790a420357d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6447c62-540e-4733-86c6-f64a7b8f203e", "sighting_of_ref": "indicator--8d63b715-ffa9-4ad9-96ab-790a420357d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a966024c-c3af-4f4d-bc05-49a3b1e1d41c", "sighting_of_ref": "indicator--c36276d1-f84a-427f-9a79-2666da398c90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4a7cbe-bc73-41a4-be80-95630f9e05de", "sighting_of_ref": "indicator--513b090e-d28a-45b0-a330-56fe58520687", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee43691-6262-4546-8448-42c707279cda", "sighting_of_ref": "indicator--513b090e-d28a-45b0-a330-56fe58520687", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0b4f11-eb0d-4f50-9461-77823070ec9d", "sighting_of_ref": "indicator--220d65b3-73a1-4b37-bda9-803ea19b2239", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf8b212-0a0f-40a1-91ed-a7a81f6c498f", "sighting_of_ref": "indicator--220d65b3-73a1-4b37-bda9-803ea19b2239", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41340385-a143-4af3-a13e-d96a2bb44722", "sighting_of_ref": "indicator--b4a9d4a3-ee22-4d51-b777-fa73e53ca730", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df60373f-ca81-4551-9ce5-f39f8245298e", "sighting_of_ref": "indicator--b4a9d4a3-ee22-4d51-b777-fa73e53ca730", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21da45d-29cd-434a-90fc-0cea41de3ae5", "sighting_of_ref": "indicator--11f15ca5-3c15-4c20-b64b-c2a424dc542a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64675e43-424f-407f-aec4-f264dca9c5bd", "sighting_of_ref": "indicator--2e4d2deb-0968-4c25-8bb6-c3128b8622c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa13787-ed8f-47e2-a9e9-1825464b3904", "sighting_of_ref": "indicator--abab4a2e-e77c-45f2-bd86-2f39b62e4b85", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c5fa86-450f-434a-bce8-032bbb1ca751", "sighting_of_ref": "indicator--abab4a2e-e77c-45f2-bd86-2f39b62e4b85", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6820e2-a48d-4915-90fa-822e5f3a8f75", "sighting_of_ref": "indicator--b47ca686-1a7b-4794-99d4-368871de5035", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ab61f4-7022-469f-842e-a6960b05e012", "sighting_of_ref": "indicator--9cf5295d-510b-4bed-a328-b35de60c1638", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e65acc-930f-4df0-930e-59ab55e55d1f", "sighting_of_ref": "indicator--9cf5295d-510b-4bed-a328-b35de60c1638", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42c4703-47ee-4bda-860e-701afb76f723", "sighting_of_ref": "indicator--c2356c05-8899-47c4-841b-3edb40c28a6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28e76b3-e34a-462d-85b0-ae92d6ee7629", "sighting_of_ref": "indicator--67f9a9b6-b9f6-4eeb-91f4-97cab80bdf4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fce985a-90c6-46e2-ba84-467014eddc06", "sighting_of_ref": "indicator--7b902188-a4a2-4aa6-be59-7fe3dab5961d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b852b34-ad34-44dc-94dc-91cb606975e2", "sighting_of_ref": "indicator--8635f14b-7c85-447b-a807-28c05803e443", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b5b80e-b15c-4fa1-a2fc-dae861d05810", "sighting_of_ref": "indicator--5eb2c7b3-c217-43bc-9c79-26a51216e28e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d5ce30-b0b2-4b3d-b745-9d26ff4a426b", "sighting_of_ref": "indicator--53eb36e7-c637-4410-b118-126129499ca0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25b16c5-3571-499a-a10d-36cb0bf4c9aa", "sighting_of_ref": "indicator--3dd2fe20-add9-46e6-a377-5dda20fc4a4d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d592ac1-b1be-4396-85f0-c18d5ebcc932", "sighting_of_ref": "indicator--3dd2fe20-add9-46e6-a377-5dda20fc4a4d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded2d989-36a5-42de-afc6-7e3907175452", "sighting_of_ref": "indicator--5a07c52d-f0c2-405f-88ad-cdc8dc4a3219", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3011d874-f978-47a5-ae03-82a2f51ca59f", "sighting_of_ref": "indicator--de629029-7fa4-4079-b5bd-2218f68a8c38", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350663ff-4daa-40bb-a72c-5f7bf77ce9f4", "sighting_of_ref": "indicator--37fb13a7-46be-4ae0-97af-5b848246ef9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ea7dd9-e10c-4972-8bda-71bafd4ad38e", "sighting_of_ref": "indicator--37fb13a7-46be-4ae0-97af-5b848246ef9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4383102-306c-4351-abdc-28806b84819e", "sighting_of_ref": "indicator--14b96965-dde1-42f6-8d41-85946e3593df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa217df-676c-4f4a-8639-802e561ed496", "sighting_of_ref": "indicator--14b96965-dde1-42f6-8d41-85946e3593df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58697815-54db-4b21-b9b4-65a157dcad05", "sighting_of_ref": "indicator--c2c93532-977d-43be-b701-04d88cbabb38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ef7acc-9123-42ca-82f5-91b9bd27ed88", "sighting_of_ref": "indicator--5e480c62-07b4-4000-8950-8c37083c1bd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ecda52-7037-4ef7-9d38-c46bf4e13ee3", "sighting_of_ref": "indicator--5d394b23-fefe-41f1-8580-27999cd71242", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcbc24f-56be-459e-8e9b-63896cb38c17", "sighting_of_ref": "indicator--25072600-ce53-4222-b1f5-3ba0c618ece2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05801759-b0d5-4337-a931-5e2d89e5df43", "sighting_of_ref": "indicator--02c0165d-bdc7-48c7-85e0-522c52c269af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f4aef2-1fe8-46ed-b42e-fe37942eb699", "sighting_of_ref": "indicator--02d142e4-b21f-4d7b-b339-5a128417bff2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce55550-d735-4fc6-9400-bf45c74fb896", "sighting_of_ref": "indicator--d700f3a8-c30a-4bbf-a0a9-e8122720d7b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f925985f-8613-45a5-a111-37cc05a0db36", "sighting_of_ref": "indicator--d700f3a8-c30a-4bbf-a0a9-e8122720d7b7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcdd16b-0b78-4691-8517-ad41d9fbadd6", "sighting_of_ref": "indicator--d700f3a8-c30a-4bbf-a0a9-e8122720d7b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c6bc67-ae9d-4d5e-8086-419992fdf760", "sighting_of_ref": "indicator--53e7a160-f7ba-4de7-83b4-0772b5b3f678", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60dfa43-6c1a-481d-86fa-d21402568ad3", "sighting_of_ref": "indicator--53e7a160-f7ba-4de7-83b4-0772b5b3f678", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad501c1d-a54b-4526-a5a2-c22c67256b54", "sighting_of_ref": "indicator--9b135555-bcd4-4acf-b208-36e8cbcbce25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5358aee-c5a7-4444-a461-4ff10e94c5f6", "sighting_of_ref": "indicator--9b135555-bcd4-4acf-b208-36e8cbcbce25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b575996-f80f-4af2-8d75-e37c0aba57e2", "sighting_of_ref": "indicator--734a3536-230c-4e32-b6e3-555b3be99c65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7fd05d-08d2-4d7e-8ede-1962c5f10b3e", "sighting_of_ref": "indicator--ad929492-2c2a-43ea-b123-f2cf8c7cbce2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3b574d-1ef7-4b3e-86d1-470163f5e3ab", "sighting_of_ref": "indicator--ad929492-2c2a-43ea-b123-f2cf8c7cbce2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b7992-d9ee-4674-9339-b633cc3d4e1c", "sighting_of_ref": "indicator--81f81393-22ab-406d-a1ee-aef49a2638c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7664c9-1a22-48d7-905e-3a8d585fa212", "sighting_of_ref": "indicator--716299c7-08ad-465b-8a13-e47facc5b83a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6c68df-7a74-49bb-979f-f4f2e9ea1602", "sighting_of_ref": "indicator--b419e992-b274-4889-b5e6-a11d69fa3c2d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3093df-7068-4b8b-9ff8-5863f7d98b40", "sighting_of_ref": "indicator--b419e992-b274-4889-b5e6-a11d69fa3c2d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0913983f-29e4-4748-9b1f-82b12d05fcdc", "sighting_of_ref": "indicator--7c3f298b-b7cf-4ca1-9f28-2d787ae9a851", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c93dc70-a166-40e7-93ba-4d68997e5c82", "sighting_of_ref": "indicator--7c3f298b-b7cf-4ca1-9f28-2d787ae9a851", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0727343f-05dc-45ec-9ca2-885ee545e075", "sighting_of_ref": "indicator--1ddafc39-37fb-4387-b02b-597c5326a708", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f803dd-645e-4a37-99e0-26b6e475c34c", "sighting_of_ref": "indicator--f92fd1e2-f353-4b3a-90ed-fae1bc7b558d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ee1846-7d3e-4d7b-b030-da686f9e2c1e", "sighting_of_ref": "indicator--4f5dc57c-42df-49b2-acfc-19577421df12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fae632-d2ea-473b-853c-664586b7f622", "sighting_of_ref": "indicator--64bd001a-6da3-4107-a847-0501a96152ff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ddc8d2-34c0-42f4-a5af-95bd835e3483", "sighting_of_ref": "indicator--c4311864-8475-491f-bc86-f46fff99519f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be3fc20-4598-4b81-9011-2df533a20b5a", "sighting_of_ref": "indicator--d21e0b3c-cdef-46a7-958b-5d3d5d2cfd69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9b51aa-12ee-4620-935e-c72a0108c4ab", "sighting_of_ref": "indicator--6e18d751-e94a-4407-ac7d-00c13d374581", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66390454-c6ed-4fd1-9aba-e384e040fb6b", "sighting_of_ref": "indicator--ac68013d-b0c9-418d-aab0-36e8062d2603", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20d8a39-739c-406b-9f7f-97ee788c1670", "sighting_of_ref": "indicator--ac68013d-b0c9-418d-aab0-36e8062d2603", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9dac2e-2b1b-4246-8daf-15fea6a67f76", "sighting_of_ref": "indicator--2e57c4d4-cd55-492a-b5b7-975c1f308791", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21721bfd-25a3-4ef4-8fb8-dbe3161a4b39", "sighting_of_ref": "indicator--b91e55e9-ef01-4ae3-8ee3-1a635eb0a9f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb78ced-4f4c-4e37-a42f-09b5058b9706", "sighting_of_ref": "indicator--b91e55e9-ef01-4ae3-8ee3-1a635eb0a9f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bd3e2a-9330-4c82-8653-fa0587164e04", "sighting_of_ref": "indicator--24954c21-17e9-4266-be07-c6b187b5fd16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9eaad6b-7e80-4723-8929-065a909263ad", "sighting_of_ref": "indicator--5150283f-17cf-4e5e-a834-ef24a3a38a63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d08ce5-85d0-4131-937d-5cea9a66b02e", "sighting_of_ref": "indicator--403ace91-0b60-4021-9feb-e102ca5c95be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa69c945-9f94-46c4-afba-105fe0b520f4", "sighting_of_ref": "indicator--403ace91-0b60-4021-9feb-e102ca5c95be", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cf9a21-e2a6-4350-a19d-9e62cd6018cb", "sighting_of_ref": "indicator--403ace91-0b60-4021-9feb-e102ca5c95be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b511e156-ee83-40d7-a42c-fdb71cdcc2bb", "sighting_of_ref": "indicator--a314ca5c-7235-40e8-8b1e-29a6e49d2c09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81ffa52-7464-412c-a315-939ec5b02abd", "sighting_of_ref": "indicator--d4f1f39f-5477-4f3d-b6b0-1e090d38abd1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa92554-4d70-4337-a720-389aeca3cb6d", "sighting_of_ref": "indicator--d4f1f39f-5477-4f3d-b6b0-1e090d38abd1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a64200-2f1e-4b69-bede-fe62bc258edf", "sighting_of_ref": "indicator--d4f1f39f-5477-4f3d-b6b0-1e090d38abd1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af45b31-e261-40c7-8126-ba1dd1136909", "sighting_of_ref": "indicator--982abc8c-a1a1-4096-893c-8276011d8ffa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8c573e-6321-4259-bdeb-b167b7ab3da7", "sighting_of_ref": "indicator--b7164c53-3cf4-4cdd-8019-ab25a1cc1425", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a384f7e-9176-45d4-9672-4b43175c843e", "sighting_of_ref": "indicator--8784c267-a04e-4a5a-9224-7accb888bdc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc2e870-c9b9-488b-8213-8e79213d6a0a", "sighting_of_ref": "indicator--04505fdf-5af0-4529-a6f8-012a245f8e1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed075c0-f33d-4f74-871a-ad56e7c42f3e", "sighting_of_ref": "indicator--9f900fb8-388c-425a-ba45-a8eae591fc91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6c4595-b318-4e9d-9adc-a4b57cb84742", "sighting_of_ref": "indicator--005eda6b-2e57-443c-ac63-f68c60d03431", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751c9317-b41b-4950-976a-4b00509d971b", "sighting_of_ref": "indicator--2c4e6d44-14be-4843-b78a-1aa256b0a20c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c635ceb-96c0-4632-82a9-c6b1957b2b2c", "sighting_of_ref": "indicator--2c4e6d44-14be-4843-b78a-1aa256b0a20c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42483490-5de8-439b-a89d-40133a63dd30", "sighting_of_ref": "indicator--b4c36c54-b4ae-49eb-955e-98647594c4aa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b14b8e-b4c6-45d6-8b39-a4f05784250f", "sighting_of_ref": "indicator--b4c36c54-b4ae-49eb-955e-98647594c4aa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6127fdf5-c4ed-45e8-b21a-09d1a554fd1e", "sighting_of_ref": "indicator--c47766e6-0192-4fbb-8388-606749a19248", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b532817-cc2f-4149-91a7-3b2f44c0a513", "sighting_of_ref": "indicator--c47766e6-0192-4fbb-8388-606749a19248", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdab364-8a68-4bbf-8630-dbc514737349", "sighting_of_ref": "indicator--c6b99cf2-c409-4fa7-85e0-b42c37ee6785", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8bac51-99c7-4da5-b06d-3597565f8ed5", "sighting_of_ref": "indicator--2f1ccc37-8c76-46de-a7ef-840ead5dd82b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d4da79-6f30-433e-a271-50bc5a483c5a", "sighting_of_ref": "indicator--2b17deb9-470e-4166-ac45-c69bd9900c7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243e23a3-f4dc-4bc7-8033-e597095e9d0c", "sighting_of_ref": "indicator--79d2a6ab-0f1c-41e7-a396-30c57397220c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f32c86a-e08f-481c-a550-30f97418424a", "sighting_of_ref": "indicator--f8f73d0f-1571-48ea-afdd-cd8f7e79f38c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635bb7a6-01b1-42b6-a50c-b9a1cbe08167", "sighting_of_ref": "indicator--eb01c051-878b-4b09-8c06-c8a748b31e62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd6757c-560b-4358-884d-e26a99101cb3", "sighting_of_ref": "indicator--eb01c051-878b-4b09-8c06-c8a748b31e62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2237bc6a-814a-4122-8cbb-7ff59fe37354", "sighting_of_ref": "indicator--dfed305f-02bd-46d1-a973-555ef0ac48b7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f02f5a9-229b-4d25-bdf1-25601a2c5006", "sighting_of_ref": "indicator--150f5572-3c59-41b0-9c67-57e7a84c4e4d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9801b44-4dea-430d-bce2-ea418fd27fdc", "sighting_of_ref": "indicator--da5a4240-de69-413f-9a2d-275015322955", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568a7780-d764-4959-ad2d-e847564b7cde", "sighting_of_ref": "indicator--da5a4240-de69-413f-9a2d-275015322955", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17380f9c-f917-4ef8-b797-6ee8a233cf2d", "sighting_of_ref": "indicator--35c5d703-46a3-493d-b5d7-fcad3a6fded6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020fe141-5972-491f-91f5-ff6be9b77357", "sighting_of_ref": "indicator--b891663a-4aa7-44cd-8c36-031078be6e66", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7e3891-e16c-4d75-8615-600d7ca40d24", "sighting_of_ref": "indicator--a91b95bd-f9c2-4b8b-800e-827b8eb2aaa9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b70a7a-c6fe-41e9-8a93-714a3458131f", "sighting_of_ref": "indicator--8744fb7d-0f12-43f2-98e5-3705a8622269", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f01081-1167-4b9a-9e55-bcf9fb0c9a14", "sighting_of_ref": "indicator--062595d8-e043-430c-a582-b4536770d89d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15768ef0-985a-434d-ba7e-0f989fc259f4", "sighting_of_ref": "indicator--062595d8-e043-430c-a582-b4536770d89d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705ee709-1440-46a3-b483-6c5cc0627b36", "sighting_of_ref": "indicator--062595d8-e043-430c-a582-b4536770d89d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bf8ae3-f3d2-4b85-a72e-30a7a3417c25", "sighting_of_ref": "indicator--71ab360d-8c05-49d3-a51a-b6c0791ff39f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a0bd94-1080-4621-8395-d4f69a2c0172", "sighting_of_ref": "indicator--6399d041-0c13-4c9b-b1db-68c7505ad1b2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa4b05b-b9e2-4c0e-b48c-585e2b5a1dac", "sighting_of_ref": "indicator--6399d041-0c13-4c9b-b1db-68c7505ad1b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc4c284-f1a2-4b06-805d-7b46703aed96", "sighting_of_ref": "indicator--1d65a1ea-9973-40da-b2bf-d8e32fa68487", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5614d82-1640-4528-8bba-59efb534b9d3", "sighting_of_ref": "indicator--e63e2709-c79c-4516-8909-0632566317b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d680e2e-41df-4b88-b793-c2955df40b54", "sighting_of_ref": "indicator--922db5e2-ebd7-4200-a6a5-25256a0ddc61", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dcd82e-f359-4af5-be7c-9fae4b9d6f40", "sighting_of_ref": "indicator--922db5e2-ebd7-4200-a6a5-25256a0ddc61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4475ca-7259-4a50-b4a8-8b1f7ce73bca", "sighting_of_ref": "indicator--dbc6bded-d679-466a-8fc5-8054085412cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdf311e-7ff1-48db-a6f2-f74688265a87", "sighting_of_ref": "indicator--dbc6bded-d679-466a-8fc5-8054085412cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7120e9-656f-4367-b190-7df3cf306b30", "sighting_of_ref": "indicator--7611d23c-2a58-4950-8d1e-1a3a0a064ec2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14235105-e908-4997-8ff6-5a5fcba2e4eb", "sighting_of_ref": "indicator--7611d23c-2a58-4950-8d1e-1a3a0a064ec2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8646fbfe-e3d0-42ba-aba0-5efab43f63fc", "sighting_of_ref": "indicator--3a893597-1a4e-4245-99b9-b5b59ce38656", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e778c9f5-f261-4e9b-9175-dd75f90bee58", "sighting_of_ref": "indicator--4e0fb628-2e22-497b-a2f5-bb1637d368a5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479520cb-d5d6-4a65-aa8c-ac457d9c4ce0", "sighting_of_ref": "indicator--4e0fb628-2e22-497b-a2f5-bb1637d368a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7faf8b-ad3b-4d48-a669-0c3f4a480b2a", "sighting_of_ref": "indicator--2a57fa4d-b3ff-4286-8413-cf7e7845539a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb849bc-bb82-4ca5-ad1d-20d51a20cadb", "sighting_of_ref": "indicator--0d3f9e3c-2b75-422a-a721-043df45addbd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2647a3-70a4-42b4-93a7-c34df9848f2a", "sighting_of_ref": "indicator--24639494-4ac7-4632-af6c-cec55db20412", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b625f1a-bd22-40f3-bb9a-78f285b59421", "sighting_of_ref": "indicator--24639494-4ac7-4632-af6c-cec55db20412", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2395cc-c415-4372-9185-5851237f6d70", "sighting_of_ref": "indicator--24639494-4ac7-4632-af6c-cec55db20412", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d450737-198b-4f9a-b53a-33089c933f55", "sighting_of_ref": "indicator--9539b171-b8e1-4820-a4b3-10125d0b48e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cbb419-8d70-4ba2-a033-d82ed4433fed", "sighting_of_ref": "indicator--646b3b73-67ac-41c4-803a-50891d32d427", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f3dc3d-b9bd-4cf2-869b-f3b7d2ecc2e8", "sighting_of_ref": "indicator--646b3b73-67ac-41c4-803a-50891d32d427", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fbb8b4-5c03-4bc2-806c-8d7764bab795", "sighting_of_ref": "indicator--9dfa15cf-bbd7-4cb4-aac9-fac472f7a31e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be5eb94-a659-43a7-975c-71cd1deb9afc", "sighting_of_ref": "indicator--f903443a-949d-4a0b-827f-e8c4d56d8384", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e92593a-a81d-42fb-942d-6071c7072d47", "sighting_of_ref": "indicator--f903443a-949d-4a0b-827f-e8c4d56d8384", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fcee46-0669-44d6-8d6c-20e1a0f8ff80", "sighting_of_ref": "indicator--c039c073-ce44-4fd9-bb66-c31e3dda1d65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db75226-9fcc-44b2-9fc4-a014bb73e418", "sighting_of_ref": "indicator--6af458b1-e47b-4a93-9826-a8186e694f8a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb536b2-f034-47d5-bd32-f0816b4eb287", "sighting_of_ref": "indicator--00e59c66-8c4b-4528-921a-cc11cb234610", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf5332e-0b42-41f7-a411-cffe6bd98c30", "sighting_of_ref": "indicator--ac1e4c2f-b709-4f63-837c-f651c3966076", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff39e81-22c4-4da3-8439-f43b0cf860f1", "sighting_of_ref": "indicator--ac1e4c2f-b709-4f63-837c-f651c3966076", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aa41f7-2f49-477e-9b23-b67b26f296c9", "sighting_of_ref": "indicator--106c01a7-0836-42fc-bfa9-e53bb99128e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c47215c-7f08-4e5b-8690-bb65cb978aeb", "sighting_of_ref": "indicator--106c01a7-0836-42fc-bfa9-e53bb99128e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a2defc-7626-4828-82da-3df8b73c0a4c", "sighting_of_ref": "indicator--d33aabf5-e3b5-43d4-997f-59f1a3be13ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d04ce65-4391-4ec2-a7cc-dcd211ca3e2f", "sighting_of_ref": "indicator--eda5872e-fdc3-4d7e-bc2d-0d391c0793c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2b6bef-35d0-4824-8109-eefc00910ca4", "sighting_of_ref": "indicator--64b39cf7-e7ae-4067-8804-bcbdcf64d0ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3db570-c379-4f99-95e5-eb32d8e3dc52", "sighting_of_ref": "indicator--1113ade9-3af8-4de1-9d5b-b9febc16f85f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f0d59d-a0fc-4c4c-8694-57ae9b6dcb73", "sighting_of_ref": "indicator--6da0c423-e9fe-4615-9baa-f2a268346406", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b50c87-abef-4f48-9865-613ca91a3117", "sighting_of_ref": "indicator--02057009-3811-47f9-bd83-1969074abb46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed525dc-c942-4d4b-a2ce-172e41270553", "sighting_of_ref": "indicator--964a1663-e3e4-4461-af14-45200c953f64", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71982dc5-2ada-42cc-8cdb-bce0447e90a1", "sighting_of_ref": "indicator--f92b6cee-8688-475f-a8e4-a7e09cbe24cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1014b3-e7ba-4633-b049-bf95360994a5", "sighting_of_ref": "indicator--6fc8cd75-be15-4735-8675-d68800c78ca2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d9145a-4c54-4c5f-8585-f579ef011acb", "sighting_of_ref": "indicator--c756925e-dcca-4ec1-88b2-5f8a6acf4611", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f04de71-5acf-407b-8f88-a5f9d073b3d8", "sighting_of_ref": "indicator--5edd8083-8549-4d8c-817b-abc7b60a7db3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae376715-c023-497f-b48b-a0bb18289db4", "sighting_of_ref": "indicator--d9ed83ae-1e0d-4416-9261-8c8f8ecfe640", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb05b3e-4b18-4e15-ba7e-f80189e364f5", "sighting_of_ref": "indicator--d9ed83ae-1e0d-4416-9261-8c8f8ecfe640", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaa599a-eee9-4efb-979c-131a9b14c44d", "sighting_of_ref": "indicator--84ee8cd1-96e5-4f60-b1f1-8524afc3b00f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c6aa86-9b8d-4d83-897f-978ba9b2b74d", "sighting_of_ref": "indicator--75d27cef-1048-4dee-a879-8618d628ebcb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcca5d5-1172-4051-943b-404340df65a8", "sighting_of_ref": "indicator--31f658e2-b8ab-4d49-8d80-558edeb14c51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f5f2c9-76e2-452d-ada4-5ba66a20854e", "sighting_of_ref": "indicator--6671583f-c0cf-4bca-b546-27bf906b5a12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2dc463-05e5-4223-a752-687ec46015d7", "sighting_of_ref": "indicator--8c3bdcfc-f0f5-48fe-a7c8-1520d5851f35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af9690a-10f6-41da-9a46-a8c0bcaea7f1", "sighting_of_ref": "indicator--7acb3540-d489-473c-809c-6320b506a471", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab2329e-a410-4886-a299-d1de69a3a6d6", "sighting_of_ref": "indicator--63331faf-9123-49bc-a39f-7066c8922e3f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f6345d-42e7-41a3-ae66-c8ed5b9e7d26", "sighting_of_ref": "indicator--6cee6e71-cfa3-43cf-b7d4-94666acd42ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25b4d41-627e-4ae0-872e-837971bb25e4", "sighting_of_ref": "indicator--94198f51-0b47-49fa-99ab-96fde73e78c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa34ba5a-baf5-41b5-9b13-fc4d5ab1772d", "sighting_of_ref": "indicator--eb42338a-fbfc-49c1-a7b5-667d94f1dc08", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350395cd-de02-4ac8-b6c7-d1f25d9cf2f2", "sighting_of_ref": "indicator--56ca9280-7310-41c7-ab34-371eabf9c343", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d75fa5-4744-4382-af26-48dae2b76e23", "sighting_of_ref": "indicator--1be9d5c0-b90a-4a8e-b7f3-0149ea39cb63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87e9e17-8239-4e3d-b1c7-cd6088c5ab08", "sighting_of_ref": "indicator--cdc88505-cffd-405c-ac74-4975df3e8fae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ad5969-d1b0-4513-ac28-53df239762c6", "sighting_of_ref": "indicator--34d20b12-d168-479d-9e55-657aeeae7543", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d780cd5c-63b1-489c-9793-897bb32456aa", "sighting_of_ref": "indicator--34d20b12-d168-479d-9e55-657aeeae7543", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1267c20e-7387-4f02-ae23-c6464df3fe50", "sighting_of_ref": "indicator--34d20b12-d168-479d-9e55-657aeeae7543", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ce408f-690a-4d49-b6e8-86d065619533", "sighting_of_ref": "indicator--64925969-4611-4bd6-9218-023a680ae591", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45202063-765c-42fb-a0f4-d27b692f7a6b", "sighting_of_ref": "indicator--6e19f64d-41a2-4b39-989d-349f2b9e15ad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8770eb-e25e-4fbf-9881-20661a7d3672", "sighting_of_ref": "indicator--a9323d68-6f30-4c2a-8eef-50f54914ad1e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e02742c-cc28-4c9b-923f-bef3558e1fe1", "sighting_of_ref": "indicator--2f6c2930-2bc5-48c8-89f4-101329877dcf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baf4aa3-7fef-4fe2-be2d-e9a383ea892e", "sighting_of_ref": "indicator--ae40c381-e94a-42d6-a6b1-1f83c46e3055", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6203a5c5-282e-4956-b676-371a030f0857", "sighting_of_ref": "indicator--bd7a09cd-6623-4701-84b8-3a087aa7b1ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b343239e-5736-4d57-ad25-9c4e206b2caf", "sighting_of_ref": "indicator--d67b5d7d-2bc5-4053-b873-21710c84140a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8d0094-6a68-48b7-a261-a4e561e16957", "sighting_of_ref": "indicator--370768c4-b892-4cea-9c02-893c51d5f61c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679f08a9-6993-4698-b531-73e052f1050e", "sighting_of_ref": "indicator--781a6cbb-a828-4e1f-a683-30c109a37deb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c673e6-a283-47cd-9443-978ab6f11909", "sighting_of_ref": "indicator--d2dc31c2-81d0-4227-8e71-846a13f81e79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e4a79c-7d20-4ec0-b935-0c7c07fa5c5b", "sighting_of_ref": "indicator--d2dc31c2-81d0-4227-8e71-846a13f81e79", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cee5363-804a-48d7-9ed3-96631337bbbb", "sighting_of_ref": "indicator--3c151cb0-0125-44e0-9374-222e783ff4c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa0e6ea-c03c-445d-8b8d-64ca6e1a605e", "sighting_of_ref": "indicator--3c151cb0-0125-44e0-9374-222e783ff4c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3aa791-6ea3-4b91-b2bc-f2aa164f2442", "sighting_of_ref": "indicator--5e295a31-08eb-4480-9040-5500998d501b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2766155-0c0e-4740-a08a-1cbe3c7df1d4", "sighting_of_ref": "indicator--5e295a31-08eb-4480-9040-5500998d501b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a264755-e493-4ce4-8df4-8fbd7f6436fd", "sighting_of_ref": "indicator--a19e5892-edce-46f1-ae4d-66cbd548d6ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846e4795-e11b-4df3-9e32-eb672c3fa466", "sighting_of_ref": "indicator--8efd091b-b619-4003-836f-e8fe59d38212", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528e069e-59a1-411e-bd9f-23b0e583d48e", "sighting_of_ref": "indicator--8efd091b-b619-4003-836f-e8fe59d38212", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4df5b1a-bb43-480d-8af3-78c80524a268", "sighting_of_ref": "indicator--8efd091b-b619-4003-836f-e8fe59d38212", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1615e11-f61d-4042-be0b-9a554f12a94f", "sighting_of_ref": "indicator--0bff954a-45ef-4a1b-919d-c0ea87ff001c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ed61ff-a4db-4332-bc87-43b97b59e52d", "sighting_of_ref": "indicator--34fd7f8d-9c79-4580-9625-040f5254c1bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf24b6c-9d3d-419c-979c-a9cd5bd7df4e", "sighting_of_ref": "indicator--1a5e3e4c-75c7-432b-8ee0-a6bdf41ac7ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6d095b-56cc-4fac-890e-1a227deb40a8", "sighting_of_ref": "indicator--a69ab220-4777-43ab-9f87-c52bd61718fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baea0d9c-8f53-49df-bcf9-d441ec07170f", "sighting_of_ref": "indicator--5bb31125-5697-4ef8-9ab8-4926d3f2cc5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbd80e6-a6a4-4876-a877-7d2dae4ad4e3", "sighting_of_ref": "indicator--5bb31125-5697-4ef8-9ab8-4926d3f2cc5b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0753a43b-80fe-46e3-9169-49aa5c901b4d", "sighting_of_ref": "indicator--b28ab077-e725-4ada-9a49-390f5055a7e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5489b60b-5e38-4bb1-87ae-4fe32a49753b", "sighting_of_ref": "indicator--3c58ea7e-fa88-454d-a710-5f7ef6a51f7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190bf74d-b381-49f4-bdbf-6388dfb8bf12", "sighting_of_ref": "indicator--2860136b-a889-4fb1-870a-07b5a156795d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c733a166-0b5e-4bf7-a59d-83b85b7d95a0", "sighting_of_ref": "indicator--a3f7ff25-ec6b-49d5-9f44-9a820714d57e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6ad92b-1967-42a2-95a5-bfa8f6a67a6e", "sighting_of_ref": "indicator--a3f7ff25-ec6b-49d5-9f44-9a820714d57e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea37752-70a7-4cee-b5bb-9fd6b6faeb95", "sighting_of_ref": "indicator--a3f7ff25-ec6b-49d5-9f44-9a820714d57e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc14486-79c9-4cb6-bb17-4a6b7637ae34", "sighting_of_ref": "indicator--da155c92-5dfe-4c4d-9621-2895656e59d6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc81d69f-8701-477b-a8bf-773b0a3fd835", "sighting_of_ref": "indicator--b89a9580-c0b3-4e34-ac0c-a8ae430fad7a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c1de62-6d28-4f05-b139-a206594c3c4a", "sighting_of_ref": "indicator--dc6582e9-7b2e-434f-8c12-8d4b9afd49ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b8796b-3e82-4893-b61f-2424874e3fd7", "sighting_of_ref": "indicator--77eedd47-86d6-41ff-95a3-cdc18b5af06f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b7f252-91c1-4dd6-859b-ce2e2b04992a", "sighting_of_ref": "indicator--e3233af2-a1bc-41d6-a967-d88383cd172e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c687aa-a8b6-45d8-b1fd-ac7c428df9a0", "sighting_of_ref": "indicator--08f34cc1-e453-45d7-b386-35fcca7a9552", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584814fc-2d6d-444a-b155-95722587dd02", "sighting_of_ref": "indicator--db0cad1a-09ee-40f2-9c82-44edfa69438f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410db46c-c3d4-41f2-8345-9c59a5835a28", "sighting_of_ref": "indicator--61021056-ebf7-4974-9772-e44a47e588c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027ab968-fa51-4078-8319-02e311fd5623", "sighting_of_ref": "indicator--53795e83-844d-43d7-b637-e8cfbf3f6e41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf66bfa3-8007-4d53-a798-22db9a25a01a", "sighting_of_ref": "indicator--53795e83-844d-43d7-b637-e8cfbf3f6e41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ad1d8f-f535-47e0-a094-42cadc3d78e9", "sighting_of_ref": "indicator--eeeec5b7-2a50-4821-8ce0-aaf428cd705a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cd6a6b-36f6-42e6-b111-8398580c783a", "sighting_of_ref": "indicator--9821c950-6c91-4dfb-bc10-637d57de8aa6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732f1542-d6fe-48f8-b344-abac762df3f9", "sighting_of_ref": "indicator--8a21dacb-ec4b-473a-975c-02d6a5e4720b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e99178-4ef8-4d4a-bd74-b23e678a2795", "sighting_of_ref": "indicator--89c18922-ecce-448f-b398-63372e27d398", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c527861d-5bc8-489b-9afa-099acb391834", "sighting_of_ref": "indicator--d0ceca26-95bf-4366-bba8-5a6154bf3147", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f520a9-d6ec-437a-bdba-bae896e37919", "sighting_of_ref": "indicator--bbddaca0-7a9f-4e81-9738-c58a8b29b877", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c6768f-2168-40ef-80b9-35140b25d548", "sighting_of_ref": "indicator--d425f658-1da8-4c4d-93d2-70dfe87ba206", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdedf6b9-ecf1-4d09-9000-489217de2369", "sighting_of_ref": "indicator--d425f658-1da8-4c4d-93d2-70dfe87ba206", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284c1e9f-9113-4674-a8bb-3e88765dc10b", "sighting_of_ref": "indicator--fd0497d3-c490-40f1-91ec-9a400a92381c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9986d23-9aaa-4181-afd9-edbfcc9e7270", "sighting_of_ref": "indicator--33f2ff6a-f496-42b1-9bb7-9ecf2845db5d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09591cd8-277b-4dcb-bcd4-7d0808dbb341", "sighting_of_ref": "indicator--c5223a4a-fd83-440d-8603-495839c4edf5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc8e96b-2a8d-4675-940c-eb844c348bcf", "sighting_of_ref": "indicator--c5223a4a-fd83-440d-8603-495839c4edf5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df097ea-f918-4f16-9b0d-60a7ffa93035", "sighting_of_ref": "indicator--3a55dbe9-c9ef-4821-bbf7-6bd1c869965e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af75609a-d322-4bc6-81b2-a5f910b35ffb", "sighting_of_ref": "indicator--50ae40c7-6275-4975-a75f-51db3f2ec395", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1eb004-dcbf-4585-84d9-c792fad22bc2", "sighting_of_ref": "indicator--72172e99-cc49-4420-8fd2-91dfbd1495a6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d250dcfa-fe7e-432e-93be-c0695e6b23de", "sighting_of_ref": "indicator--3563b691-e3e3-4767-b4e8-17511c542e40", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298049e3-7b6f-4544-a098-f20d54cd2ad4", "sighting_of_ref": "indicator--a736b879-b282-4bba-b677-891b4055e4e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90a3eae-ec72-471b-8ea2-d762a7ae0f40", "sighting_of_ref": "indicator--55aa67cc-7834-4ec0-a3ff-fad06d4fbdbb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d6b1f4-00ba-4dde-b422-4eaf4911e9bb", "sighting_of_ref": "indicator--acfffe8f-7b09-48c1-8cd5-371fd1eb30eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e55dd99-7044-4ede-8446-d583f74b1a66", "sighting_of_ref": "indicator--4c631934-f737-4a2c-8382-e27c650584ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c58636-28ca-44c8-9b6b-a16cd583ecdf", "sighting_of_ref": "indicator--4c631934-f737-4a2c-8382-e27c650584ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50dc2ad-80ff-4420-8055-fa89d5d4679e", "sighting_of_ref": "indicator--a0ce4769-85ec-4fbd-9ae7-52e1ab614724", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4389f1c-6982-46ce-9e05-ef42ded70c63", "sighting_of_ref": "indicator--cf065dc4-91c6-4ca3-912b-712e4dc3dade", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc7a236-ca94-4f78-ac9a-6318d54d7692", "sighting_of_ref": "indicator--cf065dc4-91c6-4ca3-912b-712e4dc3dade", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2edb62-6619-43c0-8900-fde5f862a9ae", "sighting_of_ref": "indicator--cf065dc4-91c6-4ca3-912b-712e4dc3dade", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f193f56-23c7-46a0-8b95-47e5f33c9484", "sighting_of_ref": "indicator--d687b17e-53d6-4116-be42-cae18a9bf82a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2742da03-1064-448e-8a23-e39fd8ddf49e", "sighting_of_ref": "indicator--d687b17e-53d6-4116-be42-cae18a9bf82a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea6822d-d830-4453-bda4-0eb31806b6b4", "sighting_of_ref": "indicator--0aa1893f-2658-43ba-9824-43221d3ccca0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99bdb93-d0eb-4406-9c4f-9f869b224e33", "sighting_of_ref": "indicator--0172b44e-558d-4697-8659-cef253e8de1b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb83fb2-4a17-40ce-b211-9ea6a38ce8f4", "sighting_of_ref": "indicator--22fa5d55-0b3b-4e17-a87b-890e137e6a92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcacf06-6b43-45f1-95c2-b3d0ee5f554b", "sighting_of_ref": "indicator--2732af55-053e-414b-9ef0-c22681667b82", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f280f57-7f63-40ee-bafb-59efa0e99c85", "sighting_of_ref": "indicator--21f82b0f-bb52-4cdc-8577-0966beab6081", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f33110-653c-4be7-8970-c59691da5867", "sighting_of_ref": "indicator--b44d0760-d822-4e9c-8c11-e96b16135099", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85524cb0-facf-4b3e-9657-54120b9ccca4", "sighting_of_ref": "indicator--2e6ab2be-2a77-4fa8-9a1d-05d32d1612e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74cedb5-890a-41d9-8b11-7e32934c1135", "sighting_of_ref": "indicator--f75388f3-ba71-42b3-b811-258e1fd406e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b82050-9fdc-404a-92de-1a5cca8ef121", "sighting_of_ref": "indicator--791b41a2-79bc-494b-84eb-474275b3416c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc9fb81-a112-482c-bd6b-486d3751c389", "sighting_of_ref": "indicator--791b41a2-79bc-494b-84eb-474275b3416c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3a11ba-fb99-41cd-944c-333328a0c8de", "sighting_of_ref": "indicator--d827237f-f552-4b0d-be88-9e035964b699", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae9af57-ad0b-4e3f-af3e-a63b57da7909", "sighting_of_ref": "indicator--d002f798-3659-4155-aff4-7ca687fa3847", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d595988-774e-4849-ad61-bbe1f82082ea", "sighting_of_ref": "indicator--7e092b26-54a2-4d4f-be81-4c17bbb7426e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dd8e19-9ab0-48b0-bedb-267910f4d592", "sighting_of_ref": "indicator--2a7f3f1e-f66e-41f3-bb09-ccacf7d8190d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f438dbbb-2aa0-491e-baa4-e3155ab58cf8", "sighting_of_ref": "indicator--bd1510e9-6d98-4aa9-a488-80d0914ccc23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ec4a35-371c-42a8-bbb6-a85cfe063849", "sighting_of_ref": "indicator--bd1510e9-6d98-4aa9-a488-80d0914ccc23", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041cd362-53a4-4f87-9e16-68bfbd0aae13", "sighting_of_ref": "indicator--3ed499df-37f4-4fd1-8313-eee65724129c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40643d8-bf68-4237-8384-b3aa2cfe027a", "sighting_of_ref": "indicator--3ed499df-37f4-4fd1-8313-eee65724129c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c8e8f5-3e9a-4604-ba44-d35ed70ca42d", "sighting_of_ref": "indicator--130596ee-e995-4760-90f6-6f70659d9ced", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7649f38-a159-473f-9dfa-45927c77e840", "sighting_of_ref": "indicator--130596ee-e995-4760-90f6-6f70659d9ced", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33b6235-58fd-4b23-a9cc-91bddf5cf16d", "sighting_of_ref": "indicator--130596ee-e995-4760-90f6-6f70659d9ced", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8f7cee-a1ea-4829-9724-cb2d255b14bc", "sighting_of_ref": "indicator--429fda61-dbf5-4df5-8777-5d9e5d8315e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024e1cdc-3105-4459-9602-f910d510af43", "sighting_of_ref": "indicator--429fda61-dbf5-4df5-8777-5d9e5d8315e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d82e09-f22c-4574-bf7a-211bf0c1607e", "sighting_of_ref": "indicator--a5ac7240-7d25-4739-bfd6-6093e0c9746e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13be820-db30-4d41-aaef-017600642a14", "sighting_of_ref": "indicator--f72bd232-8017-474e-9aec-ba0ea72bc6a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4ce6ed-0ca0-491e-991f-cd62159d2bd0", "sighting_of_ref": "indicator--f72bd232-8017-474e-9aec-ba0ea72bc6a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddc7d14-e393-4ad8-b3d6-8cd4679fa3fb", "sighting_of_ref": "indicator--f72bd232-8017-474e-9aec-ba0ea72bc6a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5bd5ea-6bde-4c6f-8baf-15dd52ce5cd9", "sighting_of_ref": "indicator--12d726db-de08-487d-a4e4-d4c48006a232", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7461536-33f4-424f-964b-41045909a0e0", "sighting_of_ref": "indicator--676bf678-afdf-4398-be3c-38e221408b88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c73705-4065-4730-a977-4eb94084cdc8", "sighting_of_ref": "indicator--2663beed-5ea0-4494-a889-a30b2dd7f607", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb195a98-d2a7-4047-8ffb-701aab329778", "sighting_of_ref": "indicator--a3686710-fc4b-4e14-8fc0-75137fd2eadc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00e2cb9-4ceb-4b24-a19a-4210e40f29aa", "sighting_of_ref": "indicator--fca3fadc-8c16-48e7-97ba-d7077e3ce76e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efb3585-ab04-4abd-ba92-5474292366c1", "sighting_of_ref": "indicator--fca3fadc-8c16-48e7-97ba-d7077e3ce76e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e298a3-bf12-43f0-83f8-4cc54e48314c", "sighting_of_ref": "indicator--0c82bc2e-df65-4904-bab5-050ac66a708a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d08ec47-fee0-4812-89e4-28fbb3e2a8e8", "sighting_of_ref": "indicator--0c82bc2e-df65-4904-bab5-050ac66a708a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16d3142-5a0d-42a4-a816-50d7eca5ce1c", "sighting_of_ref": "indicator--3926f9b9-7264-4d5d-87b6-58b1eed4cef9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5ccb40-6174-44c1-9809-51fc850a06ec", "sighting_of_ref": "indicator--984d99ee-9f25-4da7-b460-73b539105317", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac29b8b7-d9bb-431e-8d19-67101bfa752f", "sighting_of_ref": "indicator--5acf9ec4-786f-4c21-a472-4aca2592212c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7d0686-a6a6-4741-b918-427e134165db", "sighting_of_ref": "indicator--5acf9ec4-786f-4c21-a472-4aca2592212c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79162b2f-0ce0-4a2f-82a0-3a0de73b58de", "sighting_of_ref": "indicator--9ef85b2c-253d-431e-91fe-3235ba3022d0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f393a754-20f6-4d5e-b1de-eaaef0b6b18b", "sighting_of_ref": "indicator--9ef85b2c-253d-431e-91fe-3235ba3022d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968fc487-cf9f-4a9e-b5da-79ef73d4c6dc", "sighting_of_ref": "indicator--5f2b5eca-94c6-415d-84e2-2354f2e63967", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76ada6d-e796-4930-b523-22be97cb3e67", "sighting_of_ref": "indicator--8a272e10-2fc9-443f-ae85-100c4985025d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c9a55-354e-4544-95eb-5a8f4bb6dacd", "sighting_of_ref": "indicator--360e8285-c933-4603-96fa-f8e88384da02", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00a09e6-1285-434f-acee-4f291f49d3ed", "sighting_of_ref": "indicator--ddc81938-5989-4b4c-997a-245fdedfbd59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90887389-2324-42a9-8799-53c798ea6fa2", "sighting_of_ref": "indicator--ddc81938-5989-4b4c-997a-245fdedfbd59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781778e9-3c19-42ab-b29d-a7e74eddafde", "sighting_of_ref": "indicator--aa392e99-a02f-4b50-88d8-14c129f6b892", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02a3bf8-f4cd-4fc7-a36e-abfa89a7b038", "sighting_of_ref": "indicator--aa392e99-a02f-4b50-88d8-14c129f6b892", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46615d1f-79a9-4fcd-b14e-5d44943d6461", "sighting_of_ref": "indicator--aa392e99-a02f-4b50-88d8-14c129f6b892", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83edeaf-7664-4678-9da6-34e9f896cc87", "sighting_of_ref": "indicator--c94fed39-9569-4882-a8a6-70fb9734f9f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20542aa3-2a8d-4d5c-9639-285d50e41e58", "sighting_of_ref": "indicator--590e6179-7f8a-4559-9a1a-72dd85f005f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9654afaf-13b3-4d65-8ec6-85bfa2064089", "sighting_of_ref": "indicator--590e6179-7f8a-4559-9a1a-72dd85f005f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e00799-0e4e-46e3-9c0d-14d73abf62e3", "sighting_of_ref": "indicator--291b7206-42fb-4e90-b449-0addf4aaac59", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2831f40f-7174-4ed6-9f15-442bcfa156cb", "sighting_of_ref": "indicator--2edf93f3-db96-4a92-b05e-b08b64ad5fba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9015a4-bbfb-470c-93a1-3daf86f51689", "sighting_of_ref": "indicator--72aa3a47-71f7-48da-8a57-0ed3dfa4fa64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe2c825-aadd-4427-8587-57c882299e35", "sighting_of_ref": "indicator--b6c83cde-770d-48b6-852b-551fb0044c11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898d16a7-eb8a-452f-83ff-f2bad4a1a5fc", "sighting_of_ref": "indicator--f4cca2b0-4ec3-4fbf-ad6a-5a98af2e8e8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014540ba-a82f-42ac-b770-3b6516fb46d9", "sighting_of_ref": "indicator--17801bc1-bb2d-44e2-8da5-4b73fb32efc9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a161f288-620a-46e1-99ce-63d8c96dfecd", "sighting_of_ref": "indicator--4b37358c-4c21-4449-aa3e-54413e6ee103", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d8d8cc-1d7f-41d5-9c19-a916465d5cbd", "sighting_of_ref": "indicator--4b37358c-4c21-4449-aa3e-54413e6ee103", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cdad76-d193-4051-abeb-be1ac9d2eba2", "sighting_of_ref": "indicator--195bb90a-c727-4cdc-bbef-996b006ba7d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2ae14b-11f5-4d4e-8a0b-fd9e55d9ff7b", "sighting_of_ref": "indicator--195bb90a-c727-4cdc-bbef-996b006ba7d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc68faad-d3ce-43c8-b094-b55e12647ffe", "sighting_of_ref": "indicator--55e04524-5d21-4863-9c42-3b3fbfb7fded", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f14cc7-c027-4db1-b244-003526976ccb", "sighting_of_ref": "indicator--a6adf6a4-0bb6-41af-9eec-844cd593629d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba665e3-126b-4164-b9e2-d9283cac79e8", "sighting_of_ref": "indicator--26fef014-4ea5-4142-bdec-cd7e91bc00ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5d372a-99e1-4a17-9d44-2149270ecb6f", "sighting_of_ref": "indicator--7b41db6e-e9a2-48af-a797-642dfc0ff50f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ee3f6c-e575-4c6b-a7bb-2b15046a0d5f", "sighting_of_ref": "indicator--967be9b2-5e88-4de8-afb6-53321daefe47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13161556-5919-4375-a296-5f62a942eda7", "sighting_of_ref": "indicator--967be9b2-5e88-4de8-afb6-53321daefe47", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c9a4f7-159a-4819-90fb-f67b04a6df5f", "sighting_of_ref": "indicator--c0031c16-f4a5-4b3a-aa92-5416e511a147", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6916f4-03f9-4e55-a262-338339b9bb3f", "sighting_of_ref": "indicator--2386af7b-5d17-42de-9d01-9f4d93f1e911", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7322c828-428d-4565-a5d7-5b8a2a674372", "sighting_of_ref": "indicator--60ae34d6-d9ef-47dd-9b43-e29ce8f06a30", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e8c9ee-3362-45db-bfe2-701affc2f041", "sighting_of_ref": "indicator--60ae34d6-d9ef-47dd-9b43-e29ce8f06a30", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ea8923-a5fe-42a1-8eb2-0a0b9985a236", "sighting_of_ref": "indicator--9ffb7023-aa92-4e24-a82c-53a2d4657280", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e6a84f-2d71-44e8-b07b-69b8e4a7d6c3", "sighting_of_ref": "indicator--eb48cf97-5aa6-46e9-8886-7791600e8e3f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbf32b8-f094-4bdb-8361-04278ff2db82", "sighting_of_ref": "indicator--34ecd1d3-80b5-4c13-8153-6a559c4a86f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbd92d8-5004-4a2d-ba5c-6b38e0dceabf", "sighting_of_ref": "indicator--65b6f9e5-1535-47f8-9211-9c8537da1101", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275f91c7-cc66-4118-bbdc-140aea26e572", "sighting_of_ref": "indicator--65b6f9e5-1535-47f8-9211-9c8537da1101", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ccd1cb-ef0a-4bad-8c78-dadaa8f0313c", "sighting_of_ref": "indicator--ee973669-f142-49dc-94f9-487706e70ad6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b9ed01-c441-4642-8b00-2cfa8bbbc36f", "sighting_of_ref": "indicator--cbc28eba-2ebf-4bf6-a0d9-fb7cc7f14bd3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0c4fe4-64b4-41d6-9c74-03a0ab9009b6", "sighting_of_ref": "indicator--ca06b684-17fc-488d-9782-8b02d2dc55e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dfb49d-36a6-4f1c-8b7d-b9567e9c9eb4", "sighting_of_ref": "indicator--ca06b684-17fc-488d-9782-8b02d2dc55e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554d0d9c-ca3e-4057-9468-a0f15847e6bb", "sighting_of_ref": "indicator--8f6ff616-e966-47d8-a4f5-efc3c51a8f70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61896e9-892b-4d67-a96f-115b96c633d7", "sighting_of_ref": "indicator--7dc6830b-4990-457b-9686-ba6b5d3552d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390203dd-3644-46d2-b2e7-7cd6cfa62e46", "sighting_of_ref": "indicator--d856b3c0-2fb2-4737-92b6-d747641e08c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449bb31d-a08c-4a22-a5c3-b9fcb934e9d8", "sighting_of_ref": "indicator--d856b3c0-2fb2-4737-92b6-d747641e08c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b7475f-e993-4902-b181-ef046ca0f34b", "sighting_of_ref": "indicator--66a0b090-5e3f-4faf-af17-2c41100b51fa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff39f88-de45-465e-892d-2d8037e7668f", "sighting_of_ref": "indicator--62fd15fc-f3f2-4166-87da-b6ac6e8eb44a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b250e50d-8036-43b8-ad32-d795af48ea10", "sighting_of_ref": "indicator--c652cdf0-26c9-4cac-be76-0111fa9d728a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92a47e8-a8b2-47ed-8353-eac4074c43fc", "sighting_of_ref": "indicator--b3286b28-52d8-4f7c-bb12-05d31706d6a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22ea0ba-1e4e-4d42-871f-509c383c5ffb", "sighting_of_ref": "indicator--83540dbf-b7ed-4e40-a7ca-90bedab6f55e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f2be64-a906-4580-87fc-98779d524bdb", "sighting_of_ref": "indicator--5c09f26c-8cb9-414b-ad0f-cb602058d832", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2becab0-33b5-48df-9aaa-b0a790b4a62c", "sighting_of_ref": "indicator--5ca6d04c-1950-4f99-a4a2-2311f62ee036", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70fec60-539e-4b07-bc41-69616a05de41", "sighting_of_ref": "indicator--5ca6d04c-1950-4f99-a4a2-2311f62ee036", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fa6885-f757-4002-b8af-2382f07ac0db", "sighting_of_ref": "indicator--2526a15b-7301-40c4-95c5-05495ab7a142", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9f1f68-1d0e-4404-af24-c7146422d9f8", "sighting_of_ref": "indicator--2526a15b-7301-40c4-95c5-05495ab7a142", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20142ed8-19f4-417b-88be-0f5c74f2a2a1", "sighting_of_ref": "indicator--38d9b3cb-d95a-4576-8be4-0436bdf70e48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b01c8c-0ef6-4797-b546-71e88f98056e", "sighting_of_ref": "indicator--8d5c5ca0-528d-4e1b-a5c9-aa2ade213a15", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3391a858-bfdb-4f62-a1e3-689e8eb1e068", "sighting_of_ref": "indicator--513c9d63-56ff-41f3-8512-d14ce8cbc696", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32125316-6f78-4099-9ee7-2c903632e629", "sighting_of_ref": "indicator--513c9d63-56ff-41f3-8512-d14ce8cbc696", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f944b3b7-273d-41a8-ad97-8336f368a78f", "sighting_of_ref": "indicator--f6ac7889-9d40-4080-a226-7d6c1b5d750b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b50dbb1-1297-41e4-8d72-c8a98cd0e42f", "sighting_of_ref": "indicator--f6ac7889-9d40-4080-a226-7d6c1b5d750b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093027f0-fdbf-42a3-b856-d29de352d02d", "sighting_of_ref": "indicator--f6ac7889-9d40-4080-a226-7d6c1b5d750b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a943ab4-6b42-41d8-b507-49877a5717fe", "sighting_of_ref": "indicator--d467e046-18f2-4374-852c-b04d93e27fe5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c958b39-3f1d-4f2e-8d13-9d7c181dc227", "sighting_of_ref": "indicator--d7696040-8a6f-4082-9364-b4310dd54b7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63253c90-30cc-46f5-b4a9-35865eab06af", "sighting_of_ref": "indicator--f4ebdb45-c661-46b3-84d6-9a81d757b396", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8486a64f-cbe9-4784-a6b7-1035cb24191f", "sighting_of_ref": "indicator--b590b6d8-73a1-4450-97ce-07295d965848", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc186f1-36a7-4147-8abd-c7b3180dd990", "sighting_of_ref": "indicator--7565103b-be39-4664-b7c9-51eb2d81891f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72931c15-3a9b-44b3-8b6c-e78e9136a07d", "sighting_of_ref": "indicator--9dab2d0e-64c5-4586-a903-d872ef767c42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca86b5ae-fc12-481b-ade9-f6819fb7aadf", "sighting_of_ref": "indicator--cd9637a3-fe26-44c2-9b67-3171a4a7aff3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc0b5b3-668a-4e44-a358-bf91cc08a2c1", "sighting_of_ref": "indicator--cd9637a3-fe26-44c2-9b67-3171a4a7aff3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8749279c-9058-46cc-a058-2c0fa7667628", "sighting_of_ref": "indicator--cd980cb4-acc7-4fe7-8040-2b3f47d000f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eeb2a6-c2f1-4580-ae04-3928ed19aade", "sighting_of_ref": "indicator--f16f3583-f6ba-4bf1-9bbf-c7b9776e4f12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f8216a-91b2-42e4-af0c-6771fbd33566", "sighting_of_ref": "indicator--db986644-263a-48c4-83b0-9d3c47ecad4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6334ae65-c307-47d0-abe6-d698529ae202", "sighting_of_ref": "indicator--49c58c01-072d-4148-86c5-4bab16bba421", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4554a3f2-3ecf-412e-b8f4-461353c7a943", "sighting_of_ref": "indicator--16960135-1dc2-4742-8525-5406b15b3015", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1e9d6b-6c5d-4d0e-931d-95dbb2bbb06b", "sighting_of_ref": "indicator--3a0c7743-9d49-49b4-9989-0481d30911ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8933ac8d-59e8-405b-8b5f-047cb571c33a", "sighting_of_ref": "indicator--8722167a-7379-4f2d-bf0d-f708e20012f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5b55c7-61f3-4b19-bcae-54a0603e136b", "sighting_of_ref": "indicator--8722167a-7379-4f2d-bf0d-f708e20012f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be726de4-a358-41e2-8ce4-0a0d39dfd067", "sighting_of_ref": "indicator--8722167a-7379-4f2d-bf0d-f708e20012f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb5ac3e-6744-4dda-83dd-9e5c2f26ecd7", "sighting_of_ref": "indicator--68fde0e5-829c-4400-8407-148fe387cd80", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ec6ccc-8618-43e8-8964-c5b03ce39da3", "sighting_of_ref": "indicator--f12c0f15-59e5-4804-be9f-994dd774478b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed24b83-463b-4701-8271-0b5b0be0bd86", "sighting_of_ref": "indicator--14b39ec4-78f3-4c83-93ae-27b6e4c69ac5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41b855-71c4-43f3-a396-f6ffaabda50d", "sighting_of_ref": "indicator--14b39ec4-78f3-4c83-93ae-27b6e4c69ac5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1e6ab0-8051-420e-ac0d-7327cd3d5e58", "sighting_of_ref": "indicator--bc2c2eee-9fd7-4e89-9102-52990cda4561", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a45b8b-e3ef-4a8c-8988-b2649b0ed6a4", "sighting_of_ref": "indicator--bc2c2eee-9fd7-4e89-9102-52990cda4561", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafab7ef-87e3-4942-a2ee-ab425a100679", "sighting_of_ref": "indicator--fe1bb66a-d108-4e59-9214-13963aef63f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83632a96-a24c-4c01-bf2b-29775d8f6ff7", "sighting_of_ref": "indicator--fe1bb66a-d108-4e59-9214-13963aef63f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6135f2-9a2c-4995-aa6b-c2c388b537f3", "sighting_of_ref": "indicator--793b2461-3625-44d5-851d-95659330383a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f764749-4b42-4bbd-a6fb-2ea6938cbc18", "sighting_of_ref": "indicator--121fa2d3-3635-40a9-a5a5-31797a80d4a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5854000f-3409-4882-a06b-0896defb90fd", "sighting_of_ref": "indicator--49556619-127a-4ed5-b0b9-5315f5a5209c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdbe37a-142d-494a-ad0b-71f55e839d0f", "sighting_of_ref": "indicator--71445b0e-8c2a-4f08-81e3-ee4d32c084c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e189e7f-3ca5-4197-9313-a7804d177e36", "sighting_of_ref": "indicator--71445b0e-8c2a-4f08-81e3-ee4d32c084c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333e980a-acbb-4d91-82e5-d876c416d4ab", "sighting_of_ref": "indicator--71445b0e-8c2a-4f08-81e3-ee4d32c084c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846179aa-ba8c-4da1-894f-e55cd50d9ed4", "sighting_of_ref": "indicator--ce2e0af8-86ac-4359-891b-d5007f8eca74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ccff5e-2ef4-4e05-9fb4-3f6a6f68d821", "sighting_of_ref": "indicator--ce2e0af8-86ac-4359-891b-d5007f8eca74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc61c7ff-569e-4d10-8cb5-f15d7baddfac", "sighting_of_ref": "indicator--9155890c-6f3f-4337-b8cd-8a0932af32f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce8bb6b-34e2-45c4-ac05-694c30f9f4e4", "sighting_of_ref": "indicator--ed858186-1878-4a3d-96e6-81a1467959a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9c0be7-0a3b-4809-b0c1-bba89052c615", "sighting_of_ref": "indicator--f80a11c2-b20f-4674-b3f2-5d5d980b7d65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a387646-677c-4dcc-bbf4-6d9525073fff", "sighting_of_ref": "indicator--f80a11c2-b20f-4674-b3f2-5d5d980b7d65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1828b81a-037e-4c08-a3ee-b46c48805037", "sighting_of_ref": "indicator--f80a11c2-b20f-4674-b3f2-5d5d980b7d65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76953b09-a3b9-42a1-8bc9-03dc458397eb", "sighting_of_ref": "indicator--5767730f-6a1d-4f62-926b-2ad234b7508d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a704e2ec-2be2-42d9-89ac-3e1cef50e6fb", "sighting_of_ref": "indicator--5767730f-6a1d-4f62-926b-2ad234b7508d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8fed11-6a65-4556-a831-631167885eac", "sighting_of_ref": "indicator--621b6c7d-6e95-45cf-99d9-f459861a679d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c8e9ed-1b2c-4cd2-8f2f-595b14764c7a", "sighting_of_ref": "indicator--621b6c7d-6e95-45cf-99d9-f459861a679d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b165b40-26cd-4c18-9739-f82fafbbef0e", "sighting_of_ref": "indicator--b2286776-df2e-4eb4-a828-16d8c8d44db7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1737a0-8bae-4fa5-b4ba-05ca29e5e365", "sighting_of_ref": "indicator--9aa272b9-712b-49fe-851e-4ebc83a77772", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c4bc54-576e-44be-9781-c613e40313b0", "sighting_of_ref": "indicator--18a5f9aa-1974-4280-9c75-70e927c2dbe7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ddd4e4-a02e-41b6-92d0-16f966059ab4", "sighting_of_ref": "indicator--18a5f9aa-1974-4280-9c75-70e927c2dbe7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4a24b0-c612-4065-9fb9-7fef9b83b581", "sighting_of_ref": "indicator--1c0a76f7-07cb-4e56-a303-f67107793f2a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff4c9cc-faee-4828-8d7d-90e9a38a5a16", "sighting_of_ref": "indicator--efdeca8c-a2c7-406b-a483-9d7b14069a62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185a1d6d-10b0-498f-9636-ad4bc15bb80d", "sighting_of_ref": "indicator--3861f4b5-2967-456c-b828-b407bba80a2e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdf594d-11b7-4669-8bdf-346583076bf0", "sighting_of_ref": "indicator--dd8c0816-4ea8-4d7e-b577-5c7b8b11148a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a80f37-c2e8-4499-bc65-2b7fbb4155db", "sighting_of_ref": "indicator--7fcaf25a-6c3a-4fa1-ad7c-a91c4231cc52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083e67a7-5274-4ced-b63f-4d22419db3c7", "sighting_of_ref": "indicator--8a0d3e4c-51c4-4fe4-be67-46eeee42f341", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b60c0db-40d1-4256-b521-c4677e58c3a2", "sighting_of_ref": "indicator--a94b97f3-2661-48cf-bc1b-e2f1e401ab8d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029a53e5-1905-46f3-8a31-948375473f0b", "sighting_of_ref": "indicator--63ad7571-d11c-46d5-9357-a275207844cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c04d1c5-9335-4d69-9c7d-6f4e7635340a", "sighting_of_ref": "indicator--63ad7571-d11c-46d5-9357-a275207844cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2ee17e-e8e6-4ff4-b2ee-5252c2bd89e9", "sighting_of_ref": "indicator--63ad7571-d11c-46d5-9357-a275207844cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061b0f05-9d3b-45fb-b64c-4b95fcb9171f", "sighting_of_ref": "indicator--0b2f5ef0-134b-4acc-b851-bc2ca7514f95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa217f0-c0c6-48e3-a9c3-0e4a8b063f63", "sighting_of_ref": "indicator--23978307-6774-4956-ac58-a53d9ea659f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69170bd1-0395-4b51-8134-a27e10d4fff9", "sighting_of_ref": "indicator--d326d857-79f0-4d8f-9643-2afd3e4ee714", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca75e926-a602-4866-9aa9-edaa0222cce6", "sighting_of_ref": "indicator--d0857a40-9194-4f04-ae26-c99310d15fa5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144745e1-1e86-4708-b6a1-c1b8c1a31d70", "sighting_of_ref": "indicator--1d3e1494-d58f-416a-935a-b15c174b8314", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7353f5c-e896-41ab-984c-02e1b36104ab", "sighting_of_ref": "indicator--272d795c-31e2-4b37-9f95-f7c0a0ae2a5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210889e4-00a4-4e16-9300-375d6a3aa177", "sighting_of_ref": "indicator--8c6bb94d-28c4-4760-9b3d-6fe55c2c252d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40072ca1-3510-4694-8f4d-5e4b65fa4aa2", "sighting_of_ref": "indicator--f1d14569-a6f9-472b-8066-3f300105fcf3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d23a1-bdca-4cf2-8d2e-24f2192a6af4", "sighting_of_ref": "indicator--d5744647-4556-48f0-8bfb-1e76f3bcb199", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103cd317-7467-42d7-8712-f69aeaa86d2d", "sighting_of_ref": "indicator--d5744647-4556-48f0-8bfb-1e76f3bcb199", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95ea471-2968-4b24-9892-f8675d7e68e7", "sighting_of_ref": "indicator--945f73e2-bf55-4cb3-a89e-87feac25f6c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3212fa-864f-45b5-979f-c11b963baddb", "sighting_of_ref": "indicator--88cf3992-e4cb-42a9-95df-12ff4c51fc46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01fd57e-f5f3-402d-9dd3-9a6408d23b85", "sighting_of_ref": "indicator--88cf3992-e4cb-42a9-95df-12ff4c51fc46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e53850e-e38c-44cf-aca0-e076be4b63d2", "sighting_of_ref": "indicator--edd1c2ee-9506-4582-a993-b8fc051c4dc0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6554819e-4a4b-4afc-bacd-efd4a6b6f1dd", "sighting_of_ref": "indicator--edd1c2ee-9506-4582-a993-b8fc051c4dc0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ee32c7-93a4-434c-969f-de93fdbcc1f5", "sighting_of_ref": "indicator--ea5d4274-74dd-474a-bc1a-2bb1d7732fbc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dc2658-1246-497a-b407-834f703d98e6", "sighting_of_ref": "indicator--ea5d4274-74dd-474a-bc1a-2bb1d7732fbc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a693bbc0-95f0-461e-9038-b60bfaf5f7c2", "sighting_of_ref": "indicator--6b1c5d47-6b51-449a-9239-04b8a720c1e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f9fe38-241a-441c-8210-f71e0330a78b", "sighting_of_ref": "indicator--6b1c5d47-6b51-449a-9239-04b8a720c1e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86899f2e-e232-4616-b428-1f0ff7928559", "sighting_of_ref": "indicator--c59f809c-3188-4f86-b5d9-650269dfcbca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b60915-1ffe-4bb6-8c4d-2be2a341585c", "sighting_of_ref": "indicator--2f420466-b0e3-41ab-bb46-f3d4bb700393", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5c0471-150c-40ed-ba97-c708db17c297", "sighting_of_ref": "indicator--2f420466-b0e3-41ab-bb46-f3d4bb700393", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6056f4-1ceb-48fd-8b93-34887d89a2f0", "sighting_of_ref": "indicator--ef7fad66-5f4f-46e6-9d7f-0de3107e46b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b416b3-7253-46d8-bfa2-61c270337f57", "sighting_of_ref": "indicator--ef7fad66-5f4f-46e6-9d7f-0de3107e46b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e74ad75-acee-4986-b686-f5b35ba0fde8", "sighting_of_ref": "indicator--e4a163b0-85c3-4816-8bde-c4796534699f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaadf51-ec04-4ddc-8223-b6b7a0469c98", "sighting_of_ref": "indicator--e4a163b0-85c3-4816-8bde-c4796534699f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01875a64-5e93-498f-9a90-d521ad08d3fe", "sighting_of_ref": "indicator--5eab834b-917f-45d6-bb3e-183207e2cb16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a01c1c-1439-4a5d-8d8e-715bf510820c", "sighting_of_ref": "indicator--d2119e2d-816e-404a-a592-0646fdbfc6dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5169a601-42e5-484c-80f4-126f2b293003", "sighting_of_ref": "indicator--3f2e0fab-22d4-43a9-a76d-63663d7286c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167f2f03-14e9-4d6f-a819-e0668eec095d", "sighting_of_ref": "indicator--8479a0d5-0fbf-4759-a2f7-e8e29804d9c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26a17ec-ce17-4250-a012-2631957890cf", "sighting_of_ref": "indicator--8479a0d5-0fbf-4759-a2f7-e8e29804d9c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527ff3e3-88a2-4ac0-a265-5d6a2d8f7d45", "sighting_of_ref": "indicator--8479a0d5-0fbf-4759-a2f7-e8e29804d9c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f454b429-dc83-4411-92fc-7d0efc94fb71", "sighting_of_ref": "indicator--9007b54c-4388-4b66-95cc-ce3ca98ed397", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8db1bd-6ac8-4d35-a065-45444b8fdd3f", "sighting_of_ref": "indicator--9007b54c-4388-4b66-95cc-ce3ca98ed397", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34504c71-069a-4eda-ad03-d521cc144645", "sighting_of_ref": "indicator--eaa0fbda-bbfb-4aa4-a154-72fd2568ef36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdd7c68-acbd-4cd4-bba0-107645c7a7f2", "sighting_of_ref": "indicator--eaa0fbda-bbfb-4aa4-a154-72fd2568ef36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfa1133-7ad0-4bfb-8711-a431324bf83c", "sighting_of_ref": "indicator--3b95275e-504e-4b40-94e2-d55e6bd303ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b6264-f21c-445c-b1c0-4186f7973445", "sighting_of_ref": "indicator--f20e88a8-34d9-49bd-8d7e-3d319df00acd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f172c1-086e-46be-90f3-0d82e5916108", "sighting_of_ref": "indicator--e406e722-ea75-4f90-88aa-d33518495001", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec922ca-7df8-4529-9b13-03072039f1de", "sighting_of_ref": "indicator--0b8d1665-6703-4fca-864d-cea91d0b2c71", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a17f7a-047a-4ea8-8428-ac51a3ee0ad2", "sighting_of_ref": "indicator--bc0bbafa-7ed8-45d0-b849-606ae4554cbd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6f7b04-fa93-4384-a5a9-45477355089d", "sighting_of_ref": "indicator--bc0bbafa-7ed8-45d0-b849-606ae4554cbd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab16118-3ad6-4dc4-b352-f0edfba1317d", "sighting_of_ref": "indicator--de566091-9839-4a3f-87a6-58e3f645100b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1ff7dd-c704-4d43-bf3e-359a250cf629", "sighting_of_ref": "indicator--7f3e2de6-f632-4a17-a8b6-2227320c4ca6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18befe9-44fe-49b3-8fd9-ecb1346d55ac", "sighting_of_ref": "indicator--7f3e2de6-f632-4a17-a8b6-2227320c4ca6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fb90e0-e98c-4e37-975c-7ae523f1579f", "sighting_of_ref": "indicator--7a466a30-17dd-485e-95a1-8ef860ec1110", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171c205a-f04a-483f-9595-5d99dcc83f2c", "sighting_of_ref": "indicator--49e20f5d-91d9-4beb-8e02-3ece1e3d9d0e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fd36b0-7d88-4232-a88d-ba60e4ba3736", "sighting_of_ref": "indicator--49e20f5d-91d9-4beb-8e02-3ece1e3d9d0e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5adb4e-c226-461f-b1d1-bab31f2c8a42", "sighting_of_ref": "indicator--116b35e5-e327-489c-9d31-1ad7c37fb88e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcbd0e2-b53c-4652-b233-7e92661246db", "sighting_of_ref": "indicator--4d491862-c6b2-4366-9b6f-9f199f6c03d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635dc577-f0b2-48c6-b543-2ac5800f8e2a", "sighting_of_ref": "indicator--4d491862-c6b2-4366-9b6f-9f199f6c03d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b791d63f-05b3-41b7-b4b6-b24bed784c2a", "sighting_of_ref": "indicator--4d491862-c6b2-4366-9b6f-9f199f6c03d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c466281f-1c4a-4761-92a6-857e2140b781", "sighting_of_ref": "indicator--32c8e998-cf03-4e5d-a224-d28c671eee26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4041ebf0-1fa1-4a29-b1b1-6b834666f050", "sighting_of_ref": "indicator--32c8e998-cf03-4e5d-a224-d28c671eee26", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a148980d-75bf-4086-b842-b9c7818caa51", "sighting_of_ref": "indicator--8d6ecd58-bde2-48c2-806f-21756845297b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a34536-6d1e-45d6-8941-5353f0eda623", "sighting_of_ref": "indicator--029d9c6a-0085-4f1e-bda7-0f3da874a245", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89e70ad-0ac7-4418-9d36-303af4fabe4e", "sighting_of_ref": "indicator--029d9c6a-0085-4f1e-bda7-0f3da874a245", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e150b0a7-e3ff-4f30-9198-3ddf4505d1bc", "sighting_of_ref": "indicator--c7f90631-ee66-4320-afe2-b9b44aab7221", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07a7a82-03d4-4785-8229-b6362119cbfb", "sighting_of_ref": "indicator--c7f90631-ee66-4320-afe2-b9b44aab7221", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65678f4b-a388-4d83-94a0-31360965c576", "sighting_of_ref": "indicator--2da8671a-4fa4-48c6-a68b-8f61bf062764", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f554e5-03f2-4f7f-b8ab-b2bd238345d8", "sighting_of_ref": "indicator--75932051-0db6-486d-9d00-8c4dee5d591c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78519e11-3282-47de-ace3-6495af384d6a", "sighting_of_ref": "indicator--5e2162cb-9a57-4959-9189-a10308556874", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac734f35-1112-4e31-8a05-bfa2bc6fb5b1", "sighting_of_ref": "indicator--5e2162cb-9a57-4959-9189-a10308556874", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3062ccc-bc70-449a-8c88-77f08dee968e", "sighting_of_ref": "indicator--5e2162cb-9a57-4959-9189-a10308556874", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc809ea5-f058-4086-beca-51353b42c32d", "sighting_of_ref": "indicator--cc204a6f-9402-4cf8-9839-e495b95bd890", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c949d489-6672-4bd4-8289-9772690a2ce1", "sighting_of_ref": "indicator--cc204a6f-9402-4cf8-9839-e495b95bd890", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e24747-3057-4d13-8e02-b2534c5aa164", "sighting_of_ref": "indicator--bae9c489-6786-4599-8d59-acf3bee1b7e9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312e7708-4929-49e1-a8e4-e4925c08cdb9", "sighting_of_ref": "indicator--bae9c489-6786-4599-8d59-acf3bee1b7e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b08e112-e4d4-47f1-a9dc-895fc9120f9b", "sighting_of_ref": "indicator--fa535a98-5d10-4bad-9752-4fd85d454f71", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d843571e-ad5a-44de-93ef-de0917bd3862", "sighting_of_ref": "indicator--fa535a98-5d10-4bad-9752-4fd85d454f71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bc1448-aaaf-43c9-b78d-947f149d97d4", "sighting_of_ref": "indicator--d7007715-2745-4849-92b6-e8a98e116621", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adba766-5603-4b40-a229-b8e65bba6016", "sighting_of_ref": "indicator--afb28c41-fd22-40db-86af-0dd7672404c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fcd029-e9b5-4f5c-97bd-6451c2551617", "sighting_of_ref": "indicator--10d86634-ef05-43ef-86d3-d401c20e506c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd526b1b-b709-4229-be36-4a0befa533f9", "sighting_of_ref": "indicator--10d86634-ef05-43ef-86d3-d401c20e506c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df606dc-26ec-487a-9baf-25579fd59f2b", "sighting_of_ref": "indicator--6a38abf5-5e4d-4e60-b306-0a20832e91ff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b715694b-6718-4a14-b8ef-0aecdea48e48", "sighting_of_ref": "indicator--ebf87d46-a4c8-41f6-adff-f1157f7dd2af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfb6da9-5799-473d-8fe7-51608b05a858", "sighting_of_ref": "indicator--ebf87d46-a4c8-41f6-adff-f1157f7dd2af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d28ef0-fb09-4d68-93b4-f7261cdcb3aa", "sighting_of_ref": "indicator--dff08788-4d9d-42b6-be12-4ca1f6661f69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e8f741-f4e9-4d91-a52c-21f3b08223a1", "sighting_of_ref": "indicator--0ab406b4-0a4a-4df2-8b01-1606b45cde67", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8b1745-6eb8-4dc7-8e3d-f9b78f49abb3", "sighting_of_ref": "indicator--3f0ee21a-5bda-4ceb-bbb9-d2395ec9b22d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7850003a-dd46-4ae3-9683-0b734b5708b6", "sighting_of_ref": "indicator--ad9e3a0f-c065-483e-919a-02d91556c9d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ded0b7-e0b7-49ee-8fa6-a2748d970709", "sighting_of_ref": "indicator--af13af05-76f2-47f0-b067-ab7aaca5eb65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d7176e-05d1-4179-b40c-ca6e41d984ab", "sighting_of_ref": "indicator--af13af05-76f2-47f0-b067-ab7aaca5eb65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63127fd7-c1cb-40ea-8ab3-d0556a13369c", "sighting_of_ref": "indicator--18372171-3821-4f31-800c-c278f0de8add", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f017b6-b981-435c-ad3e-5dad74b74a46", "sighting_of_ref": "indicator--00b82801-4f5a-4d9f-8df0-7024755e134e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d13d91-3e18-4c70-bf38-d457015077d5", "sighting_of_ref": "indicator--00b82801-4f5a-4d9f-8df0-7024755e134e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c895a9-82fb-48d5-9457-083791cc3acc", "sighting_of_ref": "indicator--885cb943-b76e-4a0e-8b8a-1637a692a01b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bf1175-4dbd-4771-81b3-3a8edcf951fa", "sighting_of_ref": "indicator--885cb943-b76e-4a0e-8b8a-1637a692a01b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fdb76b-0ba8-4cee-b501-477c3e1ac453", "sighting_of_ref": "indicator--885cb943-b76e-4a0e-8b8a-1637a692a01b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f7c046-bbee-46bb-8c47-841a51a58040", "sighting_of_ref": "indicator--e7a2638d-1942-416a-b454-927f912b0a04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bcbefb-9030-4b2b-aea5-8c5a8c565dce", "sighting_of_ref": "indicator--e7a2638d-1942-416a-b454-927f912b0a04", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2968b46-4fe5-4a39-b232-77cd2427166f", "sighting_of_ref": "indicator--4bda0f6e-43ed-4383-9cf5-043711a9ec8a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993e7a0a-e36a-4c77-ab6c-6fb6b965b0c2", "sighting_of_ref": "indicator--4ee8a8d1-da76-47bd-b726-2fe575bc147e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6f1185-ff8b-40bd-a0a1-5e7997d31c1b", "sighting_of_ref": "indicator--ed59aee0-943e-4f8a-8912-1996c0441dd7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd506425-9f84-4dc9-b257-1aadc053a473", "sighting_of_ref": "indicator--c9eaa6aa-72c8-4c9d-b1ba-4fd52365237d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d71c588-633f-4eba-860e-d0559740700d", "sighting_of_ref": "indicator--4af91407-5c78-4d64-b1a9-559ca3ed458f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e9d747-c9b3-45a4-b06b-0a10d02fa341", "sighting_of_ref": "indicator--949d7132-dd88-4f45-90ab-a842c918cb05", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dff8e1-0976-421a-a397-1fa5bfa2c5ef", "sighting_of_ref": "indicator--949d7132-dd88-4f45-90ab-a842c918cb05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0722be8d-f380-45f1-b691-48bcce0804ff", "sighting_of_ref": "indicator--50d59243-cc13-490b-98da-0c2f70dfbf06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661525f8-2ac9-48ac-96af-2bb5455afe5a", "sighting_of_ref": "indicator--50d59243-cc13-490b-98da-0c2f70dfbf06", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ecea63-5222-4a1d-96fe-bd2778e4c552", "sighting_of_ref": "indicator--e4a6f56b-75c1-4e16-b8c5-821f2f2debc9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a625ab3d-21ee-4f5b-ba2e-d489546cb819", "sighting_of_ref": "indicator--8c267bc1-a345-47c5-aa9b-5f8f0e6fe198", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250ce370-f7ad-49e8-ad53-6c4f946bdfd4", "sighting_of_ref": "indicator--9c0ac838-62e8-4bea-b70e-d679942c6965", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d29b9f2-00e6-4f5c-8e24-e3c2c47c931a", "sighting_of_ref": "indicator--9c0ac838-62e8-4bea-b70e-d679942c6965", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f477ea-605a-4a57-a732-a40a7b11681a", "sighting_of_ref": "indicator--f373d22d-b792-4749-8619-fa885b08b3e4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa31be30-aca6-45ae-b510-8d61bb2373c7", "sighting_of_ref": "indicator--a16a0996-c213-45d1-a32e-6feea57f31a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f06e4c-a300-4d94-b5ed-13fd0d352bae", "sighting_of_ref": "indicator--a16a0996-c213-45d1-a32e-6feea57f31a8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2169165-5370-424b-bb15-c3e56ec6a0d4", "sighting_of_ref": "indicator--a16a0996-c213-45d1-a32e-6feea57f31a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2300ff5-f87b-49a3-98bb-b5ac63265931", "sighting_of_ref": "indicator--a3709fc0-3bab-47f7-b82c-b2e3498e2d7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55d2c77-8949-4861-8d57-fa942844db18", "sighting_of_ref": "indicator--a3709fc0-3bab-47f7-b82c-b2e3498e2d7b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56b288d-49a7-4f00-bfde-c5bebd1d4032", "sighting_of_ref": "indicator--af669f39-f900-4ffa-b32c-b2555a47a9f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3888369d-294d-4a4a-869a-f70bb088bf69", "sighting_of_ref": "indicator--e06d61d2-fbca-4329-8232-579d981b1d07", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5e99d1-c034-4d5c-97cd-8ca6b9b926cb", "sighting_of_ref": "indicator--07e3abc9-cc33-4b62-83e5-ac188cbffa68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a48274-57e0-4a27-9bcb-d12d079eee00", "sighting_of_ref": "indicator--2da554b0-28dd-412c-bccb-996147f9ce3f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b05f7b8-6e1c-4f47-875d-cd53f58319f9", "sighting_of_ref": "indicator--2da554b0-28dd-412c-bccb-996147f9ce3f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0f00fd-8a5d-4e4e-9aa7-82a4c9ddd1e6", "sighting_of_ref": "indicator--cf37286d-06fe-4388-a8ed-cf100d13aae1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfdef9d-5adf-46de-8cf2-717c212358a5", "sighting_of_ref": "indicator--6e438588-75f9-4701-bb1d-17a22ea01327", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3941fa78-ca86-4a0f-85c5-c66060a4dd56", "sighting_of_ref": "indicator--b73dcc84-3ab6-4eb5-a6f8-5ead8ccf5994", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4c913b-d14a-4e35-a4fc-92e0392ca8b0", "sighting_of_ref": "indicator--b73dcc84-3ab6-4eb5-a6f8-5ead8ccf5994", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7aec0c-52bc-47ec-a601-416cf00b881c", "sighting_of_ref": "indicator--0b14aa68-888d-4a6a-95ee-00a7a18e2c17", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c38201-e274-4211-8e50-0ec00135af97", "sighting_of_ref": "indicator--5400059f-9e22-45cf-aa50-15cfb8a2c7c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7479fb-afb2-4d72-82ee-3b4046736044", "sighting_of_ref": "indicator--acdf09e7-4bb3-4e4c-8c96-8f33416329bb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2bc8a5-2ec6-4e91-9a9f-9799133b3989", "sighting_of_ref": "indicator--4b715ecb-1f32-4daf-80b1-6f81229e9ef3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84b02b6-0529-47ad-8396-2908e5adcb0d", "sighting_of_ref": "indicator--4b715ecb-1f32-4daf-80b1-6f81229e9ef3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbaccc6-7950-4caf-b030-17ee3e2af49d", "sighting_of_ref": "indicator--197dd034-2629-4bed-94e6-bb22b7429e0c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83970efc-8074-4cf4-92fe-804320dd8e7f", "sighting_of_ref": "indicator--197dd034-2629-4bed-94e6-bb22b7429e0c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644942c6-d197-4c92-a39e-fe9edae10921", "sighting_of_ref": "indicator--d078f9b9-fa0f-4ec4-8cef-e20c10e2bbeb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad6a08c-7f9d-4543-875d-be37362e469f", "sighting_of_ref": "indicator--d078f9b9-fa0f-4ec4-8cef-e20c10e2bbeb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21545a5-cbcb-4848-a323-14a4083325a7", "sighting_of_ref": "indicator--e2248682-1943-46ba-bee3-19a5220fb0ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfa43ce-c797-45db-9367-5ca8eb19cd14", "sighting_of_ref": "indicator--5fff430e-c650-4dc8-a5f3-fc94adf476c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e4dc95-513c-468f-9045-52b5d78f754b", "sighting_of_ref": "indicator--5fff430e-c650-4dc8-a5f3-fc94adf476c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326f2d63-3285-4a11-80cc-f7a09d58b545", "sighting_of_ref": "indicator--4b4bd60c-1a2c-45e7-9c9b-58ba65093382", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1420e543-3612-407f-8cfc-ddb2ac5ee279", "sighting_of_ref": "indicator--09f8a688-0e6e-46eb-98ed-f382985e2f28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807578e6-67cc-4cab-b691-ded8448b17d0", "sighting_of_ref": "indicator--09f8a688-0e6e-46eb-98ed-f382985e2f28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d050e39c-97d1-4424-a55b-138051246b47", "sighting_of_ref": "indicator--edc26b84-4c94-47b5-8fc4-35241c5c2b47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ede1b4-2cbf-4651-9ee1-ecf40dad80ff", "sighting_of_ref": "indicator--3336f5f8-be29-44f6-acc0-eddfb3fae9af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd2792a-8ab1-4d76-87a5-db46c574e659", "sighting_of_ref": "indicator--3336f5f8-be29-44f6-acc0-eddfb3fae9af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e04ee55-7b93-4175-b174-c404174d6853", "sighting_of_ref": "indicator--3336f5f8-be29-44f6-acc0-eddfb3fae9af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209c3705-befc-49e2-b649-671dc22b310e", "sighting_of_ref": "indicator--127dccbb-156e-4352-a3e7-931688d2a15b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aef2e7-aef8-4e8f-81ec-49db290fdd6c", "sighting_of_ref": "indicator--127dccbb-156e-4352-a3e7-931688d2a15b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57727e04-747b-45ab-aab9-af6c3786bb8d", "sighting_of_ref": "indicator--71e03231-bca1-4c74-9d80-05080e9b7fff", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5611aef8-808e-4771-ba3e-c58d79c825f7", "sighting_of_ref": "indicator--49d3b803-b1f8-47a8-8491-e47d82a980f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6644c11-0555-49b3-906a-cc50f3668ae6", "sighting_of_ref": "indicator--f77020d5-002e-4a77-adfd-8433ff214215", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a55c00d-1b75-4d90-8fc6-b639eaf7c18c", "sighting_of_ref": "indicator--593404be-fc41-48fd-81a7-41be796f8565", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc426cf-68b3-48ba-89c1-c5039dcdefb8", "sighting_of_ref": "indicator--77dc35db-2ef9-481d-b4d3-d58b0fa8a503", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801811fb-43d9-4ee2-b406-7e08bc06050e", "sighting_of_ref": "indicator--1635da98-1f77-4fb3-8976-725bd2e37c23", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32723926-0cb5-4b0f-8c8a-ba7964a7ee6b", "sighting_of_ref": "indicator--3e769200-971c-4c29-83e8-1e0676e703c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dbf105-7248-48e7-aea1-f1e0dd8c88f0", "sighting_of_ref": "indicator--2b2d76dc-15cd-48c2-95d4-e3b87324292c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da7b0c-4d06-4282-bd7d-adbe26e6264e", "sighting_of_ref": "indicator--2b2d76dc-15cd-48c2-95d4-e3b87324292c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac25b14-0f5e-4db0-b59e-01ebbdc1d77a", "sighting_of_ref": "indicator--2b2d76dc-15cd-48c2-95d4-e3b87324292c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49edcfd-a0e2-4684-8436-fc13276f07f6", "sighting_of_ref": "indicator--466595ed-b948-4ce5-b5b3-7adbff7e2aca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b729aeee-4859-45e8-995d-07dcf905b1ae", "sighting_of_ref": "indicator--466595ed-b948-4ce5-b5b3-7adbff7e2aca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a56dc27-fc3b-4285-8089-645fbefc22fc", "sighting_of_ref": "indicator--466595ed-b948-4ce5-b5b3-7adbff7e2aca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3951f61b-256a-4a06-a614-dd6e1a50a7fb", "sighting_of_ref": "indicator--2d05a804-7b99-4800-b20a-d3d395d6b73c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14efb5a2-f43a-43e3-bd28-5bf056e4be7d", "sighting_of_ref": "indicator--eaf34db1-3894-4ab5-8f85-d44784966d28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40f7ba5-3ba1-49fb-86d6-9af90156e414", "sighting_of_ref": "indicator--eaf34db1-3894-4ab5-8f85-d44784966d28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7460a4-6471-47e3-b3cd-1a305b495c48", "sighting_of_ref": "indicator--eb0d90ab-b8aa-48bc-a219-f30b8e8df1be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e89fe3-fd03-4d32-a8b3-415adb3e01e4", "sighting_of_ref": "indicator--eb0d90ab-b8aa-48bc-a219-f30b8e8df1be", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8fb2d2-5426-4283-b1da-227e75e747ba", "sighting_of_ref": "indicator--72255cfe-b6b7-424a-99c5-bb5670987bf3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61b6719-811b-4c8f-adfd-64edf1d63786", "sighting_of_ref": "indicator--12bdd042-77f6-4efb-b63e-5b86966b8270", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd232fb-31d4-435e-ba67-13674bff166b", "sighting_of_ref": "indicator--977d86fe-5150-46e0-80e1-3a2cb5cf4d95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370c7b7d-3b67-416f-a5d2-78727b8d85cf", "sighting_of_ref": "indicator--476d5c8f-469b-4282-b9b8-8ccedf8a5035", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7f5c0d-cea7-4370-bf57-2c5801c4264e", "sighting_of_ref": "indicator--476d5c8f-469b-4282-b9b8-8ccedf8a5035", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2be9117-5628-40ef-9b3c-0c567a307ac1", "sighting_of_ref": "indicator--903a33b4-8fd2-4422-aed1-2055ddae132d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa8345f-3f35-43e5-bee4-6803bfe07d87", "sighting_of_ref": "indicator--903a33b4-8fd2-4422-aed1-2055ddae132d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f44794-daed-43d8-9a5d-547169d616cd", "sighting_of_ref": "indicator--b5928f47-fb31-4635-a7af-eb03b19a8ef2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9bc7a7-e28f-41f3-b160-4eef079bf81d", "sighting_of_ref": "indicator--b5928f47-fb31-4635-a7af-eb03b19a8ef2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc1d6c-fab8-40c1-86bd-5a367de1c3d1", "sighting_of_ref": "indicator--20f38c0d-097b-47b8-aeba-e86566d71e72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f0db5e-3ef9-4432-bf5d-f52f6d62d968", "sighting_of_ref": "indicator--98185379-351b-4047-8be7-fb4002c58d3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102fd1ff-fefa-4847-89c9-af06c0dbdebd", "sighting_of_ref": "indicator--e98a7e09-7a88-4288-89d7-754b1b77f1ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baac4690-9139-4c64-a479-95a72311c54c", "sighting_of_ref": "indicator--af6b7280-2bf0-4ea0-9cf0-83e77fcb997e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e09ce8-4ff9-4a10-b56b-be1d9be857c3", "sighting_of_ref": "indicator--9dcdb8de-fc4b-42a5-ab78-f94408ab05f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170fffbb-b9db-40cb-9714-62b40669637e", "sighting_of_ref": "indicator--9dcdb8de-fc4b-42a5-ab78-f94408ab05f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b67732-5c3b-4fe5-a6ce-ada48e8b34a2", "sighting_of_ref": "indicator--1c6f9cb0-3361-4c74-a240-495ea992de6c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aab9164-e3a2-4d98-b530-734b07dc734d", "sighting_of_ref": "indicator--1c6f9cb0-3361-4c74-a240-495ea992de6c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c794386-c86b-4976-968d-9dfdb2d68440", "sighting_of_ref": "indicator--f6b4e5bd-e5fe-4c61-93d0-68ea913fbed0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32af7086-6d95-4b13-a4f3-fb4136ac5a26", "sighting_of_ref": "indicator--7ff0f1e8-8749-481a-97f0-a1799f6d581d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4392ae15-04dd-4174-baa4-2060da90b2d9", "sighting_of_ref": "indicator--34af0233-2031-4456-8c53-be484bde51c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a9184e-c446-42f8-8d98-ea4f8c364d32", "sighting_of_ref": "indicator--34af0233-2031-4456-8c53-be484bde51c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb568c2a-26ae-497d-855a-fecbd75e5824", "sighting_of_ref": "indicator--42fce9c3-1df0-450f-b7ec-c4a26ccd6d9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72335fb-c43f-43d7-9c16-7848fd89761a", "sighting_of_ref": "indicator--42fce9c3-1df0-450f-b7ec-c4a26ccd6d9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03e5359-08ad-4ff9-9dbc-0bce2361ac8b", "sighting_of_ref": "indicator--759c8cdd-f660-41b4-b3cc-b0adee0e1074", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d71af3d-02f4-4f54-8807-3f115143b9e2", "sighting_of_ref": "indicator--759c8cdd-f660-41b4-b3cc-b0adee0e1074", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeb5ba6-73e7-499b-8d5a-d36410c3afbc", "sighting_of_ref": "indicator--c637523f-3c66-4e7f-a92b-37a5c6938914", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586b5e3b-7263-4a34-82c2-c5d7acbb637c", "sighting_of_ref": "indicator--c637523f-3c66-4e7f-a92b-37a5c6938914", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae054f5-28ce-4d44-a5e8-d2d5a83378d7", "sighting_of_ref": "indicator--e74360b6-e28a-4bc9-856f-1aa4fffa88bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e39e89f-566b-4f5a-b5f3-8af40f9ea737", "sighting_of_ref": "indicator--e74360b6-e28a-4bc9-856f-1aa4fffa88bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e613030-5796-429f-80d3-9704d0ea386d", "sighting_of_ref": "indicator--af4b6d48-1448-44fa-84b2-5d6c61d3b5c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a972c90-2d89-4483-9416-dd8630c25f15", "sighting_of_ref": "indicator--af4b6d48-1448-44fa-84b2-5d6c61d3b5c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcb3e0e-734e-4416-9464-e367df1019a4", "sighting_of_ref": "indicator--236a0fd2-eddc-495b-bee4-e59ce904c8c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2783cbb0-af13-4ca1-b166-27d430a08712", "sighting_of_ref": "indicator--236a0fd2-eddc-495b-bee4-e59ce904c8c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444aac84-9996-4788-845c-ed501ffc580d", "sighting_of_ref": "indicator--1370ac99-4ec3-466e-9239-aca0757a7a92", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e654dfd-5b4a-4865-b6d7-048049112c91", "sighting_of_ref": "indicator--6d63771a-3d74-4ae4-8211-93221246af54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50947457-f4c3-45f6-995a-6a1e627c3f86", "sighting_of_ref": "indicator--216f0bd7-4f4b-4f26-a9dc-5f249f93c77e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53441d79-d355-4148-a0d3-b264ce69a059", "sighting_of_ref": "indicator--7532c7b2-483e-43c5-963e-70bd61ad8c1c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af41d39-0802-4c2a-88a2-b4ac07488db0", "sighting_of_ref": "indicator--f488599c-2133-464d-9fd6-b0873d53b2e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222bf4ae-25b0-477a-96e4-4872eeafde89", "sighting_of_ref": "indicator--5a9a9de1-c079-4554-925f-3884ef59b12f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05714161-e860-4029-a921-24eadf478f8a", "sighting_of_ref": "indicator--40da9562-6a98-4d3a-a3d3-ac4fa7974303", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8774431b-2bf2-4d51-849a-10f363962bbe", "sighting_of_ref": "indicator--40da9562-6a98-4d3a-a3d3-ac4fa7974303", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5503e4ad-5320-4377-945e-d43910839736", "sighting_of_ref": "indicator--7084b39a-4bac-445d-bfd7-1840b58ecbd0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28faaf5b-27e2-4b03-a063-f8a6b89f0526", "sighting_of_ref": "indicator--ec502928-c5db-42be-948a-a300eb559eef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb3e5ab-39c1-44cd-b325-ea60d5614c20", "sighting_of_ref": "indicator--ec502928-c5db-42be-948a-a300eb559eef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e3cc7b-da6d-41fd-8df3-2ef0e5567e57", "sighting_of_ref": "indicator--b5333bdf-a107-4f91-8dfb-c242253b9ce3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe21df6-ed32-463f-ae60-e259d4a14154", "sighting_of_ref": "indicator--e17bab9a-85b2-4577-a60b-4a1a132154aa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1357e0ae-1475-4abd-9fec-7a2dbdff3a18", "sighting_of_ref": "indicator--f7512f62-c291-478a-88a9-4858e1f59716", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75139af3-ba94-4855-980e-25c2a75339a5", "sighting_of_ref": "indicator--5b2fe780-6c1d-4679-9014-10b79d456c86", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c506b3c-e5e9-4c90-a963-53b6dc04ba4f", "sighting_of_ref": "indicator--80fa3c6b-1eb2-4f65-9956-cf23b81b2a55", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4c05ed-02c0-4edb-8a1d-25209fa5a5e3", "sighting_of_ref": "indicator--8fc74cd1-5f9c-4592-807f-d6a3c74dcfe1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78456e72-e65e-4e18-9e2b-9c7339a7b557", "sighting_of_ref": "indicator--8fc74cd1-5f9c-4592-807f-d6a3c74dcfe1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768c9e2c-0b20-4a12-85fc-61d3240d9a6f", "sighting_of_ref": "indicator--1687bc18-49cb-4a8d-a797-7308bbf310f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f39f64-6806-4938-9f5e-38d61c8f09f2", "sighting_of_ref": "indicator--1687bc18-49cb-4a8d-a797-7308bbf310f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a68e67f-2b72-49e5-af27-f379d39e9e68", "sighting_of_ref": "indicator--1687bc18-49cb-4a8d-a797-7308bbf310f7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c04f81-ec88-48c0-a3e7-7de6283a4555", "sighting_of_ref": "indicator--571fb642-c157-4af9-8548-956f585ad148", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebd1a9f-7d55-482c-b976-81a17890ff95", "sighting_of_ref": "indicator--571fb642-c157-4af9-8548-956f585ad148", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53ee7a1-2c0b-4efc-a7a8-85aa0a1bb575", "sighting_of_ref": "indicator--f602ecf9-097a-46a4-be3c-497bda545826", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906915c1-d8cf-46b0-91e9-6769dd523044", "sighting_of_ref": "indicator--f602ecf9-097a-46a4-be3c-497bda545826", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351602f2-15f6-4c81-8344-6e90558f40f7", "sighting_of_ref": "indicator--a874952e-0d08-489c-bcfe-718769ffef34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151e539e-e702-4731-968b-bcfae750f28e", "sighting_of_ref": "indicator--827e877e-76fb-44e5-8439-76cac46b7668", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815aa55e-84f6-4e6a-a3fc-bef0700ded16", "sighting_of_ref": "indicator--2fad5324-bb64-4344-ac18-4513336aa5c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd5c24d-edb6-4839-99e5-8819d194b076", "sighting_of_ref": "indicator--2fad5324-bb64-4344-ac18-4513336aa5c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86201e89-354d-489f-a936-85b225f89292", "sighting_of_ref": "indicator--1e728757-68c2-4112-bcb8-188797493263", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b006395b-773c-48c9-8fe1-6d5c97b7c224", "sighting_of_ref": "indicator--036b95d0-153e-4339-860d-9952dfae85a8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce69638f-1cdb-46d9-bac8-7b1e10769b66", "sighting_of_ref": "indicator--43b20fab-cbbf-43d2-b553-49067b2f9ff0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517bc553-5f6a-40e8-abdb-06215f8fb94e", "sighting_of_ref": "indicator--5ed5b769-8c5e-4e42-9b15-7ac552fbfdbf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3328db3f-f95b-4a69-96c9-5c6508ce39ff", "sighting_of_ref": "indicator--5ed5b769-8c5e-4e42-9b15-7ac552fbfdbf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59ebc12-8794-4606-a875-776ead02e94d", "sighting_of_ref": "indicator--a4903375-66ba-4fdd-b5fa-c1f8b0e7e9b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc52b8a0-dafc-40d0-88dd-4afb1f73cded", "sighting_of_ref": "indicator--bd3098cd-81e8-466d-910e-9b82e84eedfe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2484fd99-41b8-4442-97eb-4c0ab984bff7", "sighting_of_ref": "indicator--bd3098cd-81e8-466d-910e-9b82e84eedfe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205a2727-aa4a-4c8c-92e6-bada8b6dbc5c", "sighting_of_ref": "indicator--1b7634c8-5bdc-4971-b2c0-70ec16e7854a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764488b9-a433-497e-98b0-b042b1b8a26c", "sighting_of_ref": "indicator--a020a5b4-b6e5-4f63-a0f2-75192b766b41", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35085e35-2604-4bf2-a628-013a1dcce581", "sighting_of_ref": "indicator--a020a5b4-b6e5-4f63-a0f2-75192b766b41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9329d327-f832-4123-8c29-4dd80255a742", "sighting_of_ref": "indicator--4b7f3fa9-051d-4b84-8b64-e40463f68744", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9d1aaf-773b-4268-bfe3-d7fe76ec6307", "sighting_of_ref": "indicator--25e9ed71-e307-4a9d-9e43-a6f95ec6dfda", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e58ddc0-af73-4523-8f41-674fbbf039d1", "sighting_of_ref": "indicator--cef52d6d-1126-4f73-8429-64d2db178b9d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e7b2d4-3bee-43bd-a82d-98a505824561", "sighting_of_ref": "indicator--682752b3-d269-40df-b8a4-9563e29e6ee5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccf8ec9-7fae-43c3-85fc-977f605cd64f", "sighting_of_ref": "indicator--61c76934-272b-4bed-8cf2-31d79f63fb8f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bad46e-4edb-462b-8864-32b2000720bd", "sighting_of_ref": "indicator--a23d89ed-e533-4b6f-a3c4-42f9c505506e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e0ff95-62cd-4ff9-a5ab-76d4ff54702e", "sighting_of_ref": "indicator--7ab51cb6-fcde-4838-a618-f94f3039b97b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e5aa8c-b85f-472e-82c2-d657d1a57f06", "sighting_of_ref": "indicator--ff46d64d-b7d3-469d-9b80-1920b80aeebb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aff9a6d-8aac-45eb-b68e-8887ae3f928c", "sighting_of_ref": "indicator--61aa82a2-7785-4d7f-9fe6-fcedb1bd6665", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e92291-6499-4179-bf4f-22641dc104cf", "sighting_of_ref": "indicator--61aa82a2-7785-4d7f-9fe6-fcedb1bd6665", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d2528b-d9af-4e8a-98a5-0f0180c58281", "sighting_of_ref": "indicator--da1ca207-a82f-4c56-a993-7e80551d0f2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9258c028-d7aa-45e8-b8b8-8fab5ae1cc93", "sighting_of_ref": "indicator--da1ca207-a82f-4c56-a993-7e80551d0f2a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cbee83-0ae7-4894-b091-4e127127f5a7", "sighting_of_ref": "indicator--9abd526d-2fbd-46c7-b512-bf90212ce35b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d81ce80-8160-4b1e-9c01-c5e7b625d5b2", "sighting_of_ref": "indicator--464e9e30-05ac-4024-8a3c-5f88e8a9fc09", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6caed2-4082-4ad9-887a-7fab0551ed88", "sighting_of_ref": "indicator--44dc23eb-1e28-468b-9c59-8048076ca151", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7d0376-8bf8-4da5-b5ea-ea873e90f2ee", "sighting_of_ref": "indicator--49950b72-89a2-4835-919b-e5b90438c241", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db3bea5-e6c0-4aee-8c35-80040bfbf63a", "sighting_of_ref": "indicator--61bfbd31-829c-413f-9066-89733b811022", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7f7155-34d6-40e3-a432-cadb87c67ef7", "sighting_of_ref": "indicator--61bfbd31-829c-413f-9066-89733b811022", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d1f1fb-3bec-4ba7-91a2-9c9d1b08f918", "sighting_of_ref": "indicator--a78e6567-7185-477c-8164-b7932a1f79d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b70572-922e-49af-9b46-b0a191671d17", "sighting_of_ref": "indicator--85607b1d-36b4-4c7e-ae75-8e29fddf5c8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015cd976-b8ab-45aa-b41c-ac1092a90341", "sighting_of_ref": "indicator--85607b1d-36b4-4c7e-ae75-8e29fddf5c8e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954dc90d-55a2-41ad-8d04-23545f895381", "sighting_of_ref": "indicator--a0572646-216b-4181-9e01-25fca6957a69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6e184f-521f-4e01-8c87-ba5eb3b0863d", "sighting_of_ref": "indicator--a0572646-216b-4181-9e01-25fca6957a69", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd60426-a04a-4d5f-accf-c8a164a097d3", "sighting_of_ref": "indicator--b2c2a36c-9981-460e-bda4-31246cc9a793", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429e5cec-ea61-4879-ace6-24f45be5df38", "sighting_of_ref": "indicator--a84cdcf0-eaa9-420d-9240-bfe227e5dd2e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a7dd82-2d53-4ab5-9241-e0ba69c2fbca", "sighting_of_ref": "indicator--9abbbcb6-9e81-4a58-a7b6-4f6183f646f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e965aa2-f3d2-4b63-aef5-8ca3e77b5fd1", "sighting_of_ref": "indicator--9abbbcb6-9e81-4a58-a7b6-4f6183f646f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82fde5b-6715-4a30-a31e-a805253569b3", "sighting_of_ref": "indicator--2ed7dd3e-8942-4f2d-95f1-f91b154cee5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64067dcc-4867-47de-9241-5adaf23a11a5", "sighting_of_ref": "indicator--fd205882-a56b-4c15-8267-34706e78bd39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01a704f-5584-4c40-80c9-215417202f9f", "sighting_of_ref": "indicator--ad476b22-7085-4dc5-921f-0c45aa979c7a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d58c01-73d1-4b71-a3d8-15652564a562", "sighting_of_ref": "indicator--c582db76-227b-42d3-97da-4fe82507d743", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03866f86-27b3-4a04-a4a9-9cd46393b0d3", "sighting_of_ref": "indicator--cc94cc71-3a8a-4882-9266-837b0597ae32", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90028ae0-b923-471c-a4f5-e358b3785e71", "sighting_of_ref": "indicator--cc94cc71-3a8a-4882-9266-837b0597ae32", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522dc1d5-32f9-4ccc-a8d2-734f6664a403", "sighting_of_ref": "indicator--7d251b10-800c-462e-a70b-8b5d61c8d83a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213f2646-bdd6-4e46-928e-f8ecae93b649", "sighting_of_ref": "indicator--cf419dea-b6c7-4081-bdd8-bb0bff821c6a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f3b4af-7456-4da5-97b5-7308e78ed037", "sighting_of_ref": "indicator--cf419dea-b6c7-4081-bdd8-bb0bff821c6a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f13a052-ab2f-41da-a2cc-278fba5e642f", "sighting_of_ref": "indicator--cf419dea-b6c7-4081-bdd8-bb0bff821c6a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08301060-b27a-444b-9b5f-adf57b3466d2", "sighting_of_ref": "indicator--e88d2b44-e76c-4ad3-9661-4bc12ca5bb70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d148c18e-c551-4799-89cc-e5a12023ccb7", "sighting_of_ref": "indicator--b833600e-4b94-407a-9170-04d52349e17e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b9ea64-74da-4ef3-95f2-3a9ff9f5fbfa", "sighting_of_ref": "indicator--78d01763-37b5-422f-976d-d93ccd99f0ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea46cac3-e5bf-48e0-a396-076f49098585", "sighting_of_ref": "indicator--fa1d60b0-1ba8-408c-9269-3aa391775e50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2da157-6fd3-4772-9815-b6fb35b2dff4", "sighting_of_ref": "indicator--fa1d60b0-1ba8-408c-9269-3aa391775e50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3e11b9-9092-4b26-8b38-6dc54f4a4eb2", "sighting_of_ref": "indicator--b0aba17e-b623-4253-9012-e65ad3160228", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13e79f9-35c0-448f-b6bc-f9a2a17a297f", "sighting_of_ref": "indicator--138ec4d0-fd8c-4d42-a767-47a168f77aa1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca9b022-92a7-4906-ada0-5a8ff6e28ff4", "sighting_of_ref": "indicator--138ec4d0-fd8c-4d42-a767-47a168f77aa1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6b2ff7-926e-49f1-84ea-0a22d91c1e4a", "sighting_of_ref": "indicator--1c26f1f4-a28c-4142-8a35-488b423d5c3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26629cff-35a6-4e12-ad67-739b20d9f4cf", "sighting_of_ref": "indicator--7e564862-513b-4dcc-a273-bee4cdd6bfd5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca6ce92-a3ee-4184-9509-f549b7b37167", "sighting_of_ref": "indicator--7e564862-513b-4dcc-a273-bee4cdd6bfd5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef23d063-8ca5-4827-aa3c-fa2c3255374e", "sighting_of_ref": "indicator--a2d9c30a-b21a-4a1d-9a4e-a67c2cada95f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7965566e-c6cf-4722-9e7e-099ef036c3bb", "sighting_of_ref": "indicator--7c6b97cf-168f-4745-96b5-b1378e4180a5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57a4285-0a01-43e1-826d-cb811367cc03", "sighting_of_ref": "indicator--f110db86-9fb1-49a4-91c0-f43488aedad3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6749f0b4-fd20-4a27-ad7d-9160e049005c", "sighting_of_ref": "indicator--f110db86-9fb1-49a4-91c0-f43488aedad3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ab2492-112a-47c2-9107-33d2b1f63810", "sighting_of_ref": "indicator--f232ef69-fdff-441c-9429-d7864d5cbc16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddcea81-30c3-4904-93bf-a2350e6cec3b", "sighting_of_ref": "indicator--f232ef69-fdff-441c-9429-d7864d5cbc16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd671160-1e56-4e83-9884-9d1066e7860a", "sighting_of_ref": "indicator--06d109f8-dcaf-4859-9651-a0543469535b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd154a-719e-4059-a41f-b01e91965658", "sighting_of_ref": "indicator--06d109f8-dcaf-4859-9651-a0543469535b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4e64c4-a813-4efa-97cb-b384737dd9c8", "sighting_of_ref": "indicator--8efa1187-8961-4526-8922-5049d99a6ffb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0116a1e1-3c36-4dca-b783-920cb722b09d", "sighting_of_ref": "indicator--4722b733-3f3c-4cf0-85c3-c6ea5d1a07ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23ceb51-b3f6-44b2-8fac-18319406f281", "sighting_of_ref": "indicator--4722b733-3f3c-4cf0-85c3-c6ea5d1a07ac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968434c-9cac-4167-b008-b015f137a45b", "sighting_of_ref": "indicator--d1122fdb-59e8-4fac-891d-a713cbab8de8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636e9a42-414e-474f-96cd-7b91a65cbe2f", "sighting_of_ref": "indicator--8d1ecb80-7c32-48df-a1d8-78f7fa9795c2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542c1b05-19ca-4c20-9e7e-aaed1612a548", "sighting_of_ref": "indicator--77501969-56cd-4dc3-841b-db9bd8aff3d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a100850c-51e1-46b5-872a-f9f06681d800", "sighting_of_ref": "indicator--77501969-56cd-4dc3-841b-db9bd8aff3d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941d8718-799e-48ae-b2bc-92dcd8bb5c0b", "sighting_of_ref": "indicator--604a1a32-96b1-4104-bba0-70794d0b4399", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d54c397-4bb6-4130-a8ae-9ef48c565517", "sighting_of_ref": "indicator--00ffd410-15ae-4325-b305-0a7aff641214", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3604b8d-0aaf-4347-becc-d9cf9e32ad32", "sighting_of_ref": "indicator--00ffd410-15ae-4325-b305-0a7aff641214", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7b0001-9efa-48fa-9ff4-5a0462946ed8", "sighting_of_ref": "indicator--f4958ce3-412e-455b-86aa-f1a3e33f5b61", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f207c3-829b-44fb-a9e4-035b36f2ccd0", "sighting_of_ref": "indicator--233260ef-f53c-44df-8bd2-cf645aee0738", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2a1cb4-ccd9-488d-926a-d965dfe00d18", "sighting_of_ref": "indicator--ed6ab65b-6401-4ea0-8b75-fd8dabf0638f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2daec35-890f-4a54-83d4-96deccd32fd3", "sighting_of_ref": "indicator--ed6ab65b-6401-4ea0-8b75-fd8dabf0638f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078c8093-64f2-4a03-aeb9-31434b34c302", "sighting_of_ref": "indicator--eb4df753-2e1e-4e83-b4f6-a1f728fe2a4d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade3b70c-ce5f-412b-aef3-6f400905d735", "sighting_of_ref": "indicator--16a62e3d-3348-4d02-bf09-5c63a5dd940b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb2da49-37e1-4312-8d51-231fafe25019", "sighting_of_ref": "indicator--640dff9e-9846-4219-804d-825b75e0383f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155fddbf-fb7d-4a2a-8148-e22f083e8746", "sighting_of_ref": "indicator--24b51ce0-60bd-4d09-abbd-efd8901c040f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd64834-8e8a-486d-afb2-46b58ad0b563", "sighting_of_ref": "indicator--dd7d0749-5fa1-4cd6-8bb4-e9e4854f63ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b9091e-de20-4c5a-807e-477ebe0bdfeb", "sighting_of_ref": "indicator--a75e73c0-af96-43e9-bdec-c30fef02f20d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67c12b6-ae0f-42a9-8944-8736ad27d984", "sighting_of_ref": "indicator--abaad1f8-a81a-4936-8328-0b79c73005b4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db06238-0096-4918-a7ca-a4a59555a1a6", "sighting_of_ref": "indicator--cd3b3ef3-1ad4-4e9d-92fe-5517e8a179ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e5750f-5f92-456a-8883-4f08366811e3", "sighting_of_ref": "indicator--537586b9-1e40-4fed-b25a-4d187905d7ff", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef79e1e-2280-43b9-a2ec-8f127dc9d9aa", "sighting_of_ref": "indicator--ffd22434-8c79-4f18-a6bf-64f5e5d2ec83", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11ce3c3-d559-4bd9-aa23-44005b3ad42c", "sighting_of_ref": "indicator--6468dde2-4c83-4510-9a6d-1bc28ae1e509", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721e6422-0916-4182-8eff-70ee26030fee", "sighting_of_ref": "indicator--c251812c-5ba7-4d3d-8ca0-cebab85ca766", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc75e82c-5a1b-4e04-837c-32bb176ae5d8", "sighting_of_ref": "indicator--c251812c-5ba7-4d3d-8ca0-cebab85ca766", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017763bf-4c4c-4683-a00d-ac0a6d6ed544", "sighting_of_ref": "indicator--c8d85edf-51e4-47fd-8204-3dde7b1648ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7af494-3e30-41a9-90f8-157dcc30cfa5", "sighting_of_ref": "indicator--c8d85edf-51e4-47fd-8204-3dde7b1648ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e073b-5554-4b18-8798-f242f3febe9c", "sighting_of_ref": "indicator--f845624a-36fe-4298-b3b4-e9c176f32b49", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7e4fa7-7646-45f8-9ee3-146c752d3193", "sighting_of_ref": "indicator--4d82753e-c8be-4471-854a-362652badeaf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bc8abe-6ba8-42c4-b1e1-607e1680c321", "sighting_of_ref": "indicator--4d82753e-c8be-4471-854a-362652badeaf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53224eaa-dbcd-4f76-97ef-70571451dcd1", "sighting_of_ref": "indicator--4d82753e-c8be-4471-854a-362652badeaf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e500e4d2-39b7-4ee7-9a28-f280ce1b31b1", "sighting_of_ref": "indicator--894d3895-2731-41c2-ab82-805a19e441de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20800876-c257-4af1-91ad-0a80d75c42d4", "sighting_of_ref": "indicator--894d3895-2731-41c2-ab82-805a19e441de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e6d715-e9d9-4c89-a569-d24bc044b902", "sighting_of_ref": "indicator--894d3895-2731-41c2-ab82-805a19e441de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabdca18-bc44-40ec-bba9-739187770b8a", "sighting_of_ref": "indicator--5e07fc74-30e3-4cae-8240-9bdbfc242ef3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3a0e6c-04ee-497e-9baa-6272a6746cd8", "sighting_of_ref": "indicator--5e07fc74-30e3-4cae-8240-9bdbfc242ef3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7376ed1-2255-44a1-813f-86d22fbb232d", "sighting_of_ref": "indicator--5e07fc74-30e3-4cae-8240-9bdbfc242ef3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d44c4-f8f2-4edd-bf83-55d2f3fc75f2", "sighting_of_ref": "indicator--8b204bca-9110-4ec8-80e9-9563b63ebf9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e26c08c-09d5-43c7-a9c7-23e4a14a64fc", "sighting_of_ref": "indicator--8b204bca-9110-4ec8-80e9-9563b63ebf9a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369edc5d-d0a4-4eb2-a417-bf1424e62e0c", "sighting_of_ref": "indicator--8b204bca-9110-4ec8-80e9-9563b63ebf9a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f08895e-61ab-48ef-8977-2a049f853dd1", "sighting_of_ref": "indicator--3cea319c-392d-43a4-8c1d-0ada80f463cf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20266ff4-aad1-428b-b21e-dfc9c03a4507", "sighting_of_ref": "indicator--3cea319c-392d-43a4-8c1d-0ada80f463cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86302e24-f16d-45a9-b475-fd431d7272fc", "sighting_of_ref": "indicator--1e5b5047-bd17-48cb-98ef-58f83442f782", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5193c633-f5f2-4064-905c-0bdf84d7b6b9", "sighting_of_ref": "indicator--1e5b5047-bd17-48cb-98ef-58f83442f782", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ecb9e2-469f-4e3e-9edb-806e63872072", "sighting_of_ref": "indicator--1e5b5047-bd17-48cb-98ef-58f83442f782", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259a3ae1-aff2-475c-828a-f82c0ee3f4b4", "sighting_of_ref": "indicator--da3c99de-32cc-42ad-9fec-70e5fbfffdb8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829550b3-47aa-4fe6-86a0-4c85471c1a90", "sighting_of_ref": "indicator--da3c99de-32cc-42ad-9fec-70e5fbfffdb8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b649eca-f53f-47ee-ad1b-7aeb75c66c16", "sighting_of_ref": "indicator--da3c99de-32cc-42ad-9fec-70e5fbfffdb8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38814fe4-967c-4198-9836-5dfd25ad9502", "sighting_of_ref": "indicator--b0711b49-3531-4ecc-85d7-c8efd90ea76e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb25674-6009-470d-b6c7-a485ea6d80b3", "sighting_of_ref": "indicator--b0711b49-3531-4ecc-85d7-c8efd90ea76e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a202b0e-08c5-4f0a-adec-a348052dc2c1", "sighting_of_ref": "indicator--c788c76c-f07e-4065-9b35-e1333c7a02d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558491bd-d794-4f3c-a119-c462bccb8f34", "sighting_of_ref": "indicator--c788c76c-f07e-4065-9b35-e1333c7a02d6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6071d59-9bb1-4947-979f-80d8c9d538af", "sighting_of_ref": "indicator--c788c76c-f07e-4065-9b35-e1333c7a02d6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ba4017-147f-4182-9d07-3f4d2d4c88c4", "sighting_of_ref": "indicator--bc7ebc30-4fe0-4566-bb13-2bc563e6af6c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ba7ab3-ea3a-4ac6-955f-59099d62e03a", "sighting_of_ref": "indicator--bc7ebc30-4fe0-4566-bb13-2bc563e6af6c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a0ae03-a201-42c3-8fdf-731391598a25", "sighting_of_ref": "indicator--24ed3fe5-f797-43e4-a35e-42894984f048", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b271f922-1abf-43ff-a359-29ea85041cf2", "sighting_of_ref": "indicator--24ed3fe5-f797-43e4-a35e-42894984f048", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96a251a-5a8b-4f5b-bc2c-096e7570037e", "sighting_of_ref": "indicator--a807aec4-238b-4b17-8326-d317502c8563", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11a6805-e154-45cc-b1bb-b405fce21732", "sighting_of_ref": "indicator--a807aec4-238b-4b17-8326-d317502c8563", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85a2f66-a3f5-4381-8edd-a8918a9f11ec", "sighting_of_ref": "indicator--558651f5-3d09-464d-8602-d34f15307152", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b174f982-ed08-423f-9399-79ca3e0a0101", "sighting_of_ref": "indicator--54cece64-1124-4851-85b1-d9e5bf7edd28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f624cbe-86ee-4d23-896e-31403ec62ec4", "sighting_of_ref": "indicator--54cece64-1124-4851-85b1-d9e5bf7edd28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149400fb-7cde-4348-9eb4-7ed1471ff93c", "sighting_of_ref": "indicator--54cece64-1124-4851-85b1-d9e5bf7edd28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ef08fc-ada8-4872-8152-4c3bc6bb9a6a", "sighting_of_ref": "indicator--22f48195-0e8b-480b-8deb-7455b31dc4a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1066cd5-cc31-4eb8-87ff-4236584abeec", "sighting_of_ref": "indicator--22f48195-0e8b-480b-8deb-7455b31dc4a7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cfe078-ffad-4f65-bf43-6e85449006fc", "sighting_of_ref": "indicator--083fc53a-7ac4-4b8a-81c0-e8bf1044fb98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dc18b0-a2bb-4c1a-a5c7-61cbdf1d1338", "sighting_of_ref": "indicator--083fc53a-7ac4-4b8a-81c0-e8bf1044fb98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4e8fe7-8e40-415f-a347-7810c6021e21", "sighting_of_ref": "indicator--083fc53a-7ac4-4b8a-81c0-e8bf1044fb98", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4880bc-3b85-4730-98dc-88bd2ea1b525", "sighting_of_ref": "indicator--ae5a94aa-5cab-45ac-abca-a4c95eb49465", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bff6d9-bfbe-4395-9b14-a4fb71bdbd05", "sighting_of_ref": "indicator--f7585a98-33c2-4756-acdc-d1415915afba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da205532-095a-4884-90d4-07b900d4cec7", "sighting_of_ref": "indicator--f7585a98-33c2-4756-acdc-d1415915afba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd80937-9507-467c-8da1-f59e7150b043", "sighting_of_ref": "indicator--486be9c7-c786-4be2-9395-41a433550a90", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a270bb-2fda-48cd-806c-f06a3ebf92bc", "sighting_of_ref": "indicator--486be9c7-c786-4be2-9395-41a433550a90", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff88a865-66f3-42a4-b5ba-fd2efb5de9bd", "sighting_of_ref": "indicator--5d724422-e0d2-482e-a940-3613e9984aed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885cd072-1012-444a-a409-142032899066", "sighting_of_ref": "indicator--5d724422-e0d2-482e-a940-3613e9984aed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b98b5b-fa60-4882-be9d-a0f421306d76", "sighting_of_ref": "indicator--bc97a2f4-1f20-4f8a-bcbf-0ee2d7604d3d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413e5f34-6ca0-4bd6-bccc-4c92bf7851e8", "sighting_of_ref": "indicator--bc97a2f4-1f20-4f8a-bcbf-0ee2d7604d3d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f40171-02b6-45e5-b1a7-f3d3f0ca445e", "sighting_of_ref": "indicator--24be00c4-40fd-4b0a-a7f5-3a26926262c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bdaadd-cc7e-46d8-ad53-a0a38165317c", "sighting_of_ref": "indicator--24be00c4-40fd-4b0a-a7f5-3a26926262c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f4496d-f2c9-47fb-b1d3-cd1049c72dee", "sighting_of_ref": "indicator--ce0371db-1c4c-438d-a120-24b35cb0bff2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bf23dd-9be7-4973-be6e-3a3fc70d7a0b", "sighting_of_ref": "indicator--7b05f4c9-4702-44af-9449-60800a311bf0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeec338-5520-4a86-ad1b-2d75b2252f50", "sighting_of_ref": "indicator--5cee64c5-079c-4e20-9be8-5fdbcafc04c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719f2649-f9a1-4772-aa30-cadad1a802f8", "sighting_of_ref": "indicator--5cee64c5-079c-4e20-9be8-5fdbcafc04c3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4808cd-57f1-4cc0-8fcb-31dc1c928315", "sighting_of_ref": "indicator--f8e65f39-eb35-4c7b-82a9-2b0724fe85b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79014ad8-7879-48be-8fc6-185ee40adfa6", "sighting_of_ref": "indicator--911bce2a-f051-4e7e-bd38-2f55abb80e1b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d94c2b-1990-48e5-bad4-3a9fa1a6f7ad", "sighting_of_ref": "indicator--911bce2a-f051-4e7e-bd38-2f55abb80e1b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bde39c-4358-48c8-8e32-0c56da0230ae", "sighting_of_ref": "indicator--e358b204-54a9-4788-a79c-b943fbcd78bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da4b35e-a55d-4935-9aa9-b0a93e0aee81", "sighting_of_ref": "indicator--e358b204-54a9-4788-a79c-b943fbcd78bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70abd19b-24ea-4344-9ed9-64e1e14795c9", "sighting_of_ref": "indicator--66b66f0c-a49f-4f1d-906f-5ddde60a6d69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfad6e2-f37c-4861-897b-5b5856990b08", "sighting_of_ref": "indicator--66b66f0c-a49f-4f1d-906f-5ddde60a6d69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bcda05-97fb-4691-b898-adede0a57dcb", "sighting_of_ref": "indicator--3d351985-166f-405c-b8f8-df4f454f6b47", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f318aa-5a38-4ee9-aaeb-96ce4a6422b1", "sighting_of_ref": "indicator--3d351985-166f-405c-b8f8-df4f454f6b47", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86151196-14d1-4461-bfcb-994292439b04", "sighting_of_ref": "indicator--3d351985-166f-405c-b8f8-df4f454f6b47", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b608395-ab05-4f8b-a9fb-8a9fc0c5af54", "sighting_of_ref": "indicator--92fcd0a8-352e-462a-bfa3-1664f19b4994", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6cfe3b-7c3c-474b-b899-3679c50a21c8", "sighting_of_ref": "indicator--f01525eb-732d-4d5c-b69d-9c3c61580c81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5c29d1-8805-4d0d-b2fa-cc6c7989131c", "sighting_of_ref": "indicator--f01525eb-732d-4d5c-b69d-9c3c61580c81", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e562d658-84a7-4e49-8f5e-3c2fd7d05d31", "sighting_of_ref": "indicator--f01525eb-732d-4d5c-b69d-9c3c61580c81", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4a227c-ada5-4576-b840-ef1bfd4bc28a", "sighting_of_ref": "indicator--4b85b169-a3fd-403d-b470-e120af2a021a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b996f1-ac9a-412a-8fa9-fa1825d00cd9", "sighting_of_ref": "indicator--4b85b169-a3fd-403d-b470-e120af2a021a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bd46c4-ea6d-4659-a6d0-7c01fb6a6775", "sighting_of_ref": "indicator--4b85b169-a3fd-403d-b470-e120af2a021a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8eee22-ce62-4d2f-923a-25a80d4668b6", "sighting_of_ref": "indicator--0b930e57-8854-4415-8674-f148057dfb4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa97a46-3c6c-4335-b676-20d9c17aaa23", "sighting_of_ref": "indicator--0b930e57-8854-4415-8674-f148057dfb4f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557a859d-0858-40cf-992b-52736c6fd955", "sighting_of_ref": "indicator--2c32d67e-05c0-4b80-8387-a388f1428f2b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4333fa8-3957-43ed-baad-0b91b937fea0", "sighting_of_ref": "indicator--2c32d67e-05c0-4b80-8387-a388f1428f2b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81af661c-e696-4a0f-ba5e-f05456148fa8", "sighting_of_ref": "indicator--2c32d67e-05c0-4b80-8387-a388f1428f2b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e321c84-ea9f-4d0c-89bd-a04c0207f146", "sighting_of_ref": "indicator--c74186e2-25b7-4b6f-9041-3f2da5abb31c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a74865-4b45-4fb2-ab8c-7705c611fbaf", "sighting_of_ref": "indicator--c74186e2-25b7-4b6f-9041-3f2da5abb31c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c9fc7a-c74f-429f-b3cd-1b2e4aebfbab", "sighting_of_ref": "indicator--c74186e2-25b7-4b6f-9041-3f2da5abb31c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb57ee89-3393-43b5-aa4d-8391cf59bbbe", "sighting_of_ref": "indicator--bd5015e8-30de-484b-93eb-3e6a67619fe7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7c23b3-cc48-43f9-800f-e3dc4f505755", "sighting_of_ref": "indicator--bd5015e8-30de-484b-93eb-3e6a67619fe7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089ae481-78db-4a18-9914-f9ed520f54fe", "sighting_of_ref": "indicator--f19a7495-0b32-485b-84dd-76c7010df7f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d707ab-532b-4a58-ae88-7d00e98138a3", "sighting_of_ref": "indicator--f19a7495-0b32-485b-84dd-76c7010df7f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f43d3bb-283a-48e1-ae82-fe22d8d1f019", "sighting_of_ref": "indicator--9feb95a4-eac0-44d0-b0c5-0cdc0d27d4a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2f52fc-467f-4385-b139-531549e4c345", "sighting_of_ref": "indicator--9feb95a4-eac0-44d0-b0c5-0cdc0d27d4a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b07a70-7062-403d-905f-3b2986be6293", "sighting_of_ref": "indicator--9feb95a4-eac0-44d0-b0c5-0cdc0d27d4a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7f2560-3042-4540-ab10-6cbd0e6f3fe1", "sighting_of_ref": "indicator--aafcb8dc-f0d7-4f6a-b175-8a1a39d577ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55de91d4-3809-49df-9c34-b2c2464931f9", "sighting_of_ref": "indicator--aafcb8dc-f0d7-4f6a-b175-8a1a39d577ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa602cb1-8b56-41d0-8a87-62a5a45c1dcb", "sighting_of_ref": "indicator--aafcb8dc-f0d7-4f6a-b175-8a1a39d577ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd27e304-9f3a-41c5-8e5c-d835d238c715", "sighting_of_ref": "indicator--ceedbaee-941e-425f-9fbd-d4f5f249368a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4f40f7-cb4a-471b-b774-87f96b8cc35a", "sighting_of_ref": "indicator--ceedbaee-941e-425f-9fbd-d4f5f249368a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0321d4d-8e17-4f1a-91e5-0ff59cc45d87", "sighting_of_ref": "indicator--ceedbaee-941e-425f-9fbd-d4f5f249368a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e995959-37cf-4bdd-9faf-b28185621bf9", "sighting_of_ref": "indicator--86fda8de-3a0d-4902-a6a2-55123a128218", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcda26ff-4d57-4d46-8db1-49cc112a9469", "sighting_of_ref": "indicator--86fda8de-3a0d-4902-a6a2-55123a128218", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb620bd3-3757-4e18-852c-d8f262cbafdc", "sighting_of_ref": "indicator--86fda8de-3a0d-4902-a6a2-55123a128218", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368d7ca6-d226-4457-abdc-8fc1dcfa3eb6", "sighting_of_ref": "indicator--106c8f6a-1ddc-4e52-81a6-9f9bca83826a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5055c102-eeb7-474d-a756-e6985eedd610", "sighting_of_ref": "indicator--106c8f6a-1ddc-4e52-81a6-9f9bca83826a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3584beb5-f423-4f39-899f-2e557c4224ed", "sighting_of_ref": "indicator--eeb2abc7-86cb-4cf7-9f4f-e97bef3b3f5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6d6ffb-092b-4830-aa9f-f84f3a8868f8", "sighting_of_ref": "indicator--eeb2abc7-86cb-4cf7-9f4f-e97bef3b3f5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0736228c-669d-4868-a35f-a113b70092e8", "sighting_of_ref": "indicator--eeb2abc7-86cb-4cf7-9f4f-e97bef3b3f5b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079ae3b9-dfcb-4643-812f-efab5309051f", "sighting_of_ref": "indicator--1acde38f-cd4d-4573-ba6c-e30af893d7a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3626ea86-fde5-47c7-9844-9febe474da7d", "sighting_of_ref": "indicator--1acde38f-cd4d-4573-ba6c-e30af893d7a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6d801f-1f05-4fb0-b87d-62fa94787cf1", "sighting_of_ref": "indicator--1acde38f-cd4d-4573-ba6c-e30af893d7a2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21f44b6-814e-4586-a2da-952479288c5f", "sighting_of_ref": "indicator--8fa1945d-4935-4c65-96d4-f87fcb900c19", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6bfde4-8df5-4933-bd60-7d3bbe404cd7", "sighting_of_ref": "indicator--fddcbeed-6355-43b1-aa93-03cff37148df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ba7b0e-d675-4df0-8fbc-9b41b6dbb0ad", "sighting_of_ref": "indicator--326f7991-2c98-43d8-95f9-8d882d353536", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad8ede5-91f1-4174-97a3-fa1b09bff999", "sighting_of_ref": "indicator--e7ff41e2-62bd-415b-8e91-0aaeda3d60a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563dcbe1-8ad0-47ea-aa02-d0f845c1e931", "sighting_of_ref": "indicator--92b6b70e-418f-4c63-b6a6-c5f1552663df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceab1f2a-4037-4f05-8758-865a7905122b", "sighting_of_ref": "indicator--bc3eaca8-3b1b-4f13-9b36-1c6f77c21112", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863b5d18-b212-450a-88d4-e7ef31197bc3", "sighting_of_ref": "indicator--26bb2c33-ca55-4e65-962d-1ebaba6bb5ea", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1aed5e-709e-4f28-9cd4-e4d75ae277a7", "sighting_of_ref": "indicator--54ab6fb6-b6c6-4c2a-aec5-829b0af75e54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05125b7-d740-489b-a8a5-881759096e7e", "sighting_of_ref": "indicator--09da4a77-0380-48b0-88ac-b65400a1d950", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d249a1-e713-42ff-9d2d-e73602a3fb8f", "sighting_of_ref": "indicator--09da4a77-0380-48b0-88ac-b65400a1d950", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b98349-75a5-43d5-8182-7d1cae4d3de0", "sighting_of_ref": "indicator--cc0c8b8d-4e12-44a4-9d71-ccd5d75f6ec1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab56709-30de-44a7-b19e-e0d63df0b138", "sighting_of_ref": "indicator--1e59527b-c560-4491-94b9-1b021f1d1c49", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29be7c21-1596-4289-8b3e-13602fa2e790", "sighting_of_ref": "indicator--d7836f39-7536-46d1-b91c-1680c03eed82", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28e071d-1651-4b54-aa8f-7616151e3fc7", "sighting_of_ref": "indicator--e811b24c-17eb-4197-ae1d-a6da8097dd94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae00456-8376-4d13-9cf1-58f1108cca28", "sighting_of_ref": "indicator--54fb689e-678d-4556-9052-b481957a9536", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e36552f-8aff-4e88-b818-bf755964c4c6", "sighting_of_ref": "indicator--54fb689e-678d-4556-9052-b481957a9536", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104ab4e5-72da-4749-a324-b864eba3d6b4", "sighting_of_ref": "indicator--04f9a865-674a-47d6-8a9a-18ed64816909", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73be8d3-8255-44ce-9051-5b9dfd8a2046", "sighting_of_ref": "indicator--81c06741-b480-43e8-8b5e-df5aa7f86b66", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ac5241-094e-427d-9db2-85405d41c807", "sighting_of_ref": "indicator--65ce515c-33ce-4ecb-a204-866e566b6d8b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b85c6a-3604-4654-bd76-67f347ce3e87", "sighting_of_ref": "indicator--65ce515c-33ce-4ecb-a204-866e566b6d8b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbbcf2b-d99f-49f2-ac39-ec3e1f4eb6cc", "sighting_of_ref": "indicator--65ce515c-33ce-4ecb-a204-866e566b6d8b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e16272e-1680-4c54-a6c9-5da221fac2ee", "sighting_of_ref": "indicator--63e9eb17-8dd5-48b3-b4ee-74cbf3373656", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d76f27-2f53-4822-bd4d-317f434021a3", "sighting_of_ref": "indicator--63e9eb17-8dd5-48b3-b4ee-74cbf3373656", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a20838-4101-4799-9d7d-3cb70aa97550", "sighting_of_ref": "indicator--78b53846-5655-4091-b2ef-8903ebfdcd93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8355e0cc-d91e-4b5a-910a-1b7bc2f61df2", "sighting_of_ref": "indicator--8d8c64ce-0b47-49bb-8f01-44448f898172", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e48966d-0c9b-477f-84bd-fc315e0d18a4", "sighting_of_ref": "indicator--56ef4eb9-92aa-44ea-818e-4b134440a9eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d32455e-32ea-4b2f-82df-e2d06589396f", "sighting_of_ref": "indicator--9609565b-caa9-43d3-92e6-64d8ea42353b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1f0e9f-660f-464b-b33e-adb612b3fe6e", "sighting_of_ref": "indicator--9609565b-caa9-43d3-92e6-64d8ea42353b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d88ab-557b-4350-891c-68158921ee7a", "sighting_of_ref": "indicator--70e33684-280b-4940-bebb-96b4e4ae51b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad4ec54-8ae1-4a5d-883a-ce5d93263901", "sighting_of_ref": "indicator--0e104725-416a-4efb-a92b-e8b423622ac7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21417cba-dc60-40e3-878f-5d1200901031", "sighting_of_ref": "indicator--6ae6ba55-2c9f-44e8-a89a-184c73b3a47d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa50c49-3547-4335-aa7a-496394b15ea6", "sighting_of_ref": "indicator--0ae7e6d1-72b9-4429-9998-8eeceed08fd5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e34b4d-8fdd-4243-91a7-2740873efbd6", "sighting_of_ref": "indicator--0ae7e6d1-72b9-4429-9998-8eeceed08fd5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e4664f-7242-47d5-9907-e2e37f9d1435", "sighting_of_ref": "indicator--f67ddc67-8ea4-4df8-8a8c-a3d102b4e324", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d794e0f-098a-4281-9317-7cabba4d1745", "sighting_of_ref": "indicator--84a31f92-8ab0-41fd-99c3-3b275a42663a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae4b3a3-6f3b-45cd-a498-d424d5438c8f", "sighting_of_ref": "indicator--84a31f92-8ab0-41fd-99c3-3b275a42663a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd533fae-18cf-47e4-b5e9-a5199d6b0c8f", "sighting_of_ref": "indicator--941ee4ea-4bca-4665-9946-c189cbe215f3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1b0eeb-3f81-42f1-8e17-9a48334afb0e", "sighting_of_ref": "indicator--941ee4ea-4bca-4665-9946-c189cbe215f3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722643d9-e023-4401-aa1e-23ecdaf48270", "sighting_of_ref": "indicator--0c728a9b-7963-46d7-a9a3-9b15650a7efe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8d4759-baae-4b04-ad0a-e498a26ce4aa", "sighting_of_ref": "indicator--0c728a9b-7963-46d7-a9a3-9b15650a7efe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e80ed16-8d69-4c21-afab-4a31bab090b5", "sighting_of_ref": "indicator--0c728a9b-7963-46d7-a9a3-9b15650a7efe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fdf175-99b6-431c-8f83-e24c3b183b4e", "sighting_of_ref": "indicator--056a9aa6-7f90-4a0f-bee3-58c3eb150c89", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe2d588-ead5-4bc8-893c-4f7c8d7467f4", "sighting_of_ref": "indicator--056a9aa6-7f90-4a0f-bee3-58c3eb150c89", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d371edc2-c982-4d23-9948-79fa77899d19", "sighting_of_ref": "indicator--056a9aa6-7f90-4a0f-bee3-58c3eb150c89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badda71f-1028-46b4-9d0b-7f9ee5657836", "sighting_of_ref": "indicator--3fc1c7f5-4c67-4390-a59f-5160af6cb7c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae47622-c3ba-4841-98a3-4e3920e1f6eb", "sighting_of_ref": "indicator--3fc1c7f5-4c67-4390-a59f-5160af6cb7c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1adec0-48c2-45a4-b5bb-3d7022db29f2", "sighting_of_ref": "indicator--3fc1c7f5-4c67-4390-a59f-5160af6cb7c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dae7e07-5d03-437c-a07c-ee68cda4d3c3", "sighting_of_ref": "indicator--9f984b95-c8e9-494d-bbe5-5c6426b43220", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b51a380-c47d-4bab-a750-012d9bd3f5f7", "sighting_of_ref": "indicator--9f984b95-c8e9-494d-bbe5-5c6426b43220", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96285b88-9448-43d8-bde2-b76bc1b7e67d", "sighting_of_ref": "indicator--9f984b95-c8e9-494d-bbe5-5c6426b43220", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb988483-d48d-4116-a5cb-32c33c350abe", "sighting_of_ref": "indicator--7bbd2266-d8a7-49d8-8f3d-55bc2d87b129", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223bff6-a876-4b10-8989-b4f58e73ab01", "sighting_of_ref": "indicator--7bbd2266-d8a7-49d8-8f3d-55bc2d87b129", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81214344-157f-4294-9fe8-89054cd54384", "sighting_of_ref": "indicator--7bbd2266-d8a7-49d8-8f3d-55bc2d87b129", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfefd2d1-efe6-4b07-ae39-39d78d2f0735", "sighting_of_ref": "indicator--7e27c751-f1aa-4c1e-8316-a0a2ad107cf0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c193895d-7f8b-4900-b672-24639ed52429", "sighting_of_ref": "indicator--7e27c751-f1aa-4c1e-8316-a0a2ad107cf0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea01641-c859-47f2-ac67-618bbd938b4a", "sighting_of_ref": "indicator--7e27c751-f1aa-4c1e-8316-a0a2ad107cf0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fcb76a-982e-48d2-912f-5a745e137281", "sighting_of_ref": "indicator--97dafcdb-0693-46d8-ac43-9c4cc29afb7e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fa72bc-3af4-4abc-988e-3170830006a6", "sighting_of_ref": "indicator--ba9df6e5-4400-4444-af3f-d7da2c21e4de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24947b0d-c46d-461e-ad36-6af424f65acf", "sighting_of_ref": "indicator--b926d1af-e4b9-4b51-80c1-7a7d724d5d21", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00614d1c-8fe6-4f0d-a10f-f8431ab4a4dc", "sighting_of_ref": "indicator--b926d1af-e4b9-4b51-80c1-7a7d724d5d21", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bb6868-0dcf-4f9c-9957-de2a0a5b99dc", "sighting_of_ref": "indicator--134c4a16-06aa-4895-b84b-703463a911a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079cdf31-b483-4ab0-b079-69487bb43207", "sighting_of_ref": "indicator--134c4a16-06aa-4895-b84b-703463a911a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea994e47-1f69-4c91-8317-ef64bf2e1d8b", "sighting_of_ref": "indicator--134c4a16-06aa-4895-b84b-703463a911a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944dfdbd-2ff4-401d-9380-0ba0719c8942", "sighting_of_ref": "indicator--6e0a89c4-8662-4f15-806a-ebfa5ca9fc5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba46d54-a50e-4443-842b-87dd2360f7a4", "sighting_of_ref": "indicator--6e0a89c4-8662-4f15-806a-ebfa5ca9fc5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0be3c8-f997-4ec8-819e-3a7247d9ee7b", "sighting_of_ref": "indicator--5ba44c63-3b96-44f6-9b80-b37cf4711955", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64106098-eb85-4474-ae91-89ecc7be3f4b", "sighting_of_ref": "indicator--3e7e1db2-29de-4aef-8f96-c860986423d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947658c6-8a81-437f-9a23-f289152e63d7", "sighting_of_ref": "indicator--2bf5c442-b8be-4aad-9049-c94bcb3d150e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ab1f97-4e4a-4dab-bb2a-6634c0b25644", "sighting_of_ref": "indicator--4cd905d1-695c-4b2e-bd50-39727726170c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e324665-d479-44aa-abfc-bcdc392f80a9", "sighting_of_ref": "indicator--4cd905d1-695c-4b2e-bd50-39727726170c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285585ca-ad39-4336-a32a-7aa65696a6fa", "sighting_of_ref": "indicator--d532f04d-cea8-4a79-b792-d9f5c1561a25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f9d13f-877d-443d-a248-98fa69b980cd", "sighting_of_ref": "indicator--d6bf9ba2-b27f-48fe-b19c-19ea3960f416", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eaac89-0761-4047-bb71-7488efad912e", "sighting_of_ref": "indicator--d6bf9ba2-b27f-48fe-b19c-19ea3960f416", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5c6512-2e67-4df5-9c42-a4b7e6c05817", "sighting_of_ref": "indicator--d6bf9ba2-b27f-48fe-b19c-19ea3960f416", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97f2dd1-cd0c-4f1a-bdfb-a2669667bd53", "sighting_of_ref": "indicator--eabe3730-0dc0-4711-8a49-3b8d0bdbd1bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa63fd21-0e6b-49e1-8ea0-2468a7fad1a4", "sighting_of_ref": "indicator--eabe3730-0dc0-4711-8a49-3b8d0bdbd1bc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d91dde-7b13-4d72-837e-b67705a9f2cc", "sighting_of_ref": "indicator--19a73e67-9d62-4387-89c2-f2dc3c60be53", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a29da7b-852c-4d0f-b52d-02da02a5442c", "sighting_of_ref": "indicator--19a73e67-9d62-4387-89c2-f2dc3c60be53", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f33a1ba-c9f2-4ba5-8be9-60050cb59420", "sighting_of_ref": "indicator--6ffa1d2c-6332-40bc-9c76-0cf17359d30b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53579de5-212f-4d2b-823e-05f6b7eab0d7", "sighting_of_ref": "indicator--6ffa1d2c-6332-40bc-9c76-0cf17359d30b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4851e158-0b4f-4d38-a1bd-3eb8ffbea36f", "sighting_of_ref": "indicator--6ffa1d2c-6332-40bc-9c76-0cf17359d30b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a44817-2068-46dd-9ed2-b129760f8c3c", "sighting_of_ref": "indicator--109f327c-ce8e-4822-8ebc-4ba436210ed1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da61297f-53f6-4866-ae7c-01334a7f0b4d", "sighting_of_ref": "indicator--ed314329-e22b-4b19-b24a-146048b26458", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6182ecd-e073-4366-a856-1201e871f44d", "sighting_of_ref": "indicator--ed314329-e22b-4b19-b24a-146048b26458", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf9a8cf-4f10-4cb2-8e63-23b53b8e4316", "sighting_of_ref": "indicator--ed314329-e22b-4b19-b24a-146048b26458", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e45ddc-730b-426b-b4fb-c578e8e18210", "sighting_of_ref": "indicator--12d2133b-c770-4329-aeb6-4b3c7c123d56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206aeb88-ed12-4a1d-862d-6f9ba678826e", "sighting_of_ref": "indicator--12d2133b-c770-4329-aeb6-4b3c7c123d56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ac7c5f-1977-4bfb-a6ca-12712130877d", "sighting_of_ref": "indicator--11513bff-f473-4497-81c3-3e0c7111f6c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2ed45d-931b-4723-bea6-afc58b653f35", "sighting_of_ref": "indicator--11513bff-f473-4497-81c3-3e0c7111f6c0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc27a495-69ba-43ef-9a06-c2961db77b4c", "sighting_of_ref": "indicator--11513bff-f473-4497-81c3-3e0c7111f6c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9ca5d4-087e-4714-b96f-6bc0de37f7d6", "sighting_of_ref": "indicator--3dd9e62a-ced2-4b80-93c6-15fd6e5a033d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90288ef5-aab8-4975-a402-1fa37fc529d7", "sighting_of_ref": "indicator--3dd9e62a-ced2-4b80-93c6-15fd6e5a033d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539f5385-14e0-4f08-858b-6e6fac2685b0", "sighting_of_ref": "indicator--3dd9e62a-ced2-4b80-93c6-15fd6e5a033d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c8f983-f8aa-4633-a5b1-a88af114a011", "sighting_of_ref": "indicator--a765311f-6fc8-48c7-897e-2c2c561e5745", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0368152-ed09-4a4a-b5fd-1197d20d04bd", "sighting_of_ref": "indicator--a765311f-6fc8-48c7-897e-2c2c561e5745", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9361d3-91a1-4cb3-8d37-b2ba092d3099", "sighting_of_ref": "indicator--5144bf15-96b4-4646-bea0-06e1c5e072ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8f7e63-f3ee-4177-935c-99ed9ce9e966", "sighting_of_ref": "indicator--5144bf15-96b4-4646-bea0-06e1c5e072ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec63d90b-dbcc-48bf-a6dc-f80c6b859187", "sighting_of_ref": "indicator--5144bf15-96b4-4646-bea0-06e1c5e072ed", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d25724-0196-4951-bd92-3ed7f77ef3b5", "sighting_of_ref": "indicator--89d83a64-6c14-4eaa-aea7-1532739d7cd8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e0e5db-fc5a-4b51-83ab-a4c7d0eb5e5f", "sighting_of_ref": "indicator--89d83a64-6c14-4eaa-aea7-1532739d7cd8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03063b3a-15c2-4ae3-a637-fea7fa18b5ce", "sighting_of_ref": "indicator--89d83a64-6c14-4eaa-aea7-1532739d7cd8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9320700d-b772-44c1-a8f6-ae855e702682", "sighting_of_ref": "indicator--7d30ca12-ff26-4b9b-a519-be8aec6da4b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05534d6e-7b66-42e8-bffc-d0f334db286a", "sighting_of_ref": "indicator--7d30ca12-ff26-4b9b-a519-be8aec6da4b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3815a5fb-ccdc-443e-930e-3306d00301f5", "sighting_of_ref": "indicator--7d30ca12-ff26-4b9b-a519-be8aec6da4b5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d476addf-d658-42d0-8d2f-82e2ad04c754", "sighting_of_ref": "indicator--93f96de5-3ced-4cb5-8207-6c9e15464f59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5aecd28-0d10-4d8c-8c6c-14b7fff19535", "sighting_of_ref": "indicator--93f96de5-3ced-4cb5-8207-6c9e15464f59", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf788cdf-0b2f-4b6f-be42-00a3a62beab7", "sighting_of_ref": "indicator--4de01b13-13d9-464b-b593-3f9e270f69fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a64bf63-ed98-4bf7-abb7-80008f77067f", "sighting_of_ref": "indicator--4de01b13-13d9-464b-b593-3f9e270f69fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5c6157-9887-46c4-874b-de2b3a415d8e", "sighting_of_ref": "indicator--4de01b13-13d9-464b-b593-3f9e270f69fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80de6a2e-d837-4095-9af7-97785b869885", "sighting_of_ref": "indicator--da62cfde-8dc8-4229-9275-4f1d8b0b0f28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1418d5-8fce-4e8b-bbe9-00faedaff59e", "sighting_of_ref": "indicator--da62cfde-8dc8-4229-9275-4f1d8b0b0f28", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52b90b0-ff9c-43df-9e80-2e5eefe501e0", "sighting_of_ref": "indicator--da62cfde-8dc8-4229-9275-4f1d8b0b0f28", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ab3a9c-030d-4848-a077-3506e7b5fada", "sighting_of_ref": "indicator--4fae8ffd-317b-47e2-9671-799dab16f021", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb35b044-b4e1-4ea9-b994-0196465e347c", "sighting_of_ref": "indicator--521d018c-74b4-4b0b-a121-23d3f7f6f2ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518d9e1b-ab36-42cb-be58-6cf3d9f07ac3", "sighting_of_ref": "indicator--96c9a53a-330f-404c-91f3-931c4c553973", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c021f0-c2d3-48f2-b081-a846b90a30c3", "sighting_of_ref": "indicator--93190c4b-7c52-4b8b-a648-614353c7c71c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9d9c7a-5bac-4bc0-bbff-2e73b0ac1b41", "sighting_of_ref": "indicator--c218021f-4ea8-4eba-a54a-bbdf6a425e07", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7af665-781f-48d3-ba12-7ca5ba713a49", "sighting_of_ref": "indicator--deff11d3-3897-4dc4-8667-cf40b6ba5070", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7549bcbe-d139-4de9-885c-6d59e7dd8b6a", "sighting_of_ref": "indicator--deff11d3-3897-4dc4-8667-cf40b6ba5070", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a338e3-bb5c-4125-9b5f-aae30f98d693", "sighting_of_ref": "indicator--069ce723-0491-427e-8e3d-ef6138e21870", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35154223-43eb-484e-be55-f8e3f3efb401", "sighting_of_ref": "indicator--47c3c307-f215-4d0d-b551-c7e46e9e8db0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d18cdc7-e848-4eb7-837b-b87cd7c204bd", "sighting_of_ref": "indicator--89ff1ba9-44e4-47e9-a26f-5fda6c8a3a65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972ba4a0-6381-476e-b52e-ed8c53592546", "sighting_of_ref": "indicator--5f5bd771-6616-4443-86ea-bd9d1d540756", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bba446b-c195-44ee-be55-e142549be561", "sighting_of_ref": "indicator--d22bba8f-92f5-499b-aff3-dc16cf8dda30", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da34dd5d-803d-43d3-8418-e0ac3033ab16", "sighting_of_ref": "indicator--00e942fe-1c81-4185-805b-137b043bcaad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cba4490-a9da-4e58-a036-6d6e4d90ef6f", "sighting_of_ref": "indicator--62c3e22a-0e7a-40c5-8c8a-e9cbd0147fe1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75b86fc-456b-4156-9962-fcfcc4de3c3b", "sighting_of_ref": "indicator--9712ca69-1190-4856-850a-e68f01da56c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f5e4a3-c48f-4186-8ea8-46864b373ac2", "sighting_of_ref": "indicator--9712ca69-1190-4856-850a-e68f01da56c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba7efdb-870e-4b7e-b7c8-66e6293b2734", "sighting_of_ref": "indicator--9712ca69-1190-4856-850a-e68f01da56c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e49aca-77d1-4eb7-a294-452126f4a447", "sighting_of_ref": "indicator--de6f70c3-3fd5-4d5e-9038-12d07a874059", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c522b510-12de-4590-8f38-437d4cc59389", "sighting_of_ref": "indicator--de6f70c3-3fd5-4d5e-9038-12d07a874059", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8879ab17-83e7-4485-99e0-851b84c08488", "sighting_of_ref": "indicator--de6f70c3-3fd5-4d5e-9038-12d07a874059", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afccea4-2c92-43eb-817d-8c209eca1acd", "sighting_of_ref": "indicator--71071cd0-43a0-4a54-be4b-434da06ecc54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e01b8a-85ec-433d-b17a-b16c513c505d", "sighting_of_ref": "indicator--71071cd0-43a0-4a54-be4b-434da06ecc54", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd357e-fe3d-4b53-9d84-ae86d70ff10c", "sighting_of_ref": "indicator--71071cd0-43a0-4a54-be4b-434da06ecc54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae17d4f3-b989-4ff6-b42d-a15af08e9b4a", "sighting_of_ref": "indicator--3b44ea1f-b154-4cd6-9953-f2ae54712ad5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33c2b5b-ca13-473d-b551-980d9dbdf759", "sighting_of_ref": "indicator--febe2e9d-540f-4932-babe-212664edb631", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0f204a-83cc-4dc6-94dc-6799c75cae93", "sighting_of_ref": "indicator--febe2e9d-540f-4932-babe-212664edb631", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9415109-e9ce-43e3-b2bf-87fd3493b15f", "sighting_of_ref": "indicator--a0c4e268-e5ac-417e-9acb-a36857701304", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb3a79b-7e72-4d43-b59f-5961d51959a6", "sighting_of_ref": "indicator--a0c4e268-e5ac-417e-9acb-a36857701304", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f61b129-aad1-43f6-b8a2-0a01162d8600", "sighting_of_ref": "indicator--7477a1c0-1c86-482e-9e69-62338c2bb4f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a007d49c-b8c7-4c57-af06-37a2281598a4", "sighting_of_ref": "indicator--7477a1c0-1c86-482e-9e69-62338c2bb4f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5bd0d7-ee9c-4e6a-b80c-ab319b675225", "sighting_of_ref": "indicator--7477a1c0-1c86-482e-9e69-62338c2bb4f9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d6f308-ed34-4b82-9a32-ea89dc4106bc", "sighting_of_ref": "indicator--1ac74847-8d5e-40d3-bff5-92ae776b9ea6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f990080-b0e8-43c3-b2c9-87e8005f2f0d", "sighting_of_ref": "indicator--1ac74847-8d5e-40d3-bff5-92ae776b9ea6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9189b82-5720-4782-b340-4224c8274941", "sighting_of_ref": "indicator--1ac74847-8d5e-40d3-bff5-92ae776b9ea6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f20e657-dce9-46cd-af50-6321e9e7355f", "sighting_of_ref": "indicator--4ddc7103-d42d-4931-8d4d-20e14b318f63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50ff5a1-c517-4725-b368-f9f0fc29bb09", "sighting_of_ref": "indicator--4ddc7103-d42d-4931-8d4d-20e14b318f63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed39a61-ff2e-4912-9793-8143565e1faf", "sighting_of_ref": "indicator--5d3b7a24-48c2-4dc0-88af-86fc3a26987f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c47fd39-d83a-45ee-96b7-e74147624e07", "sighting_of_ref": "indicator--5d3b7a24-48c2-4dc0-88af-86fc3a26987f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08067f5-e904-4c9b-8f01-4462bc334d11", "sighting_of_ref": "indicator--5d3b7a24-48c2-4dc0-88af-86fc3a26987f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b009a7d1-ad18-4ddb-8c57-3d9c3b22fa17", "sighting_of_ref": "indicator--8782012b-1431-4729-8672-b1b0d66cb711", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f619116-edcf-4b1f-ad44-148a78fc438e", "sighting_of_ref": "indicator--8782012b-1431-4729-8672-b1b0d66cb711", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18e0d89-fd20-4c73-b143-f9ada4eb9e63", "sighting_of_ref": "indicator--85cd870e-8171-44f6-85fe-e8cff12e2791", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73f8842-cce1-4060-bccc-7fff028ffb2e", "sighting_of_ref": "indicator--85cd870e-8171-44f6-85fe-e8cff12e2791", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9110fa1d-0880-4959-916d-fd394f2f70a2", "sighting_of_ref": "indicator--dbc17903-367b-42fe-aaad-0e92685944b3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39558615-23f1-4257-a7d7-2e13a28ef09a", "sighting_of_ref": "indicator--dbc17903-367b-42fe-aaad-0e92685944b3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73152931-e6f9-47c7-9dbe-6ef0628e0365", "sighting_of_ref": "indicator--dbc17903-367b-42fe-aaad-0e92685944b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b027ee9-53a2-4d49-949a-fd6c308be903", "sighting_of_ref": "indicator--8b1036bb-8c70-4c45-bf34-df234301270a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250149fe-0692-4f94-9604-6431e54bc171", "sighting_of_ref": "indicator--8b1036bb-8c70-4c45-bf34-df234301270a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c65693d-4561-48ed-89d7-894c468e0f0a", "sighting_of_ref": "indicator--91d7ea2f-3745-436f-abb7-3ff6513bdd2b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbc3ef6-3209-4215-b065-18723d898bd5", "sighting_of_ref": "indicator--91d7ea2f-3745-436f-abb7-3ff6513bdd2b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc205029-3b1d-408c-8c93-756b6aa3da06", "sighting_of_ref": "indicator--91d7ea2f-3745-436f-abb7-3ff6513bdd2b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57feabc-b081-427d-bb5c-2abfd7886e39", "sighting_of_ref": "indicator--56640d0a-64f6-4bf6-8975-edc2ad44a74a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ada89e7-a5c5-4105-90bc-cd7f790a2906", "sighting_of_ref": "indicator--56640d0a-64f6-4bf6-8975-edc2ad44a74a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5fdbc1-c457-4a06-9609-41a65e957a14", "sighting_of_ref": "indicator--bc28ca8c-8f43-44bf-8b2f-9264282e9f45", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af2b2df-b458-4f80-8611-fc3c1991cf83", "sighting_of_ref": "indicator--c8e4000b-196b-4c02-b3d8-fd97db649c16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93808613-ee88-434a-9e02-9e91164b25e5", "sighting_of_ref": "indicator--c8e4000b-196b-4c02-b3d8-fd97db649c16", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4ea0eb-7536-4f56-a193-40d0a2d32bb7", "sighting_of_ref": "indicator--c8e4000b-196b-4c02-b3d8-fd97db649c16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b987520c-784c-4abc-81a7-e389218ba94a", "sighting_of_ref": "indicator--3042a303-025e-4ab4-b572-6e6cfb641d5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68145749-9740-4bc4-8e32-30d3c2ed73a1", "sighting_of_ref": "indicator--3042a303-025e-4ab4-b572-6e6cfb641d5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b32b126-d411-40c4-819d-f8733c874ef9", "sighting_of_ref": "indicator--af5cc4a2-3949-4c39-94f6-e39d1aa1f770", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f418adaa-5e03-4556-a770-d3d2931e2d66", "sighting_of_ref": "indicator--af5cc4a2-3949-4c39-94f6-e39d1aa1f770", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a6f40e-8f26-4ee2-98c4-280e531a32cc", "sighting_of_ref": "indicator--e30d55e8-1d53-44b6-a21e-ce4a4a75516d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf94d7d-b612-42fb-a9e4-fa6754ec2756", "sighting_of_ref": "indicator--e30d55e8-1d53-44b6-a21e-ce4a4a75516d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fe24b2-0404-40aa-9b6a-c948ba9d3851", "sighting_of_ref": "indicator--e30d55e8-1d53-44b6-a21e-ce4a4a75516d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf4ee9d-6598-4704-bec6-24cb47e0dade", "sighting_of_ref": "indicator--a6175fe0-5d6c-47f8-89e5-b5883bbd66dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dc825e-a5ee-49a7-8060-110ba2690abd", "sighting_of_ref": "indicator--a6175fe0-5d6c-47f8-89e5-b5883bbd66dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9b692b-89bf-4eb6-82ba-adcd952b7e77", "sighting_of_ref": "indicator--a6175fe0-5d6c-47f8-89e5-b5883bbd66dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1daf30-149d-489d-957f-e1ddfea1faf5", "sighting_of_ref": "indicator--3b0e63a6-3b7f-482d-a3ec-e99323ba2263", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abbbfdf-bdf0-4f7c-97c6-2c35c64bb4db", "sighting_of_ref": "indicator--bd1f389a-ff76-4506-83dc-ce00afb293c4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9895f0-c718-47ab-9402-ff4f1fbce609", "sighting_of_ref": "indicator--bd1f389a-ff76-4506-83dc-ce00afb293c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0007c760-bd34-489e-85b2-2814ea41918d", "sighting_of_ref": "indicator--acdc2dd9-34c9-431d-b741-d71d5f184874", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591b849a-73ca-4a40-a79c-d80ce9cb71cf", "sighting_of_ref": "indicator--acdc2dd9-34c9-431d-b741-d71d5f184874", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6294faf6-7138-4faa-b584-530188b153a0", "sighting_of_ref": "indicator--acdc2dd9-34c9-431d-b741-d71d5f184874", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f934705a-da25-4d79-8e57-4e14a1aeb82e", "sighting_of_ref": "indicator--cd2ef4d9-4cd3-4a03-b149-9ab0b882cb3f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c56e26b-bbc7-466b-b024-40ff65991b81", "sighting_of_ref": "indicator--cd2ef4d9-4cd3-4a03-b149-9ab0b882cb3f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd88214c-2636-433e-9e19-662f84b807c7", "sighting_of_ref": "indicator--cd2ef4d9-4cd3-4a03-b149-9ab0b882cb3f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17eba8a-43fa-49ba-b4ea-30f3bdc90be9", "sighting_of_ref": "indicator--266e9ce7-7e2f-4a3b-b82e-52083ae85f2f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84660198-b82b-4af2-91d9-7f0270515407", "sighting_of_ref": "indicator--266e9ce7-7e2f-4a3b-b82e-52083ae85f2f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0defc5-5621-4c80-859a-bb8189765537", "sighting_of_ref": "indicator--cba72b54-5132-4c35-936d-d39b15bb52cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ed6139-95f1-434d-b36f-effb73b1bb03", "sighting_of_ref": "indicator--cba72b54-5132-4c35-936d-d39b15bb52cd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c2374-408e-47e7-8c7b-ca375ba68916", "sighting_of_ref": "indicator--cba72b54-5132-4c35-936d-d39b15bb52cd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96b79ab-b994-4fb0-9fdb-dd0b9db1362e", "sighting_of_ref": "indicator--017d1146-07e0-4d00-8a4c-a5c77665ad98", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e017aa96-4011-49c5-9591-c21631a31a37", "sighting_of_ref": "indicator--017d1146-07e0-4d00-8a4c-a5c77665ad98", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e800ad8a-cce5-40f4-8786-0841241f287c", "sighting_of_ref": "indicator--5b3decca-c3e1-49e1-811a-f426f8bb1881", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3f7678-fe74-468d-92d5-be94f4cbac3e", "sighting_of_ref": "indicator--5b3decca-c3e1-49e1-811a-f426f8bb1881", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d58791-b1f1-4df6-b0b7-734778440a0d", "sighting_of_ref": "indicator--5b3decca-c3e1-49e1-811a-f426f8bb1881", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8ec0fe-916b-4799-bac9-cea3e7ade8cc", "sighting_of_ref": "indicator--0c739687-0527-48bc-a199-a0e3f9cfde4c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8132bb-3ba2-4370-a8e6-3df09fd79870", "sighting_of_ref": "indicator--01dbe088-1cb9-42b0-bf7f-07853519819a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28cf560-be01-4c2e-a250-64266ec16a91", "sighting_of_ref": "indicator--01dbe088-1cb9-42b0-bf7f-07853519819a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab86776-be2d-443a-8497-d46f10f5dfaf", "sighting_of_ref": "indicator--01dbe088-1cb9-42b0-bf7f-07853519819a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c466393-7c2e-4410-a68f-d0d06e3aff2b", "sighting_of_ref": "indicator--a47715fb-23d5-4e9e-8aad-a3e4b59395f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd5042a-08e9-41d7-a235-5878966cfdd8", "sighting_of_ref": "indicator--a47715fb-23d5-4e9e-8aad-a3e4b59395f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3d77e9-4022-4e09-ae25-395f58087843", "sighting_of_ref": "indicator--a47715fb-23d5-4e9e-8aad-a3e4b59395f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1352e94f-db04-4c6c-b040-8474b0ae88c2", "sighting_of_ref": "indicator--53f71082-18e2-4792-a655-08bf15719d5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bda940d-ac5a-437c-9c06-7b1e24b709de", "sighting_of_ref": "indicator--53f71082-18e2-4792-a655-08bf15719d5f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ee9b9a-bf8f-4b69-a4fd-7fe5fcefe20f", "sighting_of_ref": "indicator--53f71082-18e2-4792-a655-08bf15719d5f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9c6a51-a21f-4fc1-8b3c-08dcb1ebeb92", "sighting_of_ref": "indicator--e95e235e-21a4-4bd6-a79f-49d838969bac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee79a66-9e5c-47f0-afbb-b697b9b750d9", "sighting_of_ref": "indicator--e95e235e-21a4-4bd6-a79f-49d838969bac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de3ca53-3ad2-4c03-8b1b-b072e31d1a9d", "sighting_of_ref": "indicator--e95e235e-21a4-4bd6-a79f-49d838969bac", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eb31d7-b8d8-4bbf-81e1-d28677117e69", "sighting_of_ref": "indicator--d26057d7-157e-4752-a437-126abb790d3a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca2ad4d-ddac-4039-9b0d-3cd9fd676541", "sighting_of_ref": "indicator--d26057d7-157e-4752-a437-126abb790d3a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f4eb3e-659c-4f0d-8657-c16d00d536f0", "sighting_of_ref": "indicator--c0022022-ccf8-4bcc-9a19-68fe1611537d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022ceae0-9e96-4f18-b063-ec72bd793180", "sighting_of_ref": "indicator--c0022022-ccf8-4bcc-9a19-68fe1611537d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b9d4a3-d556-44ba-b1a3-c606e33c5af9", "sighting_of_ref": "indicator--c0022022-ccf8-4bcc-9a19-68fe1611537d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1cab2b-9675-4e9c-a5d0-4426ae3e05ad", "sighting_of_ref": "indicator--5e9e3492-e56c-4331-8b14-af49f480b3c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34728ea-14ca-4e6f-b471-07eb666e5bea", "sighting_of_ref": "indicator--5e9e3492-e56c-4331-8b14-af49f480b3c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863a1139-3b8c-4243-9c88-8d1cffa16e79", "sighting_of_ref": "indicator--4ce9a753-13e4-4f0d-a878-78c137d666ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763fabfd-5237-4fd5-8d1b-fe97ac4ae324", "sighting_of_ref": "indicator--4ce9a753-13e4-4f0d-a878-78c137d666ae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ec9ef0-9eb1-47d3-880f-f0e65eba76f7", "sighting_of_ref": "indicator--d9807621-fe9d-4ce4-91c1-6ff62f24073d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e24ebcd-8cb1-43c4-baa1-c4631a6fee07", "sighting_of_ref": "indicator--d9807621-fe9d-4ce4-91c1-6ff62f24073d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de60143-ac4e-4681-8720-6acfb370f11d", "sighting_of_ref": "indicator--d9807621-fe9d-4ce4-91c1-6ff62f24073d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe00e2e-adc7-4c6f-8826-3a9ec74d8408", "sighting_of_ref": "indicator--e20b0015-5fa5-4f87-a209-8218df459142", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e5c2fe-bb6c-4f2d-9900-65be51fccec0", "sighting_of_ref": "indicator--17096e1f-5d80-4780-958f-6b475b98303e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f49aec-6aa5-46df-8cc0-53fdc2005af4", "sighting_of_ref": "indicator--17096e1f-5d80-4780-958f-6b475b98303e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7737c0d4-7d69-495d-affa-874f416201be", "sighting_of_ref": "indicator--17096e1f-5d80-4780-958f-6b475b98303e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0698f96-b151-42a2-a39e-4b8e44fe1e0c", "sighting_of_ref": "indicator--2270a107-9952-40be-87f3-477cd8c309fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ae84e8-62cb-47bc-b1dc-596aad226ecb", "sighting_of_ref": "indicator--2270a107-9952-40be-87f3-477cd8c309fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89be93fa-d61d-4361-9d8b-7ff9037bb39f", "sighting_of_ref": "indicator--2270a107-9952-40be-87f3-477cd8c309fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea7c701-ad60-475e-8503-1d1e19fbe216", "sighting_of_ref": "indicator--0ed1da43-6053-40e2-9b93-48a895f710ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9b5540-1b9f-4b6f-9626-b163ba6697c9", "sighting_of_ref": "indicator--0ed1da43-6053-40e2-9b93-48a895f710ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8edcc04-9ab1-4d79-b290-b244f0ea3066", "sighting_of_ref": "indicator--0ed1da43-6053-40e2-9b93-48a895f710ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa16f6-84e0-4d24-ab65-69aa0cf19a5b", "sighting_of_ref": "indicator--089bc4be-007c-41a9-87c8-f561cd675ca8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58427808-fa43-409a-a869-a41d58c2d89c", "sighting_of_ref": "indicator--32a1aee7-9291-447c-8e58-0c49a0eb99b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071d7e71-976f-47b1-b468-7a274a5e0ea9", "sighting_of_ref": "indicator--32a1aee7-9291-447c-8e58-0c49a0eb99b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51d9f7b-2548-40b6-9c92-c516962ea6cc", "sighting_of_ref": "indicator--901f6957-8381-448a-aa3d-a2df2b5ee36f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad139865-4429-4a38-b69b-67d7d5744440", "sighting_of_ref": "indicator--901f6957-8381-448a-aa3d-a2df2b5ee36f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84ce152-cf19-4c22-b52c-342e6af64b5f", "sighting_of_ref": "indicator--901f6957-8381-448a-aa3d-a2df2b5ee36f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b27c03-3fce-4020-9927-3813088a1711", "sighting_of_ref": "indicator--bfa6ab38-47d7-4fda-863e-0e3599bf875f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59705d7-65b3-4f8e-b96c-a9e63d4a1085", "sighting_of_ref": "indicator--bfa6ab38-47d7-4fda-863e-0e3599bf875f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c00a582-45f4-4c38-bf53-6adb047fab1b", "sighting_of_ref": "indicator--99710212-bf51-443f-aa37-2daa49ba70db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4add0924-ce79-4e0c-9d74-c2bba26f4f78", "sighting_of_ref": "indicator--efb094e6-9bd5-473a-8c7d-88210fbe90ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dda5d13-488a-476e-96fe-39254e0579e8", "sighting_of_ref": "indicator--efb094e6-9bd5-473a-8c7d-88210fbe90ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2525e7-31f3-4626-a25d-966a9e5a6bb4", "sighting_of_ref": "indicator--3b36e53f-19d0-405d-a387-b0f3bb1df8c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d685dad-9831-4375-a730-6e71c80deaa7", "sighting_of_ref": "indicator--4d2707c4-7994-4100-a6f1-a41e7bb82ae0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37e0b7d-2415-4b8c-9572-b88550011569", "sighting_of_ref": "indicator--4d2707c4-7994-4100-a6f1-a41e7bb82ae0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e8fcf4-c68f-4581-adc0-14b3b4feacbe", "sighting_of_ref": "indicator--33e17813-923e-4024-9829-49e1ded94045", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0bbd21-2712-444d-ac33-5a76fd063d90", "sighting_of_ref": "indicator--33e17813-923e-4024-9829-49e1ded94045", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb0f22a-4c98-410d-b1a7-421d97626598", "sighting_of_ref": "indicator--33e17813-923e-4024-9829-49e1ded94045", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9ad2dc-33d6-4b37-971b-d6d1bad31020", "sighting_of_ref": "indicator--c2352cc3-8be7-41f1-a185-869514e12f8c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3209b261-2727-474a-8682-62be2c728078", "sighting_of_ref": "indicator--3fe8f0ee-5b42-45e4-bc61-20fa3b69426f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e6a0ea-de26-422b-9c35-695ab8fcc26e", "sighting_of_ref": "indicator--3fe8f0ee-5b42-45e4-bc61-20fa3b69426f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eaf17cd-6646-41f2-b740-70d31078abe9", "sighting_of_ref": "indicator--13e0789b-ea70-4d0f-a456-7daaf911853f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cf5c9e-fbbe-46e8-95a2-845cb86f6767", "sighting_of_ref": "indicator--b1c92b3d-0037-4bfe-a7b8-118cfabaf29b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ca117a-d857-4ffb-a5a4-98f380abf2cf", "sighting_of_ref": "indicator--b1c92b3d-0037-4bfe-a7b8-118cfabaf29b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cd50c5-253d-4ba1-bdad-402544020a92", "sighting_of_ref": "indicator--7225cb21-ea35-4c3f-81d7-c154b41b09dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d1cd33-947a-4ac7-9d67-98c97edd097b", "sighting_of_ref": "indicator--87984829-789b-420c-af20-4e9c189c4b05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360b1a2b-efef-48d0-a520-def8a64cfe57", "sighting_of_ref": "indicator--87984829-789b-420c-af20-4e9c189c4b05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0d89db-52c6-47bb-8bca-37745eda7615", "sighting_of_ref": "indicator--bba6dd85-52ec-42c2-92af-415d100321f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f070292-19fb-41a1-8478-7fcaea8f1c8d", "sighting_of_ref": "indicator--1cf7c019-6ed1-4a91-bf0c-7d9ccf997fdf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5abecbf-4d3b-481e-b1e8-dc0d5e6814d3", "sighting_of_ref": "indicator--1db42bf9-f0ea-46a5-a8bf-d010a60d137f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fb8157-d230-4706-8d98-aa0181a6d1d4", "sighting_of_ref": "indicator--1db42bf9-f0ea-46a5-a8bf-d010a60d137f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c5d22e-9149-4010-914a-2d37492c616e", "sighting_of_ref": "indicator--ae539011-6b6f-4a94-ab89-ae8645b97014", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45181c61-d443-4743-9100-662f191a4bc5", "sighting_of_ref": "indicator--ce2c52c0-237a-4208-aa95-475817608e12", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b1a78a-958d-4f01-984a-eded8c00e116", "sighting_of_ref": "indicator--c9a87034-d76e-4a0c-b7f1-b4dbf4442ee5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa26b5a-02ae-439c-a45b-26a389e6cecf", "sighting_of_ref": "indicator--0b62360b-ec81-46e0-b8d2-9da2d77a7733", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb84f9e4-f8e8-450f-8b2c-f1850c137cb7", "sighting_of_ref": "indicator--55e0a8db-c5bd-4936-8106-1797eec6aa99", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98935dcd-b01b-40f7-922e-8c3f3785edf3", "sighting_of_ref": "indicator--55e0a8db-c5bd-4936-8106-1797eec6aa99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d77d0f-385f-440c-8a28-9d42e04fe7f9", "sighting_of_ref": "indicator--55e0a8db-c5bd-4936-8106-1797eec6aa99", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a2a26f-23eb-4663-9b61-e104042e58de", "sighting_of_ref": "indicator--a9083abc-eb7f-428e-995c-9e9eeee6641a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423e5439-67c7-46ea-afb7-f1e933d2d22f", "sighting_of_ref": "indicator--a9083abc-eb7f-428e-995c-9e9eeee6641a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fe9dc6-3bb7-4b8c-b7f2-a2d6e0cbc49b", "sighting_of_ref": "indicator--2675a78e-4ace-43a8-be69-f662943142f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bdb86b-aa41-4d81-9875-e9ab11d5310d", "sighting_of_ref": "indicator--2675a78e-4ace-43a8-be69-f662943142f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e009cdea-e4b4-4bd4-bd9a-691a3918bb58", "sighting_of_ref": "indicator--2675a78e-4ace-43a8-be69-f662943142f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476f326a-a35e-41c1-8c4f-c1ce2b9b8d04", "sighting_of_ref": "indicator--d6569267-5da1-4241-b350-291dafcebe62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a071a18e-858d-453c-98e6-d6c13a483e01", "sighting_of_ref": "indicator--d6569267-5da1-4241-b350-291dafcebe62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab9450c-ccdc-46f9-af8d-159c9f9fc7ab", "sighting_of_ref": "indicator--d6569267-5da1-4241-b350-291dafcebe62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73adaec7-25a6-4376-a2b5-3e179dbd2683", "sighting_of_ref": "indicator--c5d3ee26-9ff9-461b-b20d-0b069724fa7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ff5957-4143-4fcd-929c-bb7150dc8083", "sighting_of_ref": "indicator--c5d3ee26-9ff9-461b-b20d-0b069724fa7a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5855d380-9108-40d2-91cb-e40fb8279526", "sighting_of_ref": "indicator--c5d3ee26-9ff9-461b-b20d-0b069724fa7a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8154ea46-151d-47c1-8d8c-7ed52573dcf0", "sighting_of_ref": "indicator--ab4ef325-3b95-43fa-8245-714059c14504", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3f12a6-c579-4d36-81f7-8b6ef9c10029", "sighting_of_ref": "indicator--ab4ef325-3b95-43fa-8245-714059c14504", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c861915-e025-4451-ab69-d495d957fee4", "sighting_of_ref": "indicator--ab4ef325-3b95-43fa-8245-714059c14504", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b528615-3777-476a-9a89-8e273e0c173a", "sighting_of_ref": "indicator--0aec74ff-bec7-431c-ad67-7fb5b9d1f614", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6c5ff9-7235-4622-9f9a-bf57744296b9", "sighting_of_ref": "indicator--0aec74ff-bec7-431c-ad67-7fb5b9d1f614", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f11ba7-0b42-424f-9b1b-1fb16fc29798", "sighting_of_ref": "indicator--0aec74ff-bec7-431c-ad67-7fb5b9d1f614", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e2f1e0-902e-46a4-8ad5-dd5f5bf40e48", "sighting_of_ref": "indicator--19d73e4e-06f8-4ecb-9739-a4483c477b70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889914e6-d403-4577-9f1b-552eec16f0fc", "sighting_of_ref": "indicator--19d73e4e-06f8-4ecb-9739-a4483c477b70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67def823-5127-49e7-a73c-4d427f5d27ea", "sighting_of_ref": "indicator--19d73e4e-06f8-4ecb-9739-a4483c477b70", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a94314-ff8d-4b93-a845-6fe04aeeca11", "sighting_of_ref": "indicator--4cd0fa1d-244c-464b-8afa-fb1cd620e8b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e743055-85f0-4740-90bc-95c70f78cdce", "sighting_of_ref": "indicator--4cd0fa1d-244c-464b-8afa-fb1cd620e8b8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65426d7f-da09-4f89-a180-72acd1d1026b", "sighting_of_ref": "indicator--4cd0fa1d-244c-464b-8afa-fb1cd620e8b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e57ebd0-619f-4c31-b3b6-f67b32aa1e97", "sighting_of_ref": "indicator--70625730-48bf-448c-a30d-30335d5ceae4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b428fa-5271-4cf4-b945-251a49435850", "sighting_of_ref": "indicator--70625730-48bf-448c-a30d-30335d5ceae4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcec5a7-cf6c-4987-b6e8-a815563b8572", "sighting_of_ref": "indicator--70625730-48bf-448c-a30d-30335d5ceae4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5177222c-1053-41b4-a27b-4ebaed6c49e3", "sighting_of_ref": "indicator--8d78994b-624f-475b-b9ef-fccf8e833d41", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffdb986-5f56-4bb4-a290-3ee282490319", "sighting_of_ref": "indicator--8d78994b-624f-475b-b9ef-fccf8e833d41", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb26e3b-64c0-415e-b9f9-ec2965a6650c", "sighting_of_ref": "indicator--8d78994b-624f-475b-b9ef-fccf8e833d41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fcfc67-edd2-4703-9078-6fbac724e377", "sighting_of_ref": "indicator--34e901f7-8b5e-418d-9d8d-e9a06127a398", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4611fc-102f-41c1-80c6-68a7f6b37d2f", "sighting_of_ref": "indicator--34e901f7-8b5e-418d-9d8d-e9a06127a398", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94237126-578f-4567-9fc4-1de9b9378d43", "sighting_of_ref": "indicator--34e901f7-8b5e-418d-9d8d-e9a06127a398", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e164d0-af59-4c1d-8c6c-4cf805fc9466", "sighting_of_ref": "indicator--34f639c4-52d6-4971-bf40-5aa8feda2d20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea3e87a-cd2f-4c91-a653-7e73d2f50d9d", "sighting_of_ref": "indicator--34f639c4-52d6-4971-bf40-5aa8feda2d20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305b61ec-7310-4aec-8afc-f299eec41461", "sighting_of_ref": "indicator--34f639c4-52d6-4971-bf40-5aa8feda2d20", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a69324-3c6f-4477-aeef-d63303ee886f", "sighting_of_ref": "indicator--9325ff8f-036f-48d6-8212-df2a3710c55a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c064db-4d03-4b2b-8025-632501331c16", "sighting_of_ref": "indicator--9325ff8f-036f-48d6-8212-df2a3710c55a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2885b8f-e4f5-4ccb-b729-4f1703274ec6", "sighting_of_ref": "indicator--9325ff8f-036f-48d6-8212-df2a3710c55a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156a9658-f1d6-48d9-a99b-7d40e64d0290", "sighting_of_ref": "indicator--4d06a606-c55d-4ace-a361-27e87aebc4d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaafcf2-774f-455b-9aa8-75e617eb4c17", "sighting_of_ref": "indicator--4d06a606-c55d-4ace-a361-27e87aebc4d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2783803b-13bd-481e-9098-c86efba079e4", "sighting_of_ref": "indicator--4d06a606-c55d-4ace-a361-27e87aebc4d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab2a1b6-5bd0-4262-afa6-56d4781d9134", "sighting_of_ref": "indicator--937bd598-2c5e-42ee-874f-9d8d87726100", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d043a98-05ad-4ecd-b7d5-fe1d4d63ae51", "sighting_of_ref": "indicator--937bd598-2c5e-42ee-874f-9d8d87726100", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d15bd9-d929-4548-9767-65ba78329272", "sighting_of_ref": "indicator--56f5744a-584c-4430-bf6d-eda6b4d7713b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d925eb34-c56f-4094-825f-da8328baf01f", "sighting_of_ref": "indicator--7ac553f1-0666-4b03-9cd3-2dbaf1238e0e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ac6cda-ffd7-4e14-b13e-9359f570b5e4", "sighting_of_ref": "indicator--4ae3f61c-a9b2-46fa-9f24-be46328b5d9b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe556ae9-1638-4bdd-a9a8-4222289ee9f7", "sighting_of_ref": "indicator--34c2f03f-1e07-41a6-a634-f709b0b39df7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6dd1cb-1691-4d5c-949f-a50f505dfb98", "sighting_of_ref": "indicator--34c2f03f-1e07-41a6-a634-f709b0b39df7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4edba87-9212-4ff7-a83a-347ba074c1e3", "sighting_of_ref": "indicator--08639a45-4718-40e6-8861-e10400da3518", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf4d35e-7de3-4ba3-b148-6d21db86e4f4", "sighting_of_ref": "indicator--fdea9999-20f9-4e50-b5ed-32c1d8c010de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c6539d-4df1-4176-8206-987a35d10cae", "sighting_of_ref": "indicator--aa360ed3-a795-4146-8345-ff39cd236901", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bf7f2d-b3b9-407c-ad26-c4bae6a10f19", "sighting_of_ref": "indicator--9bcd1be5-2596-4354-a326-4ecf498ede6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f5e763-031b-40b8-ae49-93049e9f0d88", "sighting_of_ref": "indicator--733b2225-2b68-4a8d-816f-8e3c6b624ad7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7321d484-e396-466c-a724-303cee7cf467", "sighting_of_ref": "indicator--3b23a51d-8a33-44ad-bf26-c95ed8da89e7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f686f99d-7efb-46e1-81fc-adff3199191a", "sighting_of_ref": "indicator--7cb386cc-c05b-4f5f-8a25-848c54b86b6a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57e900-2c3a-492b-8297-4b4eaa29ccd9", "sighting_of_ref": "indicator--61b99c3c-50ff-48d1-bd22-f3d7f15ccca5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19d5c8c-a954-4f4a-b064-e19df6dabde4", "sighting_of_ref": "indicator--51cac4ed-2442-447b-ae44-5918365e3a35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b98f3c-b050-444d-8e2d-251939c640e2", "sighting_of_ref": "indicator--c6858c07-3bb0-409f-8bbc-1c3ad0b5bc46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c14871-a802-48cd-97fe-1376e3c7ecec", "sighting_of_ref": "indicator--2f5951ef-baf0-418b-bebb-87e5ce6d0b8f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4898d0e5-dc30-4857-86c0-81d6139d7ff3", "sighting_of_ref": "indicator--51b2be6b-6919-44de-80dc-39b0eaf37e20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8d840-941d-4a97-96a3-09d6a1f57fac", "sighting_of_ref": "indicator--14be1a99-6a3c-49cf-aaea-faf735f2c83e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952839af-2748-4934-b3b5-404f65487e05", "sighting_of_ref": "indicator--c9d45e1e-3f9c-4e33-8afd-ea032d0790f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9e0328-409e-4a98-acf7-529e2ea880ec", "sighting_of_ref": "indicator--483977b6-d69e-4699-8eea-96d2a23020cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888fe218-4129-4dd6-99de-639dc1023244", "sighting_of_ref": "indicator--38257fbb-1a89-44eb-9db9-a2dc0419b112", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92a77a6-cf83-4564-aac0-f9b459e97c0f", "sighting_of_ref": "indicator--9ffc8601-d3b4-49d8-9b87-b38c925a90c3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df54a86-5b10-4bb5-ab8f-4e36192f63f0", "sighting_of_ref": "indicator--9be0a8b4-19dd-49f6-ad4b-53dfd0170725", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64919622-48d8-423e-8490-5d4f18d4ba46", "sighting_of_ref": "indicator--9be0a8b4-19dd-49f6-ad4b-53dfd0170725", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781092f9-9a75-4164-99e5-e82617db33e0", "sighting_of_ref": "indicator--598942fb-a330-4213-a24e-447f999af228", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77745682-554d-418e-88cf-a941d913eb71", "sighting_of_ref": "indicator--3ef72264-1a7d-47a9-933d-6ff2188d645d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab346635-fe50-4dcf-9798-d545b9af7e54", "sighting_of_ref": "indicator--97362db9-6a52-4fc5-b62e-3b780cd1441f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9758d014-dd81-4d65-81b2-aeb8a155c82d", "sighting_of_ref": "indicator--aca93e05-9543-4f67-95d4-8d6148146b9d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2530ad25-567f-4cae-bf62-3dd3b4191dc1", "sighting_of_ref": "indicator--0dc6835b-4174-4a1c-a069-d6a7f7ebe6e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6f0073-7f19-46ee-a9cc-53b122f656e2", "sighting_of_ref": "indicator--72ba7f7e-5d83-44ea-ba4f-a96ee679d3c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a48be8-c03b-48d2-a8c6-82bec970cb86", "sighting_of_ref": "indicator--f45f2c72-2e89-4121-a54d-6f396694b6e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd25b697-3609-4493-9fa5-a4c50c1b9d43", "sighting_of_ref": "indicator--82595f3d-0dde-4c94-b8a5-3f7dad67ee61", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09802739-d475-4da9-aef3-434cdc649843", "sighting_of_ref": "indicator--666dee7e-d2b2-4a17-a643-14e26de5bcc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500a6d9e-bbae-4727-b05f-e235a0ad5a84", "sighting_of_ref": "indicator--8c30d84d-1acf-49f0-81f2-931656291a59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0b1f76-15ef-4e5b-aff3-aaeb9c97dced", "sighting_of_ref": "indicator--cf5e9163-bd75-438a-929a-dc701a63732d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5ec4c0-f25a-4f23-8c35-b8343b7772d1", "sighting_of_ref": "indicator--cf5e9163-bd75-438a-929a-dc701a63732d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d89d28-2749-46c5-a3b1-9f6211074b8f", "sighting_of_ref": "indicator--3526a62a-9e16-4cf6-b0ce-88c0f4614e23", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c175e2-c6af-45c3-895d-f7e0ac31beba", "sighting_of_ref": "indicator--c6eb635a-4001-4ef4-9ca5-41a5f0c38d71", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea5a4c8-92c8-417d-843f-6420cbf3dc10", "sighting_of_ref": "indicator--23c5f96a-823b-4bb4-bee0-fc35c1565f50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be20566-6450-40fe-9fad-905b1bf9e28c", "sighting_of_ref": "indicator--23c5f96a-823b-4bb4-bee0-fc35c1565f50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b386c946-2bdb-4dcb-a12d-5ae5005f5f9f", "sighting_of_ref": "indicator--e53d7389-fa89-4f10-b881-1ca04673c3eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d1d36c-3a88-4303-af98-a92b841b83cd", "sighting_of_ref": "indicator--e53d7389-fa89-4f10-b881-1ca04673c3eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef4e669-a0c9-4dea-8f4b-d55cd5fb0cb0", "sighting_of_ref": "indicator--39b0341f-96fa-469f-918a-351b557f0805", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9342b09-3ba0-4223-a031-880b593d84be", "sighting_of_ref": "indicator--39b0341f-96fa-469f-918a-351b557f0805", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a425907-210c-4966-817b-74f04245bdda", "sighting_of_ref": "indicator--b2b4cc29-48e8-455c-90fb-1132400275f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fabafb-1856-43b9-8b18-3b8baa6dfacc", "sighting_of_ref": "indicator--b2b4cc29-48e8-455c-90fb-1132400275f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc3e84b-a40b-4855-86e7-7a8bd1bf09b3", "sighting_of_ref": "indicator--ad57f4bd-f00b-4222-b81c-e3043134e725", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e12691-084d-48dc-b078-553b6ff1d7bf", "sighting_of_ref": "indicator--ad57f4bd-f00b-4222-b81c-e3043134e725", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8ab260-13d4-4cb6-8a57-a2bb097e9203", "sighting_of_ref": "indicator--ad57f4bd-f00b-4222-b81c-e3043134e725", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4666328e-169a-43fe-a462-cc2a7d2234fe", "sighting_of_ref": "indicator--84e1d8bf-823e-44f0-bf51-a0a1e6a10c3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454885b1-cd02-413e-ad69-354ee88c8a18", "sighting_of_ref": "indicator--84e1d8bf-823e-44f0-bf51-a0a1e6a10c3e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19403d9-ea67-42ca-a040-b0764ae8ad0b", "sighting_of_ref": "indicator--84e1d8bf-823e-44f0-bf51-a0a1e6a10c3e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c8f683-2daf-4144-b92b-28ca7df0a96d", "sighting_of_ref": "indicator--725754e9-b549-42fb-b0d6-7cf72a6544cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbfe71a-3db8-4f70-88f9-06e13cea648c", "sighting_of_ref": "indicator--725754e9-b549-42fb-b0d6-7cf72a6544cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f3853c-a2ca-46ad-ac7e-c4b7d0ce0a9c", "sighting_of_ref": "indicator--725754e9-b549-42fb-b0d6-7cf72a6544cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80245e2d-511d-4771-8816-e57bdf03d9ad", "sighting_of_ref": "indicator--7fedc187-f886-497a-b98e-8b099b3b72f5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3fc7c3-63ab-4f87-84b3-950c3cc47134", "sighting_of_ref": "indicator--70febf5d-c520-4b7d-a27d-4013f69af800", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991fb5a0-cd33-48f6-8a9a-b9bb9fa204b8", "sighting_of_ref": "indicator--6050d706-8d94-4861-9227-ac24679c056c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d267b1cc-aa38-41f7-a05a-a8244b501933", "sighting_of_ref": "indicator--6050d706-8d94-4861-9227-ac24679c056c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf5eda7-8b65-4305-a505-f338e2bc3621", "sighting_of_ref": "indicator--1e515569-485c-4365-9288-380dca69bd69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d901d15-e797-430f-bfae-a236946f9c98", "sighting_of_ref": "indicator--000ec3cd-b963-4dbb-90fc-7bdebc7ce0b5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2472e56-d19b-46ae-beeb-2318da7d2862", "sighting_of_ref": "indicator--1b9f7767-8bed-4644-a40d-fe391dc577ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372c6898-c43a-4afe-9df8-6d06d33d5aad", "sighting_of_ref": "indicator--1b9f7767-8bed-4644-a40d-fe391dc577ce", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65adb4f8-d805-44d2-bca1-31e6bf0169c7", "sighting_of_ref": "indicator--1b9f7767-8bed-4644-a40d-fe391dc577ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42417bee-80bd-415d-b20a-065a9ef6fa80", "sighting_of_ref": "indicator--25f837bb-b2d6-455a-b50e-34c9447ca8c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3330fb03-9839-45dd-856e-f982a4cbb2c0", "sighting_of_ref": "indicator--c2752516-5488-47a0-83c1-99b3fa6c8c28", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a5c67-abde-4a9e-883a-f9e601ce1ab6", "sighting_of_ref": "indicator--fc208300-8489-4298-afb0-513eb1192b1e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5637018-e3dc-4071-9ccf-977ff8e894bb", "sighting_of_ref": "indicator--fc208300-8489-4298-afb0-513eb1192b1e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb3dbe8-2e8c-45c2-a211-4953929f98f1", "sighting_of_ref": "indicator--a5a413e6-66bf-4986-baad-020fb84b4770", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1304900e-a3f9-4c28-821d-7f0b03567e29", "sighting_of_ref": "indicator--a5a413e6-66bf-4986-baad-020fb84b4770", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5145a2-6212-49a9-8f35-89534955f1f7", "sighting_of_ref": "indicator--b3e14dbe-d09e-467f-b7f6-a0c281ef4b53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17748a7-4a65-44a6-b80b-d415743e79f3", "sighting_of_ref": "indicator--6f2fe4d3-4cb1-41d6-b4f6-869779416985", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a03955f-7b98-41f0-bb19-f6a7b045860b", "sighting_of_ref": "indicator--6f2fe4d3-4cb1-41d6-b4f6-869779416985", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d602e5fb-5b79-4339-99c0-2293b3efd19d", "sighting_of_ref": "indicator--6f2fe4d3-4cb1-41d6-b4f6-869779416985", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91ee281-9cf1-4f6a-9c07-0f0dcd191df3", "sighting_of_ref": "indicator--b95d2b6f-3225-4ac8-9410-95f4ee9b3d1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1cf1e0-6a44-42da-aa48-3466d4bcd36e", "sighting_of_ref": "indicator--b95d2b6f-3225-4ac8-9410-95f4ee9b3d1d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221c41c1-99c2-4759-9153-86d7cc215cc3", "sighting_of_ref": "indicator--b95d2b6f-3225-4ac8-9410-95f4ee9b3d1d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a53cf3-b645-4fea-86cc-410b423b603e", "sighting_of_ref": "indicator--e3209e1c-fc02-4322-8814-7cfb21bc01c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7e55f8-49a5-4f5e-b6f0-731ee4ac44c0", "sighting_of_ref": "indicator--e3209e1c-fc02-4322-8814-7cfb21bc01c1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a9165e-7872-46c8-a170-6f659fc66f9f", "sighting_of_ref": "indicator--e3209e1c-fc02-4322-8814-7cfb21bc01c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f03a22-f822-494a-9a1d-32969aea1721", "sighting_of_ref": "indicator--61585536-5e17-492c-ad18-2cc7fcfbf374", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1e4535-ac55-4685-943c-f3ca2190c250", "sighting_of_ref": "indicator--6f58c37a-7e51-40ae-8904-accab697e466", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059a2ef2-8971-416a-8333-41c6140fdfde", "sighting_of_ref": "indicator--cf55f854-17fd-486f-bc14-a02ae96747e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a452f5e-940a-4a02-b5c7-4dbe35066af0", "sighting_of_ref": "indicator--cf55f854-17fd-486f-bc14-a02ae96747e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcc2fe3-d163-487a-8405-8604996b3a22", "sighting_of_ref": "indicator--1056a097-7e05-4583-a53b-6c17b2513b57", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc68050-507c-4f23-b339-00c00bc9bda0", "sighting_of_ref": "indicator--1056a097-7e05-4583-a53b-6c17b2513b57", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d089a87-0b52-40d1-8dd5-84d5d5de5387", "sighting_of_ref": "indicator--0be8bd0d-5b7b-4153-8edc-23bdbb6116a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d84688-f710-4476-9863-4fccffa92174", "sighting_of_ref": "indicator--5af874b0-1e2c-4b8a-9aff-d2adb5cd4710", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d43732-b551-4ff1-a53a-1cb858edae29", "sighting_of_ref": "indicator--0b39eade-6807-4b8b-9149-5cf65a49ee26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65db1d69-f8db-45f1-ac8d-27e86ca9341e", "sighting_of_ref": "indicator--0b39eade-6807-4b8b-9149-5cf65a49ee26", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115fdd4f-2381-4d56-b640-b5da3c748fdb", "sighting_of_ref": "indicator--e85a0734-d943-45d5-b6ba-5d8b2622e407", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78ac3f4-b3e2-4f2d-b3f5-9f793ebdb371", "sighting_of_ref": "indicator--c2d173a8-2cb3-4512-a2c3-9b8a9859c003", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935853f6-cd35-4862-8824-29772b652b05", "sighting_of_ref": "indicator--cd73712f-33f2-44fe-aea2-f90f6f9fb4b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c0c8cb-a78a-47a0-a810-ad90085b73f7", "sighting_of_ref": "indicator--f4563a1f-eae6-45a9-8ab2-542ecc42b5c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30649c4a-6e83-4010-bf49-a6b97ff29ca1", "sighting_of_ref": "indicator--8f57b7e6-9df6-4c3a-80f2-70deb44c0582", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd69d895-8cb0-4eeb-9d9e-ca1a56c01f45", "sighting_of_ref": "indicator--06d4f819-003c-4f5b-bb37-905e43465662", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca3e88d-c5d0-475d-a95d-b82a39300603", "sighting_of_ref": "indicator--327474ef-7619-438f-a87a-42021739a7e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2898ff-4f44-4fd7-b9ca-d9942d7a9c96", "sighting_of_ref": "indicator--17416388-6379-45bb-99b7-aa5c44f18e16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e506beb4-38e1-4c28-8495-7a9eea28d440", "sighting_of_ref": "indicator--17416388-6379-45bb-99b7-aa5c44f18e16", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bc9527-022e-43d9-b7f8-d6899bd4c8c5", "sighting_of_ref": "indicator--ab74adf8-d5bc-4af3-a497-42461c352722", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee09d2c-49a4-4f9b-a6ad-272df5b9f544", "sighting_of_ref": "indicator--ab74adf8-d5bc-4af3-a497-42461c352722", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b97125-d4c7-4a34-a8ef-1184fda254c9", "sighting_of_ref": "indicator--ab74adf8-d5bc-4af3-a497-42461c352722", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e33a36-032a-43cd-94a9-17306717c343", "sighting_of_ref": "indicator--9f05027c-e975-4043-9482-7dcabe4e6f48", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acb5148-a699-4307-9567-85a75be06f59", "sighting_of_ref": "indicator--33ba268d-1abe-4566-b176-6a17ae733c80", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d66c6a-c93d-454b-919c-e24b14a96005", "sighting_of_ref": "indicator--4a3031da-84df-4d4f-894f-182d39879200", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507d1059-59fe-47fe-8066-1fdc3b6f541d", "sighting_of_ref": "indicator--4a3031da-84df-4d4f-894f-182d39879200", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e472d65e-1f78-4c29-87bf-495cd164738e", "sighting_of_ref": "indicator--3027b322-2a36-43bd-80c3-82550cb6a3c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31862d3a-8dff-45d0-b189-4b4d64de9736", "sighting_of_ref": "indicator--d1f0eea0-e136-4fd3-84e4-0b6b32f39306", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f16391a-6f4e-4a7e-b858-85f59647ec97", "sighting_of_ref": "indicator--3d2a8a9a-349e-4ef9-83c7-6e55b6a296bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f3b555-ec35-4aad-868f-7f62ae7d4e4b", "sighting_of_ref": "indicator--9204d3f3-c10f-4a81-af7d-24e8f6c670b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa69a157-0a9d-4e9e-bdf9-881dcf56df02", "sighting_of_ref": "indicator--9204d3f3-c10f-4a81-af7d-24e8f6c670b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4f85d1-a1a0-47ad-b754-faeace3623d0", "sighting_of_ref": "indicator--32a0bbd2-bd2c-4012-b7a4-e874bf88cd80", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360f69f1-2efe-4b86-9b0a-afcbaa96850f", "sighting_of_ref": "indicator--32a0bbd2-bd2c-4012-b7a4-e874bf88cd80", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da79d75a-56b9-4e52-a317-9b236ca3ac38", "sighting_of_ref": "indicator--57d09593-29a7-4ade-942c-c5e94ed11aa4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602814d5-d6ea-4007-b5df-3848f75b9bfb", "sighting_of_ref": "indicator--526e8d59-d483-45a3-9cdc-ec7b55917591", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79b8a5b-ad44-4141-8ca6-a9607db30ed6", "sighting_of_ref": "indicator--526e8d59-d483-45a3-9cdc-ec7b55917591", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8279d7ed-e704-41e2-b659-78ef1ed08aa2", "sighting_of_ref": "indicator--526e8d59-d483-45a3-9cdc-ec7b55917591", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b4a388-7a66-4495-a6ae-83e7f57ffd7f", "sighting_of_ref": "indicator--82657cf5-1bf8-4fc1-b66c-c3f7862f8312", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd80bcc-9479-4d9c-a79f-2b143a526044", "sighting_of_ref": "indicator--c4226264-9d24-422b-91ce-012acbe02982", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb0eea5-f6a5-416c-834c-14db06934a5f", "sighting_of_ref": "indicator--09e641dc-bddb-4d2f-9c37-d4c33174089b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70738a1-10e9-4d5c-82c9-6323299d0e06", "sighting_of_ref": "indicator--09e641dc-bddb-4d2f-9c37-d4c33174089b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14c3a90-9070-4ad2-a7b6-f9af26f5e080", "sighting_of_ref": "indicator--b4aba1bb-64d2-4d20-b670-b5be1f166a92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8aee5a3-9198-4870-9c43-8eebb82f8e18", "sighting_of_ref": "indicator--5c4d56bd-42fd-4452-93eb-592cbdb0fb6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682e6789-a9b7-4e87-984e-df4d14305ee3", "sighting_of_ref": "indicator--5c4d56bd-42fd-4452-93eb-592cbdb0fb6e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436a16ac-a920-40b8-b922-5b60534d6ef5", "sighting_of_ref": "indicator--db5116e0-2768-40b3-965f-134198a87e51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e1721c-c471-4bc1-9dcd-e2806d4f4ade", "sighting_of_ref": "indicator--ccb8ca5e-4ddb-499f-bc02-46fe04f4609e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eded631-a142-4597-9e2d-9de504e855ff", "sighting_of_ref": "indicator--ccb8ca5e-4ddb-499f-bc02-46fe04f4609e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c114e99b-1ae0-4863-929b-91c288f490f6", "sighting_of_ref": "indicator--02f69c20-b7d5-486e-8982-169e842097e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ca8a29-21d3-449d-b40b-87b63fbc9f84", "sighting_of_ref": "indicator--2e3b0b7f-f852-4128-8f6d-f160d10b8ff5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214bd93b-41a7-4a51-b579-bedda8b34396", "sighting_of_ref": "indicator--2e3b0b7f-f852-4128-8f6d-f160d10b8ff5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0937993-785d-46f6-9675-c140423de7a7", "sighting_of_ref": "indicator--2e3b0b7f-f852-4128-8f6d-f160d10b8ff5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e816d13-64c2-417d-8feb-1b11ed2b14c2", "sighting_of_ref": "indicator--a7a100e0-4dd1-43c9-90e4-3e0d24b4edba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6cff1d-0b01-4491-890c-0e21a58edacb", "sighting_of_ref": "indicator--a7a100e0-4dd1-43c9-90e4-3e0d24b4edba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e86dfd-1930-42f0-adff-d17fb2d2987e", "sighting_of_ref": "indicator--a7a100e0-4dd1-43c9-90e4-3e0d24b4edba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3d174c-c71b-478e-a1e6-7070fcc9829f", "sighting_of_ref": "indicator--a859bd16-8bd1-4424-b5ad-09582666a489", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f426850e-a33c-4fb4-920c-f5fd487f843e", "sighting_of_ref": "indicator--4b4b3427-ac5a-4a3a-8a0b-93662277a856", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a6b635-d5a4-434d-a0be-c58bbab01625", "sighting_of_ref": "indicator--c0684b8b-ccf5-4b0f-adf7-859d0b93bad5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae21fa7-9a15-4d68-b56f-28d33b693b98", "sighting_of_ref": "indicator--6f48801b-22fc-48b1-928e-a66a548708a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cf5a67-b07c-4e92-9b64-05b09975d350", "sighting_of_ref": "indicator--d92dadfa-bd1b-4b25-b915-b77aeaae6a00", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8982fa8b-b293-44f5-b49a-debddf88d0fd", "sighting_of_ref": "indicator--a86b6e66-fabf-49e3-9692-52f0d45076aa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2af79e-fed7-4d6d-9a9e-a92e9eec8fcc", "sighting_of_ref": "indicator--b40fdd92-2f50-44b5-91fe-e04d5da15c1b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e492a9-caa3-48fe-9f48-68a6473a495c", "sighting_of_ref": "indicator--926eeadb-01b9-4c66-89e1-d5f95950cd76", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e98916-a762-462b-bb9f-9804e6eed3ee", "sighting_of_ref": "indicator--ce8c8bd3-c641-4e50-b6f0-fbce6bccecd6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e6d07d-766f-4ce5-9c1d-6c912cbf5cb2", "sighting_of_ref": "indicator--47851059-757f-44bc-afb0-0dff688a7c25", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8193dd-7d44-4f58-84c8-067a477443cf", "sighting_of_ref": "indicator--4fbbbd67-ed89-466a-8526-fb9f47d7982a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1144b903-dc87-4a9a-892c-7256b59f67d9", "sighting_of_ref": "indicator--cc3abaa1-3698-4e45-9f02-d1b13740b796", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de25fe7-86e6-47b0-802c-35f7b60f47a9", "sighting_of_ref": "indicator--491c794b-1897-4fb1-83a7-7e0177a87fdd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9a6b82-77db-4b21-a5fc-5d59620433d3", "sighting_of_ref": "indicator--d7b2b0a2-969f-4339-923e-c50d2803738f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f33c759-b8be-49d5-8717-65ce8195c38c", "sighting_of_ref": "indicator--1eda79e1-d0af-413c-acd8-dfa653166060", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71614a9c-e0aa-46bb-a6f4-be4d1fdbcabb", "sighting_of_ref": "indicator--f49aef95-d3de-4537-bb2b-c87f3158d1b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30834d1-b814-4861-84bb-f0fd1aa37f03", "sighting_of_ref": "indicator--bb3f7960-fa02-4076-95a8-02b408152429", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c31278d-a89b-4111-aae1-d9f74c3edcaf", "sighting_of_ref": "indicator--bb3f7960-fa02-4076-95a8-02b408152429", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a36811a-9154-4fdb-8b96-fc0d373a545e", "sighting_of_ref": "indicator--bb3f7960-fa02-4076-95a8-02b408152429", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f24631a-b6c8-4dc6-9840-cd0c7c368799", "sighting_of_ref": "indicator--3f581e8f-2ff6-44ef-909a-7014d8331781", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e07281-abe9-41d7-8a69-dcdb7edd5cfa", "sighting_of_ref": "indicator--305264b5-ef74-4406-883a-6c45fce37fbe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4149a385-75f1-4981-94c9-bd5b4ea14089", "sighting_of_ref": "indicator--905ea8fd-0512-46df-a9ab-921b62f87a69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c6f0f9-1a39-43c7-8554-9ba1b8a85e63", "sighting_of_ref": "indicator--905ea8fd-0512-46df-a9ab-921b62f87a69", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4327b4d-3a6f-4ee2-845f-e9d8708b9d66", "sighting_of_ref": "indicator--1755af52-b553-4871-8060-55b892e6810f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871bfe9a-1028-4455-9953-bd89367d1582", "sighting_of_ref": "indicator--dbde1d5c-5a42-4320-a32a-838e6fb97011", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a6bcf2-86f4-4566-8536-37df7f5295fc", "sighting_of_ref": "indicator--fd86e537-2534-4aed-9e1f-928bc8c69ded", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3c07d2-b672-4869-8c02-3eb727915bbc", "sighting_of_ref": "indicator--fd86e537-2534-4aed-9e1f-928bc8c69ded", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcfb320-34d7-4742-b357-95d9b73e4912", "sighting_of_ref": "indicator--b9cbc41e-d74b-4f5a-a121-05c3adb779a2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d7041b-fac9-4cbd-b3d5-1b037ba80255", "sighting_of_ref": "indicator--6e6041fa-8f91-4f2a-893b-17b0b75ebca8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17988b29-1f68-42cf-be22-a6fedaceceb4", "sighting_of_ref": "indicator--6e6041fa-8f91-4f2a-893b-17b0b75ebca8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f62df7-5125-43ac-928e-ad5e8e15a09b", "sighting_of_ref": "indicator--6e6041fa-8f91-4f2a-893b-17b0b75ebca8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb019b85-ec63-4bef-92c8-1425c195cef2", "sighting_of_ref": "indicator--51e2bda3-efa9-44a1-9bb2-bb64bc9cc217", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65252e58-e84b-4200-82fd-df371fbea8a3", "sighting_of_ref": "indicator--b7a92563-1c1d-4302-9d7a-f8dc90535e58", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f48fb2-69d4-4950-8060-9649ad2e20bf", "sighting_of_ref": "indicator--738d1eeb-1ee6-4032-a92f-dc3b96ad465b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244d7045-108d-4309-8725-5d7f4fcd7cfe", "sighting_of_ref": "indicator--ced4a798-a6f1-4878-bdb9-da8e701e409b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bc104a-a3ce-496e-a757-f66bb089d573", "sighting_of_ref": "indicator--f60485b8-c8c8-42e3-a52f-259d15724960", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa441347-8041-4db2-98ad-64fa1b0b01f1", "sighting_of_ref": "indicator--f60485b8-c8c8-42e3-a52f-259d15724960", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bc7c8b-cb8d-4de6-a2dd-75687099700d", "sighting_of_ref": "indicator--e5a53fa0-c248-44ad-9e87-fe2f1ee0572c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d60919-e9ab-4c0c-8726-2e3eae19de1f", "sighting_of_ref": "indicator--b727677c-07dc-45ad-af60-00ee25b29848", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9941d9d-6a3d-4a19-bf4a-2ed7ded1737a", "sighting_of_ref": "indicator--c56615d7-6cd0-49e6-9cac-57bbebfa83cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb5621b-9a9e-4e87-8e6f-42384a51f269", "sighting_of_ref": "indicator--84b82a01-6b31-4d05-80bf-11b1491573ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42372d7-32e6-4916-a9bf-264436b2d1b7", "sighting_of_ref": "indicator--fe495cb6-e6bf-45b9-b0fd-816fca7fb3e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b02d87-d84d-4812-bf07-0bd7400fe372", "sighting_of_ref": "indicator--fe495cb6-e6bf-45b9-b0fd-816fca7fb3e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea92c14-b3b2-4e08-92d6-a13c233aaf5b", "sighting_of_ref": "indicator--fe495cb6-e6bf-45b9-b0fd-816fca7fb3e2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316f0a04-171d-4fa1-916d-3f396c82bd61", "sighting_of_ref": "indicator--197cd414-4d62-446c-b5c8-dc3912bfc40d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d6ff96-ea1f-4429-8021-692eeb21f2b6", "sighting_of_ref": "indicator--e64c11d7-b334-4381-8370-506ba5686647", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2cc3ea-fd30-464f-90f5-ed383a94c0d0", "sighting_of_ref": "indicator--e64c11d7-b334-4381-8370-506ba5686647", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ded301c-a487-45ec-b829-f5e119fb44d3", "sighting_of_ref": "indicator--e64c11d7-b334-4381-8370-506ba5686647", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeede860-22ad-408a-a08d-b1bcffb64e87", "sighting_of_ref": "indicator--527c6a02-e935-4465-93b4-0ee13eb91da5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085fd3e0-5225-48a4-9831-fc3f56d91e06", "sighting_of_ref": "indicator--527c6a02-e935-4465-93b4-0ee13eb91da5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d07179-fc79-42ef-8003-af125659c9e4", "sighting_of_ref": "indicator--527c6a02-e935-4465-93b4-0ee13eb91da5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82376c-78f7-4cb2-9ac6-14ee20f2e96e", "sighting_of_ref": "indicator--19fffa48-0142-43ce-b7ce-b9af79d876f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161fb8bc-50d0-428f-bb58-0e86f6f8dea3", "sighting_of_ref": "indicator--19fffa48-0142-43ce-b7ce-b9af79d876f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd066d86-572a-425b-966f-56e33675d0c3", "sighting_of_ref": "indicator--19fffa48-0142-43ce-b7ce-b9af79d876f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d6bc0f-b07c-4aeb-b5c7-ec2cc285010b", "sighting_of_ref": "indicator--2ef0ea7c-82c6-487a-ad5f-ad86e3226c3d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92727f8d-d97b-498a-900c-a0ef4fbb6d10", "sighting_of_ref": "indicator--2f2c43df-b617-4221-acd5-d003d5d08581", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ba110c-a269-4539-a6cf-7c0ee5fec413", "sighting_of_ref": "indicator--2f2c43df-b617-4221-acd5-d003d5d08581", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7371637f-3911-492a-8343-99fcdc430393", "sighting_of_ref": "indicator--2f2c43df-b617-4221-acd5-d003d5d08581", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a79af3-7f2f-4e1a-a7c0-6c8e941d7938", "sighting_of_ref": "indicator--35bedabb-ef9c-420e-8df8-9bd56916f28f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b23e1ef-a271-4a38-9ff1-d6bcae827a88", "sighting_of_ref": "indicator--35bedabb-ef9c-420e-8df8-9bd56916f28f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a79727f-7758-4b40-9823-e887c0d44bf8", "sighting_of_ref": "indicator--fcb3d53a-87b7-4f49-b503-cbfb82a4c9f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af24603-fe52-4d85-9c9c-9b80f647730a", "sighting_of_ref": "indicator--fcb3d53a-87b7-4f49-b503-cbfb82a4c9f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33163484-a4b0-47bd-aa9a-c5046a86966c", "sighting_of_ref": "indicator--fcb3d53a-87b7-4f49-b503-cbfb82a4c9f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e72181-27d4-47b2-8670-0db92b76d948", "sighting_of_ref": "indicator--0d3d7468-c029-4b01-afba-59d00c43adfa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4551ce-fe0d-4c6a-a17a-11d97b3ede87", "sighting_of_ref": "indicator--66b49717-22a6-4488-8d9d-fee1d819b232", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de0885-436d-4ae4-92ba-bd950c8d088e", "sighting_of_ref": "indicator--852eff39-cd34-4609-8bec-e46104848016", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af163c0-b3b2-4268-a038-b35a1684823f", "sighting_of_ref": "indicator--852eff39-cd34-4609-8bec-e46104848016", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d76bfb-02f4-430d-affc-6020bd8c1d97", "sighting_of_ref": "indicator--852eff39-cd34-4609-8bec-e46104848016", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5b2315-fd64-4422-aa29-2a4fa7b593f5", "sighting_of_ref": "indicator--41ae01b4-2944-4e8c-981d-d76f52185ace", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecb35d4-b6a5-4386-9c24-5fc67f5d4f48", "sighting_of_ref": "indicator--41ae01b4-2944-4e8c-981d-d76f52185ace", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d961613-4e94-4449-8996-1cfbf1f3b37d", "sighting_of_ref": "indicator--41ae01b4-2944-4e8c-981d-d76f52185ace", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad89c3b-670a-4822-bb98-bf81a56f192c", "sighting_of_ref": "indicator--b41b45a9-44b9-4530-a1b1-a2cf374a82cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a8ad7-d634-47f6-a6ff-8c2cb128961d", "sighting_of_ref": "indicator--b41b45a9-44b9-4530-a1b1-a2cf374a82cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b3d44-fd33-4027-98e5-5afe80a8d6d4", "sighting_of_ref": "indicator--b41b45a9-44b9-4530-a1b1-a2cf374a82cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7622e4be-12e0-44cf-b479-267f6c742124", "sighting_of_ref": "indicator--a24e270a-3546-44cc-a178-b9648f6c5cc1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0a65c5-3af9-484f-82cb-c97c1c7d8afa", "sighting_of_ref": "indicator--a24e270a-3546-44cc-a178-b9648f6c5cc1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302a1031-717b-490e-88cf-1716dfa31eeb", "sighting_of_ref": "indicator--a24e270a-3546-44cc-a178-b9648f6c5cc1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefc9d3c-07d1-45b4-b8fa-a51b678aac34", "sighting_of_ref": "indicator--ecaf07b2-bbc9-4c54-87d4-db799fb874de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d82df81-56bc-4b74-a569-88f156cdb95e", "sighting_of_ref": "indicator--ecaf07b2-bbc9-4c54-87d4-db799fb874de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5095194d-b89e-48c3-8165-bc8e5745d3cb", "sighting_of_ref": "indicator--ecaf07b2-bbc9-4c54-87d4-db799fb874de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41e11e8-7173-40bc-9734-b18de9115a14", "sighting_of_ref": "indicator--aa0780b1-2311-4857-9192-0eb34bcaebdb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1cf585-48ea-48f4-8d20-f6b455b0d6db", "sighting_of_ref": "indicator--aa0780b1-2311-4857-9192-0eb34bcaebdb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d01d01-7657-405e-b12f-70f373bf259b", "sighting_of_ref": "indicator--aa0780b1-2311-4857-9192-0eb34bcaebdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cde23f-c049-4031-8c55-cd66234595f4", "sighting_of_ref": "indicator--b97b6577-f6d2-4b3c-8ee4-cf2eac041ab1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1548a1b3-cfc2-4f92-9416-1dfae966534e", "sighting_of_ref": "indicator--b97b6577-f6d2-4b3c-8ee4-cf2eac041ab1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c1bf4c-6fc2-4d77-a9de-de482944844d", "sighting_of_ref": "indicator--b97b6577-f6d2-4b3c-8ee4-cf2eac041ab1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af89fae-4f0b-44c0-83dc-36d270a672ca", "sighting_of_ref": "indicator--37c85fff-e537-44f6-b8f9-0d27c922e973", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caef8e03-b24b-4df8-a469-5c970bca70ec", "sighting_of_ref": "indicator--37c85fff-e537-44f6-b8f9-0d27c922e973", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230eb4c2-ce73-4fc1-a662-8556d0d79b79", "sighting_of_ref": "indicator--37c85fff-e537-44f6-b8f9-0d27c922e973", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05215fb3-bff1-442d-8d54-bca0390b6772", "sighting_of_ref": "indicator--b2364150-f133-495a-b8a9-08cc2e8a3808", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef1ab30-3933-40e4-b526-dc7caa0d933e", "sighting_of_ref": "indicator--b2364150-f133-495a-b8a9-08cc2e8a3808", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2c5cf2-23ee-4add-b0fb-d3a751007bce", "sighting_of_ref": "indicator--b2364150-f133-495a-b8a9-08cc2e8a3808", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85b5513-2cdd-4d0a-a340-2d9bce0ded51", "sighting_of_ref": "indicator--0a46b262-599d-48ea-a12a-a50fdf270ad8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b3d083-b907-4180-8a08-3a1a057d5b9a", "sighting_of_ref": "indicator--0a46b262-599d-48ea-a12a-a50fdf270ad8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb16e81-82bc-4056-9333-c421c06f1a03", "sighting_of_ref": "indicator--0a46b262-599d-48ea-a12a-a50fdf270ad8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125eef98-cd27-4653-b17a-dcc995679bc3", "sighting_of_ref": "indicator--9ba70f68-9d75-4fe3-8448-5aa10df4ff30", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daf0221-bc45-4ed2-b68a-04839675fa91", "sighting_of_ref": "indicator--6d2d7d3e-c784-4c2e-8c8c-a4c8a98aa7d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39acaa5e-55da-4a6c-b369-108f1e092220", "sighting_of_ref": "indicator--bd26921a-f43e-4bc6-91e7-9bc5829c02a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52476228-c7e9-45e7-bd47-7ca116db0cd1", "sighting_of_ref": "indicator--bd26921a-f43e-4bc6-91e7-9bc5829c02a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef2591e-b155-4e4b-aa9e-ad1d9bb909d6", "sighting_of_ref": "indicator--c737ed6c-3d73-4030-9407-3f794e2ea815", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0abe4ed-6565-462f-9e09-70995b4f0648", "sighting_of_ref": "indicator--7d82efba-0136-4da9-9522-ab1d9707447a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab0f715-e1b2-4c48-9f9f-3f763193a463", "sighting_of_ref": "indicator--0c629bee-a21f-4b03-845a-8d3ba3ec6761", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe5841c-0553-4313-88c8-28a6a8196563", "sighting_of_ref": "indicator--989b1876-a680-49dc-a50f-b10659ac2df7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968cbc7a-486c-4767-9203-f1c8faf63a06", "sighting_of_ref": "indicator--b1941523-68ae-4036-83de-8cba26b50a77", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa696d4-9e9a-4ec9-ab22-37d539cb2183", "sighting_of_ref": "indicator--dbec103c-5c5b-4675-a038-7fccae473d57", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bcf1d5-5da8-427e-a633-b360f00f6c9c", "sighting_of_ref": "indicator--bcbdcb1b-1de9-430f-bd08-3a211dda48fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171e60d5-aa6e-4c54-ac7b-2baf74dbf4fe", "sighting_of_ref": "indicator--88f36891-864c-4125-b960-a9367b8fd6ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4da2a0-458b-4917-8c00-d21414b5cd64", "sighting_of_ref": "indicator--c39403dd-9f8b-44ad-b2a1-444e494886f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a99acb-79be-42e9-bdb9-6c9b48a765f1", "sighting_of_ref": "indicator--1d60575e-baeb-4fb5-bce5-da1184dd151b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8a0a03-63c5-4b05-b2c1-2b191b00b6da", "sighting_of_ref": "indicator--c704e2bc-9616-4ca3-8259-f1581f2fc4da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a6836f-d80e-491d-a684-17dc8608ed30", "sighting_of_ref": "indicator--c704e2bc-9616-4ca3-8259-f1581f2fc4da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0238428-d610-4324-b6fe-b368ea081343", "sighting_of_ref": "indicator--c704e2bc-9616-4ca3-8259-f1581f2fc4da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f58455e-a9b5-466c-a897-afdc6ca5c660", "sighting_of_ref": "indicator--9098acca-72eb-4f2f-8069-a4a0f9730559", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa42c78-e02d-4411-b90e-9ceb4604c780", "sighting_of_ref": "indicator--a13631bf-b4f9-4671-8702-a759d9b77d90", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f75c9c7-6df4-4023-b2ac-ee14ea889a10", "sighting_of_ref": "indicator--a13631bf-b4f9-4671-8702-a759d9b77d90", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baf9daa-752a-4780-bd57-3acc9660a19a", "sighting_of_ref": "indicator--fa613b86-d636-47a0-8bbb-55d52df4bcaa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0792c51f-53b4-4c8c-9759-9643bf7915a5", "sighting_of_ref": "indicator--fa613b86-d636-47a0-8bbb-55d52df4bcaa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e98f44-a282-4efc-8445-d9f0423e8a84", "sighting_of_ref": "indicator--d658d9cd-3d87-469c-909f-e45117fb8faa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4716080-00a7-4fc3-9af7-9aceed5b7e91", "sighting_of_ref": "indicator--ba1eda95-b0d8-4b47-bfce-dca370872413", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e15ff54-7098-493a-9f9d-a5a439b5b3d7", "sighting_of_ref": "indicator--1a116d8e-5831-4583-843d-c48e713cbe7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d55cd13-9ddc-46e9-85fe-39308feb745a", "sighting_of_ref": "indicator--14ec74db-b73c-40a6-a772-422fd4ab21a7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d94449a-7d1c-4e49-8670-fbf52fc2f6d9", "sighting_of_ref": "indicator--b74b7a86-b062-4ccf-9901-6f61fb6bb8d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b32c61-9832-4c33-96be-9ab696159943", "sighting_of_ref": "indicator--dd7b7e5f-82a5-47bf-889f-0cde21ff0f00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254bf7e2-3646-499c-92c2-a0a3cb9b37c0", "sighting_of_ref": "indicator--3687cae4-86fc-4db5-8212-f990d5eee2fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e579767-2564-436a-9451-2a37347cd261", "sighting_of_ref": "indicator--3687cae4-86fc-4db5-8212-f990d5eee2fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a53085f-5d0c-42df-8d2b-f14db8ca6976", "sighting_of_ref": "indicator--9c1dfb58-39f2-4c01-9fa5-e36eb607c9f0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbc3306-7317-40e1-a432-4e2d0b77e490", "sighting_of_ref": "indicator--9c1dfb58-39f2-4c01-9fa5-e36eb607c9f0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee11bf43-6e8a-4f4f-8435-7d5c00fedc9d", "sighting_of_ref": "indicator--3d5994a7-0496-4c02-b984-db2c738c8001", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bcb0fe-13be-4f77-8334-2e5d488875ef", "sighting_of_ref": "indicator--29ded15a-eaaf-480a-bf4d-a82ce869e481", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d2e463-62d2-434c-9266-712477f13ef0", "sighting_of_ref": "indicator--f7ddf8a5-6439-4b99-b4b3-75bb12468b51", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df380932-cadb-45b8-b317-1d178d43f123", "sighting_of_ref": "indicator--62ba0fdf-c472-44d8-bdd5-a523e1a99e48", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f71111a-9047-48fa-ae04-a200967c5d50", "sighting_of_ref": "indicator--232ac706-80a1-4501-8bac-8e54beacb8e6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f705a58d-c6c3-47cc-a2ce-3c76be61f691", "sighting_of_ref": "indicator--dd3bdf63-458f-45d8-be31-002f178e394e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f97b23-b048-40c6-a8a8-f7089448e92a", "sighting_of_ref": "indicator--dd3bdf63-458f-45d8-be31-002f178e394e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b146bd8e-312d-4ab3-8e8c-acaebff208a8", "sighting_of_ref": "indicator--c170b3de-ad86-41c4-9522-86c3b89faf25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8f91f2-3c5a-4000-8933-a589ec1a1470", "sighting_of_ref": "indicator--2c10a383-1008-4926-b3ce-1e8006d06ef0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a269f927-d8d4-4af1-8e59-9611d4971c19", "sighting_of_ref": "indicator--968180a0-767f-4fe0-a607-419f9b9e268f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2380438-7e95-479c-b6e1-ee3641d62d1f", "sighting_of_ref": "indicator--18b24d4a-a67e-431c-8b11-a4359f437391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac97cf7-e06b-429f-99f7-29d168ad4970", "sighting_of_ref": "indicator--cc065b7e-80d1-4f6a-ac74-e5a73efb457a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e308af0-42c9-4dab-b83b-13b386a94cd7", "sighting_of_ref": "indicator--f1fde65a-5f3b-489e-b078-69331fa0f87f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e53b725-6db6-4690-95de-45a48514fc6b", "sighting_of_ref": "indicator--f1fde65a-5f3b-489e-b078-69331fa0f87f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ac4b20-bb7d-4616-8d17-c8044fec44d8", "sighting_of_ref": "indicator--48c0ff8c-d701-4c3a-bbe4-0ca35b5dbda7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e317c887-a772-4e3a-848f-7e05b7404354", "sighting_of_ref": "indicator--17037ed3-5353-404b-9136-ab7324e1600c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693bdd7d-1d1b-41b0-971b-164e1edf8908", "sighting_of_ref": "indicator--df60d6fa-9954-4d2d-9a42-ac562adf2a0b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9aee284-3a89-4c11-b95b-aca956da495b", "sighting_of_ref": "indicator--400d20e3-76ba-440d-8808-0582ffa4449b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb45990-518a-493e-aaa1-6c78fc264e67", "sighting_of_ref": "indicator--b0216ad0-681c-4cfb-a180-0e5bbe2857a9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2127124-2a40-44f5-a261-e8760bca3622", "sighting_of_ref": "indicator--2200c933-6e1d-472c-b5f4-0225533e085e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35306e59-04bd-42f6-b7f4-5a47f2fc1a70", "sighting_of_ref": "indicator--2200c933-6e1d-472c-b5f4-0225533e085e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78325caf-2a2e-4c28-822f-4bf4c467f815", "sighting_of_ref": "indicator--7c8c0803-fc95-4f24-99ad-59cc9e38a727", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d754350-a9a4-43d0-aa5e-48813851774c", "sighting_of_ref": "indicator--12306086-a8ea-4928-8424-f3d83b05080e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55263e42-7347-42ac-837e-4af17b1a298f", "sighting_of_ref": "indicator--12306086-a8ea-4928-8424-f3d83b05080e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0077610-47ce-4c06-aaa4-c35782d2a6b3", "sighting_of_ref": "indicator--12306086-a8ea-4928-8424-f3d83b05080e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6fd651-18af-4069-aace-3859a2b9662a", "sighting_of_ref": "indicator--b7173465-00dc-465b-9e4a-81c088e23a63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35443c58-4924-4404-9b44-18cf4c7ad433", "sighting_of_ref": "indicator--ecba699e-0c6f-4c71-865a-cc59f2c89067", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95211c94-9004-43fe-b513-c6abdf08792a", "sighting_of_ref": "indicator--99fb65c9-f20a-4753-b2ae-a5cf54f5c94b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb13853-1988-4316-8971-12d6133accc0", "sighting_of_ref": "indicator--333166a5-420c-4447-bc3d-f3654723be16", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279adfb2-9af9-4698-848b-3c2fee524b4a", "sighting_of_ref": "indicator--57ce03bd-ab7f-4376-b334-32d7edbe230f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd73a03d-b64f-4eab-ab99-17408ff38df0", "sighting_of_ref": "indicator--a0543df7-d370-464f-9a3d-4a154607bc3f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbfcc89-17f4-4613-9449-1b2dc0be0580", "sighting_of_ref": "indicator--a0543df7-d370-464f-9a3d-4a154607bc3f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8048a0db-819c-4294-a6d7-3e6560556d90", "sighting_of_ref": "indicator--b7d43f4c-811b-4cae-8ee8-93e9d05b769c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1438274-4109-4e07-a49e-d209663ca3a3", "sighting_of_ref": "indicator--6c43d73f-fc40-476b-93e3-86de5adfcee9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7444d5-5569-4ca0-9ea6-5036c93aa4e2", "sighting_of_ref": "indicator--6c43d73f-fc40-476b-93e3-86de5adfcee9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc200ed6-b128-4948-b493-cf0fce2711bc", "sighting_of_ref": "indicator--bab916b7-c150-4a92-bcc3-ffb5a6fa621a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2021dc40-70eb-4429-a220-c95a4b7a1e05", "sighting_of_ref": "indicator--6abe040b-dace-4c89-a89e-58ce76b35ac0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea19610-ed6b-4369-9fb8-973843c41134", "sighting_of_ref": "indicator--988419a7-f1e0-4c4f-a7de-599a01be1059", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea4da0b-eaf4-4bdc-8a64-0440fdc7571f", "sighting_of_ref": "indicator--675aba7e-16e3-4b2c-80f3-22ba62c0fc9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba008c4-fc6f-4ead-9b81-9614bb71c3a1", "sighting_of_ref": "indicator--675aba7e-16e3-4b2c-80f3-22ba62c0fc9d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f9d14d-b954-43e2-9da8-7f695508fd1e", "sighting_of_ref": "indicator--0b6a71bd-7c74-46a2-ace2-3aac300aad6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25771afa-dd0b-4cfc-b213-39884e0bdfcc", "sighting_of_ref": "indicator--e1abce8e-9b7f-4b84-9a44-b4bf9284df14", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d222ff51-84ab-45f2-9022-790504384ffa", "sighting_of_ref": "indicator--bf7c0820-ba6b-49a3-a435-0349a8a8e7d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a9b526-19e0-4c16-a4ec-8a516667315b", "sighting_of_ref": "indicator--bf7c0820-ba6b-49a3-a435-0349a8a8e7d2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c081f1-1b76-4606-b5df-6f68d0e70201", "sighting_of_ref": "indicator--73dfe955-8f93-4bcc-a437-aac3835600fe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa2a35b-fcef-435d-9634-e6ff156f5181", "sighting_of_ref": "indicator--dfdb6e58-c882-4c3d-bf7d-64ea075652ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af127ab3-88cd-4cbf-a3cb-221629581eb2", "sighting_of_ref": "indicator--af5f5a2d-87b6-4c07-8d65-523ed3535e35", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663f5b41-1406-474f-8bb1-a4c2ffc2187e", "sighting_of_ref": "indicator--a8109f95-edce-474b-954b-00ee1b854afc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9c2c9d-da13-4c8e-8fcb-f129e3391f03", "sighting_of_ref": "indicator--a8109f95-edce-474b-954b-00ee1b854afc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2d0b96-615c-4098-8aa5-2479f2bf41c5", "sighting_of_ref": "indicator--c4a43cae-a41a-4627-9923-5796387b4aaa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32afbcc-68d4-44ec-a383-04c439a96743", "sighting_of_ref": "indicator--a023c6aa-2322-4409-95d0-238965c9a92e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a179fd8b-dcda-42f8-a6bd-2c6d4ac84c97", "sighting_of_ref": "indicator--2f6f451f-1248-4f36-9ad3-b61207ad7621", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9636a7-4b80-4245-87d2-804f01c1ef65", "sighting_of_ref": "indicator--2f6f451f-1248-4f36-9ad3-b61207ad7621", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68392ce9-eb72-4fa2-b423-355534439851", "sighting_of_ref": "indicator--2f6f451f-1248-4f36-9ad3-b61207ad7621", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57406c5-69c1-4b54-8e7d-dc8218932c9a", "sighting_of_ref": "indicator--d4f21e01-620e-465f-bc6f-23e70d78bf0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661cd288-0128-47ef-bd8b-47c6d4ee7d12", "sighting_of_ref": "indicator--d4f21e01-620e-465f-bc6f-23e70d78bf0d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26727be9-bb35-4c89-9ace-a82c6234b04f", "sighting_of_ref": "indicator--a26b12ca-8f22-4709-bfad-fa01c6817454", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89817cf-eaa5-4aa2-8537-42f768ef78b4", "sighting_of_ref": "indicator--a26b12ca-8f22-4709-bfad-fa01c6817454", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b522bb06-dca4-4e9b-903c-a770ed4e62db", "sighting_of_ref": "indicator--82ddc248-6719-4211-9c6f-1d6cd9e88bb2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c361086c-2ece-49e5-9513-0399a49a2741", "sighting_of_ref": "indicator--82ddc248-6719-4211-9c6f-1d6cd9e88bb2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680f6bcd-31ff-4a4c-949f-129c466f8ad4", "sighting_of_ref": "indicator--82ddc248-6719-4211-9c6f-1d6cd9e88bb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f8d7b2-554f-464e-96c2-6a8df3adf5c2", "sighting_of_ref": "indicator--8ebd5699-776b-4b39-89ee-58c15b577191", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98caf099-6740-4835-98ce-e113f92ab931", "sighting_of_ref": "indicator--41859f16-8156-4155-a481-a738dba1cf04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f38aa21-fa29-4d8b-84e5-f47362d5d066", "sighting_of_ref": "indicator--41859f16-8156-4155-a481-a738dba1cf04", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af980ed-2ef0-4284-af75-a909f02f4120", "sighting_of_ref": "indicator--41859f16-8156-4155-a481-a738dba1cf04", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead189ae-44da-44c8-a90b-1e8d9208e805", "sighting_of_ref": "indicator--c4134532-deea-4983-adbb-5138c20364d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bc1ab8-1b92-4975-ba07-3506b1f5256e", "sighting_of_ref": "indicator--95b1c397-96a6-4595-a8e6-933555e05046", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a188b38f-2035-441a-aa29-c024edcee9ea", "sighting_of_ref": "indicator--95b1c397-96a6-4595-a8e6-933555e05046", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45813930-381d-4765-ab87-4b6d752af87e", "sighting_of_ref": "indicator--95b1c397-96a6-4595-a8e6-933555e05046", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3359ad-d18d-4f1f-8988-8c90f9099830", "sighting_of_ref": "indicator--de3efa04-cfe7-4e00-9493-147172f30e74", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f2b251-eb50-4e09-a02d-5e6e65484e67", "sighting_of_ref": "indicator--de3efa04-cfe7-4e00-9493-147172f30e74", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb75862-fb82-451e-9efa-4f9951327996", "sighting_of_ref": "indicator--de3efa04-cfe7-4e00-9493-147172f30e74", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a4c7e5-c5da-4276-8737-d5b03e718f9f", "sighting_of_ref": "indicator--e2896189-4163-462d-9e23-cdb596ad7791", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d214f9a-4200-4f40-b0a6-35b31108e49e", "sighting_of_ref": "indicator--e2896189-4163-462d-9e23-cdb596ad7791", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f6fa8c-76a0-4736-9bb6-54fdd927c0d5", "sighting_of_ref": "indicator--e2896189-4163-462d-9e23-cdb596ad7791", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415f3145-2639-47ab-b799-7937798bcde6", "sighting_of_ref": "indicator--60a87844-64f0-41f3-9237-5031e2e5c975", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a414983-b86f-4020-a830-7f4391f4fe7e", "sighting_of_ref": "indicator--4dc7a849-fe77-4783-9add-8cbd53e2138b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d57d121-71af-42e8-80f9-44d980b539f1", "sighting_of_ref": "indicator--454c5137-864e-4ed5-b115-c3b640880076", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717e7ed5-b15f-4aef-918b-62cd26aa1039", "sighting_of_ref": "indicator--454c5137-864e-4ed5-b115-c3b640880076", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab68f02-4180-49eb-a17b-24627166d319", "sighting_of_ref": "indicator--454c5137-864e-4ed5-b115-c3b640880076", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1922e6b2-d2c0-42e6-93be-fc3494506064", "sighting_of_ref": "indicator--fd488747-66b5-4728-9c9a-79d76a9fb870", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375de666-a261-44df-b8d2-f5340722b973", "sighting_of_ref": "indicator--fd488747-66b5-4728-9c9a-79d76a9fb870", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513800f-39d2-4c72-b154-8bdde1433157", "sighting_of_ref": "indicator--fd488747-66b5-4728-9c9a-79d76a9fb870", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6d3b93-ee8b-4fd6-97b8-87db0800a663", "sighting_of_ref": "indicator--4dc18917-86b3-4069-9055-54af9539abc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af3ed11-473f-48da-9c60-d6e3a7f5fbe5", "sighting_of_ref": "indicator--4dc18917-86b3-4069-9055-54af9539abc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05b1b11-e583-49fb-9476-cdc7b219151c", "sighting_of_ref": "indicator--4dc18917-86b3-4069-9055-54af9539abc8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cba500-e846-48cf-96d3-ee4064785ab4", "sighting_of_ref": "indicator--bd28a748-3982-49c8-8966-81e1faa137a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca33b48-4b93-4322-b89b-890f7bccd858", "sighting_of_ref": "indicator--bd28a748-3982-49c8-8966-81e1faa137a7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9eee9d-87eb-4810-8033-b2de6c2de39d", "sighting_of_ref": "indicator--67cae0a2-99f9-4fd5-ad48-fec65ad1c175", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f218e0-f920-4202-94d1-7b50d7b3d363", "sighting_of_ref": "indicator--e5ee2c83-e035-4215-abb1-208a5ecc2d75", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76a74ec-ff79-4b64-bbd8-ebc6cf901658", "sighting_of_ref": "indicator--a8715342-d7b9-4bd2-89ec-98d0b4142edc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a8ca17-92a8-4ef3-adf7-320aea518483", "sighting_of_ref": "indicator--841d7636-8851-4f8f-bc22-8df4544c8dec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0671beb3-cc5b-4842-96a0-30af23ef6cb9", "sighting_of_ref": "indicator--841d7636-8851-4f8f-bc22-8df4544c8dec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e438801f-bd31-4042-8506-ad0c518601a6", "sighting_of_ref": "indicator--20dad8d1-ba49-45d8-92a2-ff6e921fee70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a38ad-2b4c-4b0d-b2ef-60d4ae8a2d08", "sighting_of_ref": "indicator--20dad8d1-ba49-45d8-92a2-ff6e921fee70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dacc1f2-adfb-47c9-8255-dbe320909f06", "sighting_of_ref": "indicator--20dad8d1-ba49-45d8-92a2-ff6e921fee70", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707dd8d1-1ec7-4ed1-a81d-9897818917d1", "sighting_of_ref": "indicator--c9bc08c9-74c1-49b0-9fad-73c8d1bfaf30", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1e7597-6b58-4280-ace1-e7e2fbdb5582", "sighting_of_ref": "indicator--c9bc08c9-74c1-49b0-9fad-73c8d1bfaf30", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8640f09-57d9-4ec7-af2e-8addc19d47b0", "sighting_of_ref": "indicator--c9bc08c9-74c1-49b0-9fad-73c8d1bfaf30", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe245dfc-074c-465b-9bbb-c0731dde6563", "sighting_of_ref": "indicator--ee33caa2-4ef3-4b18-b309-02e865190655", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f084fdad-3c3f-475e-b58c-51b1d526fc98", "sighting_of_ref": "indicator--ee33caa2-4ef3-4b18-b309-02e865190655", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fc985b-5fbe-4a4f-9268-1b37a98dcd7e", "sighting_of_ref": "indicator--ee33caa2-4ef3-4b18-b309-02e865190655", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a0cc3e-fb4e-4cb9-a039-bf99532528a1", "sighting_of_ref": "indicator--e9b27bc5-b0cb-4761-b5a1-bf8687bf7199", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2818a681-107f-42dd-be20-f9b3e1c8cfa7", "sighting_of_ref": "indicator--e9b27bc5-b0cb-4761-b5a1-bf8687bf7199", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f5e766-266e-4943-a264-492e585d7966", "sighting_of_ref": "indicator--e9b27bc5-b0cb-4761-b5a1-bf8687bf7199", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4d650c-c9e1-44fa-bf0b-63342f462b89", "sighting_of_ref": "indicator--7b3285b4-e777-490a-b891-389580bb0eba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b6ffae-defb-4a57-b5ef-e97062c416fb", "sighting_of_ref": "indicator--7b3285b4-e777-490a-b891-389580bb0eba", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2a380-1dd3-4512-b220-d914cdd9efbd", "sighting_of_ref": "indicator--7b3285b4-e777-490a-b891-389580bb0eba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9559fda-4ebf-4f3e-b6d1-2986206b9f11", "sighting_of_ref": "indicator--29ca86ac-ba81-4b06-bc9d-c91e4bb84ee6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768fcbfa-3172-4bde-b62a-8252968a5357", "sighting_of_ref": "indicator--29ca86ac-ba81-4b06-bc9d-c91e4bb84ee6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4f83fb-a356-4ab3-b6df-128b686f365d", "sighting_of_ref": "indicator--29ca86ac-ba81-4b06-bc9d-c91e4bb84ee6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d078044-1a93-4443-b485-e29328c52d7d", "sighting_of_ref": "indicator--e23e3a44-d195-42eb-bce1-eabb8d16c73a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2708a626-4372-4619-8a2b-a5dfc1b5e455", "sighting_of_ref": "indicator--e23e3a44-d195-42eb-bce1-eabb8d16c73a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf504b2-f7f0-4cd9-9c99-1bff36178fed", "sighting_of_ref": "indicator--e23e3a44-d195-42eb-bce1-eabb8d16c73a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d28bdb-6c1d-4554-ad76-db3cb87bd9ba", "sighting_of_ref": "indicator--b2e8ca2c-6a04-48cf-af4e-af25f3d498a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02329117-afa2-4408-a4e0-e374fa61e982", "sighting_of_ref": "indicator--b2e8ca2c-6a04-48cf-af4e-af25f3d498a4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241431c5-84b0-4ae6-87e5-188b0ca013c8", "sighting_of_ref": "indicator--b2e8ca2c-6a04-48cf-af4e-af25f3d498a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7b981e-df84-4a18-a30f-4b7ec100afc8", "sighting_of_ref": "indicator--b5365e04-5f1e-4f76-aa17-252697513275", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6598698-0394-46e9-8a64-18689ed08340", "sighting_of_ref": "indicator--b5365e04-5f1e-4f76-aa17-252697513275", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc1ffce-38f7-4dc2-a815-eaa1fd6ca615", "sighting_of_ref": "indicator--b5365e04-5f1e-4f76-aa17-252697513275", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc18798e-a002-4432-8981-fc17623d879b", "sighting_of_ref": "indicator--713a5fb3-d76b-4708-911c-b21d4c8c44f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696bf79e-7b78-4ecb-a24a-2252b494d8c4", "sighting_of_ref": "indicator--713a5fb3-d76b-4708-911c-b21d4c8c44f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed3f5e1-982a-4205-9633-d7dfcc024068", "sighting_of_ref": "indicator--713a5fb3-d76b-4708-911c-b21d4c8c44f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50ec99b-66ea-4545-8dfd-dc90531849ca", "sighting_of_ref": "indicator--e0ff7f7c-97f5-40b7-ae77-1fb9e9083f9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd783bb-c485-4e9e-aebb-7d900fecebd3", "sighting_of_ref": "indicator--e0ff7f7c-97f5-40b7-ae77-1fb9e9083f9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eb6f56-75c4-4dcf-b06f-a001d448c81e", "sighting_of_ref": "indicator--e0ff7f7c-97f5-40b7-ae77-1fb9e9083f9f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5a707a-6f7a-47b1-ab99-3ed326965e19", "sighting_of_ref": "indicator--89fac227-0693-489d-bbe0-e24aeed27e68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23012fdf-b2a5-4b8a-862f-2542b144a58c", "sighting_of_ref": "indicator--89fac227-0693-489d-bbe0-e24aeed27e68", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c687eb6-6b3d-4b5a-9650-6e36869f0227", "sighting_of_ref": "indicator--89fac227-0693-489d-bbe0-e24aeed27e68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff76024d-e9e4-4f04-ae1b-2e6acd54050c", "sighting_of_ref": "indicator--e5274a41-6268-4b73-b295-43be26703b70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2e443d-dde5-4faa-b373-e4535a44fc9a", "sighting_of_ref": "indicator--370a9a42-76c1-476e-ae12-55b4eaaebd34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b3e896-aa73-43c3-96cb-1551bee62395", "sighting_of_ref": "indicator--3bec79c6-5d11-40fb-bbe5-dd6295315ab6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427cfa47-a126-4fc4-a3c4-2992f7a8cc56", "sighting_of_ref": "indicator--536b9f2f-33ef-4fc8-9842-266de56dec2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67407082-c013-45ff-bf44-c9953d958266", "sighting_of_ref": "indicator--b2d418a1-98ed-4273-9d93-99cb5818b256", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5aa701-130c-49bc-b8e3-5bc11ff2b74c", "sighting_of_ref": "indicator--b2d418a1-98ed-4273-9d93-99cb5818b256", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ca3194-2699-451c-bd74-82322b395a1c", "sighting_of_ref": "indicator--106f28d4-0daf-40a1-8a9d-5e77d2c217f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8284de37-ea33-43fc-b745-9917bf235728", "sighting_of_ref": "indicator--bca4da9b-9794-4229-b1cb-a4350e8c9331", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af462ea-52ad-4246-81d6-af29ccd959e9", "sighting_of_ref": "indicator--299a171c-f3a2-4b71-9129-65fc89b99fe7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63956a02-824c-4ad3-b253-2d4355df8abf", "sighting_of_ref": "indicator--20740811-d82e-472e-a358-924fcefbc7cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc29e376-1330-436c-8de7-f37a652d70eb", "sighting_of_ref": "indicator--b70398b8-590b-4e48-894e-4f47491436a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ffdd51-36fd-4846-ae1c-58ff2df2a59e", "sighting_of_ref": "indicator--19bbaeed-cddc-4727-97f2-578c05bb4d4b", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a662f9e4-1929-4543-8e7c-f982c47b330e", "sighting_of_ref": "indicator--2a98968f-3653-4f8d-bddd-a987c81d6d14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552ca811-e427-427a-b5e4-43ec3797ff0f", "sighting_of_ref": "indicator--6bd17e5a-53b9-433f-b697-2325e77e31db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94dadd2-32a7-435d-aed5-3abf6901a2f7", "sighting_of_ref": "indicator--6bd17e5a-53b9-433f-b697-2325e77e31db", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00182795-d67f-45e7-9a7a-58978baed6b6", "sighting_of_ref": "indicator--6bd17e5a-53b9-433f-b697-2325e77e31db", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08390df-7803-4ce6-b25d-dc77d380e6d4", "sighting_of_ref": "indicator--377a8888-4e6c-4229-bdfc-45568b878b45", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a9f3f6-253a-4589-9a42-c94794e37c63", "sighting_of_ref": "indicator--ba17105d-6250-41d9-b8b7-29e325bbcd3d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7ccddc-fdca-4327-b87c-18e1fd335d11", "sighting_of_ref": "indicator--ba17105d-6250-41d9-b8b7-29e325bbcd3d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa0465a-12b5-40dd-919d-ed24e12321f6", "sighting_of_ref": "indicator--ba17105d-6250-41d9-b8b7-29e325bbcd3d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1e07d9-07d8-4bb5-87cb-ecc355bec771", "sighting_of_ref": "indicator--e05fcfa4-afca-4830-abec-143d35b76af3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b7e862-a10b-4ac4-8a8c-c83c9eafb969", "sighting_of_ref": "indicator--da44ff27-e6ad-4931-9994-687b2dd36e80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf515bec-5c2c-4f61-aa8c-a6d5f5e2ee2b", "sighting_of_ref": "indicator--0dd79a8f-9038-458d-b89f-ffa0ebd5175e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336093a6-98cb-406f-a633-9acb87a67cd5", "sighting_of_ref": "indicator--0dd79a8f-9038-458d-b89f-ffa0ebd5175e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a138b1b4-2a11-420c-9f1e-5f868132ab63", "sighting_of_ref": "indicator--0dd79a8f-9038-458d-b89f-ffa0ebd5175e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aedf49-ebfa-4f1a-aeae-800cd359f273", "sighting_of_ref": "indicator--163abf36-35c2-4a62-bdcb-c3d64fb005de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771d7ce4-72be-49ff-a5c5-3f9f15a7f804", "sighting_of_ref": "indicator--163abf36-35c2-4a62-bdcb-c3d64fb005de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcc6c72-a619-4112-8647-7efdcf3a85cc", "sighting_of_ref": "indicator--163abf36-35c2-4a62-bdcb-c3d64fb005de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97c946-a641-44f5-8597-a7a2536d7ccd", "sighting_of_ref": "indicator--35552cd3-746a-4493-b5dd-71b43581c616", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc44036c-cf5d-4f6c-9b14-c9825a77fc30", "sighting_of_ref": "indicator--35552cd3-746a-4493-b5dd-71b43581c616", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c529b132-d1d4-4778-bb01-bbc22a35b3b3", "sighting_of_ref": "indicator--35552cd3-746a-4493-b5dd-71b43581c616", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9a3f68-71fd-457e-90ae-69c6e3c6621a", "sighting_of_ref": "indicator--e86ea29f-69e3-45a0-b198-418b5569b800", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e279de90-23ba-4758-bb4f-3b4da3153c66", "sighting_of_ref": "indicator--e86ea29f-69e3-45a0-b198-418b5569b800", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d46997e-f6c8-437c-a9fb-95edda3b3959", "sighting_of_ref": "indicator--e86ea29f-69e3-45a0-b198-418b5569b800", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b533b3-4c69-491b-9f23-8c53f4d1f565", "sighting_of_ref": "indicator--d5f27851-cb5b-462f-85ec-7ceb91948239", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa01b2b-a99c-48a3-8340-21e35a257b8d", "sighting_of_ref": "indicator--d5f27851-cb5b-462f-85ec-7ceb91948239", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8612cf79-9855-40b3-baac-d5232ec03db7", "sighting_of_ref": "indicator--d5f27851-cb5b-462f-85ec-7ceb91948239", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613d7004-1d81-4730-baa1-4f0cfe380aa4", "sighting_of_ref": "indicator--09db26e7-9ab5-457c-b0c2-e4f15f262734", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0402c25c-f28d-49d0-87ce-38787209f6a5", "sighting_of_ref": "indicator--09db26e7-9ab5-457c-b0c2-e4f15f262734", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b1551c-f7c3-41ff-9137-5f462bb4cd6d", "sighting_of_ref": "indicator--09db26e7-9ab5-457c-b0c2-e4f15f262734", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc02294f-43e6-40d0-b5bb-29a21bed93cb", "sighting_of_ref": "indicator--bc08d896-5c21-4af5-9450-bdacfbf2dab3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a83f99-12f5-43b0-a2d3-4caa4b922244", "sighting_of_ref": "indicator--bc08d896-5c21-4af5-9450-bdacfbf2dab3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6a7bf5-69eb-4d46-bbcd-acb320f9ac7f", "sighting_of_ref": "indicator--bc08d896-5c21-4af5-9450-bdacfbf2dab3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32e24b1-c1eb-4d96-ad62-e0ac9eaf75f1", "sighting_of_ref": "indicator--904478fc-a658-429f-8adb-cbb6f61b5457", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ef5174-fb63-4614-a9af-a327696179de", "sighting_of_ref": "indicator--b698447a-1dc8-4c13-aa38-20df272e5d38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e1532d-adc0-493a-b101-244293954489", "sighting_of_ref": "indicator--b698447a-1dc8-4c13-aa38-20df272e5d38", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c28c84d-6675-480f-83b0-63f72df5f518", "sighting_of_ref": "indicator--b698447a-1dc8-4c13-aa38-20df272e5d38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42692498-44e9-42d3-99e0-8eb39b247c47", "sighting_of_ref": "indicator--fd6593b3-0842-4e4e-87f1-2e80d35a3fdb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba8f298-e2f5-4c53-9c8f-98113340ff0a", "sighting_of_ref": "indicator--fd6593b3-0842-4e4e-87f1-2e80d35a3fdb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cba887f-024e-476b-840e-cb98a0ec99c9", "sighting_of_ref": "indicator--fd6593b3-0842-4e4e-87f1-2e80d35a3fdb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114ae432-f10e-4c23-b543-7b697b41231f", "sighting_of_ref": "indicator--5027e082-06e8-4bea-a888-47efe321683e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e0a6e3-0f1b-4dbe-8ad4-f8678b0b0723", "sighting_of_ref": "indicator--5027e082-06e8-4bea-a888-47efe321683e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e348b3e-e432-4615-947b-9af20d782d55", "sighting_of_ref": "indicator--5027e082-06e8-4bea-a888-47efe321683e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d51b72-5b42-4ee7-a152-2d09f8ef60ec", "sighting_of_ref": "indicator--795f2826-c0b7-4282-bd90-9297f969d0d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b3d61c-7afa-4aab-9aba-a8d259e3bc4b", "sighting_of_ref": "indicator--795f2826-c0b7-4282-bd90-9297f969d0d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faef78b0-83a3-458b-b9bd-9e54262e2ba1", "sighting_of_ref": "indicator--795f2826-c0b7-4282-bd90-9297f969d0d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b5cada-d7ba-46e1-be7d-fe5cae0f3303", "sighting_of_ref": "indicator--2f807e02-958f-4189-960f-4f1d3a4476aa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07aa769-0a7a-43ce-85f8-df7d83820a5f", "sighting_of_ref": "indicator--2f807e02-958f-4189-960f-4f1d3a4476aa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494b79d8-9135-4408-9d0b-4600ca4d1a64", "sighting_of_ref": "indicator--2f807e02-958f-4189-960f-4f1d3a4476aa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaf383b-b659-4840-811c-514985c7f6b6", "sighting_of_ref": "indicator--a6a6ec3b-b537-4f3f-b383-60bc042abc03", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa48f3fd-2205-4591-9b07-2d0f31764f02", "sighting_of_ref": "indicator--a6a6ec3b-b537-4f3f-b383-60bc042abc03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f2bfe9-c5e8-4227-90df-fbbb662f4b8f", "sighting_of_ref": "indicator--c4519c3a-79cd-4d6d-ae42-8b12cbb1734a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de79ecc4-a5a1-42ad-a2b9-7d1fcdee79b4", "sighting_of_ref": "indicator--c4519c3a-79cd-4d6d-ae42-8b12cbb1734a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbc69db-274f-4fd2-884c-1a6ddf8d67b6", "sighting_of_ref": "indicator--29bcdeb5-c678-4200-9ef2-e23bba302476", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5406fbb0-2c5f-431f-9b46-69a6385aec4e", "sighting_of_ref": "indicator--29bcdeb5-c678-4200-9ef2-e23bba302476", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1023a0fc-ae14-432e-ab90-8fa19dbaf015", "sighting_of_ref": "indicator--29bcdeb5-c678-4200-9ef2-e23bba302476", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2b805f-7a5b-4334-af31-0eaacb6d9514", "sighting_of_ref": "indicator--d537dcab-dad2-408e-94d3-4ecbd656d04b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0936013-e4a4-46de-8334-462153b42928", "sighting_of_ref": "indicator--d537dcab-dad2-408e-94d3-4ecbd656d04b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9fb7cd-ad84-4f28-b6e1-b6e94240eb43", "sighting_of_ref": "indicator--c9185a30-8e5f-4fea-adcc-e2b5f3cb24e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee4fe0a-276c-40d6-8589-eaba22dca7a5", "sighting_of_ref": "indicator--e45307ea-deea-4797-8386-e2d28457fb5f", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693cf942-178b-4b04-843a-d3243ff4a80a", "sighting_of_ref": "indicator--b3d2c216-02bc-4dbd-be0d-9c3ed266d1c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf207c37-a7ac-4730-bbf9-e31cc909c2a9", "sighting_of_ref": "indicator--0864c1bd-f35b-425e-abfc-442596c14b50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542f575a-37c0-47cc-8fe2-304592b91bbf", "sighting_of_ref": "indicator--ab2efa63-af72-42e3-8043-f1e850f15951", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48915306-2047-44ff-b6ad-8309df64f434", "sighting_of_ref": "indicator--7445e3cd-f220-49f1-a823-8a506c3e7a7f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385d871b-ae69-4591-a377-752bc03bb739", "sighting_of_ref": "indicator--88353d9a-855f-4806-9dc8-8083cccc717e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd73eaa-db4b-4273-a290-f1590ca2b82e", "sighting_of_ref": "indicator--f0c6cf11-1dfd-487b-b49a-7336757f27f6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ebe61-178a-4cdc-9f9c-e9821a2e8e7f", "sighting_of_ref": "indicator--423e7dd8-bc53-4fbf-87aa-f35bdce613d6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cf31de-10d7-40aa-a499-837b2f4d68b4", "sighting_of_ref": "indicator--423e7dd8-bc53-4fbf-87aa-f35bdce613d6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216d71e7-e0db-4510-bca0-45fb353ae040", "sighting_of_ref": "indicator--72f3482f-d2fd-49f6-a9db-6348bc0853f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5353d678-bca2-48bf-b608-652940a753fd", "sighting_of_ref": "indicator--83226483-11c3-4d8a-b042-caf529f8fbb9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641baa81-c205-422d-a50d-92e593ac6287", "sighting_of_ref": "indicator--83226483-11c3-4d8a-b042-caf529f8fbb9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ad36b1-b4a5-4227-96c4-ca7889e61c12", "sighting_of_ref": "indicator--7ce69b80-f8c2-4562-97f3-28bf7ac74cef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d597af-fb47-4bcd-8330-aef520a8cd99", "sighting_of_ref": "indicator--45e04dde-b942-4b4e-ae00-eb636ef1eeb7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202f08b4-518f-44b2-b539-aff621924d1f", "sighting_of_ref": "indicator--d236c0e2-96cd-47ff-b128-407abda3503d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3f89f6-7a3c-4171-ad48-de2835a80e77", "sighting_of_ref": "indicator--1ed52ccb-7c65-4f4b-bc06-79665827ce26", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01f9396-5320-4dfa-b9c2-05cfb56a4aa7", "sighting_of_ref": "indicator--9b41037c-52bc-4559-aa92-7cc36bd8c710", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc337158-f76e-4dc2-89e9-23b85597d916", "sighting_of_ref": "indicator--2f87faaa-e7cd-402a-8564-5a7ef50a9ab0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c557a5b-a323-45c7-8a4f-aeaab6f613f5", "sighting_of_ref": "indicator--8cfbcc64-09eb-46b6-b861-01c2f4631725", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3cafc9-9fe4-4450-8e1c-76b0dd658788", "sighting_of_ref": "indicator--5567c892-8645-4faa-920a-455c632d7b31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86810432-7d8f-4607-9108-0ba5ad78a304", "sighting_of_ref": "indicator--29d3a32d-97e9-4fb6-b9e1-cca2ea888293", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c680f1-0591-4ebf-88e3-6ea7193bca15", "sighting_of_ref": "indicator--76fbb455-58f6-40f8-a6f1-0d4b7e39e4fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d5bd5a-b1e8-44c7-a825-c8ab376bd64e", "sighting_of_ref": "indicator--a79af37b-143a-441a-8e73-2e54858091fe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca939cfc-17b3-4df2-b57e-0dca90422524", "sighting_of_ref": "indicator--bb3790b3-e06c-49e6-ac27-8b47ebf89a64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b845cc-ed15-473b-9164-cb737b7c0b62", "sighting_of_ref": "indicator--b27b6484-346a-4236-96b4-23e350f0211e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca61a7e-e8e4-488a-9781-6833c48ae5a6", "sighting_of_ref": "indicator--1ca945f3-68c0-4d60-904c-b828fad78614", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf5a96d-d367-4e83-b026-aa67bfe2eb4b", "sighting_of_ref": "indicator--003a06b4-b559-4688-bbbb-ea4838ed58ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0745f2d-746b-4847-affc-8aa6bac60170", "sighting_of_ref": "indicator--8584fc51-7c0c-4c4e-91e8-e3d963aa6c3a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8370afc-fa1d-4a72-ae63-9d5dc668242b", "sighting_of_ref": "indicator--de23b5c0-be9c-4aa8-a3d7-68035b3058eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dccc677-0ee1-4991-a539-363d5f1a0572", "sighting_of_ref": "indicator--82f4cbe1-eeee-4952-ae11-caa38cb39e35", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1b3047-9eb3-4761-bbe7-fd334b61e5af", "sighting_of_ref": "indicator--7f885828-d57c-4d3d-8af6-4064934b477c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bae53c-4b1b-489d-9235-096a4a93739c", "sighting_of_ref": "indicator--f0142696-8d4f-44a6-82de-d0d9c7f46107", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a526ae62-3fba-4289-a78f-fdc5e321d221", "sighting_of_ref": "indicator--87d13192-9c8f-4c6a-bbd5-3441d13c178e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0082c6fe-cec2-4311-aeb6-c525e09bb409", "sighting_of_ref": "indicator--5d6045f8-ee39-4057-bcbb-3055d5092707", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a9f65f-94c1-4427-a976-a95a78a8eaeb", "sighting_of_ref": "indicator--b1d04dd9-b6fe-4c1e-9ec1-5996eba322c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf482eb-e1bd-4a88-8bca-3ed0303a159d", "sighting_of_ref": "indicator--9a8c0e2c-5c0c-4af8-8794-befca1caa9fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c1f87d-10f2-4793-8abc-fceff822f9a2", "sighting_of_ref": "indicator--ab7c1b46-c984-4147-845d-e48ab19dced5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5a9fe8-683f-4a89-9c24-b3e900288a1a", "sighting_of_ref": "indicator--04fa40ae-ec95-489c-b88c-7f7a32aa9cb4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ce9087-bfec-404e-8e58-bae756fcb326", "sighting_of_ref": "indicator--b804a8f6-fc0a-45b0-806f-47bd2efca19e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77628ba6-3c4a-43d5-bf6a-aa0b93a980c0", "sighting_of_ref": "indicator--05901750-2f82-4653-b588-136890bbd442", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2566e74a-2eda-4559-8a88-5e79b852e141", "sighting_of_ref": "indicator--126318a7-aca7-4f12-8ddb-ef577a45941e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72372873-ed38-4fc8-896a-f49a2d9b2202", "sighting_of_ref": "indicator--306c8210-3e72-4c70-8486-2d520d4d58e7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b110d6a-9668-495c-a14c-fa11d1c4421b", "sighting_of_ref": "indicator--cc133cd3-a379-4e69-abaa-fd30a862da65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9205618d-8c68-4d32-9a50-116433be7b97", "sighting_of_ref": "indicator--cc133cd3-a379-4e69-abaa-fd30a862da65", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361acc4a-dea5-4898-8ce7-49eda579b815", "sighting_of_ref": "indicator--8ea1145b-0356-45f2-9fc2-4804e8d8dfc8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c092b234-9618-4b66-bef0-950cfc7c1158", "sighting_of_ref": "indicator--c68c3818-e85d-48f8-bc42-66363a3c2f03", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873eb1ae-9933-434d-95ce-e5ddf96bcfe9", "sighting_of_ref": "indicator--f764f7a6-ac16-4c18-96da-cdd8148533b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3010bd83-0d32-4288-a3cf-c56724c1a4e9", "sighting_of_ref": "indicator--1f7705d9-ed10-4390-aec4-4e01719300dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918554f5-ccca-4933-8ff2-84e66e0563ba", "sighting_of_ref": "indicator--c2bfa38d-b6a9-4c71-89b1-e63f4adb3193", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417a90e8-7032-47b0-8809-f26ebc89f708", "sighting_of_ref": "indicator--1512db46-d4f1-40aa-a259-0902718be7f9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b61a8d5-7610-4769-b944-08c1071da117", "sighting_of_ref": "indicator--97bb8de9-8c64-4efa-8465-bd50fdb2a23f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c716cee0-89df-4387-ada4-5a5fc30c5358", "sighting_of_ref": "indicator--707775ee-8c17-4f6b-8156-11fcba69fd89", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e37a4dd-84a5-4659-a686-ef995f9f901b", "sighting_of_ref": "indicator--707775ee-8c17-4f6b-8156-11fcba69fd89", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcebc548-23b2-43e0-9572-fa4fdaa41722", "sighting_of_ref": "indicator--1b3910b9-49ae-4ca8-bbee-219484c22e0f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf86946a-c5dc-49ba-ae4d-d6fae84bbd7f", "sighting_of_ref": "indicator--cef1ebf3-2b55-4c4f-a941-594f8ac0f90d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ffe894-9114-4764-bbbb-e93e2f6ab147", "sighting_of_ref": "indicator--cef1ebf3-2b55-4c4f-a941-594f8ac0f90d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6489f05-a914-4247-9bd4-f86776caa1d3", "sighting_of_ref": "indicator--d5c3c848-a895-4750-8b72-f7062845d3c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bec591-ff1a-4b63-9d04-efe60aa5ec53", "sighting_of_ref": "indicator--6f90d9a4-eb4e-4014-a40e-6573dca28d34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3507d83d-cc4b-4b8a-a03c-31f89447e453", "sighting_of_ref": "indicator--6f90d9a4-eb4e-4014-a40e-6573dca28d34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9397b9aa-0d55-4500-8cbd-52d8ad841342", "sighting_of_ref": "indicator--8dcadf6c-ed57-4bb9-a41c-cda3ec3b69bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888dee0b-13bf-46ee-89b5-5543d205f69e", "sighting_of_ref": "indicator--c004d1d6-6858-4e57-a7ff-fca9f4eef6ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722b6704-20fb-4d3a-ba9f-c6aa28eaa2e9", "sighting_of_ref": "indicator--3a32d23a-31b1-4354-a159-b6085939eb14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d70fb5c-d24b-4012-a9c9-1ef90f3287ce", "sighting_of_ref": "indicator--ee05a76e-8d81-41e6-b703-cdf870cbfd2a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae55404b-817e-4c06-a258-5df5a5cc1aad", "sighting_of_ref": "indicator--1d822cc7-81b1-4781-ab60-e709e1c0996c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46d0771-b085-46e7-af3d-dbb7b7575498", "sighting_of_ref": "indicator--35dd0ba0-87c0-4dda-9c04-b69d0fad3a2c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc588787-aaf2-40e2-a8a9-d6e414b36aee", "sighting_of_ref": "indicator--1e0b487c-08b6-40ad-a5e2-7fe8f90ae6dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3575890a-a0bd-4af8-bf86-d138afcb5fd3", "sighting_of_ref": "indicator--144133cc-123a-4bef-9c38-52287e90f29e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91985e73-47b5-4f73-b3e3-05eb7e0a474d", "sighting_of_ref": "indicator--e484a06f-9f48-46c0-baa5-c01c22ed643a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db7001d-c9c9-4900-80c8-0438b5043b3e", "sighting_of_ref": "indicator--dd2073cf-6bdc-48a8-93e3-a2b481d93eac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6445c58-fc62-4452-89f8-e363ac040c3b", "sighting_of_ref": "indicator--9610723a-0810-4197-93de-a482f76709af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb24a6e-f7f5-4b35-be57-0ef723021bed", "sighting_of_ref": "indicator--bdb887b3-2cb2-4fa0-b32b-401b602914b1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb198f80-b0ed-4795-981d-7d6a067bd5ca", "sighting_of_ref": "indicator--93b0c62d-7813-4a25-b63f-b24b0e170003", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc62729-ea58-430a-98f2-cce1cff53465", "sighting_of_ref": "indicator--09447bdb-ac7a-4165-9de1-759d07b9b422", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf7b90b-2b93-49e8-a1ee-c66a7c157b87", "sighting_of_ref": "indicator--d2f8c8f7-6916-4729-a81f-cda071dfe036", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49254b9b-8808-4830-861a-d747d174cc91", "sighting_of_ref": "indicator--6fd240f6-44d4-432e-8063-7c031586233c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c997edf6-9bc2-4088-97fe-2fa9f22ddd16", "sighting_of_ref": "indicator--5e3779b4-2bea-4779-bf11-274816daf571", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a9cc76-bc96-4749-adce-7df3a64585b9", "sighting_of_ref": "indicator--eb7b0a8f-5aae-4edc-81be-f415637dc9d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de74f45-2310-4f89-a66a-91579b1a2e85", "sighting_of_ref": "indicator--8fadb422-598f-47e5-b793-d9b4f385d508", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fbb552-461a-446e-9cc2-d11a1e34b3b2", "sighting_of_ref": "indicator--8fadb422-598f-47e5-b793-d9b4f385d508", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15824229-bfc7-49d3-aa5e-6051023dc50d", "sighting_of_ref": "indicator--fcf5e5a9-8e07-4c7a-be55-ea2ad618c8cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3296e228-8f45-4a02-a7d8-ddd1bfe0e0af", "sighting_of_ref": "indicator--d1f757fd-fb48-4f0b-83ed-30ea3e3a52af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7a6566-7afb-4b24-9636-487ef05650be", "sighting_of_ref": "indicator--b9bd476a-8e64-4ed6-b90b-30e48ba0b9a4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d16b6d2-0793-480e-9a0f-4fbdc250e259", "sighting_of_ref": "indicator--94c01040-e2cd-42d6-b09d-c4c6b5393496", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8b837f-2490-46be-96c4-724ce75511f9", "sighting_of_ref": "indicator--832799a7-9dfc-47ac-9e68-281cc3cf4f40", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557c97e8-6e87-43d9-8573-e85cd4de4e81", "sighting_of_ref": "indicator--832799a7-9dfc-47ac-9e68-281cc3cf4f40", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb34da7-6de8-4377-a2d4-bb5af095c4ee", "sighting_of_ref": "indicator--51e1b4fc-d5a8-49b4-adc2-a7201bac475b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd0e65-226a-4f41-abdd-e5e61cd4d560", "sighting_of_ref": "indicator--ba663fee-47c3-44fd-9832-0f0fd8d140f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9770036-245f-40cf-b52f-b9e5e174fb5e", "sighting_of_ref": "indicator--a70d6b49-b057-40fb-98ce-075b646810e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba67accd-2067-4b66-b31f-b3bd1d16e682", "sighting_of_ref": "indicator--a7b54107-0c27-467b-9303-83586bc6dd49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f309a9f9-f514-466b-bf00-03b0631483c0", "sighting_of_ref": "indicator--5e0134f7-4593-440d-ab4e-7b4e5a19bbfd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0006fd-bcb8-4be8-b062-ec23f2175c0e", "sighting_of_ref": "indicator--776c5d83-fef8-42e5-8892-266e1b92a025", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e3e2e4-a1de-4c68-a810-6098fa90f494", "sighting_of_ref": "indicator--597ec30b-40cd-440d-9dcf-7da93a804055", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993aabda-b48c-4df1-afde-f5ac00b9b52c", "sighting_of_ref": "indicator--2595aa01-6ac2-418a-af86-c0f3bcb7b758", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93746656-07d7-4ae0-919e-9f7e7fc63b0f", "sighting_of_ref": "indicator--915b9566-77d1-4c56-89dd-4c9e1508be86", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce05ab4-09a7-4b30-b561-addfa3cbaa3e", "sighting_of_ref": "indicator--915b9566-77d1-4c56-89dd-4c9e1508be86", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8f66db-6792-42ae-b84d-5bcaaa27dd36", "sighting_of_ref": "indicator--a2c2c8d2-2303-478c-a218-a884c80aa6b8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dbb604-b3ca-4e49-914e-b87a60e866ad", "sighting_of_ref": "indicator--124e26b1-2e63-49e9-a736-eca10afb4a70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb61e0cb-af58-4e75-a209-37640ad352ee", "sighting_of_ref": "indicator--124e26b1-2e63-49e9-a736-eca10afb4a70", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb9b252-3fad-4b97-acc2-55ea0fff5b86", "sighting_of_ref": "indicator--c2357efb-f1a6-45b6-b7da-0bda26a441a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbe4c7f-7311-4d06-aa7e-6911991a9cf4", "sighting_of_ref": "indicator--2979a73a-7f18-4414-8d59-37c84f22f9ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f882b5-f1ca-44bc-a331-23112d4bc0a0", "sighting_of_ref": "indicator--ed1c1f11-8078-4468-844b-9f0fb1646cfb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a26205-6ca9-442e-aef1-d2d898a9dcc4", "sighting_of_ref": "indicator--a9733f2c-8e02-4d59-83dc-e2c55823ce49", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d908fad-bb74-49ec-969e-826f7d26e5be", "sighting_of_ref": "indicator--03f8393e-b2b8-4d32-ad2b-c49569d9e295", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396601c-21eb-429a-9b8c-4a22bc91e231", "sighting_of_ref": "indicator--aeb0d93a-9eb1-4bd6-b562-47a965b7223b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0386e6-5425-4571-9821-de4ff237a380", "sighting_of_ref": "indicator--a3aab5cf-e40b-4448-bbfb-d0d7ed7c4808", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76297f7-f8d0-42fb-93d0-0d9797a9c114", "sighting_of_ref": "indicator--21837e37-01d3-4ca5-9a31-1f540c08276a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565d3f50-9c33-483f-b697-900833a56a51", "sighting_of_ref": "indicator--70f496ab-f288-454b-8c52-6d9f703cbb7c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1eef44-5759-4f25-9fcd-6d038ac62e92", "sighting_of_ref": "indicator--04d77e1a-bc2d-4f85-8ef1-764571cb2e1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e2d252-415f-4064-9def-201539d48665", "sighting_of_ref": "indicator--dd899fc4-d82e-4571-af72-e6facb8a5ff5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a674f3-9e93-4b1b-8bd7-ee78031fdba3", "sighting_of_ref": "indicator--4a1a13ba-f192-46c8-b2e7-73de8b92155a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d39cba-8a6b-47a6-8003-3f5557c4e411", "sighting_of_ref": "indicator--aaf081a8-ae05-4921-8baa-a64969957036", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2365d7b3-7047-47e3-807f-4498181733c4", "sighting_of_ref": "indicator--b2bb28c6-a52d-44b9-901c-18a4b0924f7f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc35100-2606-40ff-875a-51bf8f625556", "sighting_of_ref": "indicator--8724b139-0450-4dcd-b51f-47e5a3878338", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b7a7e0-5271-48a6-9b2c-e42025c4cda8", "sighting_of_ref": "indicator--b2b99e9c-b3ef-42ca-8e81-8dccefb4afee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7db64f-d684-42ed-874d-615448b3dbd6", "sighting_of_ref": "indicator--3344eb4e-e1ce-40d3-9146-da27869c682c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7405148-d3ce-42ab-9b34-ba2199837bb8", "sighting_of_ref": "indicator--f3e52b6a-0a1c-4a5c-b9a5-266c204f4472", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aba69c-4f8f-4f26-9b7a-c929d3c2ecf6", "sighting_of_ref": "indicator--f97ae12b-fba7-4760-8952-d5d77c52d7ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a62919a-d3b1-4937-b07b-7f0a94573d7b", "sighting_of_ref": "indicator--66f3a7d8-cb83-4186-bffd-826ea70ce617", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156fde57-4729-4ef9-a257-b55eddf553de", "sighting_of_ref": "indicator--a8deca09-087f-4b2e-b7a2-00b0f6ee4e37", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3977cf-eccf-444b-ab07-6ac69317c434", "sighting_of_ref": "indicator--a452e977-dbb3-4a92-83dd-e993b355bd61", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bc9849-1a37-46ab-80b6-8df19b75dc1d", "sighting_of_ref": "indicator--7d7e24ec-9ff6-460c-9c75-8797395bfb33", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa291c97-9120-4fae-bd8a-0eccbba30580", "sighting_of_ref": "indicator--8ad4fd70-4737-4da4-8eeb-76b1186bd2e2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac843b55-15ec-4859-b819-33c01ed234f1", "sighting_of_ref": "indicator--49c08684-ceef-4b45-82ce-7d136acd1ff5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7c9ade-4901-48c0-9768-13015d2b1f55", "sighting_of_ref": "indicator--cb8c6e35-276f-4944-a581-16e823a7ff95", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f51f47-510c-44f0-a696-53b9499ff82b", "sighting_of_ref": "indicator--ed02690f-f3ac-4e6e-831f-8241b2ef1c95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5942dfd-74e6-410a-aa38-003a8c58683c", "sighting_of_ref": "indicator--4a36b673-da25-48d8-8dcc-6a4fd4251976", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0395f7d-bf31-4657-99f8-31475fbc0855", "sighting_of_ref": "indicator--1db65df9-5984-41c8-9981-fa4394eee210", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e901b3a0-a75f-4004-851c-583a69521300", "sighting_of_ref": "indicator--35b30e3f-290b-44c6-bbb9-e80b48892dcd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c385d6-d776-4cd4-8d39-640d59766149", "sighting_of_ref": "indicator--32c07e7a-1c9e-416f-aeda-e8324065a45a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a2ee1e-ef6f-4232-a0a9-9d6d496cf9f2", "sighting_of_ref": "indicator--9c18481c-ed33-441f-b131-ab5a3621e026", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ff35db-6974-48e6-a867-10c08d25bc7c", "sighting_of_ref": "indicator--b79cf85b-24fa-4706-80f7-26d0eab08e5e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ce92dc-dac1-4b4e-ac85-dc1fbc170f41", "sighting_of_ref": "indicator--8aadc203-ad48-4e6c-95c7-9401be770098", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6620d2f5-81cd-4fd1-9f1c-af2cd6d9dbd9", "sighting_of_ref": "indicator--b952a0c5-8aec-4084-8282-82eaa530e2c2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a2a0ba-f397-4a24-a7ca-940626272cac", "sighting_of_ref": "indicator--a6389e9e-7802-4ea3-baa8-34ce6ffb27b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee25127-0eb2-4a77-b0b1-f4fac22e3980", "sighting_of_ref": "indicator--dc59efce-2d87-4443-96fb-e9c92df3dbbf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18affe43-a99e-4fc5-b353-543f8d4efb69", "sighting_of_ref": "indicator--f1ab2cae-ac2e-497b-882b-683f4c0193c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63968922-68a1-41d2-a677-9c1158a13680", "sighting_of_ref": "indicator--f1ab2cae-ac2e-497b-882b-683f4c0193c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1867854d-4bda-48e7-93e1-d8f9ff14f1d9", "sighting_of_ref": "indicator--71b1ec2d-d5bf-4b96-b633-a19401704b24", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97b5c07-b1bd-4b5d-bdf5-d877bad84d72", "sighting_of_ref": "indicator--78e1c69a-fd63-4578-8fa2-1229916d8158", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374a2900-8f50-4315-bb48-103140c754f9", "sighting_of_ref": "indicator--a06a2116-f47a-4d10-bc67-a6925c7bd9d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070a46d9-a46f-4266-9f92-1a457a458b26", "sighting_of_ref": "indicator--fd20d22f-1df6-4f1d-ac7c-b6a0d0ba91c1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce23fbb-b79f-47a2-bef4-761e5710f77c", "sighting_of_ref": "indicator--00b57f2c-4a36-4514-b6df-9d97cd5e4773", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1387084-6e23-42f8-a959-81df955c31b8", "sighting_of_ref": "indicator--62279b4c-eaff-48ba-8cc8-f5941fd3fe4c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a816469-6e2c-42c6-9f10-9fa1c360c40e", "sighting_of_ref": "indicator--62279b4c-eaff-48ba-8cc8-f5941fd3fe4c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47089763-73ba-4f03-9f8c-82a33555e301", "sighting_of_ref": "indicator--3b7b4b72-66bc-4990-889a-8cf0bca89974", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cb808b-6e3a-4347-8079-4a728dbcf005", "sighting_of_ref": "indicator--62e6699f-423a-48dc-bf28-9b5774996483", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbc310b-2db7-47c9-852a-e3dd1a9583ab", "sighting_of_ref": "indicator--62e6699f-423a-48dc-bf28-9b5774996483", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b7cc3-bb7a-47c4-9172-8247df3b1341", "sighting_of_ref": "indicator--104da567-8e77-4ac9-ab9f-5b7a847ec914", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f75714-ad74-4a03-b9bf-83c0b0db4339", "sighting_of_ref": "indicator--88a8c9e1-68d5-4169-967a-625c3143ed9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c2b86e-8601-470f-9c8d-c200aff5b477", "sighting_of_ref": "indicator--b4daf531-379c-4b10-b35a-101ce7ccd427", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ab89c0-1440-4092-bd67-209ecb2d6d81", "sighting_of_ref": "indicator--b4daf531-379c-4b10-b35a-101ce7ccd427", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a173c4a-f665-404c-897d-fac8229db29c", "sighting_of_ref": "indicator--779c5a6c-c555-420b-a1c2-cc95d96ad4cd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fd9875-94e0-47b1-864a-e3bbb35e60ca", "sighting_of_ref": "indicator--4e53e76d-e77d-4897-b133-9cb8b249663b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a0ca67-02e2-4433-a98a-6824f9d32535", "sighting_of_ref": "indicator--edb8c687-5a47-49aa-adae-a0acf56ac817", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc17ae1b-d52d-49d6-b93e-0dd5d997a0c4", "sighting_of_ref": "indicator--b2d9153d-45d5-4385-8eea-7d358ea6a72a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f6bdf4-4fc5-4e2d-bc3c-53ef70a0615e", "sighting_of_ref": "indicator--fe37cf9c-7de3-43f6-ad43-c99b2cc1da41", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666348c3-9f3f-4652-af5f-b308d23efe4f", "sighting_of_ref": "indicator--b63d3381-95e8-4ef4-a89f-5803d3dfd04e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7242f59d-cb3d-4c62-a770-5116d592a978", "sighting_of_ref": "indicator--5757d4ed-a14d-43dd-83ee-3ad1caf96d8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a0764d-187d-4f1e-beba-c3346eac9d15", "sighting_of_ref": "indicator--43819825-ddea-4384-967b-13cce2d74cf0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9947a29c-45b1-40c1-988c-377bd018c5af", "sighting_of_ref": "indicator--9075141b-8899-4a9e-a21b-fffad7562cbf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19ab74b-8933-453e-a77f-7942bbb706d0", "sighting_of_ref": "indicator--4117dec3-5e81-4432-b4e7-d1dfbc7c3f68", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dd2b7c-2bf8-4227-bdf3-e24d613b0a80", "sighting_of_ref": "indicator--b780c65b-bc44-485e-ab1a-05e7efc9af05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c56531-d2f9-4a1a-94bd-e0dc39a43205", "sighting_of_ref": "indicator--551cab26-ad56-4680-87e3-f72e19f85667", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5084db-7727-4cd2-bfd9-5cd4061acc25", "sighting_of_ref": "indicator--965a4171-66c3-4a20-aa9a-dc780cd02944", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f37a754-5c61-4422-8f40-d832c4a011bc", "sighting_of_ref": "indicator--945eb8e3-416b-4ff7-ad45-e704f1d8556f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c23e67-41d9-478b-a70d-4009f4c6c6e1", "sighting_of_ref": "indicator--a52b4a0e-5dc7-45ec-87dc-d83cc43cda36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb712eac-10e2-4a34-bdd6-ce5397d238e3", "sighting_of_ref": "indicator--b7bd357a-f174-4647-a3b9-a6e2db72d0b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974bbc7e-0b6d-47a3-af68-7a91f64135b2", "sighting_of_ref": "indicator--1dc09084-9032-4fb2-98d5-2a349d793741", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c4a01a-9149-4d52-acf8-d46ecda6142a", "sighting_of_ref": "indicator--96f8015e-c3f0-4b7f-be69-c9f6d7f06f0f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2970ac25-fde1-4147-b6ba-1ba7129a3b67", "sighting_of_ref": "indicator--89a089b8-53da-4990-a4fc-7b4969ff6140", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c656d699-facd-487a-aef2-fea722c2da63", "sighting_of_ref": "indicator--d9992e0f-5e52-4ffd-82bd-3aef632652a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a18fc6f-257b-4539-a2d7-fd47d6b46fca", "sighting_of_ref": "indicator--4a828ce3-3278-4fa3-99aa-a46a63c187f5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433d6e54-54ec-4e3d-a084-06d661d142d9", "sighting_of_ref": "indicator--7a9b89c6-60d8-424c-8e3e-43eda657975d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c50f357-a639-4e48-b278-65270a1210eb", "sighting_of_ref": "indicator--7a9b89c6-60d8-424c-8e3e-43eda657975d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64fd1aa-7531-4be4-be6d-1916cace0ca7", "sighting_of_ref": "indicator--942f9603-990b-4ce5-aa9d-eae3c462cf6c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac27ba8e-567e-4981-aaef-d360d6242506", "sighting_of_ref": "indicator--726e2f78-1a18-4673-95c2-e23b6a1655ae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dfa212-d3ba-4b43-8151-0a22dd93218f", "sighting_of_ref": "indicator--8cc1c953-2ff4-406f-8ca4-e35f9d7155fd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1cdcab-ef94-429b-8cda-9f42c3c2636a", "sighting_of_ref": "indicator--8cc1c953-2ff4-406f-8ca4-e35f9d7155fd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8b7866-1ba8-4229-891f-cce943b81fbc", "sighting_of_ref": "indicator--a72c6142-74c4-40a4-bed6-0b35c08000b1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6b136e-66b5-437b-b5a7-b5d3bb3b8f9e", "sighting_of_ref": "indicator--a89affb4-2782-4bf1-b8f1-757d5505dba2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10c9cde-9328-4e1e-a2cb-c12898604b91", "sighting_of_ref": "indicator--5d5bfe58-fffa-4169-87e4-4cea4a050702", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60623365-fc4c-4c74-9d2f-b5e9d7af965e", "sighting_of_ref": "indicator--f115fd6e-d1ee-4c2c-8c9e-4dafae7b26c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6a793e-a782-4d68-9561-e4611ffdbafd", "sighting_of_ref": "indicator--f115fd6e-d1ee-4c2c-8c9e-4dafae7b26c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b7836e-26e5-4056-a5dd-73eb5998d2c2", "sighting_of_ref": "indicator--7049d8a3-8546-4c40-91f0-e19049e87809", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cf5eeb-20af-4ad3-897f-5c555010b387", "sighting_of_ref": "indicator--196acd6e-ec91-48a1-be24-1c32dd3f564e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8fdb49-0d65-4479-aebe-149a9df68c6e", "sighting_of_ref": "indicator--8e851976-216f-4da6-9767-5a684f07c2e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc475e2-5e3b-420d-8749-7b6401241e0f", "sighting_of_ref": "indicator--3af5bd22-0a8b-4f2f-8e00-11492de3f661", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c8b87e-ded8-44fc-a17d-caca1bd77f4e", "sighting_of_ref": "indicator--e618a7e2-35b6-4df2-ac48-5a636d18e5d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74cf61e-77e3-41a5-988b-dc85638dd61b", "sighting_of_ref": "indicator--a7debcf5-0f00-47bc-892b-114265204851", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa77ce0e-4de9-46a1-9c2e-88647afaca48", "sighting_of_ref": "indicator--a148e80b-97cc-41d9-a218-b275758631d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cca384-4145-4d29-b721-70215b018cb5", "sighting_of_ref": "indicator--f089d8db-cf0f-442e-bf68-6239cac0829d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb446737-9298-42f5-8ce8-3d603766c8b9", "sighting_of_ref": "indicator--b2a718d9-9ae4-4a0e-a44a-2422de8f43c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976f8e5d-304a-42c3-8ea4-9c172f94e31a", "sighting_of_ref": "indicator--629d223b-af70-47ed-973f-082f016f22c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af77f6-4f69-4fd4-8907-871ed1490a17", "sighting_of_ref": "indicator--29f7c1d4-4ebd-4743-9478-ccc67525a0e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238afd65-bb3a-4569-922a-9c12e9424a16", "sighting_of_ref": "indicator--29f7c1d4-4ebd-4743-9478-ccc67525a0e9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acba65a6-add2-4e34-8be7-c71b7bccdabc", "sighting_of_ref": "indicator--22196c87-ee70-4c95-a302-2347970b15bc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752036b3-7c7e-4b47-b9e6-30598147876a", "sighting_of_ref": "indicator--f045689f-2df1-4c02-9345-4975c979c074", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e978d07-25b9-48b5-aab4-1e769672a0f2", "sighting_of_ref": "indicator--f6d2d664-7f39-4b64-85ed-aa0d0ff44ac8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef394ec6-a0d3-4d9a-b220-baccdeb31490", "sighting_of_ref": "indicator--16b5ed47-606e-433b-9a32-d54658be53ed", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b48e28-8b80-4b91-81c5-5437fe9d14b6", "sighting_of_ref": "indicator--40ab20fa-ddee-47f5-ab3d-557313b64e66", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6acabfa-91d7-43ba-9896-d6aa5ff717a9", "sighting_of_ref": "indicator--e18873e7-5a56-4d35-88e9-0d8def070f54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e09f01a-5d1d-45dd-81cf-c0def1a0b79a", "sighting_of_ref": "indicator--91bbe760-79c8-4127-a177-a53816747562", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3884902a-b2d6-4849-870e-a41a916c877b", "sighting_of_ref": "indicator--91bbe760-79c8-4127-a177-a53816747562", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af318f1d-b04d-4b60-bc01-de3517adac90", "sighting_of_ref": "indicator--4f6b361a-4535-4d31-8e54-7cbd29030a15", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b6fb81-f147-4205-a88a-5121efeaa09a", "sighting_of_ref": "indicator--3a2ce78e-68f6-4323-be4e-377679251129", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ab1993-f3c1-468d-bc51-405b57c2df33", "sighting_of_ref": "indicator--5f7e1fe2-f41d-404c-8353-d931e09c4380", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e576b886-4a58-48eb-9768-acab8600dc30", "sighting_of_ref": "indicator--abdf4551-e05e-483a-b85f-d4bd7e763fde", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e2fc05-97ab-4448-9bd4-48601baac427", "sighting_of_ref": "indicator--4bb55bdc-a4f7-495f-aa9f-c255b29450e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e6d9c5-13a3-4954-b6fe-1f5a4ed19fb5", "sighting_of_ref": "indicator--8341ccc6-7014-4bc1-b3fb-240fe498470e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc26149-4e5c-43ba-bb83-c21e2cfcb471", "sighting_of_ref": "indicator--bdabec67-f41f-4875-994c-5e271956a872", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b18b199-c86c-4a38-81b4-98329dc9509b", "sighting_of_ref": "indicator--f3635818-75ad-4cf1-8f98-844f26e812e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c893aec-7a74-4ec4-96ad-c390921f885c", "sighting_of_ref": "indicator--eb98cdd4-768a-4d6d-9878-d8fee3782c5c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e2d7d0-4a92-4e5b-a368-ab2329762fe5", "sighting_of_ref": "indicator--eb98cdd4-768a-4d6d-9878-d8fee3782c5c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81be43c3-3ec9-4b8f-955f-9244c7f4a2cd", "sighting_of_ref": "indicator--f10c5357-31c7-40f7-ab08-7f0dbb06fac7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0082082-cd72-494f-b38c-a630cf8a21a0", "sighting_of_ref": "indicator--fb1d9e81-8113-49ec-99ff-bf4068666082", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0853481c-523e-489f-b05e-2a9950ce92f8", "sighting_of_ref": "indicator--fb1d9e81-8113-49ec-99ff-bf4068666082", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f30715-5ae4-4e0e-a18c-60fead46262f", "sighting_of_ref": "indicator--fb1d9e81-8113-49ec-99ff-bf4068666082", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7ce926-65b8-469c-904f-fa47b5f156fa", "sighting_of_ref": "indicator--af3ed635-958a-411e-add8-a0e6e12a60e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55f17b2-a0bf-4eea-8263-cf96eb607204", "sighting_of_ref": "indicator--af3ed635-958a-411e-add8-a0e6e12a60e7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e33b44-c8d8-439e-a171-7b03832813d8", "sighting_of_ref": "indicator--af3ed635-958a-411e-add8-a0e6e12a60e7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a144d5-39ee-457c-8959-23c10975bf8a", "sighting_of_ref": "indicator--60289143-d2dc-4107-b1db-ce85e4f69059", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c2548d-fa73-458d-bf78-6bc569166178", "sighting_of_ref": "indicator--60289143-d2dc-4107-b1db-ce85e4f69059", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee7fa49-c408-4760-866f-349a0c0c059a", "sighting_of_ref": "indicator--7af76af4-f0c6-403c-bd78-243539dd2c3d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e8d295-e4b9-434e-af89-f3408708b136", "sighting_of_ref": "indicator--f8446ab4-8e14-404c-b973-840c956f0047", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae0c54b-60b2-4916-b659-491d2de21d31", "sighting_of_ref": "indicator--f8446ab4-8e14-404c-b973-840c956f0047", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cbbf68-0417-4a65-9d4c-d069f9bac414", "sighting_of_ref": "indicator--e0fe2e4b-1bc0-4a9a-bc60-dccde1ac0410", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486aeb94-a2f2-48d3-a561-6cd9445b32cc", "sighting_of_ref": "indicator--e0fe2e4b-1bc0-4a9a-bc60-dccde1ac0410", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1610aff0-5cda-48b0-8d90-50005307e22d", "sighting_of_ref": "indicator--1aceee62-2f2b-4a2e-8d2a-a8913d7e130f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421ab4e7-8179-4246-8acf-bc5876c3d6c5", "sighting_of_ref": "indicator--1aceee62-2f2b-4a2e-8d2a-a8913d7e130f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef86e291-4ff2-445d-9119-fa9e6317d610", "sighting_of_ref": "indicator--1aceee62-2f2b-4a2e-8d2a-a8913d7e130f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1297cef3-f3ee-480f-87b3-044c9cb267dc", "sighting_of_ref": "indicator--b09a71b6-e434-4e06-a57e-2b6ff8c0f4af", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334981b7-d9f9-4123-ad16-1dcb0a41bf27", "sighting_of_ref": "indicator--b09a71b6-e434-4e06-a57e-2b6ff8c0f4af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ad3205-bd47-4577-8fc5-29166b2a6623", "sighting_of_ref": "indicator--b09a71b6-e434-4e06-a57e-2b6ff8c0f4af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0b1437-14e7-4049-8b82-05bf141576d5", "sighting_of_ref": "indicator--5debc0e9-9f87-4ccb-973e-52d1938ac6f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fdb08a-2add-4c4a-aca8-a9782d6a8339", "sighting_of_ref": "indicator--c80508e6-174f-4654-ba47-587283c56186", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2afec96-ced0-454b-91fb-c8af53f9f4d2", "sighting_of_ref": "indicator--8cfc8cb1-9b3f-4c0c-84ea-faf0d27ef73c", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc83d5b-370b-4324-ad34-cb82ceee974a", "sighting_of_ref": "indicator--8cc88f34-72be-4b5c-9fa6-7cf197a5556f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2622e5-6f1a-4d8a-9473-6ecda3c92e12", "sighting_of_ref": "indicator--8cc88f34-72be-4b5c-9fa6-7cf197a5556f", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e529293-9121-4977-9e54-20217773eebc", "sighting_of_ref": "indicator--36330938-c54d-4896-a169-2c0d592598ce", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0da3fc-a0b4-4a14-9c9a-14848dd674da", "sighting_of_ref": "indicator--36330938-c54d-4896-a169-2c0d592598ce", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db31f14-c65d-4600-90e1-fda212282c1c", "sighting_of_ref": "indicator--ae99f1e2-6639-436a-b2db-97a4b7be33b2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee442648-c36a-4359-a1fd-12f5e13fef43", "sighting_of_ref": "indicator--ae99f1e2-6639-436a-b2db-97a4b7be33b2", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150187c6-b035-48c5-8d78-7bbab3f86e2c", "sighting_of_ref": "indicator--23bceaa5-7320-4d19-86b9-020bf4ecedaa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ebc881-179b-465c-b4e7-462a6ef78dd4", "sighting_of_ref": "indicator--23bceaa5-7320-4d19-86b9-020bf4ecedaa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d099590c-1b28-433f-8ad4-a75b69c7942d", "sighting_of_ref": "indicator--23bceaa5-7320-4d19-86b9-020bf4ecedaa", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d1a8a5-9e28-4e59-8f8c-c5d5bbffe8d7", "sighting_of_ref": "indicator--6658d67f-f6d4-4521-8392-4acdd30390e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c070dbc-9021-480d-9d8a-dafa9a81e474", "sighting_of_ref": "indicator--ceeb43fb-a5f0-4d91-88dd-3a7bab309d63", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafdbc1a-6fcb-4ab3-b2cb-276dcb252dd0", "sighting_of_ref": "indicator--ceeb43fb-a5f0-4d91-88dd-3a7bab309d63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149e8a4a-da5f-459c-9013-00099b36bf55", "sighting_of_ref": "indicator--ceeb43fb-a5f0-4d91-88dd-3a7bab309d63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576f348a-8dca-4f83-965e-ba89fb5b40cd", "sighting_of_ref": "indicator--ceeb43fb-a5f0-4d91-88dd-3a7bab309d63", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102e3bdf-9706-4c45-b7d9-79b5ef21cd2e", "sighting_of_ref": "indicator--bee2dc7a-9388-4bf1-8305-bf65e9b33cb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4ce06f-fdc6-4034-b003-9b28471ac400", "sighting_of_ref": "indicator--bee2dc7a-9388-4bf1-8305-bf65e9b33cb2", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22570bc2-876b-47ce-8730-f260f73b4724", "sighting_of_ref": "indicator--7e4783d7-4a5f-4cb6-8772-d95a6d94110e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b5c04d-8d88-4b89-b0ce-bcdef28c0577", "sighting_of_ref": "indicator--9f90c5cb-5f5d-4ccc-b018-d47d674a0d25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d77d185-54dd-464a-8079-ef16e1b89594", "sighting_of_ref": "indicator--9f90c5cb-5f5d-4ccc-b018-d47d674a0d25", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d56b59-b474-4303-aea3-047247094540", "sighting_of_ref": "indicator--baa6a0f0-3679-44ab-b562-128a09bf242e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7b53b6-e826-4f2e-b5c5-4141a66fc3f5", "sighting_of_ref": "indicator--baa6a0f0-3679-44ab-b562-128a09bf242e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a82b3a7-8c85-49bf-ba2a-ff6c969f4b3a", "sighting_of_ref": "indicator--673655bf-56a9-4c2a-935e-c147887fc898", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a51f9d-767a-444a-82ba-e1cee41ea654", "sighting_of_ref": "indicator--673655bf-56a9-4c2a-935e-c147887fc898", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39a798d-a5b1-49fa-b48f-78ca33b6365f", "sighting_of_ref": "indicator--28b66ea8-8a3a-457d-b83f-01a16c962c54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f11f82d-269c-4607-bc9c-bf893eb9fb92", "sighting_of_ref": "indicator--28b66ea8-8a3a-457d-b83f-01a16c962c54", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d48e09-e1f4-4814-bc42-fce35ec1258a", "sighting_of_ref": "indicator--a93cccd0-0743-4037-8437-08dbe80d9827", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22f1f66-f440-4dd0-92a3-3c65dc0fa0ff", "sighting_of_ref": "indicator--a93cccd0-0743-4037-8437-08dbe80d9827", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025e8a38-3506-40f8-8fae-ac3e9960bf6c", "sighting_of_ref": "indicator--a93cccd0-0743-4037-8437-08dbe80d9827", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbfbb32-6165-41a4-a41c-b6a55f6e694c", "sighting_of_ref": "indicator--c9b528e1-15e1-4ee1-9690-8a37dd58419f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ddcdbf-e008-490c-9aff-2063344e9fa8", "sighting_of_ref": "indicator--c9b528e1-15e1-4ee1-9690-8a37dd58419f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a63c47-605a-476b-9021-6a3b347f09ca", "sighting_of_ref": "indicator--c9b528e1-15e1-4ee1-9690-8a37dd58419f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bd5d60-f5e7-4cd8-9bb2-fe5efe04758c", "sighting_of_ref": "indicator--5a436341-a19e-4570-931d-2ba297e2149b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c099974-e5b9-4e69-8f68-d60971e870b6", "sighting_of_ref": "indicator--5a436341-a19e-4570-931d-2ba297e2149b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3750137d-37b4-4c88-8980-545337d28484", "sighting_of_ref": "indicator--926a0f38-a5f1-4512-b637-2128fb65ac8b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b282f53-066c-4719-a53f-98a204edd0b9", "sighting_of_ref": "indicator--b8e0b0e8-a846-4e0a-a3d6-a6099eb4d936", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e97481d-44a8-4084-95c9-fd1edc332e5d", "sighting_of_ref": "indicator--d0c2066c-310a-4cda-943a-aaf4a97d85b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82832e11-cb4d-428c-80aa-b0791c0354cf", "sighting_of_ref": "indicator--353ec232-8967-42d8-b233-d13bcb5ad266", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac3c051-19b2-48f4-8e06-630116b7b15e", "sighting_of_ref": "indicator--ffb6da5e-c4e4-4cf0-bd71-74edf4699b54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd86ca73-8895-432b-a655-1e1d7b44cb86", "sighting_of_ref": "indicator--38819ebf-de9c-48e7-85ef-981c25a63cc9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfbfa1f-5a99-469b-9be2-92b0a882027a", "sighting_of_ref": "indicator--5980af3c-ae98-4dc6-b619-30aa3f8d1b84", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eee4c92-3f3a-4f9d-ab03-4b1b91495acf", "sighting_of_ref": "indicator--e36cc4d2-384f-444d-9154-06dfd2ed5001", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d33ba09-c78b-4763-b616-02247680a010", "sighting_of_ref": "indicator--8219c3ba-826e-494d-8b60-67c2e3c6bdcb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47ccb43-9de2-4b03-a94f-0af0cf6206e4", "sighting_of_ref": "indicator--5369819b-1546-436f-9cd1-7b0f9d36c417", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4b8c57-cafc-404b-b9b4-d7bea2f1fa4c", "sighting_of_ref": "indicator--3fa55354-6caa-4229-8284-59683a79e6ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1639728-901b-4e02-8fbc-865292cd95fe", "sighting_of_ref": "indicator--a61ca343-8c1f-4ee5-8641-e18d683f48ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2888ff02-2104-4b3c-a36a-fe07aa26d9c4", "sighting_of_ref": "indicator--72332e1a-7bae-43f9-8755-eda2bc03fc23", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5cd8e8-15eb-4e1d-8ac2-73244438e469", "sighting_of_ref": "indicator--77f4f922-f56f-4ecb-9def-63ede6de79f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd04e13-43db-4190-a052-5b87694fbdf3", "sighting_of_ref": "indicator--5a95802d-5f9c-4ee5-8387-43e534fbe73d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b3cb1b-d6a3-4ae7-b3fb-27cef099002b", "sighting_of_ref": "indicator--fb120106-9f11-447c-8b58-04926926e3bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20badde8-bf70-4c54-b9ce-9a3c9d882319", "sighting_of_ref": "indicator--e0b48822-53f2-406f-83fc-8ceaf39a8856", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8829e09d-5c5d-4265-9989-366a6b894b23", "sighting_of_ref": "indicator--e0b48822-53f2-406f-83fc-8ceaf39a8856", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e376cc9-3d5d-4657-bc15-b27c76cb1579", "sighting_of_ref": "indicator--e0b48822-53f2-406f-83fc-8ceaf39a8856", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9b13db-8b19-4443-b0b6-3892bc4b64fd", "sighting_of_ref": "indicator--e345fc27-23d7-4e35-9d1c-ed8b73e2ed13", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21ae99f-3408-4a68-b200-d3dde3b68f03", "sighting_of_ref": "indicator--caa109f0-2f39-4cf1-ba0b-169cc6829d6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98901c26-6bed-4e81-89c7-f0676e572548", "sighting_of_ref": "indicator--caa109f0-2f39-4cf1-ba0b-169cc6829d6e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed543d38-fed3-4c37-ae98-8235d85af645", "sighting_of_ref": "indicator--22e7f331-8841-4e4e-bab6-16381469c792", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ac9b60-b06e-4b35-9f86-57d73284cbfc", "sighting_of_ref": "indicator--3d4a252c-7fff-445f-923b-b6bc1ab805c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d63e4e-b223-4bd7-be4f-546a1a74af61", "sighting_of_ref": "indicator--da5dde2c-fb17-4ad8-bc78-7e36b794c413", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599cc889-6e44-43d6-88d9-a05fb7c21f5f", "sighting_of_ref": "indicator--44fc184d-977a-4ad6-9f60-ccd53f22bf95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6452d34-0c35-4e55-9383-3fdb71c3d047", "sighting_of_ref": "indicator--d6b8d99a-c474-4b43-a167-52e09ef5065b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9859062-3156-4909-992b-a25ba42a5458", "sighting_of_ref": "indicator--36c6af87-e77a-489d-b372-b310753ab4bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2128f7ec-9087-4b14-b8c4-bc725f895808", "sighting_of_ref": "indicator--da0f3933-8608-4123-9bac-0cf04b11cb72", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354ffabb-ce22-4198-a339-96d8211f1f19", "sighting_of_ref": "indicator--8a78fd42-63ce-4760-9095-ac7a855baf39", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7a7c09-6326-40b3-9ae7-076e0bb3cde5", "sighting_of_ref": "indicator--8a78fd42-63ce-4760-9095-ac7a855baf39", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b5c358-5273-4397-9201-56914ace1cf2", "sighting_of_ref": "indicator--8a78fd42-63ce-4760-9095-ac7a855baf39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6103340-1a65-4268-8816-38ee703b1cc0", "sighting_of_ref": "indicator--e48186a9-8142-4703-bb61-1847202c86eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223e8e0f-1ed7-40f3-bb07-eb65e5aa83b1", "sighting_of_ref": "indicator--e48186a9-8142-4703-bb61-1847202c86eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3435e1-7e05-44b5-b1c7-4c18d58b9770", "sighting_of_ref": "indicator--e48186a9-8142-4703-bb61-1847202c86eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0da65b7-d1b5-40a6-b18c-d2948c57c8b2", "sighting_of_ref": "indicator--5bd75d7e-ce8d-41e7-9d72-e94d6b20ea3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b862231-b710-41d3-a081-17041d0c3bee", "sighting_of_ref": "indicator--87d63ba4-638b-4a94-bfd4-729aacea26ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d349e1-8634-47b6-933b-5cd6320d9fd2", "sighting_of_ref": "indicator--faf7c99f-d97a-4edb-90d8-8e84a84286a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17389721-43fa-4532-ae18-a9fdb1ca3c0d", "sighting_of_ref": "indicator--9ab7a35b-887f-443d-93cb-0f2ee36e1623", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92039b44-609b-4cc7-b9d5-21017fb704c3", "sighting_of_ref": "indicator--9ab7a35b-887f-443d-93cb-0f2ee36e1623", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364da567-fbe3-4f15-8a8d-4ac17722f26a", "sighting_of_ref": "indicator--9ab7a35b-887f-443d-93cb-0f2ee36e1623", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ad0b05-5633-4919-8dad-27aef3eee392", "sighting_of_ref": "indicator--d47d5360-da75-4d9d-b318-0c48dccd7a6b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a79794-170d-4efd-931e-7d53c828a504", "sighting_of_ref": "indicator--fec5dadc-fff4-409d-bfdc-94bf1a1dbce1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53f8246-cd19-4cdc-9c7b-12deb902b1ad", "sighting_of_ref": "indicator--e6fb3364-5231-4b5a-b3c2-450bbfa4d9b0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07466dff-e609-4af0-a8cd-ef13e9f19955", "sighting_of_ref": "indicator--e4a0c9fd-3783-4b9a-b06a-0024ee4de7fb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16108df3-c49e-4365-b3c8-0b23feb512a6", "sighting_of_ref": "indicator--b7005130-89f9-4483-bec3-ae3fd9c77afc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818a58cf-172e-47a5-85a7-21835c745f0d", "sighting_of_ref": "indicator--0e55403b-349c-43b8-b718-439e4a1d4c7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b168e3-71e6-4435-bfe2-f4540b7e7d61", "sighting_of_ref": "indicator--e4f2f4bf-e7ef-4624-a319-c1768f64a777", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a78db0-50cd-404c-8036-e76b678283ca", "sighting_of_ref": "indicator--52e2514b-e447-4937-a0d4-934b7479c672", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00f7a5c-66be-4bba-988f-30a858482f61", "sighting_of_ref": "indicator--93ddbc59-10bb-4efd-af74-3e644cd64959", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1c7d6a-53df-4264-bac9-ca24f0ac437d", "sighting_of_ref": "indicator--fb6773d2-0f2e-4a82-9acf-bb20eb026246", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be51a826-0ec9-499e-9ed1-8c694b78a88f", "sighting_of_ref": "indicator--d23a2816-d4b5-4af0-946b-f7b7aa7c1593", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f892b1-1626-45f4-b280-b78870ff27f2", "sighting_of_ref": "indicator--8bcceee8-0740-4d86-8f96-38af7480e593", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b983573-9d78-45f6-b28e-c4fb20755322", "sighting_of_ref": "indicator--5f3aee9a-1e74-45b1-a53c-7f2d5cf85cb0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67d0d7a-f104-4023-95ec-9881edddc11e", "sighting_of_ref": "indicator--8aaa4db2-4896-4816-b9a6-238980d369b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8acb27-e545-4e2a-8eff-d974a0c3471c", "sighting_of_ref": "indicator--296a4735-5c92-493d-8057-b3b1c70d38cf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f2de1b-c539-42fe-a53d-348ee65eeb07", "sighting_of_ref": "indicator--b0418d9b-3a64-42eb-9579-57b08278fad3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c34cf7-a3b7-4617-9162-51d0bb228d5b", "sighting_of_ref": "indicator--1a2f3d44-756f-4f54-931c-0144de67a834", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97445e79-45c1-4b33-8ee4-44905a301fb7", "sighting_of_ref": "indicator--0183bccf-84ec-492b-adb2-bb8744016434", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f0af02-877b-4269-8c65-a53cb1d1cb39", "sighting_of_ref": "indicator--d75ec4cc-3934-40a0-b4b1-18e9810896b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c8f57c-7c9f-4fff-b3ac-537a6c0be610", "sighting_of_ref": "indicator--a12d5915-3cc6-4967-b52e-28f5676f643a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6a459e-b356-4031-8556-60394ec322f0", "sighting_of_ref": "indicator--2d4bf307-8988-4813-85a2-5218d8973712", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9600971a-cbba-4bdb-bef5-e97c9e0257cd", "sighting_of_ref": "indicator--1f02c242-7963-4934-a409-32e317ad900c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fc8630-7cc2-47aa-a6a3-12dd8b1f3e93", "sighting_of_ref": "indicator--c5fd9daf-ae5b-4891-ba95-467f3a29e2c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0480f24a-189e-41e5-a66d-b3f403a2e170", "sighting_of_ref": "indicator--d687ce7b-7237-42e6-8ee8-3b4b101f40a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc11af6b-0a5c-43ce-a8ec-a14ffe439ee7", "sighting_of_ref": "indicator--b329dfff-fb41-4641-a7e3-e604f0a3485e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ee61b5-73be-4af5-9bc8-a316609b5bed", "sighting_of_ref": "indicator--c294d984-4e66-49da-9e42-71e21ddb9ad6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c3ae9e-ccb2-48ec-9058-767696e881a2", "sighting_of_ref": "indicator--5f25c823-d836-4d90-9ecb-68993486570c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef3cbcb-644f-4843-8467-cfd930becebf", "sighting_of_ref": "indicator--f1a87206-83a7-4dbf-ad4a-a9e74c3fc1c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d261e48a-f926-4903-9675-a51c3bb9ff80", "sighting_of_ref": "indicator--0d263adb-865f-4798-8c0e-3df722b731e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b684697-9a99-4448-98d5-734c720caba1", "sighting_of_ref": "indicator--ea15503a-2b62-49b0-b039-3877a42c3300", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6142c0f-a0ef-431f-8d8a-404b248642b5", "sighting_of_ref": "indicator--8079e306-0160-437b-9462-15eeec8fe508", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d6c383-75c6-4c3b-9a9a-e6fa7f36cd9f", "sighting_of_ref": "indicator--029cdf28-e947-4c69-a79e-483231804d23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afaefa3-ac1d-4f85-9b62-d6ac3293182c", "sighting_of_ref": "indicator--e1f7a74e-2e1c-45af-b046-c47a3bdef239", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9614b92-4ada-44ee-8083-8aee6fe815cf", "sighting_of_ref": "indicator--5e2508d1-3b47-424a-b859-517555def67a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d03118-9ef9-4c94-9f02-97ee917e92d0", "sighting_of_ref": "indicator--29ef2fe7-1449-4506-8c67-e37bc351a7a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798ad872-d0d7-4c9a-a6fb-7c8731b6d15d", "sighting_of_ref": "indicator--9ead690b-f98c-4cd4-817f-ba57c1f3c871", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847999d9-4fbc-484d-8f9a-33d69e3a7554", "sighting_of_ref": "indicator--9ae6b257-4381-46bf-8dfc-c8219637b70a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adabe21-7acc-4353-b362-1ba95e0caa70", "sighting_of_ref": "indicator--f6742885-11be-4c01-9473-fcf094b5b570", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ade1b8-2571-49bc-bf83-ea8399ac2f55", "sighting_of_ref": "indicator--24ef0256-ff9c-4482-9dca-11a5dbfedb20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f4eb5a-e6d7-4627-af3c-ddfdd3a84ecf", "sighting_of_ref": "indicator--87135a00-8d1a-44ee-a7d6-d24e3a3969d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8778b169-66de-4a7d-8302-20ac8b0be594", "sighting_of_ref": "indicator--b9ac6a7f-b5ad-4142-bf66-1670e92fdf9b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7df1b7-5aeb-4c9f-9e45-f728bddf04aa", "sighting_of_ref": "indicator--72146d05-f24e-4106-bd47-0ff31cf35d4c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c7c1cc-bfdb-4cc1-b22e-32a9a2d53676", "sighting_of_ref": "indicator--bf00caaf-393f-4886-b5c7-44f162ee1225", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16da206d-ba80-45b0-898b-9ea6fd5c5e25", "sighting_of_ref": "indicator--08cbec95-70f5-4c1f-9fe4-374c3484128c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3be9eab-2eac-4d1d-836a-119158d08174", "sighting_of_ref": "indicator--73fbe4ca-589b-4e4d-8134-0049f2a65356", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7249d3fa-c734-4793-9469-af460353b77d", "sighting_of_ref": "indicator--22b08b0d-90aa-4a13-9f16-d108c19f3e93", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa44e7bd-bfa7-4b24-967f-7dff83bd30e6", "sighting_of_ref": "indicator--5eb811b9-37ce-4c15-8c5e-afa0229c21dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8820d3de-d6f9-496a-a63f-afad77855950", "sighting_of_ref": "indicator--b11351ef-3904-4fef-aca6-1af7e1b90b81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b57e36a-7434-48c5-b280-3d662fab4c94", "sighting_of_ref": "indicator--2b2582dc-3f12-4bd5-bb30-8893733d55b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a7485-c2bc-4cde-8cbb-d3ec79672fd9", "sighting_of_ref": "indicator--aebb7431-94c3-4c77-a160-19129bedab4e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2801f661-a861-40e6-9325-43b10845bed5", "sighting_of_ref": "indicator--35028a4a-c955-4b4a-a6d4-b3795389bac6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bcb7ae-a3a7-4c10-97b0-47c0d11e3f76", "sighting_of_ref": "indicator--df8d7c3e-36eb-4e84-93c6-57ff3af3debe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db96d155-ee22-411d-9ff8-a193c8378c39", "sighting_of_ref": "indicator--df8d7c3e-36eb-4e84-93c6-57ff3af3debe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7d9fca-beda-492b-8071-21e18e24748b", "sighting_of_ref": "indicator--9013d15f-b4b5-4d5a-804f-a45bc91199fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bcf7e4-b6f0-4d4f-a9d4-3a42350181b3", "sighting_of_ref": "indicator--3d94d5b4-5a2a-4a2d-9817-9bee35b619f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d313249c-b771-4943-bfc4-1ffb190e7591", "sighting_of_ref": "indicator--de1dc8e4-606b-46c4-85fe-564875239c9a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3176cae-75f4-44dd-b0cc-e31f85511d6a", "sighting_of_ref": "indicator--a20602e7-15f0-474e-9aea-2e03c93fe99c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efd4458-da76-4ece-b86e-1360d25dc431", "sighting_of_ref": "indicator--79a1abc2-3f07-4032-bdef-d863eb423838", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a708a029-4084-45d4-a1ae-78c502d582ea", "sighting_of_ref": "indicator--bb14953f-2f65-4710-b511-2bb4446cbe72", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20fb727-b478-40d2-b4ac-3ad1692b823e", "sighting_of_ref": "indicator--d6dd4e57-8e7f-421c-aa72-1091f92efac3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b81b9b2-7efb-428f-8132-2bb1d1de9dbf", "sighting_of_ref": "indicator--6cff54fe-af8d-41f2-a59b-d63aaa22825f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb21758a-e848-4b85-8c12-1f1df50d2cd7", "sighting_of_ref": "indicator--7743a94c-1a82-48cb-ade8-a6e1ce2ffc4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc6f174-ed36-46fe-bc73-f2f8e5d3edc8", "sighting_of_ref": "indicator--e01f6513-6391-4dcc-88f2-8bc1ee0bf832", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2424745-ed3b-4a70-bc99-96b674a62fb5", "sighting_of_ref": "indicator--fb36fc61-9885-4299-a496-b0e1a5a1d780", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b870c2-a08b-44fd-956c-db17bada155e", "sighting_of_ref": "indicator--f0c60189-e1a5-4f0d-bf33-94331e271a62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df172a7a-75e3-4e20-839c-bc9ddd8ac23b", "sighting_of_ref": "indicator--f2c27104-d21f-4c0d-ac30-3a9c42f9c141", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b34991b-7fd5-4477-8db5-b921e2b7696c", "sighting_of_ref": "indicator--f1ede669-b8db-4c6e-8e69-f1bea4cc06e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a506dc1-5981-4feb-a328-25851298c69e", "sighting_of_ref": "indicator--fe43646d-5186-470e-89a4-b76f6ef44845", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2faae9f1-f84d-49c9-86fd-1b6e8ad2b196", "sighting_of_ref": "indicator--f3664cbd-6179-4ace-bbe1-89013fcc1874", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7848ea5-e7c7-419a-b7b7-30a9d611cea0", "sighting_of_ref": "indicator--1332ca1a-4659-4054-b700-f40e8bcb9b48", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c9b485-98de-4fb3-8a3d-6e029cf1115a", "sighting_of_ref": "indicator--70abe91d-42ae-4b03-bb8d-54adc6077232", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d511a0-04e9-46d2-98bb-5ae01ef56053", "sighting_of_ref": "indicator--1608fd3b-5c81-4066-a10d-6f25cef4d3ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659fe03e-a584-4d1f-9854-af05ffadfbe7", "sighting_of_ref": "indicator--c9ad7e6d-00ae-4bd1-ab04-74520bf3e1e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c603ed43-4e9c-46b5-9de0-07e370a65a5e", "sighting_of_ref": "indicator--ca941f2e-10ec-43c7-a2de-a632ac30ba86", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa41445-576b-4670-803a-516cf5a8fdd7", "sighting_of_ref": "indicator--22d43b30-6278-401d-af48-4519baa26299", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb39a54-83c3-4301-8fae-66c6c96f9843", "sighting_of_ref": "indicator--1dbfa9ee-59e7-4192-8043-71b14cb8be7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223a8185-7b5e-47e1-bcf2-28f434d6ae98", "sighting_of_ref": "indicator--29840a97-ad26-4da1-b807-a3b3a2ae8753", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26591c37-e3c0-41fe-a321-c9b59cc0c275", "sighting_of_ref": "indicator--1c11c1e8-a634-4e5b-8858-b14ba2d41230", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a95d161-388a-4cd6-8998-4bef9e2dd896", "sighting_of_ref": "indicator--cde32c88-a26a-4fa0-95ed-d318e531e2cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4df626-52f6-4ad6-8b54-210944ae2608", "sighting_of_ref": "indicator--0a71694d-3444-4069-8d6e-2868702149ec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536ac36a-c976-469a-ae12-40bbb0a48818", "sighting_of_ref": "indicator--afc9c1e0-5162-4973-82fb-c55931972ad3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1b3cb2-c6a9-4752-8a19-3da4a6ee19e5", "sighting_of_ref": "indicator--afe94a28-934d-4eb7-b438-ecf35532d2d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33798290-24cb-4634-ad00-698985ce0dc5", "sighting_of_ref": "indicator--35d92e8c-11ab-466f-b9d4-cf6a399bf4de", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f60a64-ed1a-4a0d-9528-8f8832c21997", "sighting_of_ref": "indicator--1d114366-c32b-4651-9167-12fc564386c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0838a8d-010e-48b4-adbb-f6e557d9fde9", "sighting_of_ref": "indicator--c0ffb3c2-385e-4b92-ab5c-ca4e859ccb2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7408604b-5b11-4761-a70d-39dc8d2926e0", "sighting_of_ref": "indicator--e68c4393-20a4-4e27-9f20-5151c5a5caa4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f7f2a7-d34a-4449-abb2-ef01b4b44c8e", "sighting_of_ref": "indicator--679e6583-379b-4fc9-8e45-2316ea908852", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5723ee1f-e480-4287-bd37-df691a3b5bc4", "sighting_of_ref": "indicator--ddfcc0bd-40e2-45c2-923e-a799ac9f9d27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a7d0df-3709-46b6-8694-5ece9ccba48f", "sighting_of_ref": "indicator--ae06e310-be50-4663-a85b-17f4ac9ea088", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0021cc7-1c82-42a1-9f5a-ceebec2a5de2", "sighting_of_ref": "indicator--2263cfce-1d89-4e5c-ac0e-d0480f96640c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0338ea0b-3615-47ad-b7c1-6859c2e7e309", "sighting_of_ref": "indicator--901ee420-d665-43cf-bf9f-172e48c3e406", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66dca61-7238-43a8-8937-51b3362ae7fa", "sighting_of_ref": "indicator--5f3e64b6-2087-4565-913b-85c5f8f097ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd22e073-dc04-4a0c-ba84-039592681525", "sighting_of_ref": "indicator--5f3e64b6-2087-4565-913b-85c5f8f097ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f5ff45-27c8-4078-b6b9-cd13076a8cf6", "sighting_of_ref": "indicator--28a7e778-bbc6-41f8-8373-1190a7d0a3af", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b47362-6022-4290-bb0b-c37a91839d3a", "sighting_of_ref": "indicator--28a7e778-bbc6-41f8-8373-1190a7d0a3af", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342e020a-4a3c-4f16-9945-0f0a468248bb", "sighting_of_ref": "indicator--558a49e8-384c-401b-b8c0-dd1bbcbf42fc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25af250a-2cb4-48a3-becd-5b893397f458", "sighting_of_ref": "indicator--558a49e8-384c-401b-b8c0-dd1bbcbf42fc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2752f6a-b92e-449b-b7a3-fb9c0932aa8f", "sighting_of_ref": "indicator--31e13612-bf15-418c-bf99-cbf7d9a3c0d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3906a593-8b29-4a51-9b28-e7c1af63c478", "sighting_of_ref": "indicator--31e13612-bf15-418c-bf99-cbf7d9a3c0d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51de68ef-a2f3-42ab-8d30-2ec4c1dc1b9f", "sighting_of_ref": "indicator--fe0d78bc-c50a-42b1-92bc-bf604a4c9dbb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1af96e-4d4c-4b77-8e85-7cb66dd5dfc8", "sighting_of_ref": "indicator--fe0d78bc-c50a-42b1-92bc-bf604a4c9dbb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651255da-cdd0-4653-87c2-c316947bed25", "sighting_of_ref": "indicator--2094b12b-fafe-44bf-a0e0-f975d11fff5a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573a3353-d080-4aa4-95a2-848686c4d8e2", "sighting_of_ref": "indicator--2094b12b-fafe-44bf-a0e0-f975d11fff5a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f929571-e37f-446d-9888-da4f1560ba6d", "sighting_of_ref": "indicator--8aa49a03-4e07-4c73-8258-1d16326c3f3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648d4617-4bfe-4b74-a23a-ff8270bc7bb7", "sighting_of_ref": "indicator--8aa49a03-4e07-4c73-8258-1d16326c3f3c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d544fc33-5f86-49e6-a1ce-04c55ecbb78d", "sighting_of_ref": "indicator--cefb754c-bc74-40db-84b6-c5b80d94be4b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7baa58-9451-4cd9-88a1-184c2ca740bb", "sighting_of_ref": "indicator--cefb754c-bc74-40db-84b6-c5b80d94be4b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bce672a-73c0-4a7b-b49c-57de19faadb3", "sighting_of_ref": "indicator--97ce3c49-85b9-4014-b929-02d2017d6d83", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad81447c-87a0-48da-8fa0-61c4aa069fed", "sighting_of_ref": "indicator--97ce3c49-85b9-4014-b929-02d2017d6d83", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9829f2-fa87-4c08-b82e-8b26031233e4", "sighting_of_ref": "indicator--ac8416f1-a072-4ebe-ac7b-a547e0b5fb78", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147cda78-7398-4872-a2c9-9e2b25aeecbf", "sighting_of_ref": "indicator--ac8416f1-a072-4ebe-ac7b-a547e0b5fb78", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e359304-7d67-4199-82b7-5912b32643aa", "sighting_of_ref": "indicator--16689b5f-e13c-4fe1-8b61-3f27dea03eb9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd75393c-b019-4f96-bb4d-a889bfd52acb", "sighting_of_ref": "indicator--16689b5f-e13c-4fe1-8b61-3f27dea03eb9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dca5bcd-2004-4ade-8a37-3c0d95f37395", "sighting_of_ref": "indicator--acdab582-070b-4f0b-9a48-e21b0b607ada", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d2c535-7545-4798-83f1-cd57bc16f8f7", "sighting_of_ref": "indicator--acdab582-070b-4f0b-9a48-e21b0b607ada", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99d583d-fa48-4b56-bc6a-aba148899e94", "sighting_of_ref": "indicator--7c6f52f8-f3ae-408f-87cb-2a95b9122404", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf9682e-3b1e-458d-a1ef-6f57d32549d9", "sighting_of_ref": "indicator--7c6f52f8-f3ae-408f-87cb-2a95b9122404", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51bf884-d779-41c6-8344-ea8769b98e5e", "sighting_of_ref": "indicator--d639e111-6883-4148-90a7-e378813c6776", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727c3715-b214-4dca-8cf9-a657da9ea225", "sighting_of_ref": "indicator--d639e111-6883-4148-90a7-e378813c6776", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2532b328-e789-4c14-883f-ee6860f2c932", "sighting_of_ref": "indicator--1ed7acd3-1814-436b-91d1-d82e5d6bde50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2816eb-3cde-4e79-a7dc-539763138f8d", "sighting_of_ref": "indicator--1ed7acd3-1814-436b-91d1-d82e5d6bde50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc90ebd-3abf-4fb5-af0b-47c1ae811eb0", "sighting_of_ref": "indicator--2c2353b2-1424-4137-851d-c38c8401b7d4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc41ce3-3fab-433e-a5d1-e123c3fa5fbc", "sighting_of_ref": "indicator--2c2353b2-1424-4137-851d-c38c8401b7d4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d68620c-c59f-4a6a-a76f-75227b5b3ff1", "sighting_of_ref": "indicator--c1d53200-07d5-4b45-bce2-0228229ff723", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c00a7e6-636c-413b-bbd0-c08ba33c568b", "sighting_of_ref": "indicator--c1d53200-07d5-4b45-bce2-0228229ff723", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac03897c-d1a5-4737-8940-0c5119dede1a", "sighting_of_ref": "indicator--10d8675f-456e-48cc-8f96-c2341af7f7eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4e86aa-4500-4672-99ae-282169ca8b5e", "sighting_of_ref": "indicator--10d8675f-456e-48cc-8f96-c2341af7f7eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229e0451-5c96-45e2-8e22-c9db82ee4dc8", "sighting_of_ref": "indicator--10c23a39-ce2b-4d2b-9145-6d1e0b81c102", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fbc083-9ea6-40a0-8086-ba77c34d4288", "sighting_of_ref": "indicator--10c23a39-ce2b-4d2b-9145-6d1e0b81c102", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60a1a6f-6cbd-469a-8c7c-75a5bad8fd68", "sighting_of_ref": "indicator--4511d0c8-3125-476d-b8aa-3bed3ebf3955", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa0c473-f520-4607-b6a8-d570e8884462", "sighting_of_ref": "indicator--4511d0c8-3125-476d-b8aa-3bed3ebf3955", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d52bf52-ba1e-44a1-9ed4-afeaa32e4071", "sighting_of_ref": "indicator--50d3a762-ce45-430b-8a4a-856ea2cf7b10", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9f0016-89d6-49fd-b06f-0d1bf2354e40", "sighting_of_ref": "indicator--50d3a762-ce45-430b-8a4a-856ea2cf7b10", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661f4faf-f37c-4fe9-a46c-c0428461fc6a", "sighting_of_ref": "indicator--5032d38f-27fe-4863-a8f7-5f3f0376c4c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f3bc55-183a-4886-9b96-cfcde0a73c3b", "sighting_of_ref": "indicator--5032d38f-27fe-4863-a8f7-5f3f0376c4c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8af6d62-9330-41a9-8089-566be1c05158", "sighting_of_ref": "indicator--64f4df74-8383-45e0-ab06-dcfa4594e443", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd245af2-c8d9-4475-ba45-4296513bdda1", "sighting_of_ref": "indicator--64f4df74-8383-45e0-ab06-dcfa4594e443", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f58a3b5-3ade-47b4-80e7-6899f71376dc", "sighting_of_ref": "indicator--6db47f70-81dd-46d2-b277-2f5f8faea54c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec5b7b9-3912-4f30-8d81-37dc28cd19a0", "sighting_of_ref": "indicator--6db47f70-81dd-46d2-b277-2f5f8faea54c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349d57e3-6999-42b2-a01f-47b25d70458b", "sighting_of_ref": "indicator--13aeeb69-93e5-44c7-960d-54385f11bf42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f336ef82-a6c0-4283-94fd-325ccb99b44e", "sighting_of_ref": "indicator--13aeeb69-93e5-44c7-960d-54385f11bf42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac9c66a-4773-4113-8b78-843d8d58f077", "sighting_of_ref": "indicator--cfb5cad3-106e-4be8-8961-34004bf2ff0a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47354b9-7f4e-4b3f-8ea3-6c4ae742bcf5", "sighting_of_ref": "indicator--cfb5cad3-106e-4be8-8961-34004bf2ff0a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708eb8da-1517-4aef-921a-ad9ed294bc5e", "sighting_of_ref": "indicator--a3c5d470-d0f2-48ad-a422-f007389f3817", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e8624f-acbe-40f0-ba28-36728b82ba08", "sighting_of_ref": "indicator--a3c5d470-d0f2-48ad-a422-f007389f3817", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ca9182-c555-44a8-a583-dd5fa5d44978", "sighting_of_ref": "indicator--5e371290-c247-4ec6-a2c5-b53d12f807eb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cb2c7e-ecd2-4fc6-b0c2-eab552f49e52", "sighting_of_ref": "indicator--5e371290-c247-4ec6-a2c5-b53d12f807eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e296936-87d4-4692-8bcb-73a640e34fb6", "sighting_of_ref": "indicator--d7dd4c97-1373-45b0-9bcf-c455c44af464", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fccc42d-bd1a-4877-84f7-aefb9f35c323", "sighting_of_ref": "indicator--d7dd4c97-1373-45b0-9bcf-c455c44af464", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21cae13-2f5a-4795-8c30-28dade4506a6", "sighting_of_ref": "indicator--aef725b3-9b57-4f79-ad91-2df1c4add262", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd05fd2-c00a-4889-8b69-393291cbf37c", "sighting_of_ref": "indicator--aef725b3-9b57-4f79-ad91-2df1c4add262", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad1ae63-82b8-4abf-aed5-ee1bff137de5", "sighting_of_ref": "indicator--24225f97-4bcb-4986-b951-cc5d6e416ce8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c01794-84ee-41cd-b07f-4b157b960e21", "sighting_of_ref": "indicator--24225f97-4bcb-4986-b951-cc5d6e416ce8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9abaa43-bd76-4529-b638-294f2336f681", "sighting_of_ref": "indicator--aa6cd378-533b-412a-b85a-edd1a01b558f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e03730-7c89-4e34-ae3e-4fe445c328ee", "sighting_of_ref": "indicator--aa6cd378-533b-412a-b85a-edd1a01b558f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48dbc47-8593-414b-83b5-8cda371743d6", "sighting_of_ref": "indicator--88a36add-f9d2-45ef-905b-00bf4119a7dd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647e2973-bf37-434b-8e4c-d737ddad4dce", "sighting_of_ref": "indicator--88a36add-f9d2-45ef-905b-00bf4119a7dd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fc8ac8-913c-4d7d-9055-3b2e48644cfe", "sighting_of_ref": "indicator--8f2412fc-a27f-47fe-88bf-f0544e899678", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ba2297-d96d-44a5-9703-cb5e0e7bd631", "sighting_of_ref": "indicator--8f2412fc-a27f-47fe-88bf-f0544e899678", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202a8dca-e98f-46fc-aabf-99ef0836b65b", "sighting_of_ref": "indicator--d436bb69-2b28-495e-8304-b7d91556db09", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e344a9a8-b4cf-4f32-8f49-145915371572", "sighting_of_ref": "indicator--d436bb69-2b28-495e-8304-b7d91556db09", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d11876-4898-411f-b25f-63f95cfbfb22", "sighting_of_ref": "indicator--fcdc9388-811e-4ce1-a2d8-1dab0dfe57b5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59da96a-abe7-40eb-b765-6e473d55dffc", "sighting_of_ref": "indicator--fcdc9388-811e-4ce1-a2d8-1dab0dfe57b5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59c7b8d-5f49-4653-90f1-f1995ecdd6f6", "sighting_of_ref": "indicator--51e446e6-79c7-43de-b63b-b632063e7ddb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39659dd-fc3e-4637-a321-e2a3abfbb026", "sighting_of_ref": "indicator--51e446e6-79c7-43de-b63b-b632063e7ddb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18059a8e-ed2a-4eba-a381-d0b2b19f21d8", "sighting_of_ref": "indicator--2909fd07-07c2-45bc-b75a-39d3427d9b50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1960b46d-2d1f-4d45-a42a-5c41c6b50644", "sighting_of_ref": "indicator--2909fd07-07c2-45bc-b75a-39d3427d9b50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf56a287-24b4-4a47-b6ce-a49d466e71a5", "sighting_of_ref": "indicator--fbd53745-dc6b-4f4f-9c97-47d3bca83533", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58dca4c-9b42-4b6f-89bb-1f9502c53b19", "sighting_of_ref": "indicator--fbd53745-dc6b-4f4f-9c97-47d3bca83533", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1e9c4-08b3-4bd6-bb7e-1d57cb1ba4a1", "sighting_of_ref": "indicator--cd14155d-2d20-4092-b25a-fca6a10d65d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252a4e27-c59a-4785-8032-c2ed7cfbbae5", "sighting_of_ref": "indicator--cd14155d-2d20-4092-b25a-fca6a10d65d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a5cf07-7fc8-41fe-9a95-e617eec45b73", "sighting_of_ref": "indicator--0d998ed0-7b28-432e-914c-f1a53140a0f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d151a487-f715-43ad-9c6f-6da401aaa6f7", "sighting_of_ref": "indicator--0d998ed0-7b28-432e-914c-f1a53140a0f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706f6263-053c-47ca-9f31-2e957d8803d2", "sighting_of_ref": "indicator--ffa20648-db18-4fea-a5fb-9d9c0f73b4ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0cc22-bc29-4174-9cd9-529d9df0a053", "sighting_of_ref": "indicator--ffa20648-db18-4fea-a5fb-9d9c0f73b4ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c5abaa-565c-48ba-8405-823aa63277c5", "sighting_of_ref": "indicator--b74460c1-b489-4d25-a6a2-56c71aabe428", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2a82e7-d846-4b63-9983-efb5f0487bce", "sighting_of_ref": "indicator--b74460c1-b489-4d25-a6a2-56c71aabe428", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4523037f-44df-4afa-82c8-d6df11050cc6", "sighting_of_ref": "indicator--413afaba-1f9b-4e18-a6d7-e185b152dda0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3114e0fd-405b-411b-8390-015336c0da92", "sighting_of_ref": "indicator--413afaba-1f9b-4e18-a6d7-e185b152dda0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf9a7d-3eab-40fb-92ba-cf016175ef12", "sighting_of_ref": "indicator--7bac1374-80d6-4185-872c-8aa5914987f2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5d62e6-90d7-44ae-975f-0a4c49eb4637", "sighting_of_ref": "indicator--7bac1374-80d6-4185-872c-8aa5914987f2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e7eb3f-3534-4f47-aeb2-ad31c6ae9ac7", "sighting_of_ref": "indicator--d00b76a1-530f-43d2-b157-d65339b65d87", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7239bf3-55ec-4526-b830-28ab81c4c0f9", "sighting_of_ref": "indicator--d00b76a1-530f-43d2-b157-d65339b65d87", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa32696-e747-411c-a176-2d043b7e5ef9", "sighting_of_ref": "indicator--35de9866-5a0c-4fc3-96f6-8ecb1b217ed5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b19ddd-7ae4-4772-b0f8-a97eb50dd9d1", "sighting_of_ref": "indicator--35de9866-5a0c-4fc3-96f6-8ecb1b217ed5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abccfa7-6b8f-4d10-b5ce-dfdf007514af", "sighting_of_ref": "indicator--7e69488e-c12b-4afb-a938-03bc1e30c644", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4ad42a-7401-4665-96a0-43d8a0b240d3", "sighting_of_ref": "indicator--7e69488e-c12b-4afb-a938-03bc1e30c644", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7642eaf1-10bc-427e-9239-7f3696ebe38f", "sighting_of_ref": "indicator--c04eec87-aa0d-468e-9bb6-a73ebc2e5ded", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba44fcc1-534a-4f87-a735-23291ce81bde", "sighting_of_ref": "indicator--c04eec87-aa0d-468e-9bb6-a73ebc2e5ded", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6568eb68-920d-4198-92de-027af54d01c5", "sighting_of_ref": "indicator--fded23a3-185c-4a1a-aea8-eb9a9724ebeb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c7ff54-a804-4084-b1e9-c693cba1ba39", "sighting_of_ref": "indicator--fded23a3-185c-4a1a-aea8-eb9a9724ebeb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9364dbf-5c78-4bd0-afcd-53167d9685aa", "sighting_of_ref": "indicator--f5a11228-41bf-4eb8-9976-0dc1fd94757e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4135647-9307-443b-bff1-584e1ae0b188", "sighting_of_ref": "indicator--f5a11228-41bf-4eb8-9976-0dc1fd94757e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4946c3a8-2268-496d-9d07-b88811d9ea21", "sighting_of_ref": "indicator--c8271ccc-fb92-4068-9a12-3569e56fcf3f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a01fed-301c-4cba-88f2-45e779b78fbf", "sighting_of_ref": "indicator--c8271ccc-fb92-4068-9a12-3569e56fcf3f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc8f41a-6dbc-4d83-9294-8f2632f25f91", "sighting_of_ref": "indicator--76ca6b03-e44b-46ce-88e6-2633d84f2c63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afa3cee-6d81-4fce-af42-62e15f719a76", "sighting_of_ref": "indicator--76ca6b03-e44b-46ce-88e6-2633d84f2c63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3777dc77-0cd5-4936-bcc4-a6dbebbe41b3", "sighting_of_ref": "indicator--f816e7b6-eb8d-43b9-98b5-4bf33a8bd304", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1828cc77-17d6-44e6-a136-9b34681541b6", "sighting_of_ref": "indicator--f816e7b6-eb8d-43b9-98b5-4bf33a8bd304", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e45144-3072-4771-a42a-d32bccb8931d", "sighting_of_ref": "indicator--bc37a970-1ecf-4cff-80a5-5591dfbc4158", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59beadd-6b61-48ea-baa7-985bd6b8704a", "sighting_of_ref": "indicator--bc37a970-1ecf-4cff-80a5-5591dfbc4158", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ec6d43-b356-4edb-83c0-62361f6194c5", "sighting_of_ref": "indicator--1aa7115f-5024-4240-bb7d-88dd38011855", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd0e43b-b9fb-4372-b7d1-7f4ea5a79371", "sighting_of_ref": "indicator--1aa7115f-5024-4240-bb7d-88dd38011855", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb98d866-b4cd-4994-a96c-2fff00492a9f", "sighting_of_ref": "indicator--f483d0be-8365-4945-b68a-dbe5f96ac4c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b348bd1-052b-4d99-a4eb-bc983779ff93", "sighting_of_ref": "indicator--f483d0be-8365-4945-b68a-dbe5f96ac4c7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d3feb5-6245-4673-9fbc-cd0a8118e0d1", "sighting_of_ref": "indicator--186dbd95-3089-4c3d-94a9-a88c7d147554", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0a53f1-053e-48d1-a565-b5c1f144781f", "sighting_of_ref": "indicator--186dbd95-3089-4c3d-94a9-a88c7d147554", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e880f1-11b9-436c-8309-a704c24f0fd8", "sighting_of_ref": "indicator--e7f0ac82-6d3d-4c10-954f-28a06775d1ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aae2560-06fc-41fd-b5d4-1f0b55260e0a", "sighting_of_ref": "indicator--e7f0ac82-6d3d-4c10-954f-28a06775d1ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267a63ae-4b01-4464-a62e-a7e7e74eaa57", "sighting_of_ref": "indicator--b6e2fdb1-cb1a-4a29-9cb7-95e193d53796", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb51d49-c542-49b3-b1d8-c8f858e2b118", "sighting_of_ref": "indicator--b6e2fdb1-cb1a-4a29-9cb7-95e193d53796", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa6a56a-90b8-4195-8ea9-34f550e0f857", "sighting_of_ref": "indicator--3a23e839-9883-4e5b-b2c2-fbc4c9d249a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4c508f-371e-4a22-a187-4e2da1a453b7", "sighting_of_ref": "indicator--3a23e839-9883-4e5b-b2c2-fbc4c9d249a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258be38c-f6e6-4493-b9e6-7baf189b909a", "sighting_of_ref": "indicator--074f53cb-1b4c-49ee-840b-e024bf379a0a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2413ca8b-035e-4d80-a877-1dcd7c21c891", "sighting_of_ref": "indicator--074f53cb-1b4c-49ee-840b-e024bf379a0a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee71f10-8a00-43c9-9f3d-de6aed5778f8", "sighting_of_ref": "indicator--92b7ae44-d01f-4faa-a408-45a674dd13cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd5c58e-540b-4b13-a576-580f57035853", "sighting_of_ref": "indicator--92b7ae44-d01f-4faa-a408-45a674dd13cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6af042d-8fb9-4613-9a04-90c9a5ebd556", "sighting_of_ref": "indicator--070b6d98-1c1c-454f-b7a9-837d4ab556c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceb888e-b843-46af-8007-2c13ed08ed91", "sighting_of_ref": "indicator--070b6d98-1c1c-454f-b7a9-837d4ab556c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ffce78-fe1f-4b2b-bb18-01b68c20627f", "sighting_of_ref": "indicator--61e2853a-183f-4afc-8875-4ad124dc4c14", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d90c7cd-3fd5-481b-8b51-afc75d8ee17d", "sighting_of_ref": "indicator--61e2853a-183f-4afc-8875-4ad124dc4c14", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a7dc3a-abaa-4be1-a234-9ec2b5f21c9a", "sighting_of_ref": "indicator--96a8da85-2047-46ea-8e57-4ce3baf12fae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2176ff-8af9-426b-8cd3-ecc072c30530", "sighting_of_ref": "indicator--96a8da85-2047-46ea-8e57-4ce3baf12fae", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269e7ce1-bfac-4f09-a761-765d51b21919", "sighting_of_ref": "indicator--09be0d66-fa6a-4c05-8d40-61a57121f0c3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24f3839-1e56-4ccb-a98f-96ae8c0e2251", "sighting_of_ref": "indicator--09be0d66-fa6a-4c05-8d40-61a57121f0c3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f37f8f-9749-4f7b-9c05-40c25244370f", "sighting_of_ref": "indicator--e34817ea-3fd2-4adc-9d75-23ece2886661", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11352ae8-319d-47f3-b06e-36bae5f67672", "sighting_of_ref": "indicator--e34817ea-3fd2-4adc-9d75-23ece2886661", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32036be-ba94-4d48-975c-5addd08321f1", "sighting_of_ref": "indicator--0d96ed6e-a5e7-4739-b452-ef28390e82ec", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d5ea53-e2c6-4f07-aa67-4059184a443b", "sighting_of_ref": "indicator--0d96ed6e-a5e7-4739-b452-ef28390e82ec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495523ea-0704-4198-b885-a1f5aac5e82c", "sighting_of_ref": "indicator--3fc8c870-5bb4-4451-9ed4-d0b54128d1e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a8e69b-380e-461d-86fa-eb349d980b93", "sighting_of_ref": "indicator--3fc8c870-5bb4-4451-9ed4-d0b54128d1e1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c09a082-5e04-456e-a060-bddd63fbee13", "sighting_of_ref": "indicator--162618a9-4fbb-421f-9704-fd9aedf19f62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e60bf52-9e70-4179-bcc1-2f79375e5597", "sighting_of_ref": "indicator--162618a9-4fbb-421f-9704-fd9aedf19f62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632615cd-2637-45d2-81d6-c0d6d771e66f", "sighting_of_ref": "indicator--cda323c8-7426-4cc4-ba32-882a6ea25558", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65cbccd-8350-4b11-8d3d-faf5ed7cc1bc", "sighting_of_ref": "indicator--cda323c8-7426-4cc4-ba32-882a6ea25558", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8349ad-2bd2-4274-8be9-d3cebdd9a35d", "sighting_of_ref": "indicator--63dba981-64b2-4985-8507-e9d217296bee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2b77a7-b8ea-4958-a69e-987a39dee6b6", "sighting_of_ref": "indicator--63dba981-64b2-4985-8507-e9d217296bee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3405a248-238c-4850-b65c-39a869872746", "sighting_of_ref": "indicator--751043fa-61fb-40b2-89e9-57507bdf53ab", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2d8cda-b8bb-43ea-a593-d43213381c0a", "sighting_of_ref": "indicator--751043fa-61fb-40b2-89e9-57507bdf53ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9469ab57-0146-4798-9f8f-226cb9022775", "sighting_of_ref": "indicator--a23c41b6-9659-4247-a718-d544b73be54c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3e50d2-56f7-4e26-b700-5e6b24c45b57", "sighting_of_ref": "indicator--a23c41b6-9659-4247-a718-d544b73be54c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b23fba7-ccb6-4dbe-ac9d-cefcbfd3075c", "sighting_of_ref": "indicator--a23c41b6-9659-4247-a718-d544b73be54c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b84bac-a35f-4b34-b1b6-d494cc17b68c", "sighting_of_ref": "indicator--9794d769-cc99-4d6d-83a8-1708082e8933", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac55696f-1338-4516-887f-21958a6d6a59", "sighting_of_ref": "indicator--4433ca3a-ab11-47b9-8222-4cd6ad4a8e88", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b289926-7f97-44fb-8d19-ca7ba887b93b", "sighting_of_ref": "indicator--51e59294-8a29-48dc-bf48-4075c6dd1965", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047e9bbd-5d13-4345-b02e-5f0aec095cfc", "sighting_of_ref": "indicator--51e59294-8a29-48dc-bf48-4075c6dd1965", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a74503-7bae-4eca-b2b7-b470143006f7", "sighting_of_ref": "indicator--51e59294-8a29-48dc-bf48-4075c6dd1965", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aa1fff-189c-4162-8293-7f2c1d8b92a2", "sighting_of_ref": "indicator--bdb7dea5-1dbc-41c8-a1b8-9d7459df5ecb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdd2854-d7ca-4b13-b080-b97e43ac7b58", "sighting_of_ref": "indicator--dc4866ec-744a-408c-8981-5f1ed5694610", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7d0704-791b-452f-928e-fa40f70745cc", "sighting_of_ref": "indicator--92750639-a17b-4cf0-b564-9b53c829ecd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c229d7-66cc-46f3-9848-66c9ba2b283c", "sighting_of_ref": "indicator--92750639-a17b-4cf0-b564-9b53c829ecd6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084f21e9-880e-4ee6-9c24-b2ffbdebfb7e", "sighting_of_ref": "indicator--c1e4eeed-c3ef-433e-b46c-d5b705c12200", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae80f56d-7de6-4298-986e-d6a5556fa5c7", "sighting_of_ref": "indicator--c1e4eeed-c3ef-433e-b46c-d5b705c12200", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47968bf-36c8-43fb-8fe1-a4f057e44f73", "sighting_of_ref": "indicator--c1e4eeed-c3ef-433e-b46c-d5b705c12200", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fb05ee-4c19-4afa-8885-df19dc3d1b4a", "sighting_of_ref": "indicator--a693694d-2779-4e4f-a844-0343f017e5bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2c733f-8a60-46b2-b5b7-f74ea610c825", "sighting_of_ref": "indicator--a693694d-2779-4e4f-a844-0343f017e5bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4093f0-2e71-4358-8eb3-7870c7a095a0", "sighting_of_ref": "indicator--a693694d-2779-4e4f-a844-0343f017e5bd", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522599da-9deb-4f3f-bb20-84cfa103fe1b", "sighting_of_ref": "indicator--23dd43cf-9d8a-47a5-b14b-e4b51211db93", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca04310-d481-45f6-960c-9ab73f5a53e9", "sighting_of_ref": "indicator--23dd43cf-9d8a-47a5-b14b-e4b51211db93", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c021335-bb17-4d60-8f94-577fc07834b0", "sighting_of_ref": "indicator--8b3224ab-97f8-44f5-9304-3529093d1bb3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328e31b4-e36a-40e7-93ce-1160e952b7b1", "sighting_of_ref": "indicator--417a424f-709e-485b-a21f-95346cba2ba8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a004d2a1-bfd0-45f8-b68c-f54ea9336890", "sighting_of_ref": "indicator--417a424f-709e-485b-a21f-95346cba2ba8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cf88dd-dfb1-4b22-8311-b7fab809c079", "sighting_of_ref": "indicator--417a424f-709e-485b-a21f-95346cba2ba8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167cf320-5192-4687-ad9a-aa665c196f6c", "sighting_of_ref": "indicator--ac78a1ac-94bf-4e6c-9ea5-cafbb3eafe69", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07949df-9cc5-40e6-a390-5271bc32447c", "sighting_of_ref": "indicator--636f0462-da22-40c1-971f-796247ebd275", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dc5d03-3b31-4bb3-9fbc-720a6128eeae", "sighting_of_ref": "indicator--e93a91ef-e079-4333-a260-8f83467659b4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b528bc-7eba-4b71-8e81-5822908de445", "sighting_of_ref": "indicator--0bebf34a-af31-4791-946d-34d1ad3f4a25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09f6316-96a1-4a21-998f-a81d671899c4", "sighting_of_ref": "indicator--0bebf34a-af31-4791-946d-34d1ad3f4a25", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7123d9b-9e21-4db2-960f-e207d6459794", "sighting_of_ref": "indicator--e6918f5b-6629-45ed-9118-8520f2c13fe0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2931c8-6516-4931-b81a-dff779dc7a6e", "sighting_of_ref": "indicator--e6918f5b-6629-45ed-9118-8520f2c13fe0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202dc84e-e945-4fe9-841a-a836471c0d36", "sighting_of_ref": "indicator--e6918f5b-6629-45ed-9118-8520f2c13fe0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624865f8-f2b7-47fd-b28e-60f8528cc522", "sighting_of_ref": "indicator--0bfd15e1-1dee-40c0-87ab-f25dc4af0d46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c23bea-ff8f-4c88-983a-49c33743f6c6", "sighting_of_ref": "indicator--9284a18b-c843-46aa-bc00-6f96266e1fb6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcf028e-db13-42f9-870b-45a12df30637", "sighting_of_ref": "indicator--7fc63878-5da5-4405-8473-5cdd56a621f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257fb76d-90d1-4955-a1f2-d08c49e52ca6", "sighting_of_ref": "indicator--9b2d2844-45fd-4f74-ac9b-af8cd84531ab", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d7aeca-4e91-42e8-aef0-ceee7034d923", "sighting_of_ref": "indicator--b69fcb1a-1a1d-4b4f-ba37-d8fae0e0b1c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025f6b93-fe35-4ce3-8469-03d73bb76af3", "sighting_of_ref": "indicator--5a838149-6e1f-479c-9412-8df34b27f6d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3b7871-c941-40d3-af3c-07a8344c6310", "sighting_of_ref": "indicator--413bdc43-7a26-4bda-ab98-642feceefc11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b8dbf4-7712-4716-a22e-d57c924e8290", "sighting_of_ref": "indicator--61ee0026-f007-4601-ad5e-bbb585ced44c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b2ce0-0780-416d-8bb8-ef37badc47ce", "sighting_of_ref": "indicator--5b558765-d489-44b7-b999-e421c6c85d53", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b634fefb-cf11-47d3-987e-e7c3830c4bae", "sighting_of_ref": "indicator--a244abf9-9fc1-4316-8856-a1f8b539ae7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69160c42-855a-4c3f-bef6-cfdd41206b9a", "sighting_of_ref": "indicator--01806372-b61c-4cba-a52d-07021e3936f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288c6d5d-e5ae-40e1-8084-329669b3987e", "sighting_of_ref": "indicator--c31079c4-7754-448e-ad30-9a4eb005177d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc40230-5ccb-4641-9901-ea0e26c92d18", "sighting_of_ref": "indicator--fade19d6-87c3-45d1-ad0c-b3fa908afa2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a13d33-52ca-4d5e-a413-76c22c3924fb", "sighting_of_ref": "indicator--57ccb1a0-5aac-44b3-ba8a-8ef7ef592e37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40a89e3-8375-4b5f-b8de-4fca01fea863", "sighting_of_ref": "indicator--345504e1-e07f-415d-bd28-7378c1810520", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790ef6eb-700f-45e0-88db-7c3fb2879c88", "sighting_of_ref": "indicator--c5e341c7-eb95-4c9f-a01c-0b5b9ab0d133", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3f8723-b0f8-480a-9ad3-df4682af96c4", "sighting_of_ref": "indicator--26a8c232-241d-492c-ac81-a34a001212e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc6d7d9-8ab2-48b4-8302-944bfeb49962", "sighting_of_ref": "indicator--1ac5011a-d2d5-495f-9778-b36e675c83b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd29265-5b07-459e-a55a-827763b51b5f", "sighting_of_ref": "indicator--e6d7cd85-2a8b-453c-98e0-026d63f8e561", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2786be58-f9b7-47fa-9472-3eb1cfa16593", "sighting_of_ref": "indicator--7564e3e1-b876-478c-b9d1-bbeb703682ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc339c7-ca89-4ac8-8fd2-3f2688c81828", "sighting_of_ref": "indicator--bd13c0d0-be6c-4f35-aef2-d8cac08ebb5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf9cf5e-a2ad-4c67-899c-d8ada9c08501", "sighting_of_ref": "indicator--1650c706-75bf-4846-aac1-edcafebcbc0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a4a0c9-5e44-4e3f-a737-75544e28dbbf", "sighting_of_ref": "indicator--e1ce61f2-47c2-4d10-885f-034920a2de50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d78377-0b13-4a90-a6cd-a3bcd83fd5ed", "sighting_of_ref": "indicator--e1ce61f2-47c2-4d10-885f-034920a2de50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9399e440-52f1-40c6-b1c5-f2d505eb8332", "sighting_of_ref": "indicator--e1ce61f2-47c2-4d10-885f-034920a2de50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39beefb5-aa9e-47e1-ad84-362954532782", "sighting_of_ref": "indicator--f428d9ac-99e5-4dc4-a1cd-c77111606799", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be14f26d-4eda-4bde-b598-ea358d93849d", "sighting_of_ref": "indicator--f428d9ac-99e5-4dc4-a1cd-c77111606799", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd4b6e5-eb4a-43fd-9090-69ceabf4a033", "sighting_of_ref": "indicator--f428d9ac-99e5-4dc4-a1cd-c77111606799", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5d0065-5a4f-45c3-8594-1ec8bf2f5843", "sighting_of_ref": "indicator--fef72ec4-a833-4699-a7b5-19dcb1fcf487", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73239c78-04a4-4437-8317-8e4b49f50720", "sighting_of_ref": "indicator--fef72ec4-a833-4699-a7b5-19dcb1fcf487", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c2bd17-1142-462f-b513-1d83af9ede64", "sighting_of_ref": "indicator--fef72ec4-a833-4699-a7b5-19dcb1fcf487", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187077e9-ade8-43d3-9e7a-f8b8851393a7", "sighting_of_ref": "indicator--c6ed42ec-4335-4769-8725-af392b196ba4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70be583d-0f6e-4e33-8db6-b392261214a4", "sighting_of_ref": "indicator--c6ed42ec-4335-4769-8725-af392b196ba4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38136fee-65d5-4e9c-b49c-fdc871fc03d1", "sighting_of_ref": "indicator--c6ed42ec-4335-4769-8725-af392b196ba4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daddba2-bf87-4986-b230-6625d59d28ca", "sighting_of_ref": "indicator--ab09738b-20ff-41af-a1eb-123ffbe808a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655051ee-69de-4958-8443-058e44a15010", "sighting_of_ref": "indicator--ab09738b-20ff-41af-a1eb-123ffbe808a6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7add0de-ddcd-4744-8da5-a0e360d128b3", "sighting_of_ref": "indicator--9fc958c5-d1f4-4f3d-9aeb-9811e01e841d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48aea5a-e02e-4783-a885-b19b1c2e95e9", "sighting_of_ref": "indicator--9fc958c5-d1f4-4f3d-9aeb-9811e01e841d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79269744-c647-410f-b17f-8ccc3461e211", "sighting_of_ref": "indicator--237841a5-74d8-4fe8-9bda-5a895e91fa5b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96027c57-8f03-487d-8057-3d6e997d43c9", "sighting_of_ref": "indicator--36f7d999-4171-451f-8b2a-806b1ad3375f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e836b3c8-89f1-447e-a3eb-68458dd34174", "sighting_of_ref": "indicator--f5348187-a173-455a-9665-d2564df4a29b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73f42ac-d3cd-4f0d-8ebb-8976f9033395", "sighting_of_ref": "indicator--ce375711-9aeb-405f-89d0-9e6af8029788", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ddc1e6-4909-4c3c-8d42-ba704f446bc1", "sighting_of_ref": "indicator--ce375711-9aeb-405f-89d0-9e6af8029788", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e54be7e-7293-4523-942a-22ecd2d020cc", "sighting_of_ref": "indicator--ce375711-9aeb-405f-89d0-9e6af8029788", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bfee98-0dd0-4b3b-9c70-d3dbc15698ee", "sighting_of_ref": "indicator--ac7bae90-ab34-4b50-88c7-68bf410c23f3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58bcc20-6d38-498c-8741-3895ad17d894", "sighting_of_ref": "indicator--3a59e3d0-acac-4a80-957f-f8a0396d8732", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8a36a7-4999-44e2-827e-fb1d92dbf03c", "sighting_of_ref": "indicator--8fa796cb-6dfc-4299-a2dd-501b503f2ed2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d9be88-42ad-4363-a6be-66f19f1c0524", "sighting_of_ref": "indicator--b9347f95-daa4-4259-8fd2-beb240ad9335", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998a8db1-6eb9-4a32-972e-d0d306906d00", "sighting_of_ref": "indicator--03c1cb45-7802-4477-bc08-5d7b114c3008", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26c065f-ebb0-4fec-a68f-3881de4f74c9", "sighting_of_ref": "indicator--5cafc56f-d1a1-443d-a425-3415987b89eb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95b47ea-aea0-4ae5-80fe-8464d2b415a7", "sighting_of_ref": "indicator--4e8eeb5a-c78f-49d2-9c81-d17c64820869", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b64614-f56a-49df-a4d3-162adad8773a", "sighting_of_ref": "indicator--82e844c3-b3e4-4dae-a311-10e4ff977bf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1ea0e0-a034-496f-9925-ba5e07188a8b", "sighting_of_ref": "indicator--577d2fd7-8553-490f-96c9-ffc5416895b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3c8d9c-bb9e-4638-8f3b-d2e8aabcd615", "sighting_of_ref": "indicator--2e5acf00-446b-4276-8c89-a036e1e57460", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c8737e-8b72-4675-8618-d6a32a204f80", "sighting_of_ref": "indicator--97588b88-a4aa-42fd-96e7-5dad404b0f37", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db21131a-c403-4448-8c86-b94c65f8c2d5", "sighting_of_ref": "indicator--97588b88-a4aa-42fd-96e7-5dad404b0f37", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f3eb6a-d995-4f65-995d-e8aafcc4b25b", "sighting_of_ref": "indicator--97588b88-a4aa-42fd-96e7-5dad404b0f37", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024c6c5f-ce82-4324-b6a7-7204a5001d42", "sighting_of_ref": "indicator--54a3ec34-6083-4594-89b5-a1d89abda067", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6021d6-fdb6-481e-b0eb-415a992ea6bc", "sighting_of_ref": "indicator--54a3ec34-6083-4594-89b5-a1d89abda067", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a110c60e-812b-48d3-aef2-6c00689a0f62", "sighting_of_ref": "indicator--bcdccd7b-a2fe-47c3-aa48-d516435875ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f49a2f-d9f3-4f47-9c51-b49cdff45362", "sighting_of_ref": "indicator--bcdccd7b-a2fe-47c3-aa48-d516435875ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4707d7c-75e5-4849-a7b4-2b50e8c268ea", "sighting_of_ref": "indicator--bcdccd7b-a2fe-47c3-aa48-d516435875ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab3b2d3-11ce-4b80-91d2-414c684c8986", "sighting_of_ref": "indicator--113132fe-7040-4fa9-897e-68a626738ce8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44362b1c-96a0-4933-bdb1-8cf72c8d5981", "sighting_of_ref": "indicator--fd293e36-3078-4116-89c2-c654c49bce5e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dcfefb-b9b1-4c0b-adfe-365cc39c2bb5", "sighting_of_ref": "indicator--f2c6c1d9-e068-4d4e-a52c-9cddf17463ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a558bf1e-9fb3-4d88-ac6b-9c2ce50ec07a", "sighting_of_ref": "indicator--f2c6c1d9-e068-4d4e-a52c-9cddf17463ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25ea81f-ace9-467a-ae2d-4e13d000ce49", "sighting_of_ref": "indicator--298ff7e1-d96f-4bfa-98fa-87ed51fc8fb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8d50e0-b011-4b42-8654-95f328c00f2d", "sighting_of_ref": "indicator--33e892c9-49e7-4b49-8dc7-5465e1ae9ebc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aa79a4-074d-43e2-b35f-3f3c4cb06b6f", "sighting_of_ref": "indicator--33e892c9-49e7-4b49-8dc7-5465e1ae9ebc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413efd31-c22d-47d1-a259-31f6012f98f7", "sighting_of_ref": "indicator--33e892c9-49e7-4b49-8dc7-5465e1ae9ebc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945473e6-cc15-430a-af71-6549d2ffdc0a", "sighting_of_ref": "indicator--b2f308a3-3c8c-4262-8f3e-292ceb2536ac", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b32ff66-260f-48a3-b2e9-ad9302ff3067", "sighting_of_ref": "indicator--6b2338db-8dce-424d-8006-73210276680a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8803df-47f3-4752-b6ea-7a7aa155715a", "sighting_of_ref": "indicator--6fc6cd89-8896-47b3-89fa-65423fb88054", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a300c4-b283-4b45-bff7-8caa39524fdb", "sighting_of_ref": "indicator--a91975db-af8e-41ac-beb6-f827a9027942", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ca5358-d88a-4d55-a9f6-2ea77c212a44", "sighting_of_ref": "indicator--731a982e-a6aa-46cb-9f0b-0f85b5d7488f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57344709-2d05-4995-a026-3a54618bd051", "sighting_of_ref": "indicator--0bc3105b-202d-47dd-a14b-01dd1632324d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd57f38f-984e-4136-8bf1-b9af97cb4111", "sighting_of_ref": "indicator--89211bf4-25dc-4825-b7ff-617bf315ab64", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454d7588-e78a-477b-83b1-ccc4f1ca1d3d", "sighting_of_ref": "indicator--89211bf4-25dc-4825-b7ff-617bf315ab64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681b4aaa-21be-4055-b52d-cc52210c6b9a", "sighting_of_ref": "indicator--8a382177-7fe0-4056-8353-8e71752840e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f193b5-7f14-415c-82dd-22dbe0b0dfa5", "sighting_of_ref": "indicator--8a382177-7fe0-4056-8353-8e71752840e0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cb7b46-3129-4384-b2c7-e4c44c180cbe", "sighting_of_ref": "indicator--8a382177-7fe0-4056-8353-8e71752840e0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c2d35c-e337-487f-9157-0081e735cc1b", "sighting_of_ref": "indicator--3fbd4de6-1ba0-48ee-95da-445b66cf432f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501958d4-0487-4148-88a0-22714ca3d05c", "sighting_of_ref": "indicator--3fbd4de6-1ba0-48ee-95da-445b66cf432f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99772c5-eeb6-475c-8c0e-ccd3d200680c", "sighting_of_ref": "indicator--3fbd4de6-1ba0-48ee-95da-445b66cf432f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd02b4ee-c5ef-4856-b955-6cb37db9cc9b", "sighting_of_ref": "indicator--8fb7ea08-552b-4f49-ae30-3e29c3161181", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82d9cef-1c64-40a5-be4d-6ecf4b9a3362", "sighting_of_ref": "indicator--8fb7ea08-552b-4f49-ae30-3e29c3161181", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a169a0e4-ff2a-4344-9147-761c0ec53cf6", "sighting_of_ref": "indicator--8fb7ea08-552b-4f49-ae30-3e29c3161181", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df338f74-67c0-4a62-82c4-8f335b5340d1", "sighting_of_ref": "indicator--32914dce-d9e3-42e9-a1c6-7b1554be86f6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f69363-e287-4d85-b03c-ca2f8ce0aff1", "sighting_of_ref": "indicator--5f7398c4-04ed-4017-a681-a796deb6a192", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59da855c-6a34-45cb-88e3-1328297ef4c9", "sighting_of_ref": "indicator--387273f0-138b-4f34-a050-91956b854ce3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5189c7c9-fb36-434a-91c3-5580b9c43fa2", "sighting_of_ref": "indicator--aa1063ab-2d97-4627-81b5-0ac67fed0c7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ae9d6a-aae5-4a10-9ce3-53269dbc980c", "sighting_of_ref": "indicator--c0066b2e-0f6a-4d68-8679-22cca5e98d76", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ed0cea-f901-4e4f-a0e4-7c3e7a326f82", "sighting_of_ref": "indicator--2bd92041-e842-4503-ab98-7ad29034aff9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e951616-f0bd-4d90-8e41-db073dc11bd8", "sighting_of_ref": "indicator--c6996b23-01c3-407b-9609-827dcb9febe3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dfcadb-10de-4c87-89e5-ecc721211972", "sighting_of_ref": "indicator--bf74de46-713d-4177-b17b-936620a541a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2ff884-720c-4659-8265-c484c125e29e", "sighting_of_ref": "indicator--bf74de46-713d-4177-b17b-936620a541a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c5c4d9-0576-4323-9635-fa596043e7d8", "sighting_of_ref": "indicator--c6846075-e182-4aaa-98a9-a320b45b1822", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004f65f4-a0b4-456a-9bc8-c422d00b2c10", "sighting_of_ref": "indicator--e4fbd3ee-f8b2-41d2-b198-21f33cf5bb73", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a558d9-c09c-4afb-8d00-2bb5f2eac889", "sighting_of_ref": "indicator--e539a137-07fb-48fa-973a-9382f4a2c65a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c01f732-5b54-4314-b4ff-0f6b0082db20", "sighting_of_ref": "indicator--e539a137-07fb-48fa-973a-9382f4a2c65a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f09c86-1ecb-4c36-8a9b-bbca96fb5506", "sighting_of_ref": "indicator--e539a137-07fb-48fa-973a-9382f4a2c65a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011fa295-ee13-4860-8c6b-989ead9cc683", "sighting_of_ref": "indicator--e3efd269-0c04-4696-a3a4-c21220df3173", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0141b670-8225-4961-b0a8-de7bd036df20", "sighting_of_ref": "indicator--74715eeb-887b-4cd8-ab6a-903623c345d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e66f62-dd19-4720-8d60-ba24ac5bbf62", "sighting_of_ref": "indicator--74715eeb-887b-4cd8-ab6a-903623c345d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31353b21-b9fd-48ae-b3d6-2f9345d7ad6d", "sighting_of_ref": "indicator--74715eeb-887b-4cd8-ab6a-903623c345d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a427801-9421-4d7e-9400-4138ff3b5d1e", "sighting_of_ref": "indicator--c7a35e96-6ce0-4442-950b-8aa802da6617", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eec66f-ec71-4d01-9fd8-5d15cd808859", "sighting_of_ref": "indicator--c7a35e96-6ce0-4442-950b-8aa802da6617", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76cce69-407d-40e0-b990-c86bb9db43d7", "sighting_of_ref": "indicator--c7a35e96-6ce0-4442-950b-8aa802da6617", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c20f01-ac14-4f40-ba99-d4bed4ce5e31", "sighting_of_ref": "indicator--45fb69de-a6d1-46c9-bb22-1607dcd00891", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114bd4f8-b434-4f82-b182-82c8de42bbf1", "sighting_of_ref": "indicator--45fb69de-a6d1-46c9-bb22-1607dcd00891", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32920e-3eac-4b5d-8523-3b8b80534090", "sighting_of_ref": "indicator--45fb69de-a6d1-46c9-bb22-1607dcd00891", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc179c4d-6256-4deb-b7a8-ef0547e85466", "sighting_of_ref": "indicator--65833b6e-eaad-40ad-8262-70243a23cfdb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4295365-15d6-43e7-8be7-e2e9d664b282", "sighting_of_ref": "indicator--1c8d6ed8-24b4-4d19-a56e-90c4385ee8b3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421411b5-02ef-4ba7-960d-14383b3af53a", "sighting_of_ref": "indicator--c5b28a9c-93b8-4a75-bf23-e51c3cd0fd51", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac418bf-a282-4cdc-8294-81c4e42f053e", "sighting_of_ref": "indicator--34cebb32-7ec1-4ea3-bf31-449e812fc0d5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920ebc8b-2812-4aca-a094-af3558a8adb0", "sighting_of_ref": "indicator--34cebb32-7ec1-4ea3-bf31-449e812fc0d5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78606f22-9487-4b1b-9909-f7c2f120cd97", "sighting_of_ref": "indicator--b32f2ebc-bb71-471c-98a5-ba8066fb346f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c78fecf-444e-40bc-8fa7-0c454569786a", "sighting_of_ref": "indicator--8cb2aa80-01d3-4cbd-b7af-4e14c7660fc5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd348067-c8d4-4631-8d08-bce19090972f", "sighting_of_ref": "indicator--8fe5ecfc-ad84-4469-8c95-43fb067eaf63", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da05016-92be-436b-9321-87f1589e429c", "sighting_of_ref": "indicator--8fe5ecfc-ad84-4469-8c95-43fb067eaf63", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca842efa-7a8a-473e-8276-2317520af7c1", "sighting_of_ref": "indicator--3a379acd-7522-4cd8-a5ab-15fa8cde5e99", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7353f8d0-1cd8-47d4-981a-8d3c2c2e86f4", "sighting_of_ref": "indicator--3a379acd-7522-4cd8-a5ab-15fa8cde5e99", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba10aa97-5057-4e4b-a9d7-bc11bb919246", "sighting_of_ref": "indicator--9c56da31-7042-4805-9d1f-64292749fd00", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c63299-83ca-47e1-97c6-13c7dd8af58e", "sighting_of_ref": "indicator--9c56da31-7042-4805-9d1f-64292749fd00", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c9443-34d6-4098-8636-d7e2c6b4a807", "sighting_of_ref": "indicator--3879637b-ea6b-491d-9ee7-8893a41aef2b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b299dc-bdeb-42ff-9333-f1c6caa269e0", "sighting_of_ref": "indicator--3879637b-ea6b-491d-9ee7-8893a41aef2b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e24dfd6-5555-40a8-97d0-c5cb5b18ad93", "sighting_of_ref": "indicator--6da45b95-f674-4b73-9520-a708e931d1cf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b1516e-f500-4796-9e1d-e769560f1b00", "sighting_of_ref": "indicator--6da45b95-f674-4b73-9520-a708e931d1cf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82ea59e-0b03-447c-84d5-6f3ce2fd2d71", "sighting_of_ref": "indicator--84d95086-ee80-460b-8add-dcb2ef94cbcf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edab07a8-a90a-4c9d-957e-7e01142cecf7", "sighting_of_ref": "indicator--84d95086-ee80-460b-8add-dcb2ef94cbcf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5295444b-0e5e-494f-9d55-7a07db971da5", "sighting_of_ref": "indicator--54b586fe-4a5b-4e0c-9bcc-85134072ae83", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addabef1-36f3-4420-a269-e3e493bc2fad", "sighting_of_ref": "indicator--54b586fe-4a5b-4e0c-9bcc-85134072ae83", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdd3c2e-fe66-4091-8ada-adc4cc5b5b2b", "sighting_of_ref": "indicator--431c0e7d-732c-40a8-9a0c-51c75a346ba1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db59031-385f-4aa8-a4a6-7c09ec5bbfda", "sighting_of_ref": "indicator--431c0e7d-732c-40a8-9a0c-51c75a346ba1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429d05b5-b11c-4ef7-a171-ffc0f01cb0b5", "sighting_of_ref": "indicator--d114b084-2661-454a-8196-e814f41daca0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75af190f-e2f9-4377-83b0-f70120897e62", "sighting_of_ref": "indicator--d114b084-2661-454a-8196-e814f41daca0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a05933a-a7f0-4b67-a8b0-9838ceff8d40", "sighting_of_ref": "indicator--c0f572a5-ad5d-4e99-9821-4711610847b9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0dcf99-4672-419b-a68e-0b3e242cef21", "sighting_of_ref": "indicator--c0f572a5-ad5d-4e99-9821-4711610847b9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeb58eb-7a79-45db-82f2-01d20db3be3d", "sighting_of_ref": "indicator--be82854d-fba1-4ecf-97e4-c7956fca3d55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3761959e-ee3e-4c3f-a867-9d29d7e513c6", "sighting_of_ref": "indicator--be82854d-fba1-4ecf-97e4-c7956fca3d55", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0d02ed-97b6-4690-be34-4fe023a1635a", "sighting_of_ref": "indicator--bb13e97a-cc27-4f97-9f3f-fdc922aae498", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b946a9-6ae8-4184-a2d7-216e27a31412", "sighting_of_ref": "indicator--94e63a41-8bc2-4f5b-a666-ccb6662ec174", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5af979-055d-4d6f-b878-1b0b96ec1218", "sighting_of_ref": "indicator--94e63a41-8bc2-4f5b-a666-ccb6662ec174", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d724445-b003-4246-b7c1-c88578dcc208", "sighting_of_ref": "indicator--6a122f8d-5a36-44ae-9de7-515746b8241c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b51fbb0-ee67-4d95-bd1f-15ece9d0e80f", "sighting_of_ref": "indicator--6a122f8d-5a36-44ae-9de7-515746b8241c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd9b28-9f12-4ca6-8968-9828fe8df002", "sighting_of_ref": "indicator--0796098a-0777-45b8-8a57-b4eab5e65e91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92c6bfb-b70f-4fa2-a477-e3d07219cd7a", "sighting_of_ref": "indicator--0796098a-0777-45b8-8a57-b4eab5e65e91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea7c70e-cfce-46db-b7d0-552931ed0419", "sighting_of_ref": "indicator--7ea82b76-ec52-4ffe-ba8a-9e97f346ae3c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2550054-e0ba-4d69-b1f0-ecd744f17d86", "sighting_of_ref": "indicator--7ea82b76-ec52-4ffe-ba8a-9e97f346ae3c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a24e7bc-05c2-4fcb-af8c-6d5de8eab413", "sighting_of_ref": "indicator--862d2b74-f5a9-4323-922c-f2c11b3f863f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55033680-b718-4f37-969b-caa5cafdffa5", "sighting_of_ref": "indicator--862d2b74-f5a9-4323-922c-f2c11b3f863f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a375a21-492d-460d-863d-3e752e792fd2", "sighting_of_ref": "indicator--796c61cc-0109-4aaf-a556-7daf2b9d68df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e38075-6206-4af9-94b2-aa66bb459bfe", "sighting_of_ref": "indicator--796c61cc-0109-4aaf-a556-7daf2b9d68df", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf71ca0-bf6c-409c-a5b4-9aa543e07d91", "sighting_of_ref": "indicator--80282cca-9ee9-47ee-9e4f-85f974daa847", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de2b0b0-839a-487d-b803-0ea6f0fdedd4", "sighting_of_ref": "indicator--80282cca-9ee9-47ee-9e4f-85f974daa847", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86702348-e6a6-4d5c-83a7-f9a58a11ead8", "sighting_of_ref": "indicator--c2350529-5f84-43e9-b2e9-5fdbfc3922ca", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9586bf-1ba2-4f40-8d10-1c47d69c6f65", "sighting_of_ref": "indicator--c2350529-5f84-43e9-b2e9-5fdbfc3922ca", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a735258-a013-4998-a9f9-5a7b68203414", "sighting_of_ref": "indicator--73340c6f-baae-4d85-8cbe-f88ee22ba18f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373225e5-40d3-41b4-a195-801a70a0a0cf", "sighting_of_ref": "indicator--73340c6f-baae-4d85-8cbe-f88ee22ba18f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af5573c-8eb9-4296-a0f2-fe5e1d8ddcab", "sighting_of_ref": "indicator--c5cf41c3-d807-436e-bd9a-8db50a6a624d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4505a504-263f-49dc-9f1e-8d41cb0e4dd1", "sighting_of_ref": "indicator--b9ac9fee-cf6f-4883-be08-4c6f2a585124", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f05fce-2264-4ab0-87b2-21b7f9a28b35", "sighting_of_ref": "indicator--e7422147-2964-4e4e-8ee4-a6aacb769869", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c567463a-7ed5-4964-b078-521d116b7387", "sighting_of_ref": "indicator--e7422147-2964-4e4e-8ee4-a6aacb769869", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74870a5-4b93-4c00-9c84-d87a22732ac7", "sighting_of_ref": "indicator--f9eef6cc-b37b-40e7-8666-ba96edc1b318", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa89683-f117-4622-a07d-19de6a402204", "sighting_of_ref": "indicator--f9eef6cc-b37b-40e7-8666-ba96edc1b318", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857232ed-0304-49b2-bc01-f626e4bf197a", "sighting_of_ref": "indicator--f577ca5a-cefe-4dfb-a3f2-244ec27e5209", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32747a61-7304-4c55-b216-d406d7c95d83", "sighting_of_ref": "indicator--f577ca5a-cefe-4dfb-a3f2-244ec27e5209", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba21daab-6ac5-42fa-89af-c1676a9c5d76", "sighting_of_ref": "indicator--06ade980-2df8-4fb2-ad77-9584acaa522d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a29584c-0d93-4139-938f-f3c318887fd4", "sighting_of_ref": "indicator--06ade980-2df8-4fb2-ad77-9584acaa522d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab21169-2645-4542-ac23-62dc1dbdef6e", "sighting_of_ref": "indicator--26170d9c-89a2-43a7-b05d-ee0fbad68bec", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ada83f2-2069-4b88-aeec-afaef4bacc03", "sighting_of_ref": "indicator--b006546c-d4c4-4c18-bd3e-60d93eada953", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0317a42-a5c0-42a9-b560-8a17a959327c", "sighting_of_ref": "indicator--ad3c8edc-2ae7-41f6-a4d8-c6c5155c81ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f67771-e1e4-4d2d-9507-42863b87bbfb", "sighting_of_ref": "indicator--bc94ee98-2190-4891-98ff-af41edcbebba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2c4b4c-4c22-45a7-ac04-6cdd40daeaed", "sighting_of_ref": "indicator--d863e894-3023-4cb6-b0e1-3751188c0eb1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64774277-3b71-4c70-bf15-113737520ea6", "sighting_of_ref": "indicator--d863e894-3023-4cb6-b0e1-3751188c0eb1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43081a2f-3d99-46ec-b451-72edd5fa60aa", "sighting_of_ref": "indicator--d863e894-3023-4cb6-b0e1-3751188c0eb1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f36399-f6ec-45de-84db-684a3131d582", "sighting_of_ref": "indicator--03e5b6fe-438a-4afe-8637-181272ae7ac8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cfeeee-b63a-40ea-8fa7-5006d65aa865", "sighting_of_ref": "indicator--b1229759-9acd-4509-9ef0-54fba644d081", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bfcf69-0394-4317-a0b0-ba6599a160c5", "sighting_of_ref": "indicator--c53ba8ec-5c48-4d70-8abe-be87b1dcfe3f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cc0df2-fc53-40ca-92c6-3e28fad9bcf1", "sighting_of_ref": "indicator--80f7ae09-dd20-4add-98c8-47fac17b5da5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c0cc9-a57c-4194-a51d-401fc47977b3", "sighting_of_ref": "indicator--c335cb19-1c20-491e-a971-fb489156fdd0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11174826-100a-47a2-94a4-c816f9a09340", "sighting_of_ref": "indicator--bb235426-128b-43b0-9a1f-e6725f6e3e56", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ea14ef-6a10-4af9-bf42-b8dd689b06e5", "sighting_of_ref": "indicator--bb235426-128b-43b0-9a1f-e6725f6e3e56", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dab70fe-d30b-42fe-94a2-73dab343c527", "sighting_of_ref": "indicator--bb235426-128b-43b0-9a1f-e6725f6e3e56", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9186ab-1deb-418b-a229-b8ece34e3b02", "sighting_of_ref": "indicator--0888ec59-5c54-44d8-8ebb-3f24d62bbbd3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b712bf72-a706-43f4-b925-1777dd3081af", "sighting_of_ref": "indicator--052253cf-1860-4292-81c5-eb40705cbab9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b31280d-5d37-4756-b067-9c53fb36ffbc", "sighting_of_ref": "indicator--eb991ee7-d7e5-4be4-b902-a6c33c60759e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be3a07f-3b5e-406f-b779-ebe2542c0e54", "sighting_of_ref": "indicator--d9fbe630-4be5-4cbc-beb8-a7449eee6da6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5032e4ef-58eb-4e12-b378-30c86f995d21", "sighting_of_ref": "indicator--f968daca-5383-4849-b08d-a76e9e9d91e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adeecc3-2548-4719-9eff-03a7184aa977", "sighting_of_ref": "indicator--db94e98c-b770-4aa8-8050-e027993e235d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896bfe4b-4a35-43b4-9c2a-69951c0b9a27", "sighting_of_ref": "indicator--d93c0ba5-6841-4c25-b441-e864110d0290", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c67629a-3e75-41a0-aa2d-52e5bb633a27", "sighting_of_ref": "indicator--45274724-8c1d-4e46-aef0-ebd479736b89", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b86aec-41e7-4710-8567-2bb88634af72", "sighting_of_ref": "indicator--34c6fa47-8252-464b-90d1-6595ae74fe38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc44ac7-fa81-4ee8-b442-701c98b666a0", "sighting_of_ref": "indicator--70059ee1-a120-491c-91a7-ad2368d16642", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9594deb0-ee9c-411d-87f3-19b39dbc2543", "sighting_of_ref": "indicator--b361f4f4-cbd3-4140-a831-58b38fc16153", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af198a4f-1c89-498d-9c11-1ab7b19c6118", "sighting_of_ref": "indicator--1f961788-4cc4-43ac-af84-a3b2f44d923d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4430bec7-6f0c-4388-a45d-1e1df4bb2b10", "sighting_of_ref": "indicator--67ce7a92-e549-4630-a503-a121b645be5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a5e9b3-1eb0-4f2f-9295-e298758bf41a", "sighting_of_ref": "indicator--919537a7-11f3-4624-8b0b-0946cd70d2d2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1b63ca-a29e-45b4-9007-9a0b355656ae", "sighting_of_ref": "indicator--cc08494a-1891-427d-b0e8-21a9ba89ce65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82153776-6a86-4d69-901d-0d666c6979df", "sighting_of_ref": "indicator--5667c4ad-7390-42c4-8de6-f92a94d7cb3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ec23c-722d-4495-b08a-b4296d5a583e", "sighting_of_ref": "indicator--d95b5aa6-669f-48b1-9bd2-49fd3d82abf5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec89a48a-543a-4122-9fae-f4d5ad64f68a", "sighting_of_ref": "indicator--d1b21d60-7b05-47e7-aca3-a0fcdfe98abd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251d2b49-35f9-45b4-8873-b201747507f8", "sighting_of_ref": "indicator--06df9476-6a19-496e-8947-00f41625d661", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9398efd1-f96b-4106-8af8-9b159c9dc346", "sighting_of_ref": "indicator--817f6652-694a-4d9c-8c09-d7520c083022", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a1f39f-1905-4234-95e9-459474bfc630", "sighting_of_ref": "indicator--b202a7a0-9008-43b3-a03a-30a158b35d32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df75caa3-bdf5-44a9-8505-9c6df77221d7", "sighting_of_ref": "indicator--b3e806fa-231d-4060-a68f-f75448a51b04", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f19238-a30a-4033-8a5e-570a2ad97fa2", "sighting_of_ref": "indicator--e2c48b3a-1dc4-46ed-b4a9-37a88d9a570e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3063161c-31e4-46ce-8df8-6cc3ace53563", "sighting_of_ref": "indicator--9691a2a3-1499-47f3-8212-00e5c75fbd27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b917f9-dd1a-408d-8d30-676b4a3a815d", "sighting_of_ref": "indicator--33892deb-5f6d-474e-924e-ac7c24d9d839", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4421aebe-3e3c-4df3-8f6a-17e4ea251e8f", "sighting_of_ref": "indicator--0f7266a7-4543-4d40-8fce-6e220b16e671", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4be925-6fd7-4166-9fe4-3a2cbcded1a4", "sighting_of_ref": "indicator--32ccd85e-cd1d-4d77-be22-0455df145a2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634951ed-158a-4d8f-b37f-a82609eb9f12", "sighting_of_ref": "indicator--c2fd5d03-af77-4297-ad14-6697397c4315", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767c2e83-91d5-4164-9bc1-4530934adcd7", "sighting_of_ref": "indicator--87c9d8a8-c2fc-4be1-9572-a350ba9fa56a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf6c929-3268-489a-976c-17d48a32b605", "sighting_of_ref": "indicator--c25c266d-08e7-446b-9eb5-314a53a0cd7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d41948c-7576-4188-8c5f-fd633e89b8e4", "sighting_of_ref": "indicator--9e65381e-c0fb-4310-afa4-aa20e68eea2c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad971dd-8b02-43b8-a7a1-7b808cfbf914", "sighting_of_ref": "indicator--a187b02d-69be-43b2-8867-f041231782c8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9a856b-46e4-498c-b11a-bbd1e3c830a7", "sighting_of_ref": "indicator--843e3144-94e8-4ff0-9097-1f53823e0e55", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83fe7f7-e08b-452c-84b2-38307599a289", "sighting_of_ref": "indicator--b93a8e0c-9b52-4662-8621-4be3b76c9b1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a39125-df4d-4bfc-8943-ca532d24556c", "sighting_of_ref": "indicator--99ddc350-4389-4973-ae20-e820214bbec7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366132e6-006c-4c6b-93f5-3e0a12923914", "sighting_of_ref": "indicator--453755b3-4df9-4026-a11a-640933363e2c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf3b073-8486-48f3-af19-8b1f61338c40", "sighting_of_ref": "indicator--da149e2a-382e-4a45-9a52-edfea5568062", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc743e99-8d95-4b59-a2e5-468b3c7998d2", "sighting_of_ref": "indicator--01a9b2ec-6f5c-42de-ade6-d0bba72f4923", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfc42ff-3e01-478e-88fe-d37d75442918", "sighting_of_ref": "indicator--f859f700-3b60-4365-b500-76eb7c1e5298", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c35afe-9db6-4f58-add4-1425a6f43efe", "sighting_of_ref": "indicator--c8edba61-1111-4327-8cce-4a68c87be867", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3047c783-b55a-4b51-a5b8-74635bbaf3f2", "sighting_of_ref": "indicator--01a4027b-b82c-43eb-8882-7e7fd3278f93", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42607a0a-a854-4cbf-9e40-daefd0802b60", "sighting_of_ref": "indicator--ef525ef6-2d8c-4756-860a-2fec5f3e7966", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1d0161-3197-4534-ae27-61e9a4906b2d", "sighting_of_ref": "indicator--1ddc9aa6-5cee-4996-a7b3-6bd7a0b61020", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6ee0fb-3af8-4994-bea7-55340a2215f2", "sighting_of_ref": "indicator--eb3986df-f2a5-4ad1-8ac2-721a0b16706a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853f8355-2f32-404d-a93b-9da2c751f290", "sighting_of_ref": "indicator--048016da-ceba-4f39-af28-37909605481e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e53659d-9f17-4f1e-be44-e6532b67f8c4", "sighting_of_ref": "indicator--e4757ce4-a2fe-4a9a-8820-fde74a8cb4df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80539539-dbe0-4cc1-a9ba-0b65cb7aa3d6", "sighting_of_ref": "indicator--997598e1-c6c5-44b8-9f68-4abcbb4b371c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4729952f-019a-4b79-a5ab-c97f702c1616", "sighting_of_ref": "indicator--e7b9ceb1-3b36-446b-9de7-6fa2249585a2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e27d024-d0b2-4283-af02-938d5ca2a448", "sighting_of_ref": "indicator--76bcd50b-3fe7-45fa-ae90-7155117bd10b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cba8321-db75-49ac-97b8-120e8b2a33b1", "sighting_of_ref": "indicator--1eed6074-eb27-4032-8656-1ca61f726f01", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3a99bc-6fdf-4d1d-8bc9-2e1d4ab6b03a", "sighting_of_ref": "indicator--f2a55272-7b02-42a5-945b-da377e616e6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62253925-b199-41cd-8506-6b0676dc01db", "sighting_of_ref": "indicator--6f3f13f9-2aa5-4498-8e97-18cad9d60c55", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6684c24-cedf-467e-98a1-c47bc89957c0", "sighting_of_ref": "indicator--54ae6289-9246-4f75-8ab4-286fd373e452", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d7536d-57e6-496b-8016-c5b25684b7c3", "sighting_of_ref": "indicator--1532bb33-4f48-4a1e-b7ba-0fbf6649991b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34bc1f9-a0f5-4029-b9cd-a27c6734e930", "sighting_of_ref": "indicator--82fe35d8-880d-4cd8-8605-f34e3164c804", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc08e68a-5047-4edf-833f-5d25ec8161ea", "sighting_of_ref": "indicator--7b04fdaf-a571-445d-baf9-2a97a3162479", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366b6e7b-406b-4e45-b113-d6ec490b098e", "sighting_of_ref": "indicator--86be0efa-d9f1-4d80-a81d-d0ede937ae11", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f272e3-5113-4b81-b365-56567215dc85", "sighting_of_ref": "indicator--2b6c1463-8c98-4730-8730-9e84171e98ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6beee9a6-0a5e-4b48-8b66-7a10cb29671b", "sighting_of_ref": "indicator--8483edd9-e3c9-4890-829a-9922dd1fedd1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972a17a1-d225-47d6-b5d3-061bf5019966", "sighting_of_ref": "indicator--2cc2dce3-fd6a-4765-b253-7b11d29c9a46", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e154f02d-c248-4658-8e4b-b2965f0bf8a7", "sighting_of_ref": "indicator--5fa68f8b-f874-4dbe-b285-d52322c1ce72", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c910ab23-bcad-40b5-bc2e-09ed775d6c6a", "sighting_of_ref": "indicator--7869dff8-6d32-4df7-a8ec-81d932f71b4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edf8139-cb01-4a1f-b9a5-09db47fd999b", "sighting_of_ref": "indicator--6c53e457-b48c-4d62-a7ae-d81e464f5f67", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9c10b8-33c3-480e-b8a7-2dc48aa630f2", "sighting_of_ref": "indicator--5271a0b7-a3b2-4fd9-8a11-40bf0fd8e3dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab1b5bf-723b-42eb-9f77-9b12787ad872", "sighting_of_ref": "indicator--3377bb84-834f-4515-9895-9ec6ee80f4bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d482809-3eb8-4011-aade-e6624836d2c2", "sighting_of_ref": "indicator--009445e9-e64e-49ba-a221-aba8d5dace38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5753c4fa-98bc-4a81-be3e-3f2bec92ed8c", "sighting_of_ref": "indicator--bbc4d9d0-10f8-4503-a340-b0a6cfe2866b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3f2295-47e2-4b00-b7a3-fa18c03b267e", "sighting_of_ref": "indicator--f5acc012-f24c-4811-9396-c3b5d530ea92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a20d46-3443-4526-b4db-a130f9564bfa", "sighting_of_ref": "indicator--2a8bfcc1-5fde-4344-a4fc-cc23d5e3a178", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dc20a7-35db-45bd-97f5-5d89146c54fc", "sighting_of_ref": "indicator--4185a516-8cc8-41f2-b300-8a46d66fcd97", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90388908-7264-4f4d-aa2c-f1f129f62de9", "sighting_of_ref": "indicator--4fbdf001-0a79-4225-b772-fb26a25ca788", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4769836c-bc77-448a-9aed-2e23866b3122", "sighting_of_ref": "indicator--96eb5899-2118-4aa7-bdd1-a7ba74ca5d88", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf26cdc-2d51-4a00-922f-ae05b657f42f", "sighting_of_ref": "indicator--029abbec-daeb-47a0-b0c1-9f63e5a5cc67", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e03b7d-05d9-484c-a2f3-e9bab91fcbdd", "sighting_of_ref": "indicator--881188d1-6fe2-4fa2-8190-a9786d8dc1ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a2a915-fbc8-490f-9665-5f217998a0d6", "sighting_of_ref": "indicator--d2d757fe-f813-4702-9268-59e922e4f474", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8107d766-dc3e-4d76-ade4-334b2ea3a4dc", "sighting_of_ref": "indicator--98cc443b-244d-4b8d-a138-0991b0974bcf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8646ef0-097b-4204-a158-df24c22b86b1", "sighting_of_ref": "indicator--13a72018-161c-4e94-b94b-b1df2f206f7c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85f0350-f5a2-479f-a248-9e27f122b0f8", "sighting_of_ref": "indicator--3d432bcf-3c76-411e-8369-c2026a21f186", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411d1330-ec91-43ba-9c41-a15070a5f6cd", "sighting_of_ref": "indicator--e238753c-4296-4206-84e4-b3a3431284dd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be35c6b-583e-4485-8800-81b23a5caec6", "sighting_of_ref": "indicator--34026334-0119-461f-9009-e2d0a051fd5a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d599286-f459-4a8e-80a6-77161b5f80a5", "sighting_of_ref": "indicator--ce826ed7-1f1e-492b-bedb-351e44c7b314", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac77d72-5578-4ee9-a5bc-779b49cf88d1", "sighting_of_ref": "indicator--b66031cd-b110-4c2d-8181-e766294aa055", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567f2f23-509d-4107-9ae7-da522356083c", "sighting_of_ref": "indicator--534fbec3-55c6-4227-88c6-090fc8f1bcf9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d31ff9-3e87-480c-8e9a-4b56d6345a7e", "sighting_of_ref": "indicator--904a9cbc-7808-43c1-b827-9344a3ed33f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c00ebca-adcf-43da-a5db-e6d2881839e7", "sighting_of_ref": "indicator--79211997-bc45-489e-8e65-cecc2fee4901", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69578036-d217-4a63-baeb-39fc9bc83e25", "sighting_of_ref": "indicator--d1d3854b-3691-41d7-83a0-5930290f5b09", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6ae809-2c83-472b-8fac-e5bc4e0cd4e6", "sighting_of_ref": "indicator--63f607f3-4502-447a-a02b-fde78976c330", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9034128-159c-494c-b20b-01ce7bc8c463", "sighting_of_ref": "indicator--78365211-85a0-4aac-a0cb-88aa72f45479", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65589e84-c4a8-4a1a-af95-282fab670e93", "sighting_of_ref": "indicator--7bfbb61e-8ee2-4648-afd3-864648918596", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456bdd88-eb19-462f-8d6f-9ea6e82c3405", "sighting_of_ref": "indicator--90fbfa23-0c50-45cd-b80e-4c29cee5eb5f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86848bef-643e-4712-8976-a06d8746aa36", "sighting_of_ref": "indicator--57cfb185-0bea-4f7b-9344-d45f473672d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0497fa2b-0caa-4e10-97fe-f1e163385c62", "sighting_of_ref": "indicator--5fd3dc90-4959-4e1d-9c87-d3fed505b036", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abab2d2-9a38-4547-a9d9-8d45e63751a0", "sighting_of_ref": "indicator--ef8496ab-fc0e-4414-86f8-b644d1683848", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad04def-efb6-4ef3-b4c2-5b3ecaa20a38", "sighting_of_ref": "indicator--ab7010f1-3921-474b-ba62-8d459d5928fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7646130-ff27-43e4-a652-740ee9f4d65a", "sighting_of_ref": "indicator--f59253f1-8450-4a6f-96e5-c9f3127558ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0dd387-993b-4a13-be25-96b6decadbfd", "sighting_of_ref": "indicator--214e4054-1d55-4035-ab62-4a69b5ef0e58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a756fb-8dda-414d-89d0-bec28895854b", "sighting_of_ref": "indicator--47749d94-5849-4f37-830d-7b59fb616207", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f99f17-f7f2-4298-b078-16f4466c6d74", "sighting_of_ref": "indicator--f2da7e2e-f0b2-44d5-8abe-3019b5f7a4a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99260db4-f294-424c-bad6-a8184243c309", "sighting_of_ref": "indicator--185ed551-a52e-42d9-916e-a5a3b4906490", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d8863a-9ce3-4b1e-b018-496f131ca1f1", "sighting_of_ref": "indicator--21a6c8de-5a96-4018-9aa5-cab6146b7ff2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8240c7f5-48e6-4bbf-aec7-c03bad7aee12", "sighting_of_ref": "indicator--c7c4c135-31e0-4d44-9479-3089bce5b7e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b856612-03ed-4cd6-832b-0f50814c0409", "sighting_of_ref": "indicator--51e3bd32-da71-418a-b8e8-1c5be6c9f1f0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272be5c5-d4d1-43da-89c1-d937afe11308", "sighting_of_ref": "indicator--247ab4e9-7980-4b8a-a25e-7d2d97b9ae87", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a3cb3b-4a69-4954-857d-44070912ff52", "sighting_of_ref": "indicator--8fdd1b8f-2b45-4061-b078-a7c5ec0bd900", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c262925-253f-4ecd-88aa-d74894f28e97", "sighting_of_ref": "indicator--b6743cc9-96ea-4a02-8646-a39b3ff6fb0d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce32b33-c7b7-490a-963c-2d0608d6bd04", "sighting_of_ref": "indicator--eed6146d-cb15-4a43-a962-785faca55e05", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bd0375-5530-4f2d-88f5-dc5d80bba433", "sighting_of_ref": "indicator--abce5a4d-e663-4b97-a4bb-08deab62bb94", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ae3c0a-1edd-44a7-a247-bb6e591eb767", "sighting_of_ref": "indicator--3eadf0a0-0b27-4912-bff0-66651e9e6550", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20c94d0-45ab-423c-a53b-9479ac1cd978", "sighting_of_ref": "indicator--3150c43f-3953-4ed9-81e8-9130cd681461", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba10a3b0-1753-4243-980c-5c6b6b0f38b8", "sighting_of_ref": "indicator--f94a19fe-bc22-4681-a77b-ff72c1237004", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d3eb79-34c1-46ca-a4a3-ac42a9c95d31", "sighting_of_ref": "indicator--4ce36354-0644-47cc-88d4-fb79ab49bd42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f608878-ac1a-45b7-bc89-d8b35e178654", "sighting_of_ref": "indicator--be2c0f5e-78e2-46f9-8b8f-5b163000ef4f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fe9cef-9f2a-4e05-b0c1-b3bcd18b84a5", "sighting_of_ref": "indicator--f91edd59-ea93-4009-bb9e-f9a080aa0e6f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7990cf-6c2c-46c2-b04b-4a7604c723e1", "sighting_of_ref": "indicator--db113301-b9e6-4364-8177-a3f27fb0ea15", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a95ff7-3a43-474e-aacc-4c8f29194d31", "sighting_of_ref": "indicator--d0359155-eed9-4aaf-ba84-1edb37ab0ff3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5348da77-ec6b-4886-9359-01a60cab2614", "sighting_of_ref": "indicator--5ccf669f-670b-4dc3-acbf-02326cef5d42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a060b1-5a2a-494d-884f-2537f22d2a8b", "sighting_of_ref": "indicator--f6a8a7b6-6ab8-4316-a6cd-7ce249e4a85b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b4e3af-235b-4b07-b69c-ea6a03fed304", "sighting_of_ref": "indicator--2a649de8-3db6-4224-948f-6c457830222b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91d39da-0147-49e7-a321-ef1fd95a619b", "sighting_of_ref": "indicator--f50ee09d-9062-435d-a41c-063f049d8653", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b469e0a2-9e51-4387-81c8-106e39836e26", "sighting_of_ref": "indicator--eb4acdaa-7ee9-4298-9afc-11b0df54938f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f262a11b-a149-4fc8-a6db-4f66dc12f1c8", "sighting_of_ref": "indicator--63c7653d-d8fa-48ab-931a-f2c32b053e8f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81e32bc-b857-4440-bcc8-a811078dbcf9", "sighting_of_ref": "indicator--a4a5315c-3287-4047-b81b-857013d1eb3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40099ea6-57eb-4484-a8ca-460bd6dde585", "sighting_of_ref": "indicator--216da3df-0ba0-4adc-b0c7-18f49e63746c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34412961-ce10-4e0a-9e98-91471798af08", "sighting_of_ref": "indicator--bcc791f6-d0f2-45a3-b078-287b3e05a17c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789f3f5b-3115-44ea-b950-115af5e8b734", "sighting_of_ref": "indicator--25b4eeb6-0051-4158-b7b1-6e80c557a0ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989176ed-ab3b-4d10-9bfe-9b67ee6fa19f", "sighting_of_ref": "indicator--5bb690aa-033f-4f63-979f-860b79c42741", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6793c38-3711-48e0-a918-099f21b60d96", "sighting_of_ref": "indicator--9ac31e1a-c0e1-4996-9da7-12b721d90d27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e592a43-7120-4094-a2cb-a43105b94483", "sighting_of_ref": "indicator--d79f3d1b-6d57-4be2-b7f1-8c95fbb2fd57", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af56355e-b1f7-4562-ba11-127291f427b7", "sighting_of_ref": "indicator--2499cbac-7c83-4259-92c6-96eacbffeaf6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9828251a-d035-47ac-a37d-159ed50d5097", "sighting_of_ref": "indicator--16fc9459-bfa8-449f-9606-ed157907b05e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d3b76d-38b5-412c-9f3f-cd719ce080e0", "sighting_of_ref": "indicator--2fbf220f-9b49-4ff6-9df1-5f81c74598bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcf7171-ca67-4492-b6ca-9c3c3093e1cd", "sighting_of_ref": "indicator--5418467d-0b30-4b1e-a008-5873da2d9066", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a1a56d-4c94-48cc-aa8c-763aee9eccf8", "sighting_of_ref": "indicator--2b716a3d-b68e-4e4d-8024-c4a81cfd5533", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5c1e2a-4739-477a-b2ba-e94353eab384", "sighting_of_ref": "indicator--3327c05f-d970-49d5-94a5-cd65b62f3004", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b2c012-799b-4cb3-9665-c43d369a2294", "sighting_of_ref": "indicator--205e183a-bd7a-419e-ae94-bcd56605b24e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc76e38-23cd-4951-81e9-b21266bedcd1", "sighting_of_ref": "indicator--57ba4b50-57dd-4a41-a722-5ff131c47bc4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbc2bac-b42d-4dfa-870f-c50fc035301b", "sighting_of_ref": "indicator--8f6fcc1f-8657-4ea1-9bb7-9ce1df548912", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9620c883-2db2-48d8-a2d7-35ccdcb7e242", "sighting_of_ref": "indicator--5e20847c-6ecc-489a-8e76-8d05b184ae32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3e351d-7049-49be-9470-f1b8df0ce06d", "sighting_of_ref": "indicator--91e4ae6e-3a78-4dda-8883-ee25b6b6d234", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca204e41-710c-4930-a7ac-59d65053869b", "sighting_of_ref": "indicator--218e8569-0c9f-4a68-b1fd-3e9bdcdc1c1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa0721-2d3d-4ac7-9a53-f20adc528129", "sighting_of_ref": "indicator--ddf41847-ada8-4a2a-9b74-38c61c9c9d14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d409376-392d-4142-b025-58fda5e8d898", "sighting_of_ref": "indicator--8b3fdd40-3c2a-42aa-bd97-f3f171118d27", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32531753-6b26-4110-a192-ad73ecaebdb8", "sighting_of_ref": "indicator--6ed5f5f2-37fa-4e4e-983f-aa29d1c2738f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e60e79e-a0da-4e08-8c32-4802c7b47460", "sighting_of_ref": "indicator--9858b187-1266-4e39-9b7c-d6d0680c0ed5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f438cfd-b5d5-4a16-b6b9-ecbc68eda394", "sighting_of_ref": "indicator--51a4de4e-e201-4f20-a067-74f4c4362d54", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f30faa-ebe1-4efc-af1f-2e9fad79ea7b", "sighting_of_ref": "indicator--92901bf8-0032-480b-b2f9-a7ae88e9f9e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d523a3f-4f74-4423-8a6d-c5e9ff67cd91", "sighting_of_ref": "indicator--f3de72fa-9cdd-453e-a6f7-4faacef40096", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e3c865-71d9-4e0e-99e2-b1c01584fb44", "sighting_of_ref": "indicator--10baabb2-e59d-4aba-821a-dbca21eb736e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db067d9-70de-41a2-af88-80c016c5de80", "sighting_of_ref": "indicator--8918565e-f040-4ec4-a084-9073814afa06", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba39961-d870-432e-a536-a7146f5c71a4", "sighting_of_ref": "indicator--b62bfb0a-a80e-4341-8c08-81d2988a871e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b814d7-7e0f-483c-ab5b-98359f61666a", "sighting_of_ref": "indicator--c7fca3b9-55b0-484c-9db0-8191efdf5e8e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63af4ef0-fe85-446f-bfb3-ddbd22b9a74d", "sighting_of_ref": "indicator--c29f9527-895b-4774-a556-abc0e44aedf3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9d43b5-fa8e-4f40-abbc-19e42b2751ad", "sighting_of_ref": "indicator--6d3f73cd-63cd-443e-ab75-3d3bdd41c772", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98af3fc-9665-4c28-a780-7e304f360f7f", "sighting_of_ref": "indicator--e0c20e36-5f01-42ee-80e5-0e681c200aaf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5029ac46-1131-44da-a253-4bb78d112e86", "sighting_of_ref": "indicator--0d045792-0a88-45e2-b0cd-4b286e4a0364", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1822b04-5b96-4617-b1e5-becc6d4fe261", "sighting_of_ref": "indicator--5652e1d4-e176-4554-9e2a-bbf8a87459f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776a48d0-c33e-4396-b075-17072d925652", "sighting_of_ref": "indicator--d8697efe-4404-4272-abd6-33550609e7b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd52611-4761-432a-8779-d8a872a3381e", "sighting_of_ref": "indicator--41e0208f-0230-41f9-8758-afbd786f3238", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86648dda-39c6-4bbd-a079-df0b7332edb3", "sighting_of_ref": "indicator--2f810c29-6101-4f28-9091-d826220e8691", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e3f76d-eb07-4466-a175-492aa9f514a7", "sighting_of_ref": "indicator--09389046-048d-45b8-a25e-94e8ce6654bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bb6f3a-89ed-4750-acca-c3b8af914270", "sighting_of_ref": "indicator--a6c10ed7-243a-4d69-9244-c290e9368cea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f266e8f5-efc4-4b6c-9e89-75e346455843", "sighting_of_ref": "indicator--58795b5d-2477-47b1-ad93-e7262282ce35", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e447d3f9-f5ef-4a41-bf09-df1dc2449e59", "sighting_of_ref": "indicator--90e051f3-c855-4a2e-a797-47c3465ce9b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87358489-02ea-4851-8f5d-ce454e535d3c", "sighting_of_ref": "indicator--e672635b-35dd-4c55-81c9-053003f2ae1f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dcf014-ed44-4842-8b9f-e9c027d6721f", "sighting_of_ref": "indicator--f2b8e222-1c3e-45c3-9603-97a92d44cbf5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333a67d4-641f-45a6-ab38-38472def9343", "sighting_of_ref": "indicator--b1c2a23a-3644-4853-82c5-f707822b3862", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c99d7b-d0b7-4765-b02b-0b6ef7e0c227", "sighting_of_ref": "indicator--cb7e5eaa-735a-4420-bd76-fb394ba13296", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8186d5e-0358-4b0f-83a2-27f4eebfcb5e", "sighting_of_ref": "indicator--f7fed6f7-c23c-4df1-b4d3-b007fe0d8d3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d2d4f7-8cce-4142-bafd-b665d38019fe", "sighting_of_ref": "indicator--08511199-3f05-4954-bb93-56c605c175fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefdc77e-98f7-4c78-accc-14e36b28fb9c", "sighting_of_ref": "indicator--de74543a-0fce-42c7-beff-b0aeb5ecf49a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00095cf-e636-4383-9cfe-4bfac579cc97", "sighting_of_ref": "indicator--14aa4d68-88e8-4002-afb2-b9f68c5bcf52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcade4a-61a2-40f4-a192-b01fd3c902e1", "sighting_of_ref": "indicator--09c0072a-4255-4110-8c2c-ffac7473f1cf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566c98d1-5ac7-4575-ae16-459e71f5ef27", "sighting_of_ref": "indicator--20b4a414-3cfb-4845-9146-11b5c7b46867", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60496e1b-835c-40ae-a9ef-efc79ec7d395", "sighting_of_ref": "indicator--d61ba6fc-d81b-4396-bfb5-385adc626778", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff0c8bb-3693-44b5-bb9d-9bed1099c73d", "sighting_of_ref": "indicator--9ebaa318-8a65-4c62-9b9a-a7180849b026", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a777aeb-be91-419e-8cd4-26414e78b6a8", "sighting_of_ref": "indicator--bd37cbfe-2806-4dec-b826-14709fb20046", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85fbe8c-b71c-4849-a845-5d51c59893ce", "sighting_of_ref": "indicator--8be2c286-91d6-4542-b83c-4383a73367c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaf530d-e641-4faf-aa49-1a07f6efe132", "sighting_of_ref": "indicator--9a3daa2a-a0b2-4c62-b815-ed47decd1c1d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf133c7-ed12-48e6-987e-655c71e5e584", "sighting_of_ref": "indicator--b378809b-5b9b-4ee2-90fe-2adfd4ce3984", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25081247-42e6-476d-ab7e-f4e2960e1a64", "sighting_of_ref": "indicator--cd1db398-2742-4ed3-becb-3a62d8328e25", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054092c2-f158-4255-b989-051592284090", "sighting_of_ref": "indicator--88e1c66b-4331-4c98-a9bb-7537f945feff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff6c3c2-71fc-4104-a2c7-902763715645", "sighting_of_ref": "indicator--5f8eb676-1b56-4c6e-a35c-3e614364866b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1909da19-009b-4508-8b75-968027d8e603", "sighting_of_ref": "indicator--eb04121c-54f0-491d-9e78-5f102e2b2e95", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e322ed-4def-48bf-8ff0-b0eec051df68", "sighting_of_ref": "indicator--6fa37cc2-0f7a-4a95-9f62-99ed1a3f9f6f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9813ffcc-756c-44d1-a7ad-d519cf260ee7", "sighting_of_ref": "indicator--f9686622-a9a0-4357-8317-f65a8c02e9aa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d006be-629f-4085-96df-13f73fdf2721", "sighting_of_ref": "indicator--7a7ffe8a-7eb5-4f74-9310-e62a3e6d43ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c6eb64-d0f7-40bc-af0f-de9f291125a3", "sighting_of_ref": "indicator--8290b189-3181-4601-9b32-cf8b0279ef4a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad634756-8d28-4a46-94d0-a4033ecd81e3", "sighting_of_ref": "indicator--c03a9036-99ec-4ae9-baf5-7cf5adb55c3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c31d55-e3ac-429f-acdb-22cbb4fb21d0", "sighting_of_ref": "indicator--00757e4b-088e-440e-bb77-ceefdc127e9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad77097f-1655-455d-a54a-cdaef82f4421", "sighting_of_ref": "indicator--1ad98f66-1746-4f71-b670-e50d63b42f92", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764be8c4-1d17-4765-affc-fbb4142f5646", "sighting_of_ref": "indicator--96b5014f-4bf8-4ce7-81cf-2b91bb06a603", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de876389-f84d-4aaa-9817-a42e3e7b2dc9", "sighting_of_ref": "indicator--c7d4daf6-88b7-48e5-9f58-83c154a863b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7d0c69-3a2d-4170-9fbc-8ad37dfb5d02", "sighting_of_ref": "indicator--8841ba2d-1dbe-4deb-8e99-e05ca4b80be4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1876da-cfdf-4f2f-a944-3bd3182634e1", "sighting_of_ref": "indicator--3f98cfd6-7f94-40b4-b5fc-594c848144f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c353bbdc-6dd5-4166-8131-ed5dadbc71cc", "sighting_of_ref": "indicator--ef57ffc4-8b7c-46e5-a732-4535088e1ba8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc68d0f-d8aa-461a-9799-8106339b6676", "sighting_of_ref": "indicator--bfda24bb-ef50-4801-962b-d523898d219a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b9670a-7f69-404e-b160-f500bc35906a", "sighting_of_ref": "indicator--bf711fec-9536-4710-9a71-1ba000b4fdb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e57d91-24ec-4a7d-85eb-9fda64059a38", "sighting_of_ref": "indicator--b93ca9a0-b07c-4c65-baae-935632bb74fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99264941-dbfb-4f02-af12-0543ec184eaf", "sighting_of_ref": "indicator--40366a08-d0e7-41f9-9097-e90b51c9f2c7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e55ca79-ac0f-4b06-af1e-5c0f4175ae7b", "sighting_of_ref": "indicator--58962eb7-3310-4262-b672-dce3f247b364", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb33d8e6-6827-40e5-a79e-f7bf98746d56", "sighting_of_ref": "indicator--81b80b4c-bfcd-4c1d-afa2-fd1002305adb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa95e4b-0758-4660-bf38-c4593beadec4", "sighting_of_ref": "indicator--48b5747c-dd9d-443f-9e54-8f28185560a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feba1924-5ab6-4151-89fc-7ca5870e5057", "sighting_of_ref": "indicator--22171dc2-4853-4ce1-bdbf-963532a106b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cf15f4-facc-4499-aae8-7269b2c80bc6", "sighting_of_ref": "indicator--ab21d30d-a4fd-44a8-aed3-67fc2d3a90cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d29def-3764-40f9-bdc9-03466be21f13", "sighting_of_ref": "indicator--f1336731-6a35-4e49-8cd7-666474430e7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4356e4e-b296-48cd-9920-7a407123240a", "sighting_of_ref": "indicator--f76367e9-4295-444a-9175-eb8e8c6d4d18", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00092c7e-3fc4-48c5-9f5e-984b5c27139d", "sighting_of_ref": "indicator--95f28b29-4dd6-4981-9dd6-6e738f349504", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e190f8-e194-4069-8559-70b0ace3999d", "sighting_of_ref": "indicator--f05f5a52-36c0-42dd-9ab1-7c467e8de526", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c024073-9902-4e09-8ff3-37e4f0b2e00f", "sighting_of_ref": "indicator--eae09654-6698-4390-b43c-57252c25633e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09155f2c-3764-4b58-ac8b-50b76c8dcff2", "sighting_of_ref": "indicator--b30bd0ae-0a70-4935-bf69-437f5d4df27f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca65b39-dcbb-459c-9f81-81007695dd9c", "sighting_of_ref": "indicator--27436b80-f6ba-47fd-a62f-63215c63cd6e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a2736d-71fd-49ed-9f84-9fddcacce530", "sighting_of_ref": "indicator--a4e2eb1b-d235-45c2-aad8-e1533f556526", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3775bb82-e770-46ca-a186-67cb7aaf388b", "sighting_of_ref": "indicator--79742495-ec98-4bdf-bc1e-dc9ef572622c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1b3823-7149-4d7b-8f2e-e9a34998d98a", "sighting_of_ref": "indicator--ec37544c-f3a8-409f-af2d-5ed6e60bfdb6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a8ccfb-2c2c-4a70-8876-8ec9df923611", "sighting_of_ref": "indicator--2f4e0828-1224-45af-81f5-87ac9f7e1c4c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14305095-bb4e-4197-a885-4938f644e9e6", "sighting_of_ref": "indicator--58952573-3f43-4770-9b47-73cdfa1a75cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab1f0c4-42d1-4bfe-a2df-9093407e2846", "sighting_of_ref": "indicator--d0003370-be75-4420-a603-e83d749e75a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0821fa5c-8140-4b08-937e-bb7d5ab29499", "sighting_of_ref": "indicator--4feeb980-33bc-4f43-869b-69fe5fd04ee9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee3265e-f15e-4cff-a125-884879eaca49", "sighting_of_ref": "indicator--974f8935-a457-4758-b17c-ad71f07842d9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4b2e37-f60e-4b86-b929-9ed3e470dfdf", "sighting_of_ref": "indicator--07a7aeec-7500-466d-bf8e-8d0079973922", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae729848-fa53-4370-b108-4e33c9a20018", "sighting_of_ref": "indicator--45d1ffb3-beb7-4d0b-a137-12ca281ce0e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d888213-7ca0-460e-8b33-b275a27cc4cf", "sighting_of_ref": "indicator--b160e011-c004-4811-94b5-fba53ace5e18", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192c91eb-5e86-49a6-982b-12e5d2879521", "sighting_of_ref": "indicator--42370360-429b-440f-bcf9-e5387dcc76b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d4f54a-5837-4396-b9aa-b3122ae884a8", "sighting_of_ref": "indicator--21fa79ec-63bd-4950-81d7-b2ad7117294c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0907249a-3fb6-4d95-a8ea-f58b5ee31fbd", "sighting_of_ref": "indicator--ab820854-ff6d-4757-80e5-da38387345e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dc0ec0-4103-4780-a725-012b3b8b0d76", "sighting_of_ref": "indicator--f3d772d2-c1c0-40fc-841e-822375916458", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2179b3-2ba2-4c13-92b7-6d3dcbb3cd4a", "sighting_of_ref": "indicator--bced9122-0146-43c3-ac53-20d3d8fff470", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbff1f14-22e5-4972-9858-0952b328f3b8", "sighting_of_ref": "indicator--9d3a0d58-d558-411e-b03e-418cfa212908", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502a45ca-377a-4789-98b5-a8b5186556c1", "sighting_of_ref": "indicator--9db95090-d6f3-4e2e-8b2c-40ba2b6b57a9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47199b8b-1e7f-4ac4-a613-83a3bc0ae882", "sighting_of_ref": "indicator--813724cf-63b5-4ceb-88bd-8c873d9fd5ab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9e26a5-b822-4235-9b2c-82676865ce09", "sighting_of_ref": "indicator--8f2e43df-e3a5-43f4-b4a0-203c11d6e346", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9474205-540e-4f5e-9f4d-bbfa6ac0f5ba", "sighting_of_ref": "indicator--69a4f9dd-3917-4565-84fa-f01d921b4812", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c401e92-efa0-46bb-8831-92a8386f2bc9", "sighting_of_ref": "indicator--3f9592e0-d902-4994-82b9-0f750fbc8d59", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e647cefa-d62b-453a-b06e-a56703d6aaae", "sighting_of_ref": "indicator--6e90f0a2-fe01-4e88-bb42-8c565b25a666", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb44cfb2-4e75-4de9-a78d-f7a54c9d2959", "sighting_of_ref": "indicator--bc51ae8b-62f7-4956-afbf-0c1b667b7eff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31bfc0e-3d19-4447-bb4b-1acb06932f5e", "sighting_of_ref": "indicator--d1926eb2-24b6-4da0-b613-e44d9d1616f4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d988b00-4f71-46e4-b082-040fb9c006a1", "sighting_of_ref": "indicator--af772dd1-7ad8-408a-b502-0491de18f805", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df517912-9ea6-4f14-ac8b-01bdba698626", "sighting_of_ref": "indicator--6d281731-46d2-4cb4-a950-0832494ee73f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd478a82-e2c2-4518-ae85-ecb74edb6125", "sighting_of_ref": "indicator--ca9ba88d-0886-4e33-b7ab-58d74f47ce9e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77b253a-8880-4bd8-8170-31ed52f8ccbe", "sighting_of_ref": "indicator--8fd44eac-b9b1-47e8-8adb-b15f14b64e81", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d480c821-e4b3-479b-9077-efb2cebc3e40", "sighting_of_ref": "indicator--96f46dbd-7b83-4ba8-9671-d3dfc082b692", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0cad8a-d2a4-43d9-97f0-366b1e88c94d", "sighting_of_ref": "indicator--f57b5373-c594-4b29-823b-2b81ab838c32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb684635-5d55-4550-bfaa-753c84ad6556", "sighting_of_ref": "indicator--998d1edd-4d37-4b0b-8f66-6b3f152990a0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f1bf39-d7f5-42ec-b2ff-7d77883c2715", "sighting_of_ref": "indicator--487cc18e-04ed-45a2-a168-ea2ada605a15", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4177ec-f73b-4858-b5b2-3c9a4a9f560a", "sighting_of_ref": "indicator--9c1bc253-4dfb-4023-a81d-bc44b1147260", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a24fb0-40d2-4be1-b665-b2abf4adeac7", "sighting_of_ref": "indicator--90fb8a7a-ea04-4309-a284-fa4ab6def472", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3381aea4-e0be-40ae-b853-f4cd44948fce", "sighting_of_ref": "indicator--a8905737-ecb1-4bcc-95c6-33ea3e1dc97d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1fb375-be30-420b-9b7a-e964887f2229", "sighting_of_ref": "indicator--81bae1b4-5376-4bb5-a30f-56438a218e85", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296a6daf-80a3-4dc1-a694-5a4121702472", "sighting_of_ref": "indicator--1b1a0f9f-dbc5-4a1f-be19-75465d7a6d0b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84fb789-aa11-4163-b12c-4e675bc61097", "sighting_of_ref": "indicator--6ef6018e-100d-4ee4-b481-f10b16731476", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d66b3af-c1a2-48d2-8ea2-b0133dd99122", "sighting_of_ref": "indicator--3b129530-4f49-449f-a421-b806ffdad14b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cb0781-ad92-4342-8b0a-87c7360a099f", "sighting_of_ref": "indicator--62842ef6-155b-4327-b07c-6f5866b1302e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a8cd64-2acf-4fe3-ba5a-98d8c4890c20", "sighting_of_ref": "indicator--99ad6006-59da-47b9-80fa-7040ee964bed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b681a4-3afa-4736-978f-02353dc49c86", "sighting_of_ref": "indicator--72c7654a-3d11-4cad-8f9c-792d9cbf081f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c99d385-d6c1-48e7-b63d-593ff28ae946", "sighting_of_ref": "indicator--72c7654a-3d11-4cad-8f9c-792d9cbf081f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1be451-582c-4e8f-bde6-9236aa44c802", "sighting_of_ref": "indicator--72c7654a-3d11-4cad-8f9c-792d9cbf081f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8218c725-2001-4fb5-a31e-3cfffb07dfc6", "sighting_of_ref": "indicator--c65f3bcf-4b8e-422d-9171-dc8b4c8fa210", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2532980d-9b5c-46cd-a6d2-e9288ed4a579", "sighting_of_ref": "indicator--a8119f0e-e383-4576-a645-359e94d38778", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2cba93-8dfe-4501-9cae-31f122610696", "sighting_of_ref": "indicator--a8119f0e-e383-4576-a645-359e94d38778", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325f0efc-2027-4abf-8c58-6a8c9acda3b6", "sighting_of_ref": "indicator--4800dcf5-5ddd-43fc-8558-bf4b41d679a3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4561d8bb-8bbf-497e-9e61-6f3443bf29ef", "sighting_of_ref": "indicator--4800dcf5-5ddd-43fc-8558-bf4b41d679a3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524cb89c-f7dc-4b59-8511-da8f538744e3", "sighting_of_ref": "indicator--c44263d5-9091-4e26-92b0-2ab1de155128", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a07aec-644b-4465-aa72-879869f9d0ac", "sighting_of_ref": "indicator--d1b28e18-9307-4f8c-8921-ff57aa91db44", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3c32b1-db63-412a-8010-ca91cac1ee90", "sighting_of_ref": "indicator--d1b28e18-9307-4f8c-8921-ff57aa91db44", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db09488-6263-4438-8b57-419a35a0fa90", "sighting_of_ref": "indicator--32d20160-be0b-4b7e-a122-4350c938af38", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecd3633-89c9-4fea-8d11-7b0c199865c0", "sighting_of_ref": "indicator--1814d64e-dd3e-441a-90c7-5bcdee0a0fb2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020a8bc9-2c92-445b-8038-a716f28ed0bd", "sighting_of_ref": "indicator--1814d64e-dd3e-441a-90c7-5bcdee0a0fb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6551a7a-57f3-4885-94d2-9c79b5edfa5f", "sighting_of_ref": "indicator--a62ec720-c44f-450d-9b5d-230694e92cbe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2296ba78-749a-4241-973f-0ea8d6b2e2fb", "sighting_of_ref": "indicator--a62ec720-c44f-450d-9b5d-230694e92cbe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b73502-a6b4-4b65-ba8e-bbd433237f63", "sighting_of_ref": "indicator--5c8c9ebe-89bb-4f85-b98e-c28d59abad46", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6fac41-a009-40aa-88ec-15f0988c10e7", "sighting_of_ref": "indicator--5c8c9ebe-89bb-4f85-b98e-c28d59abad46", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00c0e11-65fa-4d6a-a518-53df237da3a7", "sighting_of_ref": "indicator--e5551823-d9f6-4f45-88a5-e134fca37647", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba964909-8c93-4ed5-b2ca-f222f533b456", "sighting_of_ref": "indicator--e5551823-d9f6-4f45-88a5-e134fca37647", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2935daeb-a79c-486c-b485-3da9160a22b6", "sighting_of_ref": "indicator--033bdc80-5e43-4a56-a3b4-7ba01bccb93c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873eed70-1ae1-49cd-b7d1-92b22a1337e0", "sighting_of_ref": "indicator--033bdc80-5e43-4a56-a3b4-7ba01bccb93c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc903dc5-d222-4d06-8550-a461e63657e4", "sighting_of_ref": "indicator--a38c2e4a-7194-4f44-82d5-9d2abbc2dc3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511b94db-7ab6-4355-a3ad-b35d2de3a27b", "sighting_of_ref": "indicator--a38c2e4a-7194-4f44-82d5-9d2abbc2dc3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2109c0-6bc1-4687-b1b0-9867900d6c8b", "sighting_of_ref": "indicator--2b75e7a5-65f0-49f0-a8ee-ea13bb268888", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62837a54-7cdc-4761-aaf4-0ab9245d36ba", "sighting_of_ref": "indicator--2b75e7a5-65f0-49f0-a8ee-ea13bb268888", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71d87a4-e094-48c6-82b3-c68d703d1eff", "sighting_of_ref": "indicator--3a197d3d-0283-4867-89fa-e4c0d5b1dedf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864d5e1b-6370-419f-8a21-ec4b11ee5d06", "sighting_of_ref": "indicator--3a197d3d-0283-4867-89fa-e4c0d5b1dedf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2016947-784c-4208-9224-85d5590fea93", "sighting_of_ref": "indicator--a03309b2-c08f-4503-8994-17829067104b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b54eb9-3486-4cd8-9887-719af8253d13", "sighting_of_ref": "indicator--a03309b2-c08f-4503-8994-17829067104b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07650362-7508-46f3-99d6-88b3756436bb", "sighting_of_ref": "indicator--e851610c-4eaa-4355-a80b-2b5035fa7d39", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09031439-4730-40ce-8efd-ec7bacddfc0c", "sighting_of_ref": "indicator--e851610c-4eaa-4355-a80b-2b5035fa7d39", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d85f0bd-d3b2-4abc-bc60-806ee36cde6f", "sighting_of_ref": "indicator--426f8acb-81fa-4791-9358-b797bccb8353", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caaea855-966e-4595-9276-d67912c3855f", "sighting_of_ref": "indicator--426f8acb-81fa-4791-9358-b797bccb8353", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f90a6b8-8160-492d-98fb-693ab65cf2af", "sighting_of_ref": "indicator--a6cac02b-fb93-4697-b6f7-75722c00d86b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bad6dff-2e9f-4aa0-8542-51bfd5635a29", "sighting_of_ref": "indicator--a6cac02b-fb93-4697-b6f7-75722c00d86b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d299e66-a72b-4689-89c0-0f214d9774e0", "sighting_of_ref": "indicator--c9ece2ac-42de-4260-b972-26c39fefdc26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d40ba0e-d08d-4cda-ab2a-3446af3ddea3", "sighting_of_ref": "indicator--c9ece2ac-42de-4260-b972-26c39fefdc26", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24800e66-0b13-459a-b6a7-1691a6342803", "sighting_of_ref": "indicator--06e1fe8e-4d53-471f-87bf-08962a8ccf3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead12839-e903-48ad-a030-2fc0ffc8a223", "sighting_of_ref": "indicator--4b6a876a-b3b7-42f1-bef8-17fd1d5398e5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9827562-f263-4100-b39d-e764b5348d89", "sighting_of_ref": "indicator--9b28fced-d86d-4b4a-ba55-ae103b6dc769", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2f8323-2a07-4311-aea9-af9b62b581be", "sighting_of_ref": "indicator--27a2d464-4381-4f94-a0b5-fc087f768f70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f1caed-32b8-4668-a05b-46aaf47120a4", "sighting_of_ref": "indicator--27a2d464-4381-4f94-a0b5-fc087f768f70", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20992caf-eac6-493d-b4e4-6d836d9e8345", "sighting_of_ref": "indicator--e19d4505-2138-4df9-9ab0-9866135fa015", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40d11b3-b474-49ab-bde6-872751101c9b", "sighting_of_ref": "indicator--e4498c85-6067-400c-8efc-98ace8617f21", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589098d8-d01f-4baf-b6ae-9e5073d678e4", "sighting_of_ref": "indicator--e4498c85-6067-400c-8efc-98ace8617f21", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f79f1e4-e3ed-4657-a931-2b3368e5e887", "sighting_of_ref": "indicator--99726431-f1f6-4fb8-8cf5-e08c34e2c076", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209ebca5-8764-48bb-a328-b50d1e117bf6", "sighting_of_ref": "indicator--810f6082-5cd6-49a6-aab2-c4f3a5dc6feb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07b46b2-755b-45ae-a4bf-9b08d9de1250", "sighting_of_ref": "indicator--9a2a8250-eb18-40c0-a7cb-5b59c48d93d1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e9da31-af7c-4401-ba13-e86977cbe17e", "sighting_of_ref": "indicator--0653bfe2-8323-45dc-90c6-1e7e8ba06cee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8154f258-d2ed-4d7b-bb04-2ac40614f864", "sighting_of_ref": "indicator--5ccdd369-ff17-4a8c-8898-3ee770007f16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59a6e5e-f090-4627-b737-a2a966b73847", "sighting_of_ref": "indicator--312bb313-37cb-4d80-96eb-e0768f612ffe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896e216c-7c06-4839-a6fd-e8132f3f4295", "sighting_of_ref": "indicator--312bb313-37cb-4d80-96eb-e0768f612ffe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee00aa9-c750-4524-acc6-3b0bc1c3e6e3", "sighting_of_ref": "indicator--67377bbb-2254-4ead-b1d8-b3e6e7e0d5cb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9e300b-963c-465a-b01e-c5ca4da840c8", "sighting_of_ref": "indicator--67377bbb-2254-4ead-b1d8-b3e6e7e0d5cb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2d58d0-bf46-4795-a6d5-0c465f1915fd", "sighting_of_ref": "indicator--752ecb5a-4d4b-45ac-9725-6492ae7833d7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e127b3a5-b555-40d2-ba49-5b38026756ed", "sighting_of_ref": "indicator--752ecb5a-4d4b-45ac-9725-6492ae7833d7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a157ef6-9f97-4224-b891-5a94d485b009", "sighting_of_ref": "indicator--3237e927-8280-43ed-8b29-2cb1022eb103", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917646f1-f99a-41ef-a2df-c77b7d6f7295", "sighting_of_ref": "indicator--3237e927-8280-43ed-8b29-2cb1022eb103", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac32db1-5fc9-4b08-94fc-250b8b62637e", "sighting_of_ref": "indicator--d716cdb8-c044-4296-bf38-17594340b0de", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54738129-8b80-4c45-8032-4a7053eda2f3", "sighting_of_ref": "indicator--d716cdb8-c044-4296-bf38-17594340b0de", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6022f3-6fde-4a42-a934-6c1213068fd3", "sighting_of_ref": "indicator--7102103f-da76-4049-958a-e216a36e62ac", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fcd278-4202-4604-ba85-85266549a7ac", "sighting_of_ref": "indicator--bf35025b-3299-40d1-a1da-f21b376cf16f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4231e7a-13c8-4dfe-9d95-9316c06a1086", "sighting_of_ref": "indicator--356c452e-8dd3-4fc5-9d97-efc826829382", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ac9a19-d73d-4c59-956f-eac97132b18a", "sighting_of_ref": "indicator--252a6657-0f4a-4230-b15a-5fc1bea56c43", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5579e7d-5137-4b21-8ab4-04d9db4d87c3", "sighting_of_ref": "indicator--252a6657-0f4a-4230-b15a-5fc1bea56c43", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5404e6bc-d234-400d-ba38-aa7d6948ad1e", "sighting_of_ref": "indicator--c2799ca5-1be3-45db-9d54-493709c8a9c4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab5cf84-010f-4124-8530-ef5f8ba47695", "sighting_of_ref": "indicator--c2799ca5-1be3-45db-9d54-493709c8a9c4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1342ed-b6bd-48d7-a4b0-e15e47ebf183", "sighting_of_ref": "indicator--87f467ea-2592-4d09-a6ca-c18da06690f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b88f9ea-2498-4ff3-a271-6331f693b6eb", "sighting_of_ref": "indicator--87f467ea-2592-4d09-a6ca-c18da06690f1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9829976b-d12a-4e9a-8134-0660b3b5fb12", "sighting_of_ref": "indicator--5acee835-b611-4994-88e1-ca7fd213d845", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefbac8a-0c52-4b45-9a67-0ec838617411", "sighting_of_ref": "indicator--5acee835-b611-4994-88e1-ca7fd213d845", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15907f9a-6c39-4d17-a4fa-104c7994a420", "sighting_of_ref": "indicator--d302dba5-685e-48f1-9b5c-42a72dc7861b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27ca05c-fe7e-45ba-953c-d9da4226f1d2", "sighting_of_ref": "indicator--d302dba5-685e-48f1-9b5c-42a72dc7861b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6073593a-2a1f-417d-a63b-20099163d518", "sighting_of_ref": "indicator--4674bfeb-78b7-43b2-b63c-b7f4f6aa9c05", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51133561-c68a-43c9-aa8e-3c76522bc830", "sighting_of_ref": "indicator--4cfb25e6-cfde-4094-861e-bdc69411c6b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08eb636-671c-473b-b53b-887227428cf8", "sighting_of_ref": "indicator--6d315457-488f-48e5-a939-e624d836cd06", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61858488-5cb2-4c15-9eb2-39a1ffce90a7", "sighting_of_ref": "indicator--6d315457-488f-48e5-a939-e624d836cd06", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241e0172-21ed-4886-be8f-de0ba46e08ad", "sighting_of_ref": "indicator--e8e54751-5110-49d8-8642-ed773f7b2ded", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484217c4-63b8-44ac-b6f8-1c23d9aecad8", "sighting_of_ref": "indicator--e8e54751-5110-49d8-8642-ed773f7b2ded", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80746d18-9084-403c-9278-0b2a9b7a466e", "sighting_of_ref": "indicator--94f6bd59-e724-4afc-b2f1-cacbc7d4cee1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fa30f8-5922-4e9a-844b-c7b7454809e7", "sighting_of_ref": "indicator--94f6bd59-e724-4afc-b2f1-cacbc7d4cee1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9098fac8-0c45-4e4e-800b-210c9846b1cd", "sighting_of_ref": "indicator--3f56ab8f-77e4-4e76-a5ac-0218ee2aa840", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0cd59b-0ad6-44fa-aef9-9a36ccdd4f9b", "sighting_of_ref": "indicator--3f56ab8f-77e4-4e76-a5ac-0218ee2aa840", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdddee4-6cef-4c53-a1bb-a9450d012cfd", "sighting_of_ref": "indicator--dee06fa7-99f7-4050-9b25-6e4303f4e45c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f8cd22-3cf3-42fd-a778-46d029b6054e", "sighting_of_ref": "indicator--dee06fa7-99f7-4050-9b25-6e4303f4e45c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4305bd4-9d72-4740-9c79-b3aa8cd11805", "sighting_of_ref": "indicator--2335a278-921c-4f89-9a10-4729790c3178", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0588eb-d9eb-460f-8162-d5ddcae960b8", "sighting_of_ref": "indicator--90b4e347-d7c5-400a-ab99-93fbd43150f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddd57df-edbc-4fb9-9ffc-536e8b2daca5", "sighting_of_ref": "indicator--741d50b6-99d9-49d4-8dc9-b393ef64f916", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985ffa46-320d-4afe-8cc2-dc2f3c81864b", "sighting_of_ref": "indicator--741d50b6-99d9-49d4-8dc9-b393ef64f916", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412ffc17-14ed-4597-8fa8-c0220dae2018", "sighting_of_ref": "indicator--31210393-54ca-47e3-9089-8b045bf0955d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a85dad0-7050-4739-b8d5-703049857c43", "sighting_of_ref": "indicator--31210393-54ca-47e3-9089-8b045bf0955d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86e50af-1db3-4730-b73e-167ac417d769", "sighting_of_ref": "indicator--b1093931-e852-45f8-94b3-b37a4ea536f7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7769a4e3-5918-4ccd-8145-7d9e8461dec3", "sighting_of_ref": "indicator--b1093931-e852-45f8-94b3-b37a4ea536f7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8427a6aa-6dba-40a7-b483-69e447f15cc4", "sighting_of_ref": "indicator--e049d1f3-c197-42b6-930b-75ed9d4bd666", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77153786-5066-4c02-895f-42e902ad589e", "sighting_of_ref": "indicator--e049d1f3-c197-42b6-930b-75ed9d4bd666", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264808eb-63e7-416f-9ede-5006d7b9c503", "sighting_of_ref": "indicator--8307af30-6490-4a7d-946a-6e49460de545", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23306653-07ae-420f-bf51-d6d0f62104e5", "sighting_of_ref": "indicator--8307af30-6490-4a7d-946a-6e49460de545", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b3f8c8-8d42-491e-83c7-4e28a01deadb", "sighting_of_ref": "indicator--2f358a9e-7d81-4d2a-b004-f0038426c9d0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21bed29-20cf-4555-86cf-d368ca497cb4", "sighting_of_ref": "indicator--2f358a9e-7d81-4d2a-b004-f0038426c9d0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c876d2af-0ee9-421d-b9f4-781e643b1ead", "sighting_of_ref": "indicator--90933be3-a4f4-4e7c-af40-d15bc0a9095a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5eaef37-bb08-41ce-b129-d2f6c6cff76e", "sighting_of_ref": "indicator--90933be3-a4f4-4e7c-af40-d15bc0a9095a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96ad939-b0d5-45b6-94a6-fb50b8d630b5", "sighting_of_ref": "indicator--35cdc9de-213c-4bee-9dd0-2d9a05c92486", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ace055d-3d3b-483d-a190-acc8ffef8ff0", "sighting_of_ref": "indicator--35cdc9de-213c-4bee-9dd0-2d9a05c92486", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb10c75d-c183-474f-b895-af94a07dfe66", "sighting_of_ref": "indicator--5dce2d0a-53b4-44c5-a570-158705823dc2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4957e33f-d473-4988-8d6d-e6874464bc80", "sighting_of_ref": "indicator--5dce2d0a-53b4-44c5-a570-158705823dc2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d0e460-5368-4312-ab71-7a3ff2a37be5", "sighting_of_ref": "indicator--9a1a316a-8c50-4020-ae38-0b8375d542e8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ba5fe1-5c78-46a9-a28e-66ff02a28ae7", "sighting_of_ref": "indicator--3623652d-8b1d-4e53-8c3c-1c02bf3c3bcb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04e2cc1-5a83-4d75-8fbb-8aad48833196", "sighting_of_ref": "indicator--88f01a60-be20-4f92-806a-6b8c6abfb899", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6962f9b6-417c-422e-a9dd-00ade88aee79", "sighting_of_ref": "indicator--88f01a60-be20-4f92-806a-6b8c6abfb899", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027ebf3e-d4e9-4a25-9d45-e0616e62430f", "sighting_of_ref": "indicator--c26bb370-a808-423d-abe2-c5a3f13ffaa8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9ebf60-eb06-4641-a23f-0269a096f273", "sighting_of_ref": "indicator--02a8558f-48cf-42ac-830e-1ba3f814b71b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f355e00-905d-41dd-b55f-0d606df82bda", "sighting_of_ref": "indicator--02a8558f-48cf-42ac-830e-1ba3f814b71b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b310599-b966-45c8-bd46-9717c8e25fe6", "sighting_of_ref": "indicator--7ad7e5ab-f05a-4e2d-b2a2-eaf9dd8e39bd", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14d5a34-1326-47b3-a70f-497605c9120b", "sighting_of_ref": "indicator--3e74719c-0270-4300-a364-f3cab85ff2c7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6056a898-0e43-4bba-b8e6-1690f1c0858b", "sighting_of_ref": "indicator--380c2d1e-79db-4698-9b1f-d22bd2205831", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d75ac6-ee9d-40c6-8d75-9530f94afee3", "sighting_of_ref": "indicator--380c2d1e-79db-4698-9b1f-d22bd2205831", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638a3860-97e7-44b7-9c38-62f9d6e50157", "sighting_of_ref": "indicator--36e9dce9-7a3e-4130-b7d1-87a2c7a59149", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b36c0e-fa42-4496-b6e3-46b58620d3ad", "sighting_of_ref": "indicator--36e9dce9-7a3e-4130-b7d1-87a2c7a59149", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f6098f-8c4d-406c-b4db-6215a21c3f3c", "sighting_of_ref": "indicator--a51e64ac-3af8-4518-8beb-b0678e547c26", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4388f0f0-2529-473a-9107-ed32a566725e", "sighting_of_ref": "indicator--a51e64ac-3af8-4518-8beb-b0678e547c26", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab40fca-04ba-4696-9de8-a3df6da8716d", "sighting_of_ref": "indicator--c55d37ed-b137-49f7-bed5-f769d18f6532", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57040e83-8e6f-4b2b-acce-ea2641ac7217", "sighting_of_ref": "indicator--c55d37ed-b137-49f7-bed5-f769d18f6532", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e510822c-6c66-462b-a6d2-3026e2f52621", "sighting_of_ref": "indicator--d988d00c-4ef7-4d02-820e-e7d16e12fec7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd108171-5500-4d41-9af9-703651f20d75", "sighting_of_ref": "indicator--d988d00c-4ef7-4d02-820e-e7d16e12fec7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab953f8-198f-4e5d-ba0e-d08554b577be", "sighting_of_ref": "indicator--69a28d1b-25b0-4dbc-8a1a-03b7703bbc6d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6725ff9c-0937-4411-9f8e-ea3b4f76868a", "sighting_of_ref": "indicator--b40c99c6-f295-44e5-9786-ff771e3569d9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca677f4c-dbc6-4fee-b9f4-ee257018da2f", "sighting_of_ref": "indicator--b40c99c6-f295-44e5-9786-ff771e3569d9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e5f83f-bdfd-44db-9252-e87c3766a11a", "sighting_of_ref": "indicator--1c077e0c-ba66-499d-baf9-a97489ad4366", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd8d53a-ead1-458e-a59b-f63781d4a05d", "sighting_of_ref": "indicator--1c077e0c-ba66-499d-baf9-a97489ad4366", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc002b5-5520-41f2-aad2-fe0705eb0e16", "sighting_of_ref": "indicator--2fe3be5d-4040-4b02-b461-9ad22a18ae62", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfa4f45-21df-44b0-9a31-f9654b17efb8", "sighting_of_ref": "indicator--2fe3be5d-4040-4b02-b461-9ad22a18ae62", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976d31ac-438a-47dc-a94a-70c1d51d26cc", "sighting_of_ref": "indicator--1539d6a0-4921-4235-bfaa-bd9d790ae4d3", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e53e882-9136-473b-a7b7-a5c3e9006180", "sighting_of_ref": "indicator--1539d6a0-4921-4235-bfaa-bd9d790ae4d3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfaff7e-495d-4f13-885f-c2c0aa7acf08", "sighting_of_ref": "indicator--40cc24ce-c339-4457-9f71-62e4bca2ddc6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd2c76d-00da-4f33-b04d-157705a5b98f", "sighting_of_ref": "indicator--40cc24ce-c339-4457-9f71-62e4bca2ddc6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a840057-861a-4f4b-b83c-c885ce540547", "sighting_of_ref": "indicator--123e6e02-2d84-4553-a80f-d6f98a0eee50", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d907643-9616-4aa4-9dbf-76a596bca304", "sighting_of_ref": "indicator--123e6e02-2d84-4553-a80f-d6f98a0eee50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47077d8-58f1-4736-a300-458e42c93b8e", "sighting_of_ref": "indicator--f0ef0753-7ade-4fd5-8d6b-a889f6099003", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57278220-7ff3-4b64-90df-a358aa58c053", "sighting_of_ref": "indicator--f0ef0753-7ade-4fd5-8d6b-a889f6099003", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3999726-6079-4fb2-abf7-eb5d1ebf6609", "sighting_of_ref": "indicator--6c7ca858-a3ff-401c-b7df-4a0ed3e9cf34", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7879e6d1-0be5-4f35-95ec-5ea15059dc60", "sighting_of_ref": "indicator--6c7ca858-a3ff-401c-b7df-4a0ed3e9cf34", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc19dd73-dd82-491b-bbf8-8fa90841cf45", "sighting_of_ref": "indicator--fca773ed-26fe-4dc6-b81f-771eedf04c02", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c6b814-efb0-449b-a52b-17372dee2cea", "sighting_of_ref": "indicator--fca773ed-26fe-4dc6-b81f-771eedf04c02", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ccdc7b-54f3-4893-9725-c33f5de7512d", "sighting_of_ref": "indicator--d708b170-16cb-47c6-a77f-9324011b930f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f758e7-bee9-4e1f-aee1-138d3fa4454c", "sighting_of_ref": "indicator--d708b170-16cb-47c6-a77f-9324011b930f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8455e54-1d74-44c9-8935-7e7facc54aa7", "sighting_of_ref": "indicator--c4c892ea-3949-4209-b1ca-6602139c2b64", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6731dfb6-1147-4ac9-8945-57e7cdc44fab", "sighting_of_ref": "indicator--c4c892ea-3949-4209-b1ca-6602139c2b64", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a474a4c4-4d33-433c-9df4-0b456efdfdbb", "sighting_of_ref": "indicator--14888f7a-6eca-4c3b-ad33-955a61b302c8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b8fa26-d880-4328-a0e2-6da349144d36", "sighting_of_ref": "indicator--14888f7a-6eca-4c3b-ad33-955a61b302c8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269e265d-a591-4481-88c8-ca950b70183a", "sighting_of_ref": "indicator--b97509aa-0883-406a-8fc0-a702991d3ff7", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4b92ad-6a64-4b7a-a8a9-b1d52ff8e878", "sighting_of_ref": "indicator--b97509aa-0883-406a-8fc0-a702991d3ff7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d8aeb-721f-4bfe-a453-5cb837d2a90b", "sighting_of_ref": "indicator--3a062080-fa63-43b7-bf96-1fb09d0cbe91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5352e7-373e-4a6e-906f-6906b42bc0d1", "sighting_of_ref": "indicator--3a062080-fa63-43b7-bf96-1fb09d0cbe91", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38deaf80-f73f-4e44-a6ba-83f098c69dae", "sighting_of_ref": "indicator--18e6e719-1d14-4d6d-8d6a-eac0754b521a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f6001a-d076-4ff6-a775-9b7821b796af", "sighting_of_ref": "indicator--18e6e719-1d14-4d6d-8d6a-eac0754b521a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c66f95-33d3-47c1-95fe-d2424b2eb558", "sighting_of_ref": "indicator--7c882110-cc94-46b3-909b-9ec44ce396f8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d3f3fa-4b18-419f-ba25-3bc9765df844", "sighting_of_ref": "indicator--7c882110-cc94-46b3-909b-9ec44ce396f8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9fa82b-1ecb-4e19-8c86-5f734633173e", "sighting_of_ref": "indicator--90e2b9e1-9232-40cf-9ce6-47ddbacf57a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7f2cec-3da0-466d-97e5-b994106184fd", "sighting_of_ref": "indicator--90e2b9e1-9232-40cf-9ce6-47ddbacf57a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f022f0-4077-4ff3-bf93-a95efbe469dd", "sighting_of_ref": "indicator--378e79e6-eba9-4e9c-83e8-d6bf3e02fdbc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af6bea7-21ce-4a99-b782-83f787d4ff34", "sighting_of_ref": "indicator--378e79e6-eba9-4e9c-83e8-d6bf3e02fdbc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf47dd95-a16c-4daf-88f8-c14b676b1d7a", "sighting_of_ref": "indicator--f091de14-c323-4e99-ad78-7e69b9fe3355", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca7b024-876d-438c-a5f2-4be23be4213f", "sighting_of_ref": "indicator--f091de14-c323-4e99-ad78-7e69b9fe3355", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451fcfcc-f3e7-47ea-9288-8fc801d205a1", "sighting_of_ref": "indicator--2a962cbd-0f39-4e19-9499-3b53ae33b997", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec90e49-9515-4103-bf20-a11ed2ea1496", "sighting_of_ref": "indicator--2a962cbd-0f39-4e19-9499-3b53ae33b997", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a484529-cf44-45d0-a48e-ae608fd97e36", "sighting_of_ref": "indicator--30abaa30-e1e4-486c-b25a-be415d7ecb80", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa691533-4f6f-4caf-a8c5-d7495bf80367", "sighting_of_ref": "indicator--30abaa30-e1e4-486c-b25a-be415d7ecb80", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93b878f-bd24-44b3-8b69-fd3d5b83855f", "sighting_of_ref": "indicator--7fd93151-382a-41bd-bdaf-66a4b3f4dcaa", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbec841-073b-4606-a7c4-0f212bc9ea57", "sighting_of_ref": "indicator--7fd93151-382a-41bd-bdaf-66a4b3f4dcaa", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004536ff-bde1-44c7-81f3-0a368bee2dc6", "sighting_of_ref": "indicator--f2ec6dd6-c466-4e3d-a4a0-6ad7a2c63f72", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c155ac-26f9-44f3-954b-3330a388392d", "sighting_of_ref": "indicator--f2ec6dd6-c466-4e3d-a4a0-6ad7a2c63f72", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76103fdc-9523-41f5-85e5-77ab4b50f96d", "sighting_of_ref": "indicator--54c4bb94-514e-4ac3-85c9-98b2c1f95055", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cf8973-95a9-491b-b319-a4204892ec78", "sighting_of_ref": "indicator--54c4bb94-514e-4ac3-85c9-98b2c1f95055", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79556844-5394-46bf-a25c-e97c49a8922c", "sighting_of_ref": "indicator--8e78a2fe-d2d8-412d-8c1a-f1f82664eb42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a14cf-28c1-4a4b-91cc-3a20398ca60e", "sighting_of_ref": "indicator--8e78a2fe-d2d8-412d-8c1a-f1f82664eb42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7f7f58-eae7-4a75-9baf-7d7a1f1b83ab", "sighting_of_ref": "indicator--ab808f5f-adf0-400a-9a84-0c28dd0d88f4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3715ad0a-ab3b-4cdc-8bc3-8a6cd76857ac", "sighting_of_ref": "indicator--ab808f5f-adf0-400a-9a84-0c28dd0d88f4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6780224a-4e03-412b-83e0-dff25b852c85", "sighting_of_ref": "indicator--6499a70f-9e32-4098-8a74-131966bcd4ad", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78ef837-09a4-4f59-a098-3aaa1f0796bf", "sighting_of_ref": "indicator--6499a70f-9e32-4098-8a74-131966bcd4ad", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e326ab-4d3f-4c11-a042-fc6fc791e3f4", "sighting_of_ref": "indicator--4dc9e9d4-15ef-4e66-8167-5fad608fbc42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bef19a-33fc-48ab-8619-dca66c3ae373", "sighting_of_ref": "indicator--4dc9e9d4-15ef-4e66-8167-5fad608fbc42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5573de94-2d69-4b2f-8d8d-395df43dd5d7", "sighting_of_ref": "indicator--3a77d65a-30fa-467a-af5d-b0df9959e9a1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c6e9d-ce8c-49b7-a984-1d6b9107954b", "sighting_of_ref": "indicator--3a77d65a-30fa-467a-af5d-b0df9959e9a1", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292eb68d-a9af-4446-9928-cc9e57637d22", "sighting_of_ref": "indicator--c8bba1f6-5af7-4d87-9027-e75700873c5d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349173c7-1663-4d9a-821c-d94d1bd97696", "sighting_of_ref": "indicator--c8bba1f6-5af7-4d87-9027-e75700873c5d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675d2529-4e0a-4f71-9a58-e3a36f30a7cb", "sighting_of_ref": "indicator--bd3901ed-1bc4-4eb9-b17a-65f5d5076e6f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51c2ea0-999c-4d98-80e0-cad97379d6e2", "sighting_of_ref": "indicator--bd3901ed-1bc4-4eb9-b17a-65f5d5076e6f", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b013f4f8-19b3-49e1-ab2d-1d2151f1d143", "sighting_of_ref": "indicator--278e2b3a-e2a0-4d77-94ab-49dabfa053bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282a84cd-f713-4c6b-ae6d-5dd2ef5d263a", "sighting_of_ref": "indicator--278e2b3a-e2a0-4d77-94ab-49dabfa053bf", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75babaaf-171c-412b-b2f3-478789b5ba8a", "sighting_of_ref": "indicator--278e2b3a-e2a0-4d77-94ab-49dabfa053bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d77f0e4-7d9f-401f-9fa9-5e8b35f6d037", "sighting_of_ref": "indicator--51d7da02-279f-4f14-a25f-7aa54143b4ba", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9273f3ca-caf2-4dce-bdc1-8501b6f00da1", "sighting_of_ref": "indicator--551b0894-3bbe-4a13-8294-b9193e91d07f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a889164f-afd9-47be-80a9-21c24ee815bb", "sighting_of_ref": "indicator--b7b67128-103b-4b4a-9dca-047bd1c6173a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fed6e4-e548-4781-ac52-30ad4d3b63db", "sighting_of_ref": "indicator--5a9d04a6-1a77-4117-9d0f-c716cb1942c0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb81d65-43eb-4319-87a0-5140626ac4ba", "sighting_of_ref": "indicator--e90c2ac1-0328-486e-acae-e2a36292fc20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f5983e-bf75-4d43-87a2-7b4624990058", "sighting_of_ref": "indicator--7b8179b2-621a-4d60-bd7d-291e7817631d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26d399b-4b85-4adb-be94-83117e743b31", "sighting_of_ref": "indicator--7b8179b2-621a-4d60-bd7d-291e7817631d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a984e2dd-034e-45eb-8697-dce5833cd01d", "sighting_of_ref": "indicator--32ea276f-024d-46a9-89c8-12a0bf65c256", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61528049-7014-4b5a-a3a1-8d6b64ed4b47", "sighting_of_ref": "indicator--32ea276f-024d-46a9-89c8-12a0bf65c256", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93b8c45-cf3c-47dc-ad18-ee1a13113f8e", "sighting_of_ref": "indicator--00038b53-120b-47e5-98e5-69ddd1f06c32", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1039490-06b8-491f-887e-385c97c89eb5", "sighting_of_ref": "indicator--00038b53-120b-47e5-98e5-69ddd1f06c32", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50553062-66de-470d-8b4f-ac6c96dceba8", "sighting_of_ref": "indicator--161ac8f2-92c4-4214-b435-347a98227038", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7bf58a-1802-4f3b-a544-00d265cb0a03", "sighting_of_ref": "indicator--161ac8f2-92c4-4214-b435-347a98227038", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea060bf-40dc-4f0d-95d8-e136012d1f4b", "sighting_of_ref": "indicator--f8734c96-9556-416f-9ccd-ff89c78bafe6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad7e6a4-7cb8-4269-b0a5-3b75813331ac", "sighting_of_ref": "indicator--f8734c96-9556-416f-9ccd-ff89c78bafe6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dd495a-e64e-4ad2-90b0-a58a3fc5552b", "sighting_of_ref": "indicator--0b21d6eb-37d0-4d5b-8775-14a8bee0cc20", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ea03ee-6c63-4f11-b653-58f47dbb35fa", "sighting_of_ref": "indicator--0b21d6eb-37d0-4d5b-8775-14a8bee0cc20", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b229e3-b11d-4f3c-a1fa-1d532821ee49", "sighting_of_ref": "indicator--92a0d05f-b4b9-454d-803b-2cc86bb1e611", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38676fe0-8944-4b3c-ac46-3a381bdbc946", "sighting_of_ref": "indicator--92a0d05f-b4b9-454d-803b-2cc86bb1e611", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce93264-763d-4ce5-beb4-c74f238ad548", "sighting_of_ref": "indicator--5aadec0a-17a9-49d3-858a-168bf8ffba01", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d74d1b-0721-4a8e-9d4a-f4fcc1371851", "sighting_of_ref": "indicator--5aadec0a-17a9-49d3-858a-168bf8ffba01", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be190998-ab02-400a-afcb-b3c14c93aec5", "sighting_of_ref": "indicator--1807d0ed-5b4f-4bbb-95f7-b6e07fc57373", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfd7e83-60f1-418d-857b-753c57f8df8f", "sighting_of_ref": "indicator--2cbcd8bb-f0a2-447d-8409-3c793ba6f1f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4431b476-6d6c-4ffc-bb55-8c46d6ae1557", "sighting_of_ref": "indicator--9a0ae27b-6cc9-45d8-8f5f-fcacf2979466", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a56228b-c167-410e-aae8-f783af027393", "sighting_of_ref": "indicator--9a0ae27b-6cc9-45d8-8f5f-fcacf2979466", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a177154-7037-433a-b9b1-661465aa27d7", "sighting_of_ref": "indicator--da3cc3e8-5262-469c-ad06-73ae1068c33b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361231f9-ac15-4cb0-915f-7e96d9afad3f", "sighting_of_ref": "indicator--da3cc3e8-5262-469c-ad06-73ae1068c33b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a01599-af59-4339-b2e4-d3542c4ff41f", "sighting_of_ref": "indicator--3f11e6f4-fd0f-42db-9d58-030d84ac98bb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f71af08-f420-462b-84c1-79d0cb7b6db2", "sighting_of_ref": "indicator--3f11e6f4-fd0f-42db-9d58-030d84ac98bb", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94518da7-da29-41bb-82b7-6ed9f2ade746", "sighting_of_ref": "indicator--0d6104bb-969d-47a2-a4a5-f48ec6bf7a0d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd2e6ef-2a51-423e-98b1-efc1adb47749", "sighting_of_ref": "indicator--0d6104bb-969d-47a2-a4a5-f48ec6bf7a0d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875bd4a3-454e-412b-b6c4-0375f864e311", "sighting_of_ref": "indicator--46f22341-cfd7-4beb-91bc-26cdc1ddc4c6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d00c3a1-5fbd-48ff-bdb6-35ba45eee902", "sighting_of_ref": "indicator--46f22341-cfd7-4beb-91bc-26cdc1ddc4c6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaa8f1c-1c68-41d7-8864-50df78569385", "sighting_of_ref": "indicator--c47dab48-95d5-4210-9809-895212d7bfb8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4280877d-7567-48ac-a8b0-1f45f6cb5c10", "sighting_of_ref": "indicator--c47dab48-95d5-4210-9809-895212d7bfb8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bfe487-057b-4559-b74b-bde3837e769c", "sighting_of_ref": "indicator--57363de3-09df-4343-bd68-e88ad7dfd9d8", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df07e9fd-c3c0-47d9-abab-65bf4b40ee04", "sighting_of_ref": "indicator--57363de3-09df-4343-bd68-e88ad7dfd9d8", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411bd2a9-2bd0-4083-9e9d-955c065ebda7", "sighting_of_ref": "indicator--bc83ab3b-2449-4ab6-8012-b3af94542d60", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5576cc86-1bdf-441e-b468-9d8741a00b69", "sighting_of_ref": "indicator--bc83ab3b-2449-4ab6-8012-b3af94542d60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945cfc99-aa06-4db3-8826-f186866688ad", "sighting_of_ref": "indicator--c7c4893c-09c0-4fea-994f-8b0dbeecab55", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23a2e2d-4196-49c9-9a77-4331cab0f6c0", "sighting_of_ref": "indicator--c7c4893c-09c0-4fea-994f-8b0dbeecab55", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a548441a-1fbc-4adf-bd7f-1dd60e3e2f6a", "sighting_of_ref": "indicator--e368d383-c3ee-4626-810b-8f7a70ec0cc9", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8a5e4a-c9e0-4413-86a7-4e219fd5e4de", "sighting_of_ref": "indicator--e368d383-c3ee-4626-810b-8f7a70ec0cc9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55275c07-3d83-4bcb-b1d0-e13d1d0ed0ea", "sighting_of_ref": "indicator--0a1f474d-ae51-4f21-9c5f-3c4fb1b225da", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c53fcc-2521-4d68-ae7a-8bdde33963ac", "sighting_of_ref": "indicator--0a1f474d-ae51-4f21-9c5f-3c4fb1b225da", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3d6a20-a732-4fd4-ad30-d12dbbd4c064", "sighting_of_ref": "indicator--cfcc0e92-14e0-48ac-b6d5-9e261e020041", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4fdd20-5589-47fc-ab01-bcccc3ddcbde", "sighting_of_ref": "indicator--cfcc0e92-14e0-48ac-b6d5-9e261e020041", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a2de10-7897-411c-98da-57b29107da98", "sighting_of_ref": "indicator--d2dcacd7-647c-4218-b16a-b5dcf5d4c0a0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01228ad7-20ad-4e3f-a791-7ce18274a32b", "sighting_of_ref": "indicator--d2dcacd7-647c-4218-b16a-b5dcf5d4c0a0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5183042b-c65c-4429-9412-38ba0aab08d7", "sighting_of_ref": "indicator--dbd555a2-6f23-4c9c-a2e8-dbd4d4bc9b42", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb212ac-5c7f-45ea-9344-e7d978a8e194", "sighting_of_ref": "indicator--dbd555a2-6f23-4c9c-a2e8-dbd4d4bc9b42", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03932fc8-0706-4a8c-9bc8-02e711e494d6", "sighting_of_ref": "indicator--480e12f6-5585-443b-bdfd-dc4cba61bdf0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7a46a2-d0f2-4206-9fad-aa65a9d669b1", "sighting_of_ref": "indicator--480e12f6-5585-443b-bdfd-dc4cba61bdf0", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d6c0ae-090a-4fb5-8a2d-985d2130f079", "sighting_of_ref": "indicator--51248f39-74d1-44b6-84dc-8a5f1657d788", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d73461d-aa40-4281-bb54-ebff22528a10", "sighting_of_ref": "indicator--51248f39-74d1-44b6-84dc-8a5f1657d788", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af97a139-62c4-4e54-a373-98d8fa69d6ab", "sighting_of_ref": "indicator--35847cd6-e404-4ece-b30a-0f9db4cd34b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaf364b-946b-490f-b094-38a5e5cebe5a", "sighting_of_ref": "indicator--fc4f00cf-6a4c-4c3f-8bb1-6afe03702f97", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d8f17f-7d59-4f26-bcd8-71c2fd4ff19b", "sighting_of_ref": "indicator--fc4f00cf-6a4c-4c3f-8bb1-6afe03702f97", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68aa27ef-0d36-4727-8819-72858ceec640", "sighting_of_ref": "indicator--ffe742f8-1e0d-41bc-a6a5-b21a7cf78dc7", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a3db82-e766-46e9-8daf-26e8b3b02a43", "sighting_of_ref": "indicator--eda9b813-ef81-4d17-ad3f-a963161c6a02", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d0a577-028a-4819-97c5-9b2da41b11ad", "sighting_of_ref": "indicator--fb3c9328-b6b1-42f5-ae1d-6bb544250f70", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf2006c-c7de-48af-b7fb-f12deb580500", "sighting_of_ref": "indicator--fb3c9328-b6b1-42f5-ae1d-6bb544250f70", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbafb9c-2cfb-476f-bb17-3f47789315d2", "sighting_of_ref": "indicator--7f349d03-fb55-4bcd-bd8d-2f1dc32dbc91", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d62353-77b5-4760-9245-c645d5ddb7bf", "sighting_of_ref": "indicator--04ba69bc-6258-4897-aaf8-21a7baca8990", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46acdbb9-9091-4665-ac75-b95ea5ff9350", "sighting_of_ref": "indicator--ec978c7e-4812-413d-8129-d4faa6631e60", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894f8256-704c-48d2-a6ab-2cb94e49b1be", "sighting_of_ref": "indicator--ec978c7e-4812-413d-8129-d4faa6631e60", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f359fa-4723-43a7-949b-11812da5778b", "sighting_of_ref": "indicator--205dc5a1-2969-4049-bb6c-30a11510c42b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04cd301-4305-4ff3-8d4b-09c93e28b123", "sighting_of_ref": "indicator--205dc5a1-2969-4049-bb6c-30a11510c42b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c87e73-792f-439e-94e8-00890ee00abe", "sighting_of_ref": "indicator--38dffb09-af74-478d-b495-f8bac5d898ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2704d3ca-8414-4594-bbb0-c04b8cf7e5df", "sighting_of_ref": "indicator--38dffb09-af74-478d-b495-f8bac5d898ef", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66d8f1e-e09b-4096-925c-51dedf277ac5", "sighting_of_ref": "indicator--38dffb09-af74-478d-b495-f8bac5d898ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305df7c4-9837-41c0-8cb1-085a67d16fe8", "sighting_of_ref": "indicator--ffdd44f3-d872-4daf-924c-56698eea8bc4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a5752e-8644-495b-95f1-2cfd51ccdb26", "sighting_of_ref": "indicator--ffdd44f3-d872-4daf-924c-56698eea8bc4", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8db6b2-53f8-4ea2-920a-1d84f991fa54", "sighting_of_ref": "indicator--78d83b66-47da-4e03-8b60-6099448fabf6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc9b89e-1f21-4152-a368-f185179884e8", "sighting_of_ref": "indicator--78d83b66-47da-4e03-8b60-6099448fabf6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9393dd-da8c-448b-aba8-d451149adb65", "sighting_of_ref": "indicator--98fea34c-069a-48ca-a14c-4ff68a31d0e5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc18743-cca9-4caf-a2df-48eb4b30f76e", "sighting_of_ref": "indicator--6b2d9c69-e672-4565-b34c-075490498552", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92b1dcd-0a06-4d05-99dc-b96a2df75d65", "sighting_of_ref": "indicator--6b2d9c69-e672-4565-b34c-075490498552", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac0072d-af62-4740-8e1c-db834b69989d", "sighting_of_ref": "indicator--ed83df13-c935-4611-9ae9-07540206d042", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e574a68a-e9b9-450c-9fd7-76da6ca216c2", "sighting_of_ref": "indicator--ed83df13-c935-4611-9ae9-07540206d042", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d012a5-b17d-43df-bd2b-221c40177948", "sighting_of_ref": "indicator--c12264df-66da-4322-b1ad-dafcba6b0e11", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8c4af0-5a1b-440f-becf-562e13a50b03", "sighting_of_ref": "indicator--c12264df-66da-4322-b1ad-dafcba6b0e11", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93736272-a398-44e6-8020-dc8593b5e53f", "sighting_of_ref": "indicator--42a24372-1d83-4bdf-97c3-78ff20466c3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8035a266-883b-4867-8962-d7f9b60315ba", "sighting_of_ref": "indicator--42a24372-1d83-4bdf-97c3-78ff20466c3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f44ae0-f9d8-4edf-9764-0e945704728e", "sighting_of_ref": "indicator--ece9e281-d9bd-43b4-ace5-2808739915dc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13d6851-4667-40e1-9593-6e6aacc60932", "sighting_of_ref": "indicator--ece9e281-d9bd-43b4-ace5-2808739915dc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abe81a4-de81-4216-9c24-ddab4662bb06", "sighting_of_ref": "indicator--be2439a9-8168-4e45-b544-8cb717e98731", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350e88e9-3f9e-4115-800e-fcc4b5f5ca61", "sighting_of_ref": "indicator--be2439a9-8168-4e45-b544-8cb717e98731", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cba154-e0ce-4e01-90d6-0a1fc2a528d6", "sighting_of_ref": "indicator--6844cf43-1dcf-47ba-8411-e1403db58324", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18860a80-e0dc-435f-b70f-93acaed3cd04", "sighting_of_ref": "indicator--6844cf43-1dcf-47ba-8411-e1403db58324", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2f6bac-f754-406f-8a58-9faf45b81400", "sighting_of_ref": "indicator--743d5acf-5890-48b9-a987-0edd17673762", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fe2bdd-6d07-4058-8381-fd213dcfeb74", "sighting_of_ref": "indicator--743d5acf-5890-48b9-a987-0edd17673762", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845dbefa-968b-4bd1-afdb-96abb01d78b3", "sighting_of_ref": "indicator--86bfc79d-cf1b-4c62-84fa-bdcd07ceb66c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d2bdb4-17e6-49ba-be5b-cebfcdd1f1e1", "sighting_of_ref": "indicator--86bfc79d-cf1b-4c62-84fa-bdcd07ceb66c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d479fe10-ef59-4adf-9924-0a8ea9227ebd", "sighting_of_ref": "indicator--142de295-7d8a-41b0-a09c-f8adc5d8050d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8316ff67-c4cd-4504-b2ba-70b7c037d7ee", "sighting_of_ref": "indicator--615b8fd0-8eb1-43b4-8a6c-3eadf87a81aa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de5a2d9-8eb0-41fe-96c1-bfdc51445857", "sighting_of_ref": "indicator--be46d2c0-8b1b-4b94-a9f4-c511986ba86b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77340e8-276f-4e63-b283-f86edef5860f", "sighting_of_ref": "indicator--d38b1278-048e-4f08-a27e-f5a4f846fe07", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9656521-19f7-469a-a419-2cce70fc27a6", "sighting_of_ref": "indicator--cbbdaccc-57a2-4420-a645-f003d7e1e6f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32aafb9f-f82b-491e-948f-ea8fbf3de213", "sighting_of_ref": "indicator--0144a214-626e-4982-91c1-c30c6941df52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da2bbb6-be9b-45b6-a349-e6eda0c1e7f8", "sighting_of_ref": "indicator--91b2c456-9b05-4eec-b97b-9f610db998c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ed185e-cc60-4a55-9c73-b013366d5293", "sighting_of_ref": "indicator--a25635f5-524a-483d-8349-3752554a9846", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40123981-8ba6-4c83-a89c-d2868d481c0e", "sighting_of_ref": "indicator--1b99e9a2-303f-4d19-930c-dd9f305af745", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd16bfef-a657-4a77-a927-d19a1aa12b91", "sighting_of_ref": "indicator--992769b2-f6f3-4d10-a10c-2e893eb2e8e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6608dbfc-5256-4ef0-8234-2c1dd39b3dbc", "sighting_of_ref": "indicator--81399617-4a64-4264-85e9-634544b28c70", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ce6e03-dbc9-42d3-9e92-48733f50cb04", "sighting_of_ref": "indicator--beabce3a-a595-4d49-a156-cc884209cef9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a1b88c-273e-486f-a241-e763658dc3b0", "sighting_of_ref": "indicator--2677032b-9795-4f13-950a-d6b1c8160404", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06218f5b-4ce7-4384-8b6c-7bd00db22f12", "sighting_of_ref": "indicator--797ff874-69c3-4a53-85ef-f61fe8338bd5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5122f096-26f4-416f-903a-2a8d94bcffe9", "sighting_of_ref": "indicator--c885bfd3-1f6b-4763-8906-a4ac0d953c2e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481c2ced-e003-4bb7-8aa0-ddd8e9316099", "sighting_of_ref": "indicator--ccbb3f40-238e-432f-b02a-8a5fa2c30459", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcbaa74-f630-4252-b2e7-d94a80d962ea", "sighting_of_ref": "indicator--378ff7ca-18a9-4f7f-8ed4-580d2db517a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17035e90-f945-4e11-b028-00d4b9e21914", "sighting_of_ref": "indicator--1c666a33-38ca-4bd1-a472-90e953976e58", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dab9a7-4068-41f2-9555-8f76e5026210", "sighting_of_ref": "indicator--891eca0f-d77f-498d-b98c-199d957559fc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d82f459-bded-4c40-ae5f-600ec995a45a", "sighting_of_ref": "indicator--de8e17b8-c332-45fd-8452-a78fdd9efe32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b011cba-1340-40de-b790-eebd773d2493", "sighting_of_ref": "indicator--08c18c7b-1511-44d6-baac-4cf0cac0402d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198caa16-0320-4bc2-b0f9-51cc4eba6ad9", "sighting_of_ref": "indicator--68e8a1b8-8330-4cc0-b2f2-429690427b69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547939a2-01bb-4fbe-9a2c-43aa61808147", "sighting_of_ref": "indicator--41be2d29-7ee3-4828-81a1-d3945bd6ebda", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9895046a-6f1b-4571-8b33-590ff2b73f11", "sighting_of_ref": "indicator--15168cbd-d203-44f9-b040-8ea9764a03bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8b7da1-afae-48f6-aa82-6a73b5f52642", "sighting_of_ref": "indicator--4ad7c034-741b-4a15-a778-cc77ac6309a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72be67a8-7289-43d9-b75d-a94df9e856e9", "sighting_of_ref": "indicator--71eafe3a-4ab4-4f2c-b60f-3a12680d4788", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7828be6d-80f6-4330-8cc8-b757a86646ea", "sighting_of_ref": "indicator--b9572367-fc18-4e47-8a2a-82ca0b856283", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3044cd1d-69bd-4f1e-8207-9bb5ef1741e5", "sighting_of_ref": "indicator--35873f61-868f-4d65-a72d-787c86f8f78a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcb546d-48a6-469d-8310-813abda2165f", "sighting_of_ref": "indicator--6b4b3354-6437-47f3-98c0-b1295038f986", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f73ba3f-3e6f-4265-8dfb-84c860f76074", "sighting_of_ref": "indicator--da7f768b-501b-4aff-ba44-837307bf1f6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a6a993-4149-4410-8e91-c6736d503454", "sighting_of_ref": "indicator--0fd41caf-153c-49bc-8c3e-be774a5e48fe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55061a5a-beb7-463e-b7e3-36238f35012e", "sighting_of_ref": "indicator--b477a5ee-6b97-4942-a4b2-c6d894b86393", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e92f3a-5367-4ad2-bdcd-fd641018597b", "sighting_of_ref": "indicator--285a6c99-faac-4078-b8ab-d4e05ce6e374", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f74e449-d05d-4b16-8128-11a1183c886c", "sighting_of_ref": "indicator--f6bef58d-ae2b-4883-8ee7-9e136db142df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e73dfa-b355-4385-a062-a9bdadf7d7b4", "sighting_of_ref": "indicator--d103d06f-6c93-4b32-a467-ab556d437350", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0c5791-5db0-46cf-a270-a2990f2c3e04", "sighting_of_ref": "indicator--8ce6f319-5d76-498f-ba0f-6ddf7d0b9103", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdab5313-8521-41e5-9ef6-dc7bd80e027a", "sighting_of_ref": "indicator--e61b89aa-dbdd-4803-92f8-f0038e728069", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2254afcc-01dd-4c82-8e5b-c546b2de94a4", "sighting_of_ref": "indicator--77ae9043-8d80-447f-9927-05cbc083b536", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb015f07-8373-4a33-8908-b0723bd1db87", "sighting_of_ref": "indicator--9a5ffa26-c085-4016-baa8-e6c729abaefb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f014aa-1dbe-4264-b113-f2ba44b6c8a8", "sighting_of_ref": "indicator--e281c8ae-cef2-4070-bb16-fcfd5862cd20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961133bd-3a4f-499b-b8a0-d243e821795f", "sighting_of_ref": "indicator--1b1951ab-0df5-4ec8-87a1-f5687ac4f029", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1442e-bf10-4764-b048-7a51b4431e86", "sighting_of_ref": "indicator--b4d11725-2fd3-43cd-8654-aea63d8c34b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f71a3f-6e74-4f1f-88b4-68906c9fd080", "sighting_of_ref": "indicator--1e310a37-d94a-442a-83c9-b90996e3197e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f4dc71-2349-4c21-95c6-e57e9fb32c79", "sighting_of_ref": "indicator--a7b1666d-a924-4447-a258-60160977a8bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd577d1a-b0f2-4c6d-8c4b-f3546c13e625", "sighting_of_ref": "indicator--6bc40036-7459-43cd-a2f9-b226be33da5b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b9a568-74e9-4948-bc91-e87a8548e90b", "sighting_of_ref": "indicator--0679dd4b-ae51-4b12-b8db-6954905f8176", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dca3fc-6481-4e10-9359-d7ed19e39dc6", "sighting_of_ref": "indicator--d1b0597c-93ae-45fc-aec0-a8371c79c69d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ee7238-26f7-4fd4-bbc6-b842a6eab2c4", "sighting_of_ref": "indicator--ef1fafc0-edda-4693-b46e-18051f955e99", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0444e7e8-d996-47ce-b610-49060b00b329", "sighting_of_ref": "indicator--909d9e5a-2488-41a6-90ac-f9bdfb98897e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5874ddfb-523c-4cec-9d83-5fd758370c35", "sighting_of_ref": "indicator--95f98dec-1876-4800-9aa8-0a38d1723e8d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75666341-08ad-41eb-9744-fbb7030b69a6", "sighting_of_ref": "indicator--a6d2b03b-25af-41bc-8fc7-137fcede611e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f871946-ee37-4529-9738-acaa3790f1fd", "sighting_of_ref": "indicator--fa5aa320-f22e-4414-8518-f7616c7428b8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd8c11f-d6cd-4504-b0b0-00d359ff9d59", "sighting_of_ref": "indicator--e5b3e9c2-cf4d-41c3-8d66-6b761f40a2a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8ecd18-e9b7-418f-9888-be78210f6683", "sighting_of_ref": "indicator--1f44dfff-8764-40a3-8405-c46be35d410a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f82c04-bd54-418e-9e16-7e7d8b4fc1fd", "sighting_of_ref": "indicator--440e1767-94d4-4621-b94f-0446e5b216b9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534c5243-bd32-45ea-9fb7-7b726b4f2dca", "sighting_of_ref": "indicator--dc05eb9c-1e26-41e7-8557-5801b769efc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fa4763-df9a-49a3-8d3d-b09bf546ceea", "sighting_of_ref": "indicator--9e48190b-473f-49b8-a8d8-a0010a693f7a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce35dcc-9b34-4dd4-a1b8-176cd2f464a1", "sighting_of_ref": "indicator--7baaef07-2c45-40e7-85c6-0a0d7769c1e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22885754-9e3c-462d-ac27-492a6fb73df1", "sighting_of_ref": "indicator--4993de94-5e89-44ef-8e61-75c7df6732df", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4170df6c-eef3-4309-adfd-f05648957777", "sighting_of_ref": "indicator--559f9dcd-c8bc-4a60-aed8-21feb27123c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1644102-b0b9-47e4-b7e8-331d7c42290d", "sighting_of_ref": "indicator--7930b4f8-5fe5-4c3a-a5f2-72267ff14235", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ca1788-9954-48f6-8877-05377e4b9086", "sighting_of_ref": "indicator--cb16ca7d-1c21-43a9-a6ce-c0140026ab62", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb345abf-7712-49e8-a9a3-968d936eb272", "sighting_of_ref": "indicator--31389661-1840-41b8-badd-4288e756d210", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22705276-0315-4b9d-84eb-d509dd61f535", "sighting_of_ref": "indicator--005fdaad-b788-4c88-9e54-658e03d8ae6c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79d4aca-8d71-4a7c-ac89-46e00a87c000", "sighting_of_ref": "indicator--883e3714-7e29-44e3-9a4d-3e8248ad5927", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06a4ec4-5d1d-4d84-82ba-50095c553954", "sighting_of_ref": "indicator--69e0b491-1ffc-4faf-9e41-d21c6dbf6bd2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282f13c8-6234-44f6-a8be-e3b6fc9615d9", "sighting_of_ref": "indicator--261d1983-1551-4998-8a02-518dd56e96d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13d0192-de11-4e95-86a7-580942375ad8", "sighting_of_ref": "indicator--ebb8e294-7cdf-448c-9404-ddd66bb39f00", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0e40a6-3e6c-41e2-bb64-a7be099581d4", "sighting_of_ref": "indicator--1c9df32a-a52a-400b-96d1-ad2a0e248469", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7157ebf-faff-4c80-9ee2-507d1a3304b8", "sighting_of_ref": "indicator--2d4a0f14-0866-4702-9c3e-c6df820109da", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee433c9-bc84-449d-ab7c-7bff101a5154", "sighting_of_ref": "indicator--b0b0d0e1-dc8f-4843-a2e4-226f61a096cb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0c67af-0dd9-45fe-acd5-430564ae9746", "sighting_of_ref": "indicator--c3d4e692-f722-413c-b003-5f36bdc6e096", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50116571-8314-4d46-b7b1-dd1f60cab74d", "sighting_of_ref": "indicator--fa912dd7-6e29-40be-b4f7-ddc23ded06a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb9c6c3-1d23-4d72-be5e-496c250f3ea4", "sighting_of_ref": "indicator--f01ebc55-1805-4b3d-9db9-84d2ed224d78", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746fac5a-542d-4f6e-97aa-f560e5e079a0", "sighting_of_ref": "indicator--2278b1af-5d9e-4d1c-b7ce-911f059e296b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19d88ef-8f00-4a2f-8442-bb175947dcca", "sighting_of_ref": "indicator--96263844-3af5-44f8-94af-b1881ed2c2e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf1eddd-134d-4b27-a399-45baa2f16bc2", "sighting_of_ref": "indicator--775e2c46-91dc-433a-8842-bb8d724601ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cefa3ee-877a-4e5b-8d99-ab52e8545a25", "sighting_of_ref": "indicator--20d6cb8c-e0f4-48af-b69b-a00f9edda5d6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c552bd3c-a0c1-40a9-a5de-022a5aadbfb1", "sighting_of_ref": "indicator--8324b076-b299-4d98-a708-f007c15379f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e92314-e33d-4837-b159-c387b2b39083", "sighting_of_ref": "indicator--ad924f1b-beff-4e34-9440-449d485ff75e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62227cdd-e5f4-43b6-aaf5-a2a58886f3a8", "sighting_of_ref": "indicator--abd889c4-818e-4278-9406-6cad3e1635b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc7d9df-1ce4-4f8f-8124-4ba4ec0ca8e8", "sighting_of_ref": "indicator--abbb2324-15bc-4731-9e53-1038f421dc7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c461f4-3bf1-4da5-bbce-b36723852b15", "sighting_of_ref": "indicator--f2dd5e76-61df-428a-9cb5-48dd9993961f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069e1534-9378-42b0-80b2-f8af0e87558a", "sighting_of_ref": "indicator--5cabcf0a-e192-423b-b8e0-ad75f9d9406f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d40cc8-b0b3-444c-8404-cdda439f82b6", "sighting_of_ref": "indicator--c4fdf2ae-11a3-40b7-ac5b-c1940f1bb0d4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8148e3-9d82-4a0a-893f-734a4d4fe37f", "sighting_of_ref": "indicator--8eac2a9f-fcdc-4afb-819f-aa2e63ba8d43", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5fe1bb-d02b-4a53-a794-3effce27870a", "sighting_of_ref": "indicator--031dd53e-cac9-4e42-805d-cf437913f7e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119ee61e-f64c-4903-9a5f-c46311ab7b2a", "sighting_of_ref": "indicator--8ba253d1-bd02-4be2-8d3e-ae193799d2a3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3af33c-4f7e-4252-8c65-3d874c4268f1", "sighting_of_ref": "indicator--4ec7284d-f877-4b9c-badb-20fdad6a8d8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050fc7fa-4b40-4bc3-9a59-8056b037f484", "sighting_of_ref": "indicator--f3c6aeb5-e6e5-4223-a824-103f17195092", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7ebada-0399-4c12-8252-c4926f21539d", "sighting_of_ref": "indicator--0292580a-29fb-430f-8d36-17b427b2fe17", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71aed1b9-e511-4912-a04f-bf85ccdd32ac", "sighting_of_ref": "indicator--f24762a0-c91c-491e-9b67-cb8be97eb9e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2724295d-e5d9-4d7a-aba3-30beab6c9d99", "sighting_of_ref": "indicator--2feddd80-ef61-4ddd-a7fe-99fd99d9fd53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab10524e-47a5-4f77-8e77-5cbf95c5bf25", "sighting_of_ref": "indicator--eabdd660-0e07-4a19-bbc1-0ec31d7a060c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e88f99e-1994-4d41-b037-e1900fb804e2", "sighting_of_ref": "indicator--1296b6f6-4159-4589-b7ee-ca153584c382", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f9df8d-678d-47bc-9cda-9511d80d2e3a", "sighting_of_ref": "indicator--2b1ac0d9-df13-4c27-b907-d7ed2f91fdbb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713a2d81-fed6-427e-bced-05b08417a6bc", "sighting_of_ref": "indicator--cc68c3ad-c61b-41dc-9ece-eef3cc88b543", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6263ecd-792f-4727-8bbd-339e0c3aefe7", "sighting_of_ref": "indicator--30e06b07-35b0-4929-8d10-ae3180f50bb9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5bffae-774b-479d-8d59-af4d47a31874", "sighting_of_ref": "indicator--19c7d357-4f2b-4dbc-a319-837f3655a748", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64a7f80-4938-4da8-a72b-a3678035f3b0", "sighting_of_ref": "indicator--8e0edf34-7f93-46f3-afde-71e37c9b4669", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc05c3c-1b85-4af6-8106-740b82b5cef5", "sighting_of_ref": "indicator--3a92dea9-f655-4244-87ca-0826550a8f16", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25f9541-2f19-4ad3-896b-2fdac921dfee", "sighting_of_ref": "indicator--8cd9e3f6-db35-4782-999b-153c6c51dce1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9c1d2d-926a-4441-8d75-475756a50e65", "sighting_of_ref": "indicator--2136f4e9-ff5b-4253-8e81-8c3e6b77a70d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dce3ba-d411-4c78-bf14-ac314296771b", "sighting_of_ref": "indicator--4892932c-25d8-4fda-9248-40e5fd559812", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d23c6a-16b8-4171-ab56-d313c0aeb029", "sighting_of_ref": "indicator--10ac43ff-f6e0-4ead-b700-747f098a6ce4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc1edae-34b9-49c2-a1da-48e8fb86cd5e", "sighting_of_ref": "indicator--7c1d4f57-8b46-41dc-966f-bd698cf57372", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a920df-6991-418f-84d7-6093ce99a7f9", "sighting_of_ref": "indicator--12d02a08-965a-4554-bfe2-02142c2f09b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5852da-a6c4-4c39-99a8-ce96f7c6e9ce", "sighting_of_ref": "indicator--232901e3-fa8c-4c73-ab50-a9c0646cd1e8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a498970-7a0d-41ff-aaf0-c2890549ab8b", "sighting_of_ref": "indicator--c4bcc9fe-1a4a-460a-a443-224e8a35ec6d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37ca413-d3a2-4f5d-bd16-ecdf27bf1435", "sighting_of_ref": "indicator--501ed6d9-4b17-4d2f-8171-465b45f21d3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a7ecd3-940f-44a5-b9ad-c108b6397a7b", "sighting_of_ref": "indicator--f7a773fc-ce5e-46f2-895d-a11927b04631", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a82f7b-83eb-4d05-b626-11c38331d8d4", "sighting_of_ref": "indicator--607f7d69-8e50-4467-8d43-92a54a13a7c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f5c939-9c58-47f9-af99-26092771824a", "sighting_of_ref": "indicator--dd771a06-5ceb-48e3-9e53-4b1f4a9ba06c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a078d9f2-e14f-4084-abf8-e69851f42694", "sighting_of_ref": "indicator--76d13593-8f4a-4c7b-a45e-6059ab7d1c82", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a915ee-71a4-446f-9c81-921359766ce4", "sighting_of_ref": "indicator--2823878f-c8ff-4e52-bf21-601403491ad4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf97a9b-fa7f-45c8-8a22-1adb1fe09185", "sighting_of_ref": "indicator--c44d0245-edc2-47d9-a89c-5e0bc0d896ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc9f8b8-78bc-4742-93f2-61196aa7c215", "sighting_of_ref": "indicator--b16babf6-f6b7-4c30-962d-dada5d28961c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e765c8-1256-46b9-86ed-9eab05f761de", "sighting_of_ref": "indicator--aa90180d-c0b3-4970-adcc-aa173bd4dd3c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3ad19b-2de9-4826-99f1-7ea9230b07f0", "sighting_of_ref": "indicator--d62077b2-9dfd-4e0a-87b8-45099e61a42e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a25b3b-2ef4-4795-92f9-ebb357984667", "sighting_of_ref": "indicator--e56ee9db-30d1-408d-b22b-0f0bc8527589", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d109ecdc-d367-41b3-bd73-f820ae6747bb", "sighting_of_ref": "indicator--37965e49-cf92-4ea2-9db3-672f99048832", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec93576-4e3c-4fca-9239-4fbea49a4db9", "sighting_of_ref": "indicator--bac2ff88-4625-4fcd-b201-92dd4563d0e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bd2783-d7e4-4ae2-a3d8-02898f235c4a", "sighting_of_ref": "indicator--13ba21fe-71c1-478f-82be-0f5104b064d7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc11189-9713-46d5-8283-dfbb7007731a", "sighting_of_ref": "indicator--006980e8-3106-4f24-b8d4-66fd7452cb5d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8164dd-9f9d-4989-b3ce-482684ebaea2", "sighting_of_ref": "indicator--7a84d93b-23cf-4718-b816-d04f42610d6c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f37ec75-7a17-4c6b-960e-7635177f3d09", "sighting_of_ref": "indicator--0d579c4f-2018-4bac-9b47-04fab4d7cc53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ede675b-4285-438b-8854-0c4ecd5820a3", "sighting_of_ref": "indicator--3824bee7-3f38-4522-accb-3b31cc4488e7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150c4a18-d87f-4371-9f57-95b243bf1fa3", "sighting_of_ref": "indicator--bcedd253-3dfa-47ae-afd2-d3ae6b4e39a7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c5dc95-bcda-4cf8-895d-24e120003679", "sighting_of_ref": "indicator--ee6497e5-0d7b-44cd-9b2e-58ba8abe46fb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6349fe01-e200-4d36-a322-4513ad781bdc", "sighting_of_ref": "indicator--973f8370-d5b4-49ea-ae90-91d92d5e04b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156d7342-5706-4ce0-9cf0-cdccfabff483", "sighting_of_ref": "indicator--f9508c1e-0c54-436f-856f-ed21107a3989", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e1d0d8-4ea8-4117-8298-6437e790cfd5", "sighting_of_ref": "indicator--aa98c7d3-09df-4451-8211-8a7d013ff135", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddd4b98-a166-4172-a197-164bfbb3ce92", "sighting_of_ref": "indicator--0aa012ec-f0f6-4527-8c49-cf00ddb085b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77415cfd-12f8-4f9f-a83b-8f21b1dd83d8", "sighting_of_ref": "indicator--32fbe434-6cce-4ff4-b274-e296f048bb53", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c551f9d-c56c-4cb6-ab00-b1a3a2dc8a17", "sighting_of_ref": "indicator--8d594b97-8795-4fee-9dac-a8dfc6dca28f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c26c8b-b77c-423c-87a2-e7ce8aff389c", "sighting_of_ref": "indicator--c52a637c-b28e-4211-8dd0-63a4f947c546", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e56b92-3a02-4091-b2ad-60d3a983d16a", "sighting_of_ref": "indicator--aa2ebb51-39a0-4db4-92be-96537cd06e52", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3877aee-c7de-4976-bc45-25abba1f581a", "sighting_of_ref": "indicator--9da66ee7-10ab-4741-a741-ab87471409eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b1462f-ca49-47a6-97f3-dc68810c9c46", "sighting_of_ref": "indicator--9e494a88-8894-4c28-bd66-13e34f2f4a2a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9ca27a-2678-433e-b3aa-390be8398cce", "sighting_of_ref": "indicator--d9e3950f-1aa7-4a87-8f15-8e0363fb9d89", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99dcead-9089-4c70-a95e-90a4c6d3bbfb", "sighting_of_ref": "indicator--68b735e3-502d-4d74-a8d9-5158e82371ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d39e5c0-3d9a-4717-964d-d5a24e9fca3e", "sighting_of_ref": "indicator--a82c2f47-2da0-475d-8051-42ccbe4b90f7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e41f5f-88c9-475e-a1fb-3cd7e6b71b98", "sighting_of_ref": "indicator--3d6b7224-ae33-4e1b-a139-5fa19dfb642b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a55d335-2869-4644-881e-59f663f2b143", "sighting_of_ref": "indicator--fe63097f-d4e6-4382-952f-14abfee8f0e3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9643c6-bf16-46b1-afc2-9de6f8ab0c36", "sighting_of_ref": "indicator--cf9479ae-d4c2-4446-9bf2-3886711707a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9c37b1-c0da-4ea6-b9f0-a580181e54e1", "sighting_of_ref": "indicator--d5e0d452-4c0e-4321-9329-2ec21e70c8ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5392d236-08ce-471d-8617-43eef5a2a824", "sighting_of_ref": "indicator--8898a2b8-c364-4638-83f7-45bd71be5441", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15075ff-6b00-49b0-8b24-6419f4daeed9", "sighting_of_ref": "indicator--2ca905f0-6244-4d3c-9649-334ee310b0a1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c25b83-7830-48f8-b5dd-545d3fdc0848", "sighting_of_ref": "indicator--02ecf881-26d1-4489-ac18-72a0c8d6ca20", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6cf4e4-cfef-4324-bd1c-03bde14c27e2", "sighting_of_ref": "indicator--1fb8ef4e-f92f-4f68-ac2d-200cb9cb8ab6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac44bdc-1cf1-4ed3-95cf-7dddf9213bc3", "sighting_of_ref": "indicator--c06783fe-76d3-4b46-a22b-f62416868a12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1213d1-165d-4991-99cf-fd86132e919b", "sighting_of_ref": "indicator--7c00e48d-1b97-43e5-8f58-54ecc0e69cb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010ebe44-1a98-49ca-aada-834fb5294897", "sighting_of_ref": "indicator--e2f04116-44f0-4843-b632-b7cc4bb8543c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9731b49-5fae-42bf-b3bf-34defdb0da33", "sighting_of_ref": "indicator--7a8df852-8df6-4545-be25-8041adaa1b9d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c725b975-2239-451b-9ea0-a73c152e0abb", "sighting_of_ref": "indicator--5e0d2713-5527-4aaa-8b46-d2006c90957f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b389e78-5aa7-44ea-b57a-b0c306878a54", "sighting_of_ref": "indicator--0e665806-9105-423d-9b3d-e26213d8b19d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7037d1a0-3bca-484a-8453-dca2c5d92348", "sighting_of_ref": "indicator--e4adcaaf-8357-438a-a89c-878c38205287", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72c5232-16ae-44df-8d5d-0848c0936c22", "sighting_of_ref": "indicator--ff7df147-4f4f-405b-add6-4a8be3b0cca2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c745807b-c5c6-4d93-a30f-ee9d74c8a1e6", "sighting_of_ref": "indicator--c1ec5a73-3689-4384-9aa2-99715e9b65e4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d45c49-657b-4cee-b59d-bfa30c2d76af", "sighting_of_ref": "indicator--aeb5aa49-0363-45f0-b5e5-56ad5d360865", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb24f75-10a8-4b23-bf52-15b9ea4a6485", "sighting_of_ref": "indicator--5bfa35ba-4d80-47a3-b6cb-0b197b65815a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e61483-4463-49b9-a21d-35b7ff332611", "sighting_of_ref": "indicator--61bc7b43-db25-45ab-9d91-fbc29ba869bc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d251b3-4c86-4170-9c83-51245231b597", "sighting_of_ref": "indicator--0a89e665-a0dd-4555-bf26-7af68a37d8f1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a103b4-2850-4579-890b-e6664ebaa3fb", "sighting_of_ref": "indicator--39336b8a-bcad-4c0f-957d-fb3977e8d370", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13272a83-e61b-4623-a347-0fe3ede06c93", "sighting_of_ref": "indicator--60eeafe9-39da-4c5d-9ceb-0c1ac4c722c3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5f0817-f9a9-43bb-93c1-d1cc6993b87b", "sighting_of_ref": "indicator--b462b08c-76b5-47bc-a2fe-3068de4b2812", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1318dbae-439d-40b8-9fe1-03a40c5f0c73", "sighting_of_ref": "indicator--c0dacb63-d657-40fe-8ae9-ed954814ab6b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f9cca5-4e3f-42a1-a25e-8fbd197c0417", "sighting_of_ref": "indicator--80b1b451-69fc-48fc-8d71-5064df16ef79", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768a9f43-2488-4c66-82b6-93a9398cefd7", "sighting_of_ref": "indicator--6158f21e-0bdd-40b5-a3a4-b06c38db9e73", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb805e4-2bbf-4f8a-9756-2fa4871f082e", "sighting_of_ref": "indicator--0caa7cb6-3edf-491c-900f-b4d355b635b2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9683a98c-bd33-42d5-8b69-cb3cff355584", "sighting_of_ref": "indicator--fd7a13e0-dfc1-4f40-ad60-2dc28e772ef0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e690827a-a18b-4793-90f2-411388ffd4cf", "sighting_of_ref": "indicator--9cb53506-fccd-455b-bdbb-06105cc23aa3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974e4be1-2339-4a44-afb6-313f7704eb8d", "sighting_of_ref": "indicator--fd189907-2b08-4caa-bcf9-d3a17605baeb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3718bb69-2b16-48c7-bd8c-0f8f9b3458d4", "sighting_of_ref": "indicator--14aa2dbc-518c-4b1b-a0bd-888bbfdcc65b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279fb560-687e-419b-8303-b0d4e106df80", "sighting_of_ref": "indicator--94e31f61-03af-43c3-8417-f167f5e0291f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6f77e2-cc1c-4d4d-9c56-659f71d8af05", "sighting_of_ref": "indicator--cda41919-bf18-4d7f-8f41-5af9470864bf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cac9119-c4db-4f85-8d06-39566cacdb96", "sighting_of_ref": "indicator--63814ef2-eabe-41a1-9e0f-4fdb1794bce7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9392622-0b8a-4f51-8d6c-0246f7494443", "sighting_of_ref": "indicator--7f9ad7bf-84b0-48f0-a289-5f178fd7b53f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425de978-ffda-42f7-9b88-d194bf7c4476", "sighting_of_ref": "indicator--32abb05b-3477-455f-8e9e-4957873ebb72", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ed03ed-1dee-4dac-9256-0b481336ef8d", "sighting_of_ref": "indicator--693da992-3010-4cce-b9ac-ee27b90514be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298d9dce-9765-40b3-81cc-0dd130223862", "sighting_of_ref": "indicator--c7d8fcbe-c8f7-45b5-a7e5-c01b2abae7b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9222f16-fd45-42e3-8ce1-08e410bfdc84", "sighting_of_ref": "indicator--561b5059-8223-4928-9e01-9fed7a47cbad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9602307a-fec3-4f78-b7f8-169b995da9d9", "sighting_of_ref": "indicator--6c7b94bd-f76e-4d4d-b3dd-196439c47dfa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba391982-bb80-49ea-84cb-c21e7cb8a556", "sighting_of_ref": "indicator--5b1cb0e8-3da5-46d7-9056-8f2d1fb50709", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0335de5-15a2-46f8-a3ba-3b86e26df154", "sighting_of_ref": "indicator--a9422592-0da4-45f7-a04e-219a03e807b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70a3fe8-e46a-4b8e-a63b-0cc77c1a886f", "sighting_of_ref": "indicator--1bf53b18-d224-4ead-be84-34beb2742dd5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26beec17-b31c-4ed9-a3ac-5d1262c9aeff", "sighting_of_ref": "indicator--08a1c4f7-19cb-4308-8503-7a0c9bebebdb", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d5cf65-1da5-4cab-ba20-c9a511988d8f", "sighting_of_ref": "indicator--64d41fc4-f44a-4a3f-ba18-6feedeb5b95e", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66460b71-04db-42bd-8f3f-4d2913c9a3a8", "sighting_of_ref": "indicator--5565829f-1936-4c4a-842a-e8a23af7275a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa92c68-4964-4349-93db-91e9ab9a6c40", "sighting_of_ref": "indicator--85cb5de3-0eb4-4004-8010-6bfcb9a8df52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a2ed5c-cfe5-447f-9bae-00b43c3c2c70", "sighting_of_ref": "indicator--c7a38bbe-bd19-4c7e-a411-7c883ae260b1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27971e6b-447b-4fbd-bf66-4f3a79329f5b", "sighting_of_ref": "indicator--cff49149-8dfd-43f4-aad5-56263f63e8bf", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a3bc89-12ea-450f-b59c-8c691d91c59e", "sighting_of_ref": "indicator--afc87178-2477-43f7-b1ef-95d4b129d858", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f994813-1105-4ff0-909d-f1e347df1c82", "sighting_of_ref": "indicator--afc87178-2477-43f7-b1ef-95d4b129d858", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae61c795-6fd9-4e40-950f-7367f349408e", "sighting_of_ref": "indicator--afc87178-2477-43f7-b1ef-95d4b129d858", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49db2363-1ba6-4efc-9796-d2f45c969c15", "sighting_of_ref": "indicator--b951ba18-28a2-4d46-a7c0-8c99d6709132", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9291681-9fe4-46e2-92e0-19e678832584", "sighting_of_ref": "indicator--f18e5d2e-6249-428b-b5fa-3c51c6bc3187", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fcb37d-29db-49f6-914d-9db659471869", "sighting_of_ref": "indicator--140e7fbc-695e-491d-b78b-f8ff7e64d428", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3aa8cd-5d44-4528-810b-bf6bcb1bd1da", "sighting_of_ref": "indicator--a3b2d4bc-be31-4a8a-9f61-ebf9ed6c5358", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50eede-419c-4bc2-862a-5e2d58c49224", "sighting_of_ref": "indicator--7e44be68-f618-4825-bcf7-588bc46cb446", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31feb889-d6a7-4912-9e2b-187425120211", "sighting_of_ref": "indicator--3402cc17-6c20-44e3-a6a0-66a18c96712f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e7ee44-c97f-4dd8-a19a-21f02fcd021a", "sighting_of_ref": "indicator--dd3fb164-88f8-45c7-a83c-1ebbbdf113a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493e00a4-e565-4a2f-8acc-8b20df6234bb", "sighting_of_ref": "indicator--5cf69ff9-1d7f-4601-be24-ad23b2a19b9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797cbb1d-c3dd-4fbd-a368-55320f53c45b", "sighting_of_ref": "indicator--681cc874-57d7-4c52-a3c2-f47f84f7f2e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df8e16e-d915-4732-850f-92bdb042c622", "sighting_of_ref": "indicator--55859d8f-d176-4ce6-af21-27848e5f4aff", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d61746b-5225-4bf0-af06-e80f4e09cd71", "sighting_of_ref": "indicator--ff37c5c8-8abc-4e7f-9de5-9d887cf28571", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc721ee2-b25a-4cf4-bc5a-1c07d91e470d", "sighting_of_ref": "indicator--e715cc3b-f79d-438f-87b7-fd5735b561d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecaa791-eb14-4e31-8782-00b3dc0e68bb", "sighting_of_ref": "indicator--1c768285-0ad8-4130-866c-24f656ef1981", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1683ac70-3090-4aa0-8d56-2c36378fad38", "sighting_of_ref": "indicator--955f353a-5efa-4e5e-b7ac-ee3c000702e5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542eb900-d05b-414a-a624-19a6c47cd446", "sighting_of_ref": "indicator--3de8bf19-fb7f-4bda-b0c2-87f558ac2073", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e214da-f50e-4fb5-b556-0874feedca2c", "sighting_of_ref": "indicator--45cdf9c8-1bea-4a94-bb5d-5178ba5dd016", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ccc748-5456-4f05-9c80-0f8bf34bab87", "sighting_of_ref": "indicator--9ce2c18d-f537-4637-aade-ea7b4ef80c5a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c0b4d4-da21-474b-8800-ff8bbc244a8d", "sighting_of_ref": "indicator--07e83a53-f99b-4fed-80bb-b7a8d34123d3", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8b7a23-da21-4580-b479-057719df5977", "sighting_of_ref": "indicator--93fc3d5c-a061-43fd-a386-308eefcf402c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017009ee-1707-470a-9c1e-4503a5146ae9", "sighting_of_ref": "indicator--93fc3d5c-a061-43fd-a386-308eefcf402c", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a780c1-f46f-4cd4-984e-d0e1daeb414d", "sighting_of_ref": "indicator--93fc3d5c-a061-43fd-a386-308eefcf402c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee1bf63-ca06-43d9-857f-4789ef175c12", "sighting_of_ref": "indicator--93fc3d5c-a061-43fd-a386-308eefcf402c", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fd7d27-362d-4372-9cf9-e3013c2f484c", "sighting_of_ref": "indicator--79eef428-f396-477b-adf8-1541262813cc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ab7de8-bbda-4dd8-a53f-b5885356204a", "sighting_of_ref": "indicator--79eef428-f396-477b-adf8-1541262813cc", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810434cb-dcf4-446c-9f98-5d956310c833", "sighting_of_ref": "indicator--79eef428-f396-477b-adf8-1541262813cc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2dbd81-8a61-43d6-83ba-8a5736d4d3b2", "sighting_of_ref": "indicator--b50ee870-a00a-4b2b-8398-65cdce94e8bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55486d96-18ad-4ea9-96ff-14fefd708fe4", "sighting_of_ref": "indicator--be5dac26-17ec-4d0d-9ce1-fa732210a2e1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1f7e51-6882-43f4-8620-793cfc13d6f7", "sighting_of_ref": "indicator--c3a866a3-15bc-4b83-89b5-183c5b747657", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8679999-1a56-48b9-8f69-8493795feafd", "sighting_of_ref": "indicator--c30e9900-2d62-4777-b066-3adbf9d53f78", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfca684-3f7d-4ae8-9ad1-5dc58db55db1", "sighting_of_ref": "indicator--00be6424-362e-4ee6-857a-078fabd37219", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdd183f-7f4e-4c15-9849-c0fb179a4c82", "sighting_of_ref": "indicator--00be6424-362e-4ee6-857a-078fabd37219", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516bc62b-129f-4015-8958-b4a0ff0da6d5", "sighting_of_ref": "indicator--b53dcd50-bf42-4c22-a574-c487de7f09be", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6597be30-c030-4486-9b7b-fbbe25abfe4f", "sighting_of_ref": "indicator--d3c6fa1d-bc5d-4bff-990f-6a308c686fbe", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939c414e-99df-489e-bbb1-29123d72988b", "sighting_of_ref": "indicator--d3c6fa1d-bc5d-4bff-990f-6a308c686fbe", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef5cc9b-fd38-45bb-8572-f952ea8b5b7c", "sighting_of_ref": "indicator--d3c6fa1d-bc5d-4bff-990f-6a308c686fbe", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17efb061-9640-464c-a087-f56ff0786f63", "sighting_of_ref": "indicator--a7d7c3a9-53b7-44f9-99e2-ab4004c0340c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4471eeb-60e3-4c4f-9077-2768ad14874e", "sighting_of_ref": "indicator--3bf557f1-4333-4adf-b957-de77397ab3ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55203491-86d9-4e18-84bf-8c8102c55d84", "sighting_of_ref": "indicator--3bf557f1-4333-4adf-b957-de77397ab3ee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f12850f-1cf6-49c6-8537-c3623b2d9763", "sighting_of_ref": "indicator--3bf557f1-4333-4adf-b957-de77397ab3ee", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bce3fd8-c74f-4b5b-8b57-27359f3b7d05", "sighting_of_ref": "indicator--05e97902-242f-49e5-9f94-121371bf13e3", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd40aeae-443c-434f-a780-19cb23ecbd13", "sighting_of_ref": "indicator--ca43345d-bfb0-4248-ad0d-6a6733ac6fd6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc100f9e-31d8-4569-9042-8b3bb986125c", "sighting_of_ref": "indicator--605b7bf3-6493-43cd-a8b5-693cbd417389", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77dbe92-59c7-4a92-9083-222900fdc21e", "sighting_of_ref": "indicator--605b7bf3-6493-43cd-a8b5-693cbd417389", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95638ff0-439a-4d70-9ac8-9da5fbd0d53c", "sighting_of_ref": "indicator--605b7bf3-6493-43cd-a8b5-693cbd417389", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80dd9cb-b96c-41d7-b28c-e43b41b23312", "sighting_of_ref": "indicator--3d8ee752-58f3-408b-9e83-342b95c0cab2", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988298c0-7578-4664-8895-786a181bfe17", "sighting_of_ref": "indicator--cc0bb259-c36f-4419-a14b-fd139eac23c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef451a1a-c114-46d5-b76a-fd1680b6e866", "sighting_of_ref": "indicator--cc0bb259-c36f-4419-a14b-fd139eac23c5", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b8de18-48e7-42dd-9892-7b663f585573", "sighting_of_ref": "indicator--cc0bb259-c36f-4419-a14b-fd139eac23c5", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f691caa-0030-4579-980d-691bd3434684", "sighting_of_ref": "indicator--d4ebe001-6485-4147-954f-b04442ccf3e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78486fe6-aa74-4e08-97e8-3837421c4d2d", "sighting_of_ref": "indicator--0ce06b35-1235-4eca-903a-e1d8b40326b7", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578eb71b-a9bb-459f-ab76-dbd676b6a1f5", "sighting_of_ref": "indicator--e17fc368-e8ea-4c34-9bcc-2a9b17a6a16e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaa0442-4262-48ec-89b3-a313bbdb7d17", "sighting_of_ref": "indicator--e17fc368-e8ea-4c34-9bcc-2a9b17a6a16e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a293787b-31c9-4987-8293-e86bfee43d3b", "sighting_of_ref": "indicator--6e06d414-97e1-4c25-9dee-63a99006ce1f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22876ca9-3d69-4972-a133-33d436744a72", "sighting_of_ref": "indicator--de86af35-4d1c-46f5-ab65-6ce5326cbd65", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcb1263-76ef-47a5-9783-a362b7b310e1", "sighting_of_ref": "indicator--de86af35-4d1c-46f5-ab65-6ce5326cbd65", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be7389b-5a2b-4d8b-9078-19e6101c51ee", "sighting_of_ref": "indicator--a313e69f-2cf8-4308-9e8b-e738be3353ef", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e4fe40-1f78-4c55-ae96-8d1fa83d0765", "sighting_of_ref": "indicator--9670760c-f26b-4865-a64a-18ce21d83a40", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c48e94e-8e74-4d93-af8e-4d57ea87be56", "sighting_of_ref": "indicator--84575b40-4ad5-4b95-8690-84a6487e545b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bbae1d-0589-4779-be48-1677de207afe", "sighting_of_ref": "indicator--85f1b5c7-8b03-4f01-842c-d93118eb363b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e788a5c4-db40-482b-a3bd-1c1b1ef47976", "sighting_of_ref": "indicator--39ffac6f-f836-49a4-bb43-2d0540c7338b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a85510-0a56-498a-b0e5-ddb13fff346c", "sighting_of_ref": "indicator--27374925-4f4b-4493-834f-1954e93cc339", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb9928c-8cb5-4074-8ccc-f537088deab2", "sighting_of_ref": "indicator--6212a661-5a4e-479d-9eeb-372a9566c955", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214a2d74-413e-468d-b4dd-54cce04141ee", "sighting_of_ref": "indicator--d6e83ee5-b5e4-421c-a31d-f1e3220c8f2f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeda129-0bed-4466-82d9-6ed4e0db7620", "sighting_of_ref": "indicator--ee7f2283-6796-4eb4-94a4-bea244165022", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf488e2-3d00-4e0e-880c-c32b8a618ab7", "sighting_of_ref": "indicator--ee7f2283-6796-4eb4-94a4-bea244165022", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b7db17-4304-4e51-b7cf-8783d18e328a", "sighting_of_ref": "indicator--802e928e-4774-41a2-bc6e-d3958b0c979b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3277a1-e5a4-4446-bc49-31061eec5097", "sighting_of_ref": "indicator--17fdddba-e26e-465d-8613-fc9dfe5231c1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99634a31-835a-4c65-a219-e699e5bc550e", "sighting_of_ref": "indicator--5b7dfe3e-e0fa-4ec8-9a81-dd93c6cbcbd6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024c0294-fadf-413d-b872-8640c617593f", "sighting_of_ref": "indicator--af9f3e04-c5b8-404e-a024-8a7215e71412", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeec67f5-d797-4bc4-93b6-822b9a8672fc", "sighting_of_ref": "indicator--711dfc4a-a30f-42e1-b5c3-a5aec834eb50", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cb6fd8-c8da-4c40-9a3c-36681b9ab25b", "sighting_of_ref": "indicator--47d9fd6b-ad6d-4b4a-ad0b-8f3485d94ec9", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f729e06-ff6c-40dd-af02-0b5177f2b6b8", "sighting_of_ref": "indicator--e70063e3-6c83-4160-9062-ac21f36aa48f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd282bd6-efc6-4e12-bdc8-abc5be8888ff", "sighting_of_ref": "indicator--e70063e3-6c83-4160-9062-ac21f36aa48f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8bda05-8b0f-4369-bedd-619b92735f3b", "sighting_of_ref": "indicator--36cb8a71-f8cc-4d45-bd06-5a2ba60e2223", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab6c751-6e7b-4b5c-bc63-1fcfc3cd97ac", "sighting_of_ref": "indicator--122c69c5-e7b9-4e93-936a-93df6f351d6d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1f0ee9-a6d1-4fdf-8208-8564d944c1b7", "sighting_of_ref": "indicator--0428fb92-a061-4860-9ac4-cadc7821e852", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaff447-e9a5-4924-aaf0-3acb7167d958", "sighting_of_ref": "indicator--53049226-d031-4237-886c-04cd49d90bec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195b5f17-77f5-45df-8acc-1b39caafdea0", "sighting_of_ref": "indicator--21424f82-a084-47f5-9bb6-a3590588c19a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58f2e5b-4162-489b-a964-2a76c2db9926", "sighting_of_ref": "indicator--be73c2a7-00a4-486e-8967-0fdc4393ac61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e364f7-6e01-4eef-973a-de70e8f2e7a0", "sighting_of_ref": "indicator--6659d2e2-1dac-483e-9cba-d98dc775a18e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9832a61-aff3-4a6a-8db7-1a7f72c0e9a8", "sighting_of_ref": "indicator--b79f7e03-dad5-4f03-af0c-4439ec7050c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30453c03-7acc-4236-aef4-0abbc0d72db6", "sighting_of_ref": "indicator--b0c4e4e5-4828-4c0e-853d-615da6eb907e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10e47a8-1b52-41ce-9910-e896cd477650", "sighting_of_ref": "indicator--4ef56965-4037-47c4-b3b7-119617e9666f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812f05d7-a3bd-4bee-a2b1-5ca122301df1", "sighting_of_ref": "indicator--cd947420-e179-4b7b-a030-814e2803056f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc233e5-bbf3-4be3-9a05-13f566c750d4", "sighting_of_ref": "indicator--a9328cf9-c2d7-467a-9c2c-9c8ec7ef683d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ca4340-093e-44c6-a398-5cbabd77aeae", "sighting_of_ref": "indicator--9677ba4a-354c-4bec-be4e-e521b200cfcb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3b63c1-d09d-4ad2-b6ca-aa82ba219d9d", "sighting_of_ref": "indicator--50007d40-477b-460b-8a2f-6ff03f94de63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2046fa34-6c46-4cdd-a694-9d707132c502", "sighting_of_ref": "indicator--ee6a1314-c8e6-4a74-aed2-72a28142b990", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e8ae29-c1ea-42eb-aa69-fcdc18bc6246", "sighting_of_ref": "indicator--2363ddff-d785-46dd-9228-7ded5f775605", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c9b1c4-f6f2-471c-89cb-a5910f8f0b57", "sighting_of_ref": "indicator--d4c73cf3-f721-455b-92cb-bdee9cb08c4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f6509-4263-42cb-b8b3-fc2c4c534264", "sighting_of_ref": "indicator--ea2bbea5-5f7c-489f-bc2d-7de65d6d8336", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e49b894-f19b-44ed-8857-7519366ccce8", "sighting_of_ref": "indicator--5a696cee-d02f-47d1-8849-1b0a115e5eb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41cdaac-9aaf-4a01-ba70-3d7f2950a9b6", "sighting_of_ref": "indicator--c017bf04-24d4-4e8a-ba66-fc8cbbb61968", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca837d6d-d562-4d8c-81a3-3d8a4f05aa48", "sighting_of_ref": "indicator--a85ad4e7-74cd-4201-b167-e6e7075e1d6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc7bea5-178f-4b19-8710-562a10c30a22", "sighting_of_ref": "indicator--25031020-81a9-4fed-a5c4-d7660c7dff8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375cfc4d-c814-4012-ae2d-598c932a2dcc", "sighting_of_ref": "indicator--2318ba96-7273-427c-abe1-d5765000f89f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01d8603-8176-4e73-9d5a-84b7398032e4", "sighting_of_ref": "indicator--6f017aad-a0a0-43f3-8174-1e4783706627", "where_sighted_refs": ["location--e2fd983c-0dc7-4283-8560-c2ee36f871eb"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccae4bc-7c09-4630-8ac8-7f7f1e7fb77d", "sighting_of_ref": "indicator--38f029ce-43bb-48a4-b65b-d9987f2b7e8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91a6f48-4497-4937-bbe1-36c78cba19b0", "sighting_of_ref": "indicator--38f029ce-43bb-48a4-b65b-d9987f2b7e8c", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5481f2f-fe82-45b5-961e-144e39800bec", "sighting_of_ref": "indicator--3ba07494-a4d6-4a9b-8c81-d3d93c13209b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3f3c72-d41b-49e8-95f6-1350563c831a", "sighting_of_ref": "indicator--7d14f8f8-243e-4698-bc10-ec00569cce68", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02caef5-e902-4028-bf5b-96351a114154", "sighting_of_ref": "indicator--646c61c1-0e53-44ff-bd4f-5088a363cbfc", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce2da97-f4ab-40f3-923d-42ff6a787345", "sighting_of_ref": "indicator--3f414cbb-18ce-4939-b8a7-56d9dc5216b6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947538e5-efb6-4713-8a3f-d077144298c7", "sighting_of_ref": "indicator--3f414cbb-18ce-4939-b8a7-56d9dc5216b6", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca7bcfa-b1cd-4ccf-9f9e-2b8f8a0f4129", "sighting_of_ref": "indicator--3f414cbb-18ce-4939-b8a7-56d9dc5216b6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe103b35-b788-46eb-beed-a58cc0d80658", "sighting_of_ref": "indicator--3e590fb6-b6ab-485a-8551-8d487f63e99d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ea03fc-7d51-49a1-9a3c-17e3a36ed03c", "sighting_of_ref": "indicator--3e590fb6-b6ab-485a-8551-8d487f63e99d", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4248e99b-50f3-4d7a-938d-cec7e0717b84", "sighting_of_ref": "indicator--ef539707-1a48-49b0-bfff-ac573a9abc53", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b458f61-b28f-47a7-8805-d35eabf3247d", "sighting_of_ref": "indicator--adfb0488-3aa8-4808-a80a-aa68a6ad1ac0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a5fbc-d92d-426d-ac54-d7143a728f7e", "sighting_of_ref": "indicator--070b7366-8e38-4c7c-9c87-d8074d3a28b0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4a6800-e06a-451f-9769-98b27f3581d2", "sighting_of_ref": "indicator--6cbf2566-df44-43cd-b177-dc1e3acaa847", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0923b442-e304-4732-a940-a5ecc53b14c0", "sighting_of_ref": "indicator--e39beac3-7b22-4afc-ac82-972019ff563e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5669e5-05f7-4fb2-b7ff-797af80dc23a", "sighting_of_ref": "indicator--e3210cc9-8625-44e5-914d-3041d3d83984", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dc7040-1bc8-4bca-bfb2-3647155b5709", "sighting_of_ref": "indicator--a70cb4f5-8f71-4694-9479-51b899562da6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7bfe2d-6370-488e-92b9-634718f2f66f", "sighting_of_ref": "indicator--c405ce07-6f80-43ce-80c7-ba6eee521a50", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbf3c53-48b4-4420-a862-1c9b8ffe1cae", "sighting_of_ref": "indicator--d3bf5cbb-b7a8-4dda-a30d-b35d5174a19c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7c1c7a-4349-4965-9aed-d6c3e4415b92", "sighting_of_ref": "indicator--ad9ee11d-3c5b-4c0f-b32f-cd5811ab3e38", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77137c55-9aa0-4572-97fe-f8d11c3c3b15", "sighting_of_ref": "indicator--7f0cd0cb-2e1e-4c65-867a-6cb3511260c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeae173-ea74-4436-9d67-a61e73d167a2", "sighting_of_ref": "indicator--e2ebe4a9-b89f-483e-9d43-60968f64c8ea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9de9a4-9b43-4026-9f5f-cebcd6351437", "sighting_of_ref": "indicator--f2e069ed-a18c-46e7-a948-04e9914d7e31", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfa933c-38cd-42a9-8c65-bc6f703afcd3", "sighting_of_ref": "indicator--125653dd-cec6-4dd3-8d25-141eaf7ba64b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e05d3d-c937-4ba4-a4d0-45067e5eb84a", "sighting_of_ref": "indicator--648565cb-e8d6-4ae5-af4a-2bbaeaf5b8e2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d92665f-1c4a-4935-9c7f-3027aec9f36b", "sighting_of_ref": "indicator--2f09a3b7-057d-4e11-86eb-55067686ccc8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ccbe0c-84e4-43c4-898a-79daac052e48", "sighting_of_ref": "indicator--316617b9-917c-4291-8d55-b10270acc19b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a764c30-37b9-471d-bfc9-c5a3ac3e8e2e", "sighting_of_ref": "indicator--04054f61-4cb4-4ca0-ad9a-1d2beea5c6db", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc1b4ca-2cc6-497c-9705-ea760ccd7d6b", "sighting_of_ref": "indicator--dcd9532a-0492-4116-bcaa-0e87d4abf9d1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e5b562-69fc-43b4-90da-0a0777c4243e", "sighting_of_ref": "indicator--77d47b68-6938-4992-b90a-b13a0dcf1b2d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8d951c-764b-4bae-86a8-a1c98006483c", "sighting_of_ref": "indicator--98505eba-300c-4bf7-b0c3-ba5ce41ceb9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e6c638-5d01-4c8c-b58e-28927368af94", "sighting_of_ref": "indicator--2fbcf445-4991-411c-993f-7a7e4c317af0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6abb4b-2d8d-43ff-ab96-ae57471a4968", "sighting_of_ref": "indicator--a2d6cf5e-ec52-4064-99a5-6dfa1f0e359c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278c218c-a50a-46e4-9412-e53df075014e", "sighting_of_ref": "indicator--8c454865-3190-43ce-8644-3b4d10c21da5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769f576d-750b-4e88-8708-53c892606819", "sighting_of_ref": "indicator--0b082c67-9def-413b-9bb7-4eda1c9a3414", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c22bbc-c6f8-4cde-92fd-fb9dfef0539c", "sighting_of_ref": "indicator--8c5332a7-1d06-4da2-ba2f-c064c3d2ecdb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677ab668-e732-4c99-80d8-1b6daf2ba885", "sighting_of_ref": "indicator--4b089926-dced-4e53-84f2-f3c3079a8560", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d6658c-78a0-4148-9f18-a3532e0fdd7a", "sighting_of_ref": "indicator--960d1820-2da8-48b1-bc0a-8901d4f78695", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6168125f-c046-4368-8011-e052b1539ae2", "sighting_of_ref": "indicator--05703e9a-b512-42f5-b9ab-d04027da9075", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d4b5fd-b6ef-4043-815a-6ba31aeb54ab", "sighting_of_ref": "indicator--a74e530c-98d1-4c9e-bd8d-cabfb2d6d2e6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc55eba-640e-4398-ad5e-d0313997df20", "sighting_of_ref": "indicator--fee26335-deaf-47ee-a1c3-2d971d437860", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4b62ef-7d29-4a00-bf79-9016e83c7bed", "sighting_of_ref": "indicator--dcbe77ed-6e71-4373-81b0-84ec42f29c76", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee17f1fb-25ac-49be-9578-944dc3414ec7", "sighting_of_ref": "indicator--615df441-20d7-4183-8b43-85b18200ec32", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6d0185-9b63-4943-83a6-9d009ffb7fcd", "sighting_of_ref": "indicator--cf6c490b-37af-4bda-914c-a3db0621f471", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f92b2c-e1cd-45ef-8d93-443223054607", "sighting_of_ref": "indicator--68b649cb-e8e9-4597-8b24-b40ed17449a8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132ebbdb-5863-41bd-b652-8737b5393d3d", "sighting_of_ref": "indicator--e354c246-f810-475e-87e3-940673401268", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4ee5be-3709-4fdb-b47e-c30de461c607", "sighting_of_ref": "indicator--32393f7b-8731-4936-96a5-e76f4aa33f8c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eb0df7-2cf3-46dc-809c-1dbfdf82d7d7", "sighting_of_ref": "indicator--69771391-1f6a-4fba-88ba-90fa5bb7c4ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d066150a-534e-4a0f-8bce-c1f38c397356", "sighting_of_ref": "indicator--cc0fad1c-f5c3-476a-ab70-96700bc4104e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62067d7c-0263-46a2-918f-8112b6214cf5", "sighting_of_ref": "indicator--72da00e4-6697-4b54-acde-245942133830", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b226837-ffbf-416e-afd1-f02cbe2c44e6", "sighting_of_ref": "indicator--aef49109-3f7b-4499-bac0-0aaa35612301", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4dd505-4df3-4492-83d3-8e5801d533a4", "sighting_of_ref": "indicator--9e356e3f-c527-41d0-b294-c2fa513add6a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff3fa05-4981-4b86-a113-0440dfc7beae", "sighting_of_ref": "indicator--18f82831-84b8-427d-9f89-aaa78877a450", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8444859-10b2-46ed-8a64-bca1b2d97ecb", "sighting_of_ref": "indicator--55f6f1f9-0d93-4784-9dbd-d987ca6658e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e632ce5-8e40-4aee-a6b2-5a014d6ec9ca", "sighting_of_ref": "indicator--5806ecf0-e6f2-42b0-a98e-35f5e0d2616e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9891bd1-f62c-4d44-8818-96413cb4f806", "sighting_of_ref": "indicator--2cea379f-54ad-48e7-b462-a7ca3879479c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bce572-1948-4cc8-8b1c-5d94021f5fee", "sighting_of_ref": "indicator--abdca0c5-299b-40fd-b8b2-52ebdce86211", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c39b083-4717-48f1-a07f-55ff50876e96", "sighting_of_ref": "indicator--458d5dab-ca9f-4528-b1b3-80f51a89e037", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3e41e-e989-4aef-8491-5b5f32a648a0", "sighting_of_ref": "indicator--b18b4b12-6017-481e-ab5a-7d97602e31bd", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21bbaa3-35e1-4f0e-a565-9533f431f2bb", "sighting_of_ref": "indicator--a1764a16-fea9-44b0-a0f8-15cd17fad8dc", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db45916-a21a-43ea-80bc-ca4ea6f76045", "sighting_of_ref": "indicator--d9fdbf4f-96af-4194-a76f-d71a1235f784", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94469efa-f9ef-4ba5-ae44-e6a8026727dc", "sighting_of_ref": "indicator--fd947f9a-aea4-42b9-b07e-f0439550090b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e6f323-8e85-4636-9917-383bb633718a", "sighting_of_ref": "indicator--fe145a0f-1d7f-491a-800c-dcc88838b08d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a2a470-25a8-4ce9-bd26-9cfa0eed3bf8", "sighting_of_ref": "indicator--4c23d512-02e0-4888-99a9-9fb3fa1ad9e1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bba2e1-0998-4af7-a45d-8eb79f461917", "sighting_of_ref": "indicator--fa80f9a8-ed39-4814-9dcd-71f219a6ca7d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f229936-a351-4645-93b1-df5f53167b69", "sighting_of_ref": "indicator--d726bdba-09cc-4d3b-8a02-1a607bd9af1c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e43a3c-1853-4039-877e-5f0c387e13ca", "sighting_of_ref": "indicator--d416635e-5bf9-4711-92e4-38c24fc1fabf", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3907eb-770b-43d7-a447-6b068eb01288", "sighting_of_ref": "indicator--d4c02240-be15-48b7-affe-ab9ca67a6add", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a9ae0b-558a-47ad-ba0b-f0f63d5747e2", "sighting_of_ref": "indicator--ae30c4cc-4f4b-4e31-8a36-fb406f3b9bd5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60edd34c-3ff4-4802-b317-3eaa0a2dc2c9", "sighting_of_ref": "indicator--fed4a0da-1b07-4cf2-979b-de2d61044fe5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229db2ad-1cd3-4fb2-97fa-7450c6a93a06", "sighting_of_ref": "indicator--d62954c8-6091-4627-8520-a61022621df1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d30412-8579-40ad-a423-34d6a42d4df7", "sighting_of_ref": "indicator--571e4e05-7c6a-4f2d-9544-f13035a61550", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32e6cee-d2e3-4786-9c71-c62a9570cc84", "sighting_of_ref": "indicator--1efc4ef3-c0e4-46bc-ae4b-3a93e5fefd7b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175df5bd-bc90-438e-91e2-59c224274577", "sighting_of_ref": "indicator--3ebcf0d9-b15e-4dff-9dfd-22d6426bd2ca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36375fe8-ca90-4f2b-b3c8-21920b047502", "sighting_of_ref": "indicator--2f87c5d3-15b5-465b-bffc-e04628a983ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd57494-c3bf-41a9-ae01-8588fea7a09f", "sighting_of_ref": "indicator--271bf5c9-8e63-4076-8314-a8cc2fdcae3e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1fba3d-4fc1-4961-9096-a3607fe3ea53", "sighting_of_ref": "indicator--a9503bde-88e6-45e5-abf4-7fb42bbeb103", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37a0bae-96bd-4997-9ef1-74655cbf36f8", "sighting_of_ref": "indicator--353a6182-6d17-4d82-85ed-21a2b0f6c76a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a298e3a8-b28f-465a-9159-0524b79be21f", "sighting_of_ref": "indicator--2a7ddc4f-6aee-48e2-8f0a-17339dd508fa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9932bdca-bfba-4561-ba40-548a3080751c", "sighting_of_ref": "indicator--e65b34fe-1e8f-46a2-9ed5-5120eaae26f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91675e31-f2e1-4524-90db-1064467f86b0", "sighting_of_ref": "indicator--22a437a2-543e-41b2-97fa-d0406a2ce458", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49a0464-0495-4e99-890a-d11684d2d7fc", "sighting_of_ref": "indicator--e36524ad-9f02-4cb8-a0d9-7eff5b9de384", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367e0265-165b-45e5-a5e5-08635842c1f5", "sighting_of_ref": "indicator--a9602243-0378-4086-b420-d2a1b3bbbae4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bc2ca2-8764-4492-91e6-26d91d762555", "sighting_of_ref": "indicator--6e74365d-5842-450c-b33a-82bf9f8c5502", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71e3214-e153-457d-b29c-842d63077e3f", "sighting_of_ref": "indicator--69cce76d-93f7-4bc5-a9e5-29e5b772b785", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ac39d1-e297-46bf-a666-bb2afd3844b5", "sighting_of_ref": "indicator--4f8e4f7c-7d62-4e47-9b91-3ecadedf9ba7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d03e4c9-e5c5-4275-8ac7-73e40ae9c0cd", "sighting_of_ref": "indicator--c86a7d1e-1f50-4a44-a348-477257d89560", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907046c4-e560-4eac-8c23-f5ca40488428", "sighting_of_ref": "indicator--a2f994c0-fe7e-4b1f-9558-28ad6d18d89c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd73050-ef40-4717-b7b3-d5408fd742bb", "sighting_of_ref": "indicator--f9e0e482-7481-40b2-a8b5-a37d7f0da811", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdaaa9c-1220-4e8a-b1cb-e7f9e706e47e", "sighting_of_ref": "indicator--4c12c98c-d8be-45d3-a9c1-b9adc0909316", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d093003e-58c3-42e1-9eb8-c9023d875ea9", "sighting_of_ref": "indicator--a8a3e4c0-bc4f-4022-a098-fb462520ae14", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34d3f95-ba8c-4ae9-a8c9-aac7fe479a89", "sighting_of_ref": "indicator--7c739e28-c9c7-4e5b-8e3e-70b0c54ca0f2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7a7d14-ce8f-4253-9877-2aa3c7eb69af", "sighting_of_ref": "indicator--0e2aa480-833b-4c61-9271-158857b8088e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4474b233-2e50-4138-b372-912b7f931a09", "sighting_of_ref": "indicator--9a39d87a-29a5-4bb4-92d6-95b9e9e3b516", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01486c25-2813-4bf5-abeb-6814c3b1e819", "sighting_of_ref": "indicator--609b580e-45d9-4ba1-b073-6525243e4407", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7685363-f690-44f5-94cf-d9855ad26ea4", "sighting_of_ref": "indicator--ae2b6da2-8a3c-4a06-b17a-68657c72422e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3551a9e-4612-4965-b25c-67fe6f63f2bc", "sighting_of_ref": "indicator--331fc7ab-1832-4c16-9af9-9c3cd986e817", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bc44a2-b4fa-4a76-b85e-f1d56b25ae8f", "sighting_of_ref": "indicator--75124b22-deb0-44fd-9109-3635112acae9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d9328-aa24-41b1-bb5e-5bf40f5c2148", "sighting_of_ref": "indicator--8de9b7aa-960a-48d0-9475-eb416089d72d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5376cbc-384e-410a-b8ad-81c815c2271c", "sighting_of_ref": "indicator--cf58d92e-19fa-4d08-b5a1-bad5914f646c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733f8402-df62-42d8-a316-3383275f4ee8", "sighting_of_ref": "indicator--c0b60ddc-0873-43a0-ab74-c7a7e41357c5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d50388c-4438-4055-829c-314784afea90", "sighting_of_ref": "indicator--3a72626e-3737-4918-9a8e-93d55bc7c807", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e4f21c-6ce9-4f83-a92a-0019663dceb4", "sighting_of_ref": "indicator--c2a214ea-cbe4-4404-82d0-618849210cf2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4025ec-ab6c-4d03-bc2b-60103f0d7faa", "sighting_of_ref": "indicator--a1af8c86-ca1c-4552-a07c-8a7733cac7ed", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0956df1-2881-4d10-95eb-0b4d522390bf", "sighting_of_ref": "indicator--0d2397ff-b5c2-4db7-b18a-053a99eec5c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25bddeb-23a1-408c-be29-109e64e88752", "sighting_of_ref": "indicator--2277db09-2ef0-4ff1-b888-fd56ac79842c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc1facb-ce1d-4077-ab41-d4a01ce4d7a2", "sighting_of_ref": "indicator--bd3a2cb3-c25b-4861-8df1-95c718b205c6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5239963d-a2a3-4c37-8a07-49c2555ab287", "sighting_of_ref": "indicator--f8a0ae1e-d98a-4881-a559-59be688548f9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24968661-5a8a-4b54-ba7c-51b12e6ac905", "sighting_of_ref": "indicator--df9f727b-ee9f-4f34-8f48-0aa9a8317004", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ecdebe-e8d1-4ca5-87a4-94eb889c08a9", "sighting_of_ref": "indicator--e5de2f24-eff3-4c0a-852c-8ddffd1dfd82", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a975ee2f-ba88-4955-af69-fb67f9b9c5ef", "sighting_of_ref": "indicator--5143d54b-bef5-4eaf-b036-2cf8d39ffbd8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c2ff7d-479d-4f61-9973-f9b2a1628a18", "sighting_of_ref": "indicator--8ea1c77e-7f48-4199-b0c4-485421de06ba", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b3186a-997a-4050-80bb-bb7b69769bd0", "sighting_of_ref": "indicator--4c013673-903e-4b21-b789-effb8f353c12", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3782c56d-e9e6-4195-81d1-ada80468b8ad", "sighting_of_ref": "indicator--e05d839d-d146-41f7-98b9-578009b0cd29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2a64e7-fb23-4125-aef9-3b2f0c35feb8", "sighting_of_ref": "indicator--743153eb-049a-4b1b-a2aa-ac887c2531c2", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0fad14-5f96-47f8-b69b-1c61ae750523", "sighting_of_ref": "indicator--cdec8fc6-b26f-4fb0-8024-598d7babbc3d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c5e82e-cae3-4a20-8429-f33a7eb46cb2", "sighting_of_ref": "indicator--143b5896-2ef5-4050-8c73-a45b9e34d37e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5675bff7-c934-4fde-b8d8-3d87ff89891c", "sighting_of_ref": "indicator--448aadc1-0990-4fc7-b2e5-6603d11b6644", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0c050d-a086-41ef-9eec-3ffbde9cbee4", "sighting_of_ref": "indicator--5a50d602-bf46-4b90-beee-b52250fd27ef", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd66fb77-2a49-4c57-83d6-72f1d19d5443", "sighting_of_ref": "indicator--fc9e58e6-cab2-4a7c-8427-b81bdbbe7074", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74134377-db43-40e9-88c9-a6f9c0ec5c5a", "sighting_of_ref": "indicator--c5290ccf-9144-4c07-8933-83ea491df785", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9268ed69-84e5-4cb2-a497-ab85e226a950", "sighting_of_ref": "indicator--99301cd4-7683-47c6-b280-519711317133", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011e61ce-2843-4dbe-bb0f-a2976a58f5ba", "sighting_of_ref": "indicator--d9d581ba-39a9-4a94-9800-25a2f560b426", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0eb520-891b-46f3-ab7c-ba134fbf8bcb", "sighting_of_ref": "indicator--0b1322f0-8b21-4b6d-bb52-e1f4d0633920", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2d8fb0-bdfb-4528-aa94-a7a3cf29c7c5", "sighting_of_ref": "indicator--2e595d89-ad55-40bc-a531-a271bbc639b4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f48d623-4841-4457-8b7d-abee819c87c7", "sighting_of_ref": "indicator--ef758f28-de4f-4c52-8dc9-f6d9e4481849", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a6156d-590b-4799-ad2d-688a5fdefb5f", "sighting_of_ref": "indicator--1c7e07e8-7e5c-4ec9-94c2-cd9ca0bbaeea", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e20173-9215-4427-92e6-0e95ffefd257", "sighting_of_ref": "indicator--803f289a-b4e5-4fd8-8359-d24bf7e082a6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d62b3c-0213-4949-8381-70bffebc6753", "sighting_of_ref": "indicator--d9511443-78a4-42a0-bad1-396f566342e0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31735a6c-aabb-49d1-9801-78e3accf3294", "sighting_of_ref": "indicator--ec45e979-3f9b-40a8-8ffe-dcf024335e42", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff2488c-f739-481e-bff7-292971db811f", "sighting_of_ref": "indicator--ab024892-5be8-4ef2-882b-06652f5a4fca", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c90d2ba-bb46-474e-836b-164d66ff6aac", "sighting_of_ref": "indicator--33265739-1d26-45d5-9321-da50d68771b0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7205d99d-e467-44b0-8e9d-b034fab1939e", "sighting_of_ref": "indicator--56e4678f-0dda-4ddc-9cdc-bf914d671860", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380dcf4c-5a87-463b-8c31-2c8c709be976", "sighting_of_ref": "indicator--216ff71c-8901-4450-a4ad-1a56adb6d902", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff94a9ff-3870-4f58-a2ff-d9fae3d143af", "sighting_of_ref": "indicator--07dcc9a1-5eb9-4789-a7c6-1d4e25f98c6c", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dfdab2-9cdf-4bb2-add4-4d7c1ac89278", "sighting_of_ref": "indicator--677f157e-e8c4-4d3e-83ee-73d4d48c28eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f19c9a-887c-4952-b2ed-f50fca6bfeb7", "sighting_of_ref": "indicator--d9537bc2-1143-401c-8ee9-ed7dd946f1c9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335cd7d5-d6fb-4882-a326-8cfbdbadd5df", "sighting_of_ref": "indicator--f15af9ed-5e8f-4a76-a410-ad1a339db222", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f637111-149f-437a-b105-d2785245098d", "sighting_of_ref": "indicator--ee42dc34-5e80-4f27-b14e-252aaba9406e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4417596c-b6ad-452e-a741-846806b64ec3", "sighting_of_ref": "indicator--ffa78736-df07-446e-9369-3da281d526a5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c3b029-5599-4b9c-b613-666536d177d3", "sighting_of_ref": "indicator--ee2f90d9-05b8-4c2c-884d-1182c858f5b7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d91f9be-d14e-4f31-a7dd-add784c21642", "sighting_of_ref": "indicator--bffc63e4-92e3-458d-9fea-3d6a5ff0abab", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785652a8-1c2e-4b17-b436-4bef1568df50", "sighting_of_ref": "indicator--63354a76-1c70-4477-8d6e-8a42ad642daa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99db3620-7f1c-42ee-92d1-b99ec8a2c0e8", "sighting_of_ref": "indicator--b6c70154-7f6b-4dcc-9c87-83355c35267d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2569ca28-867d-405d-96e4-8a954d96d015", "sighting_of_ref": "indicator--c1638f1d-c5b8-4d60-b7c8-21c9b4825c5d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b7b172-e114-448d-95fb-323a3a8e895e", "sighting_of_ref": "indicator--307ad346-ee1e-426f-bff4-7cacef68c196", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e556f885-3239-413b-b079-10b76965bbf0", "sighting_of_ref": "indicator--1437f6f9-38e5-46f0-ade5-c5d558137be4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044c401b-21c3-4896-b473-e2616dc1385c", "sighting_of_ref": "indicator--ddb8f43f-3929-454d-ab13-2308446e4271", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10465c0a-d9fb-4ffd-a001-d2d862b82562", "sighting_of_ref": "indicator--f81ee463-af03-4ca6-be33-d7ab81ae9fd6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6a352a-48d9-4538-bbe1-c4bdbfd3f121", "sighting_of_ref": "indicator--dc681aff-5563-4e2a-8a73-e7bbd9d1fcaa", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6103fc7-9f06-43e1-a44a-20186d08c34f", "sighting_of_ref": "indicator--f07258d7-9fb8-42d7-b282-8fe34e532505", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbc12db-ec21-4590-afaf-4994998ed0d9", "sighting_of_ref": "indicator--334b7751-7aa0-4d9f-aec5-3823f324d134", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1920693e-f941-43a6-92e9-a8fa0a6530cd", "sighting_of_ref": "indicator--8648d8dd-a223-4d53-b59d-5ee57bfe7a69", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d73707-c4e3-4afb-a490-63492703abcd", "sighting_of_ref": "indicator--a06dab67-f9fe-48c9-b302-67094ca5f4e9", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08f163-9e60-467a-8ebc-3385535d26d6", "sighting_of_ref": "indicator--a29b92e8-2ac0-41bd-8898-b525f28f7fb7", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbfe8d1-9255-41da-b8e3-e3cb94da1c3a", "sighting_of_ref": "indicator--61b305b6-ed7a-4c24-b7fb-214ec045eab0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd1cbc6-b854-49f7-81de-100ded2e7562", "sighting_of_ref": "indicator--78486e97-ea3c-4588-9b50-a612149f5722", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2999346f-01f9-4b43-86a4-861d9c2a62d2", "sighting_of_ref": "indicator--f1d0eb73-863b-4ab5-a9fb-f2870a035538", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b4cb39-4aa8-46de-8b0c-23c153543e52", "sighting_of_ref": "indicator--f6250056-c7bb-42e3-b4d3-eddd263a792d", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37a34d0-f202-4be2-8ef4-e5d8b4e47998", "sighting_of_ref": "indicator--87702c69-907e-4357-a8d0-d404a885e0ce", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1172f084-3705-4cae-bdc0-f31892a29174", "sighting_of_ref": "indicator--c8d1ca98-6e22-4940-b4e6-19ad58a44b29", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d42df6-0ac7-4dc0-a4cb-7118bd5a5e43", "sighting_of_ref": "indicator--58f48f6c-94ce-4d86-aa19-87310a856a7e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782294aa-5a0c-4c53-a694-c968de682db9", "sighting_of_ref": "indicator--14938a46-85b5-49ed-a95d-5427d2d995f6", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d85f5d4-7fe4-4d61-bd1b-c9ae5800344a", "sighting_of_ref": "indicator--a325f2b8-6212-4637-b856-c174937fb3a4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988b0ac5-fa76-46eb-a0c6-90a8ccf7248b", "sighting_of_ref": "indicator--411cb5f7-3ac5-4c67-8005-585f2f77b973", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6b0421-8da8-480a-bd0b-259000fe053d", "sighting_of_ref": "indicator--7f971d22-2567-403c-884f-fd8956b6e31e", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3671df-b4ed-41e4-a064-d4a83f27c176", "sighting_of_ref": "indicator--b646974e-fd44-4966-8124-c2d7261a612a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d827277d-deb7-4b66-b23f-6801bf6e7c0d", "sighting_of_ref": "indicator--89add66b-065c-4835-8075-3194e28141b5", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6254c9-cbea-41c4-8630-19f975cbd802", "sighting_of_ref": "indicator--723359b4-f398-4d83-a908-62a1357ecac0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd23be28-c932-414a-b09e-4a674be9c496", "sighting_of_ref": "indicator--292d0a4f-f346-47ff-8788-14df81a719ae", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71a8536-3d29-456b-98c0-d747fb0caace", "sighting_of_ref": "indicator--93577ea7-5870-4e3f-afda-71dbbec594d8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8101b592-a374-44a3-b591-fc59bb6aba10", "sighting_of_ref": "indicator--690b02bd-d70a-49e9-b122-834dfc07d3c0", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8ee216-3c91-4c30-8252-ace5ffc70bb0", "sighting_of_ref": "indicator--e53da959-2e39-4dab-b512-76f6ba58d9eb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b002ec27-d6e3-4f1d-8c6a-0324072bca26", "sighting_of_ref": "indicator--7279d099-369c-4071-a738-5570b257a6f8", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731cb44-e09d-44ea-a8a9-b3b7c327a68d", "sighting_of_ref": "indicator--1e608d1a-4411-4505-9e40-96462dacf391", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe18580-37be-4c5d-977d-d4a505a2f395", "sighting_of_ref": "indicator--bf30fbed-ee2f-44ad-9c36-1fdeecac2996", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8653bfaa-47bf-4870-b5b1-73c6e6c42e94", "sighting_of_ref": "indicator--675fbcc9-3a03-42d1-bc9e-5a06327c82ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a15d0-43c9-464c-9c73-823a1afd2074", "sighting_of_ref": "indicator--6d547954-ffe8-4d65-80f4-fb0add0896ee", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200988f7-5130-4cee-9b3e-61921628013b", "sighting_of_ref": "indicator--afe5708c-7566-4fb8-8046-5a0ad15cc095", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7875066-cbd4-443e-afcd-4045a78e0fbf", "sighting_of_ref": "indicator--59788c03-9d2b-42e4-8e08-bd24ee408566", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9236774-2d0a-4ebf-a9c1-5bf67101125e", "sighting_of_ref": "indicator--6322d9c6-156e-493c-8b9c-3f06ca8dd374", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ef9534-3743-4c70-85ba-5171231e5d62", "sighting_of_ref": "indicator--7b6b67f6-c1cb-421a-8a6f-facacf005cb2", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b214cc-bf25-4ef1-b4bc-2c5ed0a1e9fc", "sighting_of_ref": "indicator--3e8d3e99-bbaf-4641-8636-7d56e0a65a36", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3931df03-6f69-4aab-8c7e-3e05215254cf", "sighting_of_ref": "indicator--3e8d3e99-bbaf-4641-8636-7d56e0a65a36", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7ecc50-80bb-4bc8-9e8d-a1835cbe03a9", "sighting_of_ref": "indicator--3e8d3e99-bbaf-4641-8636-7d56e0a65a36", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ae4a35-48aa-4a18-a90f-43703148ee11", "sighting_of_ref": "indicator--6141e6a7-55d6-4d92-9504-367a7b287192", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7781f4-d8da-4a1a-8f6d-efceb42fb322", "sighting_of_ref": "indicator--76683142-08eb-45cc-a916-91056d93d237", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61840ec5-cc63-4322-bd37-d55b829cdf69", "sighting_of_ref": "indicator--bd84082f-fd95-4214-867d-22acc867665d", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad4f9b7-6bc7-4e90-97fd-d679a1a194b8", "sighting_of_ref": "indicator--f795c6ac-5c65-411b-aa6c-adbf5aa51aee", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355ca8d0-d86e-40dd-9f72-9d17fdefb40c", "sighting_of_ref": "indicator--caf995f0-27ad-4311-ad9d-02d06b120757", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c7d666-d8bd-45cd-af71-bb8fc26e135a", "sighting_of_ref": "indicator--30ebdd49-35ac-482d-80cf-c22caa7a3c66", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4dc502-21b9-4a80-8690-e5bac3651497", "sighting_of_ref": "indicator--65d1c5a5-3b6d-4e98-b42e-39e279057dad", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab9f8c2-8619-4764-89b8-154878142a71", "sighting_of_ref": "indicator--8b1104fc-0472-482f-898c-3bf06bb25139", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bb0ad1-9317-48b6-85d7-cc5229974938", "sighting_of_ref": "indicator--dbb0c955-995c-43c7-83f3-b672ba554a9f", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dd9ada-f6da-4b2f-8c35-302d7b4f336b", "sighting_of_ref": "indicator--dbb0c955-995c-43c7-83f3-b672ba554a9f", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80c09f9-6232-4994-87de-0b90e854c60e", "sighting_of_ref": "indicator--8170f0c7-e1a0-4419-aab0-0bb4d2b4b631", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b80f0f-f575-4769-b81e-79f8b6df1802", "sighting_of_ref": "indicator--d94cf907-786b-43d6-bfd1-d8f3f06fffe1", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c1f6c5-2f0a-45d5-b0df-3c242bde4f23", "sighting_of_ref": "indicator--d94cf907-786b-43d6-bfd1-d8f3f06fffe1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea1e069-c948-4f68-86c4-72d9dd02d1c9", "sighting_of_ref": "indicator--110d0b9b-5c7c-4459-99b6-ba3cb6bf5437", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832376f6-0098-423c-8e25-4b62a55b27c0", "sighting_of_ref": "indicator--c7ea86a2-7eda-49f5-8fbb-f36305926cc6", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399ee178-5cb6-4972-a300-7fd860ccc4db", "sighting_of_ref": "indicator--55defe78-f405-48a6-a756-88cc5ceb8537", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ee4a8c-56e8-4154-9fa4-b9f065262c1b", "sighting_of_ref": "indicator--4bc5d85e-a1e7-4c73-a420-4999b8131aae", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f50c9e-ea2f-484c-a2af-6c03300aecb4", "sighting_of_ref": "indicator--e3f58816-abb2-4c43-9486-f111eacf3aec", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527375d7-b1ac-43c5-8baf-060c87b26d19", "sighting_of_ref": "indicator--5c8591a7-3de8-4027-8977-7330c2cf1ad4", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c43b96-d862-42e2-a650-019749fa514b", "sighting_of_ref": "indicator--5c8591a7-3de8-4027-8977-7330c2cf1ad4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54103481-9107-4329-8df5-db3102ab0d0b", "sighting_of_ref": "indicator--5ad67404-53f6-4b8b-9fa2-2d0d76bb1605", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf38ecc-7569-4da5-812a-d8b1d49d79e3", "sighting_of_ref": "indicator--2b9b60be-7477-4b0d-af1b-ea54b6287b3b", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db3f8bb-e929-4ef9-90c9-037db992b285", "sighting_of_ref": "indicator--2b9b60be-7477-4b0d-af1b-ea54b6287b3b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8248ff4e-8d36-4255-8986-22d36d9fab2b", "sighting_of_ref": "indicator--2b9b60be-7477-4b0d-af1b-ea54b6287b3b", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda633a5-9c4a-4c4a-90a9-7b6a8269b5b0", "sighting_of_ref": "indicator--c7d251d6-2300-403c-8f35-ac1edf785da4", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2362ebe7-f3b1-4ea3-882c-22414bc1c059", "sighting_of_ref": "indicator--e97833f9-9a5a-44d5-b8f5-8649889295bb", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38b4a0d-2d91-48b3-9b17-93586bf71f52", "sighting_of_ref": "indicator--69e13565-02e6-4bdd-bd84-923d86f51061", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473032d0-8ad7-4a6d-a336-03951e6c28be", "sighting_of_ref": "indicator--b2879ff5-dbe7-41e6-876c-30c182ff312a", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd398172-5418-4efc-9172-7aca79d2d9c2", "sighting_of_ref": "indicator--b2879ff5-dbe7-41e6-876c-30c182ff312a", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d6d2b1-13ba-418e-bc4b-c47d70bff2fa", "sighting_of_ref": "indicator--b2879ff5-dbe7-41e6-876c-30c182ff312a", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddfdb2c-3800-421c-a80f-bb545891aae4", "sighting_of_ref": "indicator--2c4b8a58-080a-4510-a3b4-9752d199ba51", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43a5bd2-2fdf-4921-88a6-7fcbad47691e", "sighting_of_ref": "indicator--4a1b10a0-2817-4250-9ffc-3e2e47545d13", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f2ca2c-0aa5-4856-9d2b-8ca1a08da280", "sighting_of_ref": "indicator--47d7bad0-2cfb-4bdd-ac7d-b187728fcfa0", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9577cf90-6a07-48e8-929e-9ac68dc4cec5", "sighting_of_ref": "indicator--e81c22d0-e16a-4ae8-be0f-6ee778ce738b", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b1cf11-5022-467b-a801-47c85c10a7ce", "sighting_of_ref": "indicator--628a7eae-d2e2-4c76-978c-3d1c5254e37e", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd78805a-285b-4909-9cab-b59077199400", "sighting_of_ref": "indicator--eb466c66-52c0-4cb5-853e-931bf418641e", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224fd751-1a4f-4d9e-9f32-44d1b256accc", "sighting_of_ref": "indicator--8fb4a9ad-0329-43bc-8605-0cd3fec264df", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca24ba9-b2ce-4eb3-9a6b-a9a5e1997cbf", "sighting_of_ref": "indicator--3a69ca7e-4a68-45cb-94be-cac3e6994586", "where_sighted_refs": ["location--a78383e8-e6a7-4556-abfc-9dbd7490fb38"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb24152-cba8-4880-8f0b-705163a07854", "sighting_of_ref": "indicator--dbe01863-1d1d-4673-93aa-11d6976ac5f1", "where_sighted_refs": ["location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e55f338-3b57-4c37-a3ca-a4f54d8588bd", "sighting_of_ref": "indicator--f4b52a67-5fbf-4bd8-baac-244c7dcc9299", "where_sighted_refs": ["location--d2cb63ab-b786-4d5d-aa61-da293d490203"], "first_seen": "2026-06-10T00:00:00.000Z", "last_seen": "2026-06-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--a40cb8ed-4e63-4b18-9a4f-fca46732d6fc", "name": "Threat Report for 2026-06-10", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-11T11:00:02.227Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--a78383e8-e6a7-4556-abfc-9dbd7490fb38", "location--665a7f65-b783-43cd-b0a0-aa1f35edf1b7", "location--d2cb63ab-b786-4d5d-aa61-da293d490203", "location--e2fd983c-0dc7-4283-8560-c2ee36f871eb", "infrastructure--8f7d435b-a120-4df7-a5a0-37ffae210e9b", "infrastructure--64dde9d3-f735-494e-acb3-7f5aa970c9fc", "relationship--5a76cf63-602b-4105-bb7e-d3910a2b7410", "infrastructure--0c6cc14c-a2c3-4748-9e68-c174feb0fd29", "relationship--c0081d00-3477-4f87-ae79-fc02582896c4", "infrastructure--86fad510-e3a5-45ae-9124-1f4dcb7d382b", "infrastructure--402e4739-797d-4250-8432-06a18b3b05a2", "relationship--bef757a4-5b8a-43a6-a424-0886d31e63c0", "infrastructure--0ff81c9c-0328-44c9-9dd3-f379ff658a83", "relationship--1c55440b-06f9-45c1-acf2-23ab3f23f056", "vulnerability--6a3988e2-ec90-482a-9f11-83517d34c093", "vulnerability--62a7a717-4d3b-4237-b884-1f1053f65275", "vulnerability--710d1cd9-33d6-4cc2-af13-80da47bcbcb2", "vulnerability--c5a5ae54-1fb8-46f1-81f4-1262e773c2d3", "vulnerability--65c7d527-eaf2-451e-bf2a-2dbe9cca3f63", "vulnerability--97843c72-fe8a-4ebc-a62a-e2024f91a438", "indicator--5395f62c-6ac5-4d8a-940b-2b66cd5d30af", "indicator--6e34da96-1f81-4975-b6c0-58c0a8ffc7f4", "indicator--d09319c5-4249-409d-8662-3be680d9f2b0", "indicator--b546f0d8-f32b-4943-83c3-9f5aaf0f0700", "indicator--f07be617-52b7-4a3a-9e42-5b429b1929bd", "indicator--1488dbd7-214a-4514-8f84-c3c6d24ccfee", "indicator--0c7c7008-ecbc-4533-b801-5f47c2c9c0bd", "indicator--5764f1b2-76ce-410b-8675-ad273076d274", "indicator--6468c36b-387c-4af4-83c8-c513077904b4", "indicator--6f3eb750-c55b-413a-96d2-f9661ad42ce9", "indicator--fc6afec6-236b-42fa-bd70-552127c34cf0", "indicator--cf6d6b66-c6f8-41fb-80df-70f3af23ca02", "indicator--f1dea09a-39f2-4e07-9cda-ed1959edb8dc", "indicator--a0f9c788-6266-403a-91ce-ef9cdf1d735e", "indicator--27772405-9a9c-4206-99cd-69d00a689157", "indicator--9ee45894-6a54-47f9-a075-3004b63e509b", "indicator--d8a9d7eb-9cd5-47ba-b065-a955109ece10", "indicator--58d6e32c-5273-4738-bb28-b131daad6080", "indicator--b508c54c-00f9-4df9-9d57-6a90e266741d", "indicator--fc6ba252-6d42-46b8-a634-de9df4b87c14", "indicator--9610095d-b16d-4d71-90b5-665ee8454641", "indicator--bc05ca7a-8f74-4273-8d64-651e28079062", "indicator--8964465e-ec78-42db-8331-12b23d29565d", "indicator--e322d563-37d7-4ec1-9237-bad36208cc93", "indicator--bca7177a-78da-45e1-843d-dc745857500f", "indicator--9ae979dd-432c-49b6-b4f2-dfd982c5c676", "indicator--f245a307-7a96-4e0e-bf58-179879a811a9", "indicator--65e2d97e-a450-4beb-a8cf-fa547428e103", "indicator--17dade2f-31c0-4dee-b73c-dd605f3214e5", "indicator--ca7483c8-b1f3-44e3-b6f4-33271e338cf9", "indicator--5a4cfa4e-a9ab-4d02-b449-872a8f55c7a8", "indicator--e6faec82-b599-407c-b427-bcff44b5d8c1", "indicator--672eb516-dc4a-433e-9750-2ca20d36da07", "indicator--5206e350-8126-4479-9831-28a8e3deda65", "indicator--2b635e62-f430-43f4-80cb-4a2b6cd5b62e", "indicator--bee16d01-73f7-43a7-8f4f-b06593762377", "indicator--daa22bed-c835-4584-a0bc-8eac6221144f", "indicator--f4de3474-ec89-4ddd-ab22-727d795cbdda", "indicator--92826b87-e6b6-4337-812a-d989c70482c4", "indicator--493cb2f8-88a5-461c-bd2b-5aa3b0563bbb", "indicator--44362d58-e6a2-4bbb-a144-f739fc542aa9", "indicator--b0436f97-6db4-488c-8108-84838ab03e13", "indicator--4bb6b588-f0d1-47e6-a3b2-b567a7a5117a", "indicator--2da561bd-0d27-4a55-8332-6e1df6143b9e", "indicator--14ea1db0-3792-4019-95a1-3926156ef872", "indicator--96f52769-b2ef-405c-ae7c-ecb05b6a2283", "indicator--27dcb654-d486-41b9-90ff-ad41688355f0", "indicator--130ade03-d7f4-4780-9e03-30f4288f7656", "indicator--f5897e26-dd7d-4927-9e6e-b590488c2e1b", "indicator--6f02cad4-7e0c-4319-a834-20b4e820d920", "indicator--49e4cf35-add7-440e-a523-b7da8b6532e4", "indicator--03ebafe9-7fe3-474a-b3ff-f6b176f8cf3d", "indicator--08d1d5c9-fb68-4344-969e-1d2c4ff84c8d", "indicator--60cc4029-b03c-4d37-90b4-1bd4889821bc", "indicator--5b632019-c4b7-40f9-8db5-c77527c3a59f", "indicator--04779fd0-acfd-42b1-8916-48ef4d4d4b7c", "indicator--9c4e19c9-6e01-4e6b-b9f9-b961ae16523b", "indicator--29af5466-e165-49a7-a812-e021a60cddc3", "indicator--72f27d54-e84f-42fe-a0ea-5da72da7bb56", "indicator--a5753e4c-9cf0-451e-9eaf-09370256d2f1", "indicator--0abb9c0f-f661-433d-9dda-7436f401dbd6", "indicator--1dd50607-4811-428a-8918-dce8508be592", "indicator--b60de3df-36b4-4702-b9b1-ae77cd233d8d", "indicator--139bcadf-9705-41ae-b611-03d400e22a9e", "indicator--b434b921-7494-4089-85f9-29e52f1b4918", "indicator--b09cffe6-3d40-43d8-95e3-12bb3c1d1a4d", "indicator--2f8c8085-dfa9-4306-b94d-14e87f60f61f", "indicator--4c992bee-dd4b-426a-b538-db722795405c", "indicator--5fba7a06-b869-4d45-8b99-adfc1822f572", "indicator--222a118e-a87d-4bae-967b-6751adebebca", "indicator--e2f55bb3-8a27-46e5-8fdf-75fa2f430d1f", "indicator--a3d8acdb-a1a8-40d2-856c-1e70a126aecb", "indicator--1fbf28ba-77b4-49ef-a312-937815f5bb7d", "indicator--a47164f3-10e7-4cbc-9d4b-2b3d85535d37", "indicator--9f4d3406-5200-4e7b-8cec-3638b3e61d20", "indicator--f2c34118-c3fb-46c9-b47e-a6eab21530ee", "indicator--99b3ead4-3e39-49ca-9b5e-9daa75fb9c1d", "indicator--59579c9a-d69b-409f-87a3-2f18494c2a11", "indicator--a51e1b47-56b5-4acb-b310-98edc4b1d7ba", "indicator--ae3a1b67-aa90-41cb-a482-dd9d4130fbda", "indicator--c29cdf01-02c0-4b25-bb77-0d0ee29248ae", "indicator--1210df59-4dac-4ba9-925b-6fc35a6e2964", "indicator--3601a91b-bbe1-4606-b9af-3f7b457eb6e7", "indicator--46e7d64f-4545-4020-917a-4c4977aaa998", "indicator--671ba2dd-ccf6-43e2-b15a-ac5eabfb26bb", "indicator--39e5053f-5b60-4d1d-8070-bb78a10d1a94", "indicator--cd9f9d39-4e01-4842-8010-7d940dbbe77c", "indicator--c2f95bb9-43d0-45dc-bb7c-accb70839f3e", "indicator--e4e59f11-e932-4a3e-bf1f-bc424e838b48", "indicator--ccce933c-cbbc-4e75-a48c-ed8e5e7631a9", "indicator--c430f136-e906-432e-aead-a294aaf610a2", "indicator--38226507-0781-4609-a287-7ec569bb5f62", "indicator--8309a776-7419-4b29-90b4-6daee1e8c564", "indicator--f65d42fc-654d-40c6-89e0-78495aba45fc", "indicator--d8b23fb6-fe82-4a02-8f9e-549545240d11", "indicator--fdace297-aa4c-4d89-9acf-199d913575da", "indicator--6c739f84-3e39-4b3d-8f5a-ef4e9583bec4", "indicator--0ead1a37-d174-437c-a3af-9020fcaa19e9", "indicator--31f649be-3e2b-4ee0-af04-fff7c1294b8a", "indicator--9bffcc93-107f-4df5-91a0-003c769601b7", "indicator--a19bcade-d911-411a-8b63-2ca91d0edade", "indicator--897ac56b-57d2-474a-be8a-06b25d432844", "indicator--79732055-52f8-4241-b83f-39d1c7444087", "indicator--2ec1b85e-726e-4ffe-b502-04184a0eba29", "indicator--e58dcd17-d428-4de1-84ff-3e5756987032", "indicator--33f23d61-1116-4cc7-8e7a-e56194c71e30", "indicator--56186196-1490-47cd-b8b4-f331012ff6c5", "indicator--d600a2fc-7004-4649-af90-91d5f70bf7c6", "indicator--a3d6af61-e18c-4ff1-89ad-40a1b09bd697", "indicator--d9aed9f8-a6fa-4d40-baac-e4905945fce1", "indicator--3786a560-8e6c-4ddb-9c65-30ce68dd62de", "indicator--bc266222-ea5a-4bcc-baea-e6826c2eba4b", "indicator--ceca5210-43a3-46e7-81cd-d8541895fefb", "indicator--fefcb47d-8fa0-4ae4-b2b2-8b671d1c703d", "indicator--24f65c89-903e-4190-b504-f4b3c085ad46", "indicator--ce954a7f-f0ff-4583-a734-601a7ce4b6f6", "indicator--746b37a2-9b61-4d86-942d-fc36644dbd27", "indicator--21011c5d-93b3-4351-9fef-6de370062d54", "indicator--f3169808-6f7e-4d89-b508-d072d65d03e1", "indicator--f7438f56-f242-442d-a2c8-0bbd07abf08f", "indicator--86d61613-aa0a-42e0-be1b-5f43bc28dc24", "indicator--06f1173f-db74-4a4a-ad17-3954e545c1f1", "indicator--fb935350-e599-4ff0-9c0e-925eb70a5c9c", "indicator--bc30d73e-79d0-4402-b543-980887d48ffd", "indicator--db5f1d46-a4fe-4411-b023-12dda2a87a55", "indicator--1745f468-a511-4149-8f3d-22fa2e2b39a4", "indicator--3888c317-cff4-407d-aba5-61ae2097518b", "indicator--e5c9810c-7d3e-4a4d-9d03-204ee8e2ff40", "indicator--a0a36d48-f08f-4000-8cb6-21a3f9e0a076", "indicator--e2cefa74-f0f1-4776-844d-1273d1956b0d", "indicator--6957b4de-1ffe-4c1c-8e94-ab75fff6df5a", "indicator--ae9aa735-8d55-448c-b144-5814f932f681", "indicator--4f87068e-2cac-4666-bf74-85acabf86e9a", "indicator--c13dfd07-c549-49a1-9b55-8abdfd3005ee", "indicator--5e614345-078a-4432-ab1b-9333bf7377b4", "indicator--1327ee01-f5ec-4230-aa9d-9079ad7e82ff", "indicator--beaea4af-23bb-4389-bd99-80335af1c9a4", "indicator--0553bfa2-c366-442b-8677-8c2f17fa1795", "indicator--87df1a3c-fb3d-4038-acae-3ec91658fdbc", "indicator--513fc069-6777-4e41-9952-d2abdb47ece7", "indicator--8498d354-aba7-45b1-8a02-5f15fedcf96d", "indicator--9a20af50-3fef-49c4-b151-fc413bbe149c", "indicator--d2ec48da-ad84-49d2-a5b6-a3441e9e2621", "indicator--2a8faf86-7af2-49ba-9ef4-8229749d799f", "indicator--cbfa2564-20b4-4e56-9bb1-05001b9cfa74", "indicator--2816f09e-d3c9-4b84-8ea9-9503ce34d293", "indicator--99b86622-6c3a-4a83-bbc8-9369d2badae6", "indicator--aa42a7ba-ba2f-406a-9fda-d3dac9bc6538", "indicator--497f1c09-3f3e-4046-9c8c-6590a6651a00", "indicator--83d3f224-073c-46a8-b034-580b4496db18", "indicator--e23b5605-2ebc-4caa-861f-604694a10082", "indicator--e2ba5cbb-73a6-4381-b9e6-3c738b97ceae", "indicator--40a6c804-47f5-4502-8297-4b1106ba76d0", "indicator--e8087ebb-671a-43cb-aa54-60e3359fd3c9", "indicator--afbc709b-57c0-44d9-a556-c03c305332e1", "indicator--d4c15e9b-175e-4df8-aa33-b3315dc481f2", "indicator--1765f9d0-5467-4e56-8a51-49628693b61b", "indicator--a66ab7e5-e129-4874-8337-4680c3fbce16", "indicator--c80a0ed7-8f61-4a09-8091-f82f2c5aa200", "indicator--021c4400-db60-4df9-999b-46ac207d55ee", "indicator--29e048e0-5718-4ba9-bb01-916089567dff", "indicator--8d7a9294-96ba-42a3-ac28-3c7bfccc042a", "indicator--e1a05638-a27a-4b8d-b6aa-e69e776453b0", "indicator--fa67d874-240f-4a72-b4c3-5c575287b08f", "indicator--f0e74727-c015-4589-8ba4-504dfa41d2b0", "indicator--b567c458-8566-46d0-972a-a92bef1fa2ce", "indicator--ff87fac6-f37c-47eb-9da8-83c6f7a8a0a6", "indicator--c14d2c1f-20f1-482b-9932-7256d60d451a", "indicator--16eddafb-1463-4421-bb83-00fe4d08d253", "indicator--a9aecf0d-5200-42dc-b496-5905dca9ec8e", "indicator--b0654d9b-71f3-4b19-a32a-eb597289ad19", "indicator--9c594ce2-bf12-466e-98b2-8f3d98b3f050", "indicator--bfb11279-b356-487d-835f-d9f41c1ac783", "indicator--f08872d6-49c7-4889-9bc0-b88fba836915", "indicator--e434a85e-1a0e-4b57-adeb-d361f160d088", "indicator--16045c9f-ceac-437c-b9db-4ff50ebe85e5", "indicator--38277232-89e7-4185-bec9-ab65bf6a2870", "indicator--fef25179-5c6e-4532-bc5a-822567f85e37", "indicator--cf77e2d6-1d7c-4ad6-8cc4-08930e043e3d", "indicator--0f146637-6b51-4fb4-a623-db522018b63c", "indicator--01bfe1c7-89ca-437a-91e0-379f94299b0e", "indicator--07a0ac79-54cf-4e2e-96e0-c1050c966b8f", "indicator--90f1055d-388e-4955-9450-1101f895b6eb", "indicator--7e114ed5-591f-4a33-9fa3-5a7f7c0d20bb", "indicator--dfef4bbc-000b-4399-90e6-e9b4f4357cd5", "indicator--9e757561-52bb-48b0-acd8-a5b1890d92cf", "indicator--f33c470d-dac2-47a0-b176-754587d78a17", "indicator--5d920587-2628-4617-bc80-b4e99e5e5f30", "indicator--5a447a9b-c5dc-437b-98ee-fdcb48c47c10", "indicator--63c8e98e-7e79-4a7b-9478-8893f81fd33b", "indicator--20c50c4d-77e6-4acd-8d2e-15847b0094ce", "indicator--c5ee50ef-f26f-4ce5-ae5c-880fd3379146", "indicator--ee07d8b9-e87c-4a6d-99b6-103c19d0f38b", "indicator--2d751166-e485-4927-9ca8-4aef7e87aa0d", "indicator--7d54280d-8ea4-4334-8547-fbc6e0cc746a", "indicator--352c429b-2ff9-436a-90d5-6b9394c23480", "indicator--cc40e36e-9244-4972-9f1c-be0a6fbfce2c", "indicator--06afe288-e963-4011-835b-b20243bb30da", "indicator--a8232888-901c-4fc6-b65f-d9c556d860a7", "indicator--f0e77764-5e7b-4e62-841a-f5bf0ee6dc4e", "indicator--1f6d02ea-7a26-4b1c-a5cd-a5e7dbc9136d", "indicator--4a3b6304-4738-4aee-830b-c88500bb4c52", "indicator--f9ed7a07-67d9-45c3-8a11-28999492f47e", "indicator--082de3d6-33c4-4fef-a9de-fbe61e2fa3ff", "indicator--8ea192ca-c72f-4fb6-a48a-5479a011f4df", "indicator--e673285f-0bdd-4f65-9018-bfe02be5999b", "indicator--73c42d4e-883f-4d9f-9b9b-2f302bec5941", "indicator--682c3c90-f87d-40ff-be75-6121a2264dcb", "indicator--ef00f686-9abb-42b3-9dba-9f6718fac05d", "indicator--519f1520-5690-4242-b91e-9f6976c3af15", "indicator--b9e0a9f7-179b-4322-a38e-1efa5ff031b3", "indicator--f3f426c3-9efe-48f3-8432-b7ca8f9d0bf3", "indicator--a891dd9f-1e75-41e6-9c3e-b5f4f5ac0d52", "indicator--b6bf42da-6b6b-4574-a54b-468844ec054e", "indicator--5424ae9d-dafb-4a80-823e-0495f52216d8", "indicator--8c715b91-f132-470b-aee8-307c82ae552c", "indicator--5f6d5331-3d40-4dd8-8a5c-4046c125035b", "indicator--f5b7d5c7-a958-417a-8072-1fd636083b29", "indicator--2d769cdd-d414-425f-85cb-4a402eb4d139", "indicator--88414bbf-83ab-48e3-8e9d-1b58a33651e5", "indicator--e6b53769-fa14-4764-a89d-b13ade693c6b", "indicator--a66e86f5-0d4e-4d12-ab5b-2c7fc87bcada", "indicator--64d72743-3fd7-4c5f-b2d5-306aafce8a52", "indicator--15cdef25-35ef-4b84-814e-71d06b1fe6c3", "indicator--380f48b4-9b2e-4de5-bab0-1c38cfa30ddd", "indicator--7985b5b8-6d71-4521-a1e7-a1f0689eaac5", "indicator--a58e19d8-e4bd-4a2d-8b90-4384d1464955", "indicator--e937b9fc-6469-4df6-83ad-e3952120892a", "indicator--fa116b64-23aa-4573-8bcb-8de07feb22e6", "indicator--9c73399f-43f1-473f-9521-a72b30663c22", "indicator--c7dba09d-6c6a-43c1-a0a8-7d011f7ab720", "indicator--98aa9a0e-1e0c-4e94-8832-96691654948a", "indicator--f8afb64d-5bf2-487b-9456-d9971b6ccac5", "indicator--a00d5d27-c2e8-43fa-bd68-5711a3c006b6", "indicator--9c61b852-6e84-4c4e-890f-b326843fc7c2", "indicator--c3cedcce-c6b7-4c48-977c-523ec784a1e8", "indicator--e860c229-9dc4-4b41-b1fa-8a072f975500", "indicator--d2b067ff-7722-45bb-ba9b-96f4ae3ada60", "indicator--98ae138f-9e83-4771-a12f-d1d85e5a3a41", "indicator--6ec6d0fc-164e-4599-8a89-72e3ef21a01b", "indicator--1da59893-a051-4887-a571-24f7698bcd8c", "indicator--9294490f-1f00-4a17-abad-5dd698042646", "indicator--a7bb0af7-187e-4098-83d5-35f35438b400", "indicator--3fff5722-5b4f-4829-bcaa-be8e5f25b4e8", "indicator--ae617349-f0e4-48a2-85d1-277162f02d09", "indicator--8b01af22-7c45-4845-a378-9bc2bec953cb", "indicator--b8bfd0df-4021-4160-bb45-a4fa682603d7", "indicator--42cefe6f-d861-4ebd-b275-da86469a83d2", "indicator--ff951d0e-a669-4c1d-91f9-e01147c811ea", "indicator--0164a237-12a8-4a1e-9ee3-369ce52430d2", "indicator--62040a89-0316-43d4-a2d8-634eacc028ed", "indicator--54de242c-6777-478a-8c5a-e9155796239a", "indicator--40abfe40-182a-4699-818e-9d2cf466bbf1", "indicator--e934a2e3-d999-4709-9855-02170fe363f6", "indicator--c268043b-e1d1-4e91-b6e4-692b7c74def8", "indicator--5df90607-e3b3-4d95-af5f-3da620b480ee", "indicator--3a39a4ca-ac50-4553-9dfc-70d0f8d670c5", "indicator--3cefd53c-5683-4c3e-befc-0e902027924c", "indicator--dc574f9e-6040-4c54-9dac-48661818c512", "indicator--09fb4296-ca7a-4ccd-96ca-ad06e725a65d", "indicator--35712ab7-9c0a-4bc4-9171-0493164bc273", "indicator--08a68f57-2a75-4550-a6af-a29516f462b6", "indicator--c46bce02-d4fc-4ba1-ac8d-0323fe9aa36a", "indicator--eb7485d3-085d-43c0-9de8-ec465e1084b6", "indicator--7cd5ea73-d9cc-4426-b873-a4ce3af9b125", "indicator--d928278b-27cc-4349-8c0f-9f55f7107e15", "indicator--628427ca-f42d-4fb6-85c5-891b562c22b3", "indicator--ddaa749a-b952-4018-986f-d93a805fb2b3", "indicator--066ddd32-24e8-4c78-bc75-d9e45e681934", "indicator--d4b506eb-aa9a-4fae-bd7d-48097b7430e6", "indicator--5ceda623-e79b-4a66-8ce4-597fff291e67", "indicator--88594688-ce02-495b-a02c-990e5d0ad904", "indicator--0d436541-6ad5-4ce5-b7fe-9bc3fd0caa08", "indicator--1662ecc8-5ffd-46d6-a8b7-fc3da14ea9ea", "indicator--386f5a9b-3b71-43b6-8943-2a7cb26763dc", "indicator--b8184fe8-ef31-410c-a65c-397cf4f1e7d6", "indicator--c3068ae8-9486-4c2c-85d4-46a4fc5dbbb2", "indicator--315e7bed-1ab3-4a54-b515-f0db047c6a72", "indicator--3f65c982-94eb-427a-8a5b-4db2aa435a00", "indicator--68beb864-0878-424d-b2bc-b67b2ae534a1", "indicator--db0ae470-b403-48af-a2c0-46fb2b10d38a", "indicator--c9644895-48b0-43d1-b212-e35f7f282a9b", "indicator--441444ba-b0a8-4b27-82c1-f43a1b24a14a", "indicator--c97b4a6a-fbc7-44d9-9660-5c6fd5d94358", "indicator--dc53e51e-ded6-411c-92e3-2769afb5cb3d", "indicator--dc6dac60-2c77-46e2-87d4-40c0cdcfdca8", "indicator--cef34307-8d07-4c34-8094-7e2b3f1d7493", "indicator--6da316e9-ad4b-4cc0-abcb-3d7a9b23cc58", "indicator--68a6cda5-8247-40d0-affb-dd37269d9c89", "indicator--2a4aac60-4593-4893-98d4-95a1259f6918", "indicator--598ae555-8000-4742-9d02-2b4d06c209ae", "indicator--243a2a25-6bb9-48aa-9b52-474f38c09071", "indicator--c9d61903-f1da-4dac-a143-bce20c471886", "indicator--2b0eaa53-fe47-41bc-9489-6b42f297c3b9", "indicator--7e78c6c9-625e-497c-85d9-46f8752b7a4c", "indicator--09d8e401-3aca-42b3-a4f0-85b4b1ec5059", "indicator--e8d89eac-e72e-4c8e-8277-aac7db3a8930", "indicator--fc4c6699-c4fa-45e9-ad19-074166dcb963", "indicator--c6df3caf-35b3-4798-b6b6-2f8aabb5bafc", "indicator--b90557e0-7739-4054-be38-a8917668a273", "indicator--32034ff3-8e9e-43cc-848b-d4c722369a98", "indicator--5c778e48-23b4-4dcb-bb6c-cb80dcf8b76b", "indicator--b9c6bcb5-6afa-43d1-ace6-852a97ea7104", "indicator--645be057-36ef-415a-a721-4ced402a6221", "indicator--9cc58040-a4d3-4ed6-8a69-20ba27d42f84", "indicator--49cff8d7-aef5-40c4-9f5b-2f6690c9df1c", "indicator--d00973cb-b0d0-48ad-a1ab-377e31bb0991", "indicator--b4099635-81aa-4316-b909-23671a88631f", "indicator--e55af4bc-e5dd-4593-a8f8-3ad4b68d8389", "indicator--b3f06217-28d8-48be-b0a2-404450bf0a7c", "indicator--5bce9804-b841-4359-89bc-908f8cf55a97", "indicator--ad3090f9-509c-4666-b717-48bf283d6ee8", "indicator--376e60a3-0720-497e-8677-12d21493134b", "indicator--a5eeb824-0262-48b1-9704-157c7f70ea0b", "indicator--5b3f63aa-5791-4c25-8e1e-806e964aa5e2", "indicator--7892e233-f8e9-4ed6-99c9-93eb5152d994", "indicator--d3f6dc1d-9ca4-47af-b822-2bfa001b650d", "indicator--665d7318-d30a-47b3-92b0-a958057a8a9d", "indicator--49efa331-2361-469c-8de2-89e348e65f01", "indicator--f4015282-765d-4367-8ae2-92079dbbec43", "indicator--ff9f79b3-9fc2-4862-a4f9-d4c45223317e", "indicator--93f8b3cc-01d9-4464-844a-a76a41da92bd", "indicator--c2c66b35-25bb-448a-8e32-140348f2df47", "indicator--f38811a7-eafb-402d-a2d2-cb41bf43f2db", "indicator--6255960b-0b31-4b58-b1c5-fa72158b3adf", "indicator--1f09305f-b5b3-4ec7-a638-c902d81fe88e", "indicator--362a4be5-ee1b-4cfe-a124-b1ccd0e476ee", "indicator--b7343015-bb44-4d51-8ac0-3f978a9f2195", "indicator--354532b9-7adb-4daa-9a9d-6f949d44283c", "indicator--e4766330-d11a-487f-84ca-152d872e3e35", "indicator--398291ce-7174-4d3c-8ed5-c30aae978bb2", "indicator--560c6dd6-7f3c-4c31-938e-f6b989d2e528", "indicator--df3b3604-49be-4b2b-a85f-d288fd5ac13f", "indicator--63d859a8-35d9-412c-bf29-66dc70286084", "indicator--b35b9e7d-d4b1-49e9-b12a-f2cde53579b5", "indicator--c10e551f-1d41-4655-8185-94efb558adfa", "indicator--08767b22-e38c-4456-bf96-fbd3a8eff9c0", "indicator--75890593-9908-432c-8326-a5949950af03", "indicator--4c53f95a-3d83-432b-9827-21bfbead57b4", "indicator--c1846279-0087-400d-aab8-37a55041535e", "indicator--d19a0403-6432-4e9e-91d0-eef244dcda83", "indicator--4dead2dc-bddf-47f4-89fb-9e2a4d71fd7e", "indicator--3443f2e9-a895-467f-adb5-9433a1fdfa0f", "indicator--decc007e-1157-4f02-b87e-b11b95c0291f", "indicator--2b394f5d-a01c-4431-a992-8041423d392c", "indicator--c2829c10-f0b2-43dd-a646-1bdb3d650ff1", "indicator--93d3cfa4-d0fa-4852-b0de-f55ec700bef1", "indicator--47d44365-cfb3-4b2a-95d3-c442287ef875", "indicator--edca783e-0dc4-4462-ae24-74523fe269a2", "indicator--f8fa74a2-0cc7-46ea-9757-bdd47eb3a845", "indicator--4f3afa82-63a4-4536-8581-030477d5213f", "indicator--1d08343e-592c-46b1-aa0e-1670d8a72cb3", "indicator--fab32cc7-ee6a-43b9-996f-3c2936197e57", "indicator--c92c1619-4b78-454a-8d87-94f8e15c7e7c", "indicator--f98b2260-6133-46d3-978f-9ba52c8828b6", "indicator--54ed9fc8-5503-47f6-9b23-e45412f1eb1a", "indicator--08b8572d-72d5-4f0b-aafd-83679f8e66ef", "indicator--12b1ca3b-880b-4089-bad0-5d3db793c373", "indicator--4f43de40-4707-4174-9355-9e41d7210930", "indicator--96955215-1610-4391-b87e-58ef1b738e44", "indicator--c7cebc40-bbf7-44d7-82e0-a70f411fa680", "indicator--3c309782-4853-49c5-9967-6162d646ef92", "indicator--4ac6558a-3560-4023-a891-5f2ecb769f38", "indicator--6c0e7e04-2c46-4026-8317-a59bea3fa035", "indicator--edb86916-67ca-4442-93f0-037f7ec0b316", "indicator--4a2d53ab-3fc1-4669-a65d-2c5992d7dcb1", "indicator--a9a72c10-e4c3-459f-acd7-ee14c4a8a49a", "indicator--9f5d204d-8052-4425-bc3a-991352ac0c0c", "indicator--79a88222-1e1b-4e3d-8a93-837e685ec6da", "indicator--59a2ac39-74a2-4c7c-8426-1c8b014c98b4", "indicator--76f4b5c1-c73d-433f-9c18-7ab2ea397743", "indicator--6bd8846c-de87-4f9a-8b11-d7e34ef0fa24", "indicator--aa650bbc-b623-4ac4-85db-328c4bc1f919", "indicator--207c3664-e391-4da5-889e-af55b4631eda", "indicator--4742fca4-9a20-4fc6-a77c-0a0e303ff7dc", "indicator--9b4d4288-c623-4a00-8eb4-97869ab7cd18", "indicator--519a209c-6361-43f1-9e57-4b4a4c23529d", "indicator--d618319c-3de5-4cdb-8377-288554b5a201", "indicator--5d30fcc9-03d0-43b6-8703-36eb720520d0", "indicator--e8b443c2-40d4-4160-874c-2907d925d4dc", "indicator--04d9f2c8-9e96-42b7-b629-bf065023dfba", "indicator--548cb3e4-a044-4c8a-a79e-e6ca653e0715", "indicator--db9a1aa5-be37-4eb2-a6fa-fac5fe95b53a", "indicator--7d3c319d-a615-40d8-a682-c5bb1509b1ce", "indicator--4e5e3349-5269-45e4-a7a9-8ff195a53288", "indicator--77e428c8-fab0-4d8b-9110-c8013b20ae97", "indicator--8e215a62-9304-4ab3-84b1-06e2c5b60d4e", "indicator--8b16f8bb-c87b-42ff-a0c3-8dffa9d36ba4", "indicator--72bb8ec8-7e82-42d1-a1ea-8bb8798bc8e3", "indicator--aa494d98-d780-4643-9ae3-42fc12702af4", "indicator--dc872d66-db56-42a4-9027-5e2bcb1bcbf5", "indicator--e5c465e6-930d-4d9a-8ee8-01fb854931ef", "indicator--caf1f231-d74f-44d9-89e8-0d97b201d0ee", "indicator--a09c9036-667b-492b-80a8-79ea41c443c0", "indicator--17dd6643-8def-4e7f-a5ac-5e588a99d8ee", "indicator--3e3ee2aa-f24a-45ec-a01c-4984f68ca922", "indicator--a45f3465-f42e-475a-b865-ea6bffa0d7db", "indicator--ad1dbae8-d9d6-48e8-b615-e6bf1353fded", "indicator--63be2d2c-5ce8-41c3-99fb-f77b9d81e8dd", "indicator--1c32b869-58d0-46a6-a1ff-0a31bace1ad3", "indicator--4325cf3c-60c4-4549-bff6-9b64913c16cf", "indicator--9d295b18-e8a7-481f-9dc8-985783aef9b3", "indicator--7ebe5de4-1f48-4f52-84cc-049316a88796", "indicator--b39f7ecc-5239-4a99-8ba1-71b0d087924c", "indicator--b7086af4-3612-4754-b96f-643bbc41a7ce", "indicator--1cd629e2-5269-4e58-8c01-8e4eaa1100bd", "indicator--841710c5-1c69-4536-a35d-7873a6774300", "indicator--9ad4b344-b725-4909-a5ac-101086cb9881", "indicator--abc1e6f1-23f3-48c3-8b42-2e692cf705ac", "indicator--1aacc36d-0b5a-40cc-b4b4-d29d29de9591", "indicator--6ebf8b46-a9f1-4fb6-a7a2-8e4b3c242881", "indicator--c0bbde62-c135-40ba-bcdf-0224fb123101", "indicator--e1f23c27-ad53-4e20-b4dd-f8ea16f2eb35", "indicator--66d4d4c1-3430-4984-ac95-b2b6774c25f7", "indicator--e946ff8b-55dc-443b-9b5d-24bf245534da", "indicator--bf35290a-f8f2-49ba-875d-f74121e2d53d", "indicator--7da3a228-66c7-4c81-b7be-061314bc91f4", "indicator--da3d2232-6b24-4131-bc1d-c837624a74d8", "indicator--7a7eac01-9318-4299-88b7-961c88d6cab4", "indicator--bd6f967c-d672-4e09-b9fb-4805a9b9ec7b", "indicator--04789f4a-381e-4b54-841b-18648f68ef12", "indicator--f0cfb8e3-47f0-41d7-a60c-55c599057501", "indicator--85639e6b-89a2-4dde-ac04-c1eec1be26df", "indicator--afb38ae1-9db9-4fe8-a5c4-834eb4c4dbe7", "indicator--e81074b9-cad7-4143-9334-9b7e71d6ae1a", "indicator--d2f9e61a-690b-4531-aac0-5655c4b117cf", "indicator--95bbc18d-2321-4e05-bc4a-c3b5954ad0ca", "indicator--b849d580-c9f0-403b-a097-6a65c8c061c8", "indicator--8e257aad-649d-4823-9a5b-94414addd658", "indicator--dd472ef0-e668-4ab6-b20a-6532701a687f", "indicator--dd14554c-dfa2-4e50-abc5-908147f443ee", "indicator--f3835d21-069e-46c9-8af7-803ea2931519", "indicator--7b47a0d1-445c-4c22-8cba-96dcc266efc8", "indicator--4858db61-8d09-41df-88ca-667147400a09", "indicator--e7641e02-cdf6-4f2a-8a84-c67f46f581e9", "indicator--c732d4dc-4d6c-40ea-baf3-544923a55e5b", "indicator--c4be4c0e-0fd0-4cd1-8a7b-f09c37d6e20e", "indicator--9f59b9c0-d179-4b30-8dee-046e4aa0f936", "indicator--94198c1b-551a-46f4-b4d6-414de7e4b60a", "indicator--1c2e12d2-dd68-4744-b68d-791cc0f178f1", "indicator--c24e08a7-7e66-4b7e-b0a2-0a62c4d7eb46", "indicator--253dbc2c-6b8f-4a58-8a57-715825cbf601", "indicator--23dede97-37d5-4738-92a6-b9f4aa1a5177", "indicator--c27be369-447f-4827-a5ee-ef990eeeee29", "indicator--f7810b6a-836e-4f2c-a7ff-4254fb98faea", "indicator--af0fdad2-641e-4e42-a6ed-3b288443f750", "indicator--5a18ef2d-793d-494a-9586-f7e7500c5434", "indicator--51d68d71-229c-4cea-9462-8be17c621c32", "indicator--07c66847-b36c-42dd-8cf8-6f338ae2b175", "indicator--73298f26-27fe-4037-8cd1-6ca865868fd9", "indicator--af313d02-f82c-4425-b48a-b6b5cf70532c", "indicator--33daeccf-b26a-4baf-86f3-1ee65eac367c", "indicator--1431f8b3-2c50-42fc-a006-98939c42d700", "indicator--abcd5671-62e9-4a01-89fa-1f9fdafc0926", "indicator--4d7b47f5-95d8-48ac-812f-5aee60fb25cd", "indicator--ac633cc5-e90b-49ca-ae54-4872daa31328", "indicator--c58a7dc8-c8a4-4047-acde-842a057bfb43", "indicator--5e8aedbd-9d48-4bc0-8346-2e02713186ff", "indicator--bca0dac7-aa8c-4272-a328-7b334f27281b", "indicator--be2f94c3-b019-43a5-b8a2-7fdf518a566e", "indicator--4b129b4f-b397-4d2a-8295-0cc045a35501", "indicator--f016d49c-b837-48fa-9cb8-bb8775a81931", "indicator--95620b56-2c38-434f-9bc9-6d0605d3f0b7", "indicator--84337a0b-eb6c-43e9-93a5-7a41d2d2cd54", "indicator--1fcc6098-11c0-4f30-8b2e-0d053b4fbee7", "indicator--cce3f8f2-9539-4d23-8f41-e65d46be4d82", "indicator--93b49210-8efd-404b-b81d-eeccf56297bd", "indicator--49755433-a991-44f5-b794-ac298eafe9e3", "indicator--90d8acac-8fd6-4965-b8ef-489264e60ede", "indicator--d8044899-eae6-4d53-a31c-507204b1626e", "indicator--11b6034b-f440-439c-a099-4c778c666ae7", "indicator--f8268c53-f6d3-4b9c-af46-c266c8a4306b", "indicator--970d50ac-7ec7-4835-a3a9-52d98ca884c4", "indicator--66256764-6dac-4d5d-9fde-01f8fcfc9c2f", "indicator--e00a461f-0794-4600-b133-c6317f09c753", "indicator--4ad9a51f-e394-4500-9d70-70dd03013f44", "indicator--e1fbf690-f6c6-4796-9800-0597f3cea792", "indicator--cbd2131b-a987-43b2-aa56-5b62c42ca7e4", "indicator--8f851a15-fa82-46cd-9300-8e5ff2e83a94", "indicator--14fca0aa-97e7-44dc-80f5-9b89202dda8d", "indicator--ba6864f8-8200-41fc-a9c9-d23bd46265c4", "indicator--de9fe62b-9834-4559-9dd0-6ea0bbefc591", "indicator--3ebc776a-6b03-48c7-af30-d65e26f3fc2d", "indicator--c8f5bc3a-c61a-4ca2-85b3-d51490c88d35", "indicator--e4f577e9-fdbe-43ff-8500-d416b46dece1", "indicator--cfba4e3b-f767-4ef9-a605-ed34d965ab66", "indicator--65f0fa94-f15a-43cc-b83e-9fc04bb39315", "indicator--3029d67b-c0ea-4941-a561-9e5e5787fbc1", "indicator--9b45531e-0ffd-4147-9e52-bd9d2e0c7916", "indicator--7f665f7d-e191-4380-848f-6afd85e63407", "indicator--3e5ce433-cbd1-43cc-bcd4-495f7d9b308a", "indicator--ddd612e9-d0bc-4d56-8279-0d1240027668", "indicator--3ad32be6-e075-4317-957e-61931c9ef9fc", "indicator--dc0d7b58-84f3-4021-b11f-3d850c1a270c", "indicator--1d71226d-e012-450b-b148-1d073a637dd7", "indicator--a82cda7d-1f03-4254-82ab-bb67fef700f8", "indicator--b9647d8f-d781-449d-b660-25b58a44dc69", "indicator--d2f12f95-7f83-4556-938e-cd6b85ebf64b", "indicator--97dbb6b4-5517-4e4a-9861-3408bda5122b", "indicator--3d50479a-b4d6-466b-824d-895b24bbeb67", "indicator--c8cbd142-3063-4d0c-98f5-315e647cc302", "indicator--e8261dd6-f288-47e2-bc5a-e72bafcfc59a", "indicator--91159361-a98d-43b2-ad4f-7627eac9a431", "indicator--7f27a671-8288-4290-bde0-7f814f312eb7", "indicator--0cf65c0c-4156-4494-a712-c607ab00f1a3", "indicator--54e70526-6cc6-45e1-bc48-06d5c2cec6f6", "indicator--4d70996f-c804-4a6d-b6fd-84bf90c7e846", "indicator--773a7569-db9e-4a43-a32c-519962f0608c", "indicator--96692a77-6ec7-46d5-8a46-7b888f5815bd", "indicator--7555ef24-e74e-4d8f-93ad-84db07ce3d0f", "indicator--9fd35fc7-1001-42ef-a400-0432f5703b95", "indicator--9720f803-7baa-48a5-81e0-e93201ed7ffa", "indicator--188dbf4a-f22f-4038-bd06-e3079a72c280", "indicator--5eae0287-a08a-4f82-91e4-2003749536d9", "indicator--1a7154f5-598a-413a-88a4-96a3007ec3ce", "indicator--09929ac1-58fb-4830-8d12-12ed09722fe5", "indicator--ca441fc2-f456-4cb8-ac1b-92d4de42ba36", "indicator--1d4d6a4a-4109-446b-89cd-ee38c4c8e262", "indicator--fa28a839-911e-425e-8175-2eb3d03355d4", "indicator--b60f4d4a-87e9-4a89-bb2d-1ebd12e29735", "indicator--a6c25d47-41ae-460c-bdb5-0efe6fad3778", "indicator--2f9fe0f6-d48f-4a4d-9d45-ffa920fc9311", "indicator--e4090aa1-2433-4c70-a157-298cd5a4e42f", "indicator--60005d9e-288d-458f-99de-1e2e4def585a", "indicator--50ec1525-8a8d-45f5-845d-dc4a9f02e111", "indicator--084ae3cf-b38a-460a-9699-05c261c79ccd", "indicator--a80ff647-25fd-4b2b-a134-c3c8e0d95cec", "indicator--8d2fd3b4-ec54-4d12-9d2e-adc763fdc72c", "indicator--dcb8bcf0-7d54-4006-bb70-adca656f7071", "indicator--7a8688d5-3a08-4870-a509-c09bded3a1bd", "indicator--fc67fc97-5cd1-461f-8fe0-09c3a209e4c5", "indicator--9e05b651-e66d-4b39-b066-1b4870eb15d5", "indicator--871dffe0-5c7b-4a98-9f0c-594915b55389", "indicator--90be5021-644c-44c8-ad7a-e344db89a6e8", "indicator--a6aac2b3-3941-476d-9705-25b981896820", "indicator--73979036-3cc2-4426-bd8c-1a0570e8272f", "indicator--a2909472-f05f-40b0-85ed-9327c0d56ea2", "indicator--2f0a494c-048e-4cef-91ad-5560bce67d55", "indicator--157cebc5-a6d8-4fa5-86ea-8dfb942fa5ff", "indicator--9bbdbf89-d55d-4ee0-9ff7-2d876dd06bdd", "indicator--366224ae-89f4-4522-bf4b-58ab58128d0e", "indicator--30a44b54-fb24-4f56-b7bf-957df68001f4", "indicator--a682916a-a29d-4a18-b1d7-2e0ec5d68a9e", "indicator--0eadcd6f-706f-4922-a987-493f10f63ee2", "indicator--9d279c76-dd23-4854-970c-d1c6cd39dcf7", "indicator--dfd181bd-500a-43b9-8828-b57667996be8", "indicator--54f914c3-4d67-4283-9b62-f862a2040a74", "indicator--0309f62a-d08a-4558-bea3-ef5bd700dae9", "indicator--dfdb164e-232c-41b8-9b67-32306a180343", "indicator--292ec1c5-635a-42c3-b479-352e20b47248", "indicator--c97ce321-ab6b-4e9e-b911-0b54a634c9fa", "indicator--761e757a-d383-4fd4-8340-8b4ef02a0d59", "indicator--579db265-8a3c-4847-80b2-bcdb8e405ad7", "indicator--0483015e-c34c-4e4c-b359-6b85af6a5ed5", "indicator--8add42a6-a3c6-4259-8f4d-10f14bf75e35", "indicator--147d1c7e-3751-4eb8-8887-6822b294a130", "indicator--bf746a72-59ff-448f-adff-5955184d35e6", "indicator--9b515b58-a537-4ef7-9401-3aedee8d9fd3", "indicator--3559bd87-44e0-4475-99d5-330986211cdc", "indicator--899c82fe-0980-4cee-aec4-7244a33a4e1b", "indicator--79f7234f-82b7-481a-a212-c42ec65231e6", "indicator--d4e7ce76-20f0-4dcb-90fd-1f032bbd3fea", "indicator--4c77b181-5b32-41b6-9425-f05115ff79ea", "indicator--3c7690e5-ff34-4516-9ea8-e55970822da8", "indicator--4d03c83e-28dc-4a5a-b673-e57053de242f", "indicator--d24af791-f4dc-464c-be75-6c3971b6624a", "indicator--65d0ea97-eb79-464e-b479-73f91908b1e1", "indicator--b441cbe6-b39e-4144-9691-671a5aaa0597", "indicator--728b006f-8976-483a-97eb-5324fdb0a838", "indicator--dffb3792-f4d2-4fa4-a248-26b6807d04bb", "indicator--aec4f7b0-7fa6-4d8b-bc74-3f55c0a61c89", "indicator--73c4ccc4-c032-46a6-815c-efd03010ae08", "indicator--59d68e24-bc7f-4d86-8748-bff322431338", "indicator--6e146bef-c33a-4a79-9669-fba1ffbc0eef", "indicator--17f34c88-7da7-447b-8aca-2ef8533d7ecd", "indicator--8ed47d57-d8c5-494f-935e-0be49693ec9a", "indicator--b5984d39-d334-46a4-8de2-9972ac2ddd0a", "indicator--66e4fcc6-a917-4cca-b322-ca9f3aba66f2", "indicator--b2fdc782-2357-4723-a344-0e708bc3534d", "indicator--c959a91a-2998-464b-ad52-0590e8f69c14", "indicator--6f59ebb8-c828-4d0c-b7d6-ff184fcd80bd", "indicator--313f745c-3b26-4e4a-b52b-1594f8d097cd", "indicator--252d21cb-98d0-4856-8d3a-e3ff11101419", "indicator--a70fc6f6-07fb-494c-aa54-e911bd25b79d", "indicator--95dfa14d-c669-4f35-a33d-00b8efe6483b", "indicator--f84b44fb-71cd-40d5-8d7d-9eed358b8142", "indicator--e6b7ddb3-863a-4b1e-8932-c419e636e6d7", "indicator--bc55fecb-2db2-4bdd-bf95-691d05dca4c0", "indicator--cb7df673-1378-4e66-97a0-6679359af715", "indicator--5869ef30-d546-4000-954f-b0aa606c1e8d", "indicator--6715e878-386e-4871-86aa-b41f824ec607", "indicator--61e631b6-7eb3-43aa-88e6-97c6769adeba", "indicator--6b29a74a-9a28-4c73-9969-3afcb8a0c20a", "indicator--e49bce13-d5db-4c51-9de4-0d3d77bf22d4", "indicator--45dc1ab4-73ca-417f-9ffe-8da6ed2a5478", "indicator--1e3b137d-276b-47d2-b459-fe65e0cb8b7f", "indicator--d4559328-5692-4ef6-af03-531a7babfb67", "indicator--0a2b866e-aeb2-4d1a-a913-045ca88e2adf", "indicator--b2315347-ef2a-434f-ac30-4033637d7f1a", "indicator--5daa2cea-9f0b-4039-966e-037bd10352ed", "indicator--3c2190e7-26c0-4517-8c7e-6323f70b01b5", "indicator--8fd4b28e-cca3-465e-92e1-17c954f3b1d9", "indicator--8e5aa179-c7b9-43f7-b4cb-ad960024d863", "indicator--88cfe31f-651c-425b-ae5a-4a47663b24f3", "indicator--2b9945a6-8164-4bde-851a-489bb9503409", "indicator--a0b7b40d-8279-41da-85b8-0faee963e237", "indicator--141c3105-b624-43be-8283-c102dac7f68c", "indicator--7e54f0da-6d64-4e2e-ac25-b870177ffa04", "indicator--09a28670-a0c2-4e67-af53-621ac13850e2", "indicator--74730e47-e73c-4ffd-a26e-459e2a8c66e4", "indicator--72a2aa80-2da2-4f3b-807b-0a26f6e3c0eb", "indicator--01538521-621f-40f6-9ba6-59fc5054e089", "indicator--392cfca7-a519-4615-8faa-001fc8ee5a35", "indicator--8d965b95-ad3c-4c05-a722-75ebceb21a33", "indicator--f38ea6ec-5f4b-4fc8-b7e5-bad1819b8bfc", "indicator--5b585454-45a9-40bf-8afc-6800e86e0d7a", "indicator--e4762b03-d0e3-40de-9856-c36db7416ef4", "indicator--01f14a6f-d2f1-4533-b1b3-a753adca410f", "indicator--ab5754bb-a136-49b3-96f0-37b5c7ffc336", "indicator--0ec716e6-7e5c-49b6-acf4-dba3c36f4021", "indicator--896cfa60-bd00-434b-9f70-fea4dad4f9ef", "indicator--996d927e-d0fa-4231-b444-154282c1e668", "indicator--9ae44a89-c8b5-45c3-a1eb-40b6e78feed1", "indicator--89157d39-9bf6-4822-8db3-278baaaa3768", "indicator--34e79a69-7dd1-46fd-9087-681066b3ad74", "indicator--5bdb78ad-0d62-4e7f-b65c-2d903683c554", "indicator--093d586b-e27b-4663-964e-4f928946a1e2", "indicator--87e20805-e2c0-431c-b84d-cad116b50198", "indicator--19f7b0e3-2bf1-4bf5-a6fb-a2a3c1090cec", "indicator--2b3d6740-dd54-4b68-81e6-bd17e7b83018", "indicator--7b64b238-aed5-431f-a185-84eae451353f", "indicator--af65df0a-ab29-4c48-b3b3-2a00e86c2bd3", "indicator--16bde7c7-d4fc-4462-9c9e-54c09bf5b9b1", "indicator--053365b3-e8a7-4460-b6a2-31780c8e538a", "indicator--abe5ba1b-035f-4541-892e-a9138f104251", "indicator--dcdcbb10-4fbd-42b3-bde4-82c9fa66c531", "indicator--7c6eab5c-abce-41b9-b6ef-26e6fa90e67b", "indicator--190980b6-6582-4be7-a813-a40e3f821408", "indicator--b0b37176-22df-42cf-9fbb-6f7d79bd954d", "indicator--fa869edd-fb59-431d-8834-fc3c9b2d515f", "indicator--5e960b5f-9a6d-4505-a341-3d599af84f08", "indicator--39b3f02a-9db8-4d6e-a793-c6e1575d324a", "indicator--d06c8c65-46c8-4d67-8ff2-d10b9525c405", "indicator--cf7f84b9-d702-4eb4-a371-4c13a3fff983", "indicator--7d0df93b-510d-4261-a246-47c31398f0dd", "indicator--bbee9444-6516-46ef-b5c1-dbc24ef56faf", "indicator--590db620-badc-4b41-a574-54869775fcfe", "indicator--cdca90a1-ee4b-4113-b275-21c994b2b254", "indicator--c567cb70-c9b4-46d0-a1f0-ae44d0d0c4d8", "indicator--10c1ee48-86fe-4603-92d2-540f5b588c87", "indicator--eeef5e8f-61f3-40f2-a6f6-9b46639bc6eb", "indicator--307d20cc-d37c-4602-91bc-7764793c3cff", "indicator--654a12d2-5cbf-40b1-9afa-83eaf98cfa3a", "indicator--dffd9fc4-c5ed-4c36-b916-417f0394e6a3", "indicator--b19d71f9-9c9b-4086-9ac7-ea1e9d4847f0", "indicator--6716099e-8562-4798-9bcf-beb074509428", "indicator--dd920ed2-0182-41c0-a8bf-7d9642a50eb0", "indicator--943cd9fc-ec4d-4258-b85f-edd033e06d42", "indicator--15c80e63-97c6-4b4a-bb4b-3cdc1b80c9c9", "indicator--b6bc514c-e23c-4dc6-a4f2-df9c47cb1ed0", "indicator--6d007410-194e-4063-b809-21e6f5dc1d4d", "indicator--201e4a54-67a1-40f1-bd41-80957232fb71", "indicator--345552f4-62c5-4c02-ad89-571c53b3d411", "indicator--f08bb558-53bb-4364-b130-26d795895f5b", "indicator--112eeac9-cddd-47f8-9c4c-b016d691c1b9", "indicator--4284e9af-618a-4005-a7b8-f4c2ec1132d2", "indicator--ba65a747-a0b8-478b-a8b3-a2bcdf4a0647", "indicator--ca179644-967b-4143-9b7d-249dd275095b", "indicator--e9f27b6a-69c2-4e7f-a30b-23935f8f5954", "indicator--b5fbc9e4-2517-4c11-a315-27668f511bca", "indicator--583c6cb2-d8f4-44b5-a09f-f842ff6cb18a", "indicator--ef0645a5-f940-4278-b585-11eb95c4135b", "indicator--571cd823-0e7c-4ea6-a711-e2072d1b953b", "indicator--ab00b777-f992-4cba-a86b-885458da3679", "indicator--75ebd737-e2fb-4588-9c42-f3732eb42caf", "indicator--a2d85a46-58b2-465a-8ca3-5e5a4c04441b", "indicator--f439b290-8887-4f8a-8f68-c21a452541b2", "indicator--9ed3da79-532f-4b7a-b94a-8e543c902acf", "indicator--36009266-35fc-4bb6-aa8a-908731579b23", "indicator--4354849a-8da9-45f3-a8c8-e0061a795ebb", "indicator--14f7d93b-1191-42bc-b11d-792c2adea621", "indicator--1130948d-eb3a-4ffb-a234-6dc5dd8e67ad", "indicator--7242ba5c-9753-45eb-886d-4b12e870febf", "indicator--593f3573-0ee5-46d0-8839-86d068190692", "indicator--36faf273-d8f5-43b9-ac57-d2bf3a552380", "indicator--02c74f44-05f4-4512-adbd-78ae23b15c45", "indicator--0759ae4e-ccf2-4ea9-9276-71c3f25f54cb", "indicator--da790355-897b-4110-8ca8-839b6bf0642d", "indicator--1df4b62a-e9b3-45ae-b1ea-3153708887c6", "indicator--8c5b697d-4869-4c2d-bd3f-898088b97aba", "indicator--7654e1e6-4717-4621-ad76-9c5b10431e3e", "indicator--74bc6ede-a620-4e27-a40a-f9bc8a84e434", "indicator--2db377f0-38f6-4254-ae15-3f9eb3b4f038", "indicator--b84de852-fba4-4d77-965f-7bda5903aa88", "indicator--69fa70bd-31c3-4bf1-a5dc-10281fa0752a", "indicator--48e8aea1-e5d9-4015-83a9-54104e1ca4fe", "indicator--f51c9213-2f83-4c0b-ab35-103859755423", "indicator--cac8d146-2dbc-4867-b035-a6cb7577d1fd", "indicator--f34e7672-c4f1-4aac-b1a3-802edd259d59", "indicator--494cf83e-ca83-4bb2-bfce-078e30154d0c", "indicator--b55bf183-7819-4b0e-936e-6bc01e4219ec", "indicator--50b355fd-1fd4-459e-9ee1-55afb890aaa3", "indicator--6e4ef140-4a50-42a3-8521-d22dfa000d44", "indicator--ebe6ccf7-d4a3-4d9d-adbf-546dcbf31aa7", "indicator--02b4aab4-0226-4793-a09c-5413ab486ed8", "indicator--e2f0e684-61f9-40ec-a0e6-179b2df7dd85", "indicator--ef825ab3-5c58-4719-8f09-a6118102be5b", "indicator--dce210de-ab8b-4945-859f-f66cc75730cb", "indicator--4ea29043-995f-4599-b13b-91fc69569cdd", "indicator--a4965d97-4642-41f0-9496-2ab03d6b153c", "indicator--e915736e-af57-4bb5-941c-250e310a9ee1", "indicator--433b6b7a-e0c5-4f0e-8ea8-ff6d0fb939d0", "indicator--eb4e02be-6b75-4d6f-93a5-0801fa764c27", "indicator--58ca2287-170f-45d3-a03e-4ed4e9a6aeb3", "indicator--4c20f01b-ee00-495b-b3b2-c35c0646239a", "indicator--73c2e432-e16e-4487-aa6b-6cd0b79b1a77", "indicator--8d4a8047-2518-4b6c-90e6-a9a85d0fe2e4", "indicator--90ff3b8f-2a9e-4be0-b9dd-ac5b8573637c", "indicator--b9a19131-3edf-48a7-b5a4-77e96ea9f91f", "indicator--61d24955-377f-4445-8abc-85ffdb6bcaf9", "indicator--895ea004-89aa-4352-a4f5-f18d3d6fea7f", "indicator--2016dbfc-256d-496e-bb79-33c09b08d9e2", "indicator--aa8bae6e-2e9f-478e-b694-b747b5ffd02d", "indicator--a5b205e3-06d2-4d04-b673-58eb1f04c22d", "indicator--2e861268-70e6-4992-91c9-c794fa227145", "indicator--e326a2b6-091d-4155-abe8-2a19d52ae3dd", "indicator--e8894148-6d8f-40e2-9828-2b968b5d05f1", "indicator--dc6796f2-b61b-4c4d-99d3-31d69292ebcc", "indicator--e923651b-c5a5-4bbb-aa7e-64a1eca4e3d2", "indicator--22c5e72a-4a3d-4378-941e-5d03478a3c1a", "indicator--7f726032-cadf-4c51-b45d-a2d5a221f841", "indicator--cbfcd12d-ef3b-4c28-b45f-4e062efdd36e", "indicator--de65d98e-05a1-41c7-a3ff-ab3fc227736a", "indicator--9ff98b9e-a1f1-4c28-b7a9-82dadcfafe75", "indicator--284e30ab-d4c9-4d58-b886-e3da3d8abb15", "indicator--9ba4413e-ad1a-490e-8599-8faa6fdc1726", "indicator--f3c33def-74c2-4738-a061-6deabd649749", "indicator--c49a0825-c734-44ed-9650-9e4a6698f6cc", "indicator--c2891c50-2e9a-490a-b731-d9af3e0da1c7", "indicator--4d87718f-0e49-414a-81c4-36f64a28ae58", "indicator--0a02127e-8739-4929-abeb-b28ec7f2f358", "indicator--67202af2-4f93-4a10-89f2-19b7877eb8b6", "indicator--7ab2b85c-1af8-490a-b6fb-9a1a02582e55", "indicator--ac14de70-f56d-4182-93d3-556a5756201d", "indicator--7db97285-fa80-4ef3-9b99-e817c3686fe0", "indicator--2891183c-9237-4feb-b547-6d02b5685613", "indicator--32a62466-57a2-42de-988a-2e789481186b", "indicator--7706e5d6-79e4-42f3-ac4a-e4a2dba583a4", "indicator--4e1a5dbc-9077-41b1-9523-6662e02bf910", "indicator--db119464-7260-44d0-82d0-7dd3014afd0b", "indicator--75d2841e-837b-435a-925f-e62bed25d448", "indicator--0fbd3d34-4625-4070-9d6c-727b252dbab0", "indicator--1318d3f8-75a9-4692-9343-349449480bc4", "indicator--196fc4ef-299d-485c-a29c-37f76b78a496", "indicator--4fbe5f92-126e-4cc1-8114-cf3859df39fa", "indicator--6b5abfa8-b88a-4668-a909-72a2e06a8120", "indicator--bd6d97b2-8734-400b-8d09-200b6a30b1c6", "indicator--e815e5a6-3a6c-4875-9c9d-1f7e960010dc", "indicator--36d2b873-18d3-4f4d-9031-4259e1ddee71", "indicator--b232208a-9e5d-47b6-bb9d-5d6e2dfb111d", "indicator--ddbbb030-1b70-4b34-8f97-e52bb71a0090", "indicator--09316ed8-d47b-4015-a469-f6f069adb641", "indicator--a56d148c-dc9d-4d4c-b6a2-f4bdd78062e7", "indicator--d703ea65-7164-4a2c-bd60-2c408ec23e96", "indicator--468c5489-1bbf-4943-ad2b-6be6255374ac", "indicator--18143b2b-7cd2-463a-afe8-21e46ff02697", "indicator--400d9aa0-204a-41e2-9942-85a2c18e933b", "indicator--966fe686-4800-45d6-b5f9-1006eefabac8", "indicator--0ada2f18-46f1-4f78-acd7-d0b4e33b228f", "indicator--7fdc7c1a-9c89-48d2-9a77-1aa0406ef2b9", "indicator--820902a5-c67e-4028-997c-005a3a73ee70", "indicator--daa942f6-fb15-41ae-ac93-6f30dd0cacbf", "indicator--79184eb3-7660-4a39-be16-e0c32a05d8cd", "indicator--e3f7e56f-5787-469d-a5d7-eaf0b7b6c7d6", "indicator--36beb718-dffb-4932-bc8c-ee3409c8ac53", "indicator--a26ca70a-5c85-458c-972a-47e95f28e264", "indicator--99ffb69f-d2d0-4cfc-a67e-6f7e727e1058", "indicator--15199e08-2b41-4053-bd9a-f4c8b7d70e95", "indicator--67ae32ad-4269-4173-82bc-de1a6ba4c2c1", "indicator--716eb34c-8238-41ec-b3e4-2b31b3b4db5d", "indicator--cfa36b81-6cb1-4d6e-b9a4-79df3288ee38", "indicator--1c43cfeb-adf8-4d10-a1a2-a7167d4bd913", "indicator--e7135f8f-373c-475d-9521-e91873253573", "indicator--5ba53c96-ab5e-4cfe-be83-e48c9e7955e8", "indicator--f8d2cdf3-b06a-40b4-9098-74e6ab6798fd", "indicator--f3c5fa21-2c8d-46c0-baa5-77f97a006db9", "indicator--86680e24-2046-4589-9706-750619e5127f", "indicator--1b8c51f9-bf4f-49af-baa8-9d0dbe1b3301", "indicator--9fbff38e-1b87-4f52-abb1-7a7e1c7aba38", "indicator--ffdd8dd8-b93e-4fac-93c1-5eab173b8513", "indicator--7128b23f-6f0b-4a87-a0ec-18107366aae5", "indicator--3f817e3d-70cf-4842-abb3-fd3bf785e10f", "indicator--dfeeab66-0cde-4469-8a45-aa36bad4ad7f", "indicator--01fcb1f1-b9a8-4cc3-a4af-2c9e021eee2d", "indicator--8888c003-cd70-4d1c-a4ed-d8094f50f755", "indicator--86cf4dd9-6843-4655-9808-3ebd6ab4a673", "indicator--043141bc-21f0-4cbb-98c4-a7963a02e37f", "indicator--f509c8b0-8ade-493c-9c91-d6fe0c8f075d", "indicator--edba26c0-af8a-4a71-9b48-72dff37702a5", "indicator--53dd88f4-515f-42e3-86ea-924c3f967a64", "indicator--380c06a1-51af-43c2-8cab-37e736109fd5", "indicator--f13a1fe1-a713-46d7-ba2b-03eb0014fb1e", "indicator--2b0b399a-5684-420f-819c-c24e19bc1818", "indicator--baae4a4d-f574-47cb-8419-e91370375764", "indicator--9df6b617-c75b-4221-8dc7-2e3777db5abe", "indicator--2e65017e-8e36-4516-b603-6e5984d4bbfd", "indicator--34f8d8c8-7566-43e9-9cd0-c6f25f886f38", "indicator--63f9a642-ec95-4ba8-b606-925215f32ba3", "indicator--b97bf410-2f54-4e7c-afcc-524025c5bedc", "indicator--cd3f84c6-3f2d-4fe7-86d9-6213d9903c09", "indicator--bf0b36c9-6401-42b9-ac0c-00d7322f9fed", "indicator--94a44e81-d9d6-429d-b184-6ce5e041eb8a", "indicator--052478c8-d58c-4361-993d-54b8dee8e098", "indicator--8f5e9210-9487-4a57-8e25-7f1b1c34d73f", "indicator--c0c087b6-2a29-4734-8d76-5d3e7585c1aa", "indicator--53a6ed4d-6545-4197-89ab-085a432a9611", "indicator--ab45d02e-8a4f-4050-938f-117c2ee7fcd2", "indicator--7b2ca812-3337-4f6b-ac6e-172768da7105", "indicator--e5ba9286-8623-412b-8af2-e7063cb49f18", "indicator--ca8a95b6-eb26-479c-a515-ac6e6c4b8209", "indicator--adcefb63-ebbe-4103-98f8-4eed37fb86b3", "indicator--1a35ac78-ccbe-40ab-9689-223f609606b2", "indicator--522a26d5-9c4b-40cb-8400-c7f67e5f3f8e", "indicator--76a4ec11-1593-4d71-9ced-bf9b23e1e807", "indicator--e0fba899-d57c-4b04-9071-be111ec12096", "indicator--9d2bf9b7-cfc3-4f01-b5ff-37ff67c56fdb", "indicator--a09250a7-9ac4-4b58-8009-979751c2147d", "indicator--fa082cb1-3cb5-48f6-b775-aea5faebda48", "indicator--cea922cd-94f7-4076-a133-31ee565ee5ef", "indicator--1ac9d64c-26e9-4aa8-b5f7-39c4529e6a7d", "indicator--af2f4bd8-3fdf-4847-b979-99c11905c6c1", "indicator--3e973419-c9e1-4dc4-adab-d5ee870801bc", "indicator--c1e9d3ef-514d-40cb-983f-989071593d24", "indicator--24578e7e-ee63-4cbe-9c22-232bc6acc1ba", "indicator--9a2c5ebd-82d0-4db2-bc08-a513f59f4b3e", "indicator--58f1f759-43ab-4c5c-af68-a7f7a1c9cd0c", "indicator--19899bd5-3013-4c71-8001-f8d9e392cfcc", "indicator--e5187293-9ea2-46f0-bd6d-6891e53afa73", "indicator--dbf74188-3a6a-4c70-9d89-eb467193acde", "indicator--65faf08f-c6d3-4492-a470-5099415b457f", "indicator--98488e5b-b0ca-49ea-87e1-7d0dae8b64f5", "indicator--a9ba92d9-d710-4760-9783-0ced2d1fed21", "indicator--224da7b7-621c-4413-9e5c-d1df48e1a94d", "indicator--e7e3f0d6-a621-47b9-bbed-e712c6ec88c0", "indicator--f5912de6-5c77-4604-8419-90b5a1bcd3e9", "indicator--7956fdbc-a8a9-450b-a68e-1e66f3e0a7f7", "indicator--10049633-efc3-47ac-bed2-887e82144fe9", "indicator--f2701229-cb51-4c8e-9fb9-53524999e840", "indicator--ea277daf-787b-4769-8b58-cc537fbc19c2", "indicator--f9b191c4-8337-4a0a-8195-b5ab9550b15a", "indicator--34f86735-9a8e-42cd-9a78-17fe04b54585", "indicator--47e78209-001f-48f7-9c4b-4649b24fff27", "indicator--21ce944b-9255-473d-b54d-2289f049f130", "indicator--a25d4134-2069-4422-9a38-e8f517c1519f", "indicator--8a4b2663-0976-41fb-8e14-c5582ef5fb05", "indicator--84ea6c50-06c2-4c87-b56d-71c75c3e0d2d", "indicator--716c08a6-63ec-469d-ab5f-b7ce88808d99", "indicator--d3a95c85-ee87-4901-bbde-873b998b1ae0", "indicator--bc47fdf3-9f5c-4d7a-b358-79014076e982", "indicator--5da9b2ec-909c-4acd-bbdc-7d5a7508bfe5", "indicator--f8d2ebd2-3648-4de2-9430-3901c7ef4887", "indicator--88d4d062-cd17-4aec-ba1d-bf2388fc7c3d", "indicator--19a2a9ad-e736-419b-9805-7dea0832a2d0", "indicator--b0a87b08-c528-4341-8351-e549fb3cb832", "indicator--780005d5-d908-4066-a5b9-cadae356ce47", "indicator--d61a93c5-c5a3-4cbf-a856-85255274d5ef", "indicator--a947328a-eb05-4ac4-9fed-0d333a12baa3", "indicator--a7d9d17f-1127-4906-a12b-04687a88cede", "indicator--3aec48d3-7cb3-417e-81ef-dbc71e2fe965", "indicator--b43c129b-c8eb-4e41-a361-e46e125b58c5", "indicator--3ef3c172-a1e7-4e8d-887a-0a9508b38c92", "indicator--84ac1acf-2152-4627-bd70-7d3c75f718f7", "indicator--e7865ecd-d95e-432a-a574-7ea5d437af25", "indicator--c5134c3d-5f33-49cd-af7a-4bfc75824001", "indicator--857b6611-655d-47d7-9b6a-ae0a4af12f4c", "indicator--47e7d833-8532-4aef-9213-a561384d0ff4", "indicator--ac09164c-ecdb-4b1f-967f-fdadb542e919", "indicator--f3cefed9-0ebb-47c2-b24f-10ffa6bdbef2", "indicator--ac13aeb8-0504-416d-a381-c53838620550", "indicator--dd3359f4-fdb8-47c3-8904-9f7d33f7bad5", "indicator--88fc5be4-1b95-4daa-a92f-225146226852", "indicator--523a1efb-c0c6-4547-bfac-21fb6db9dbbd", "indicator--0c3d0dce-dc8f-4d81-a542-f558a7673754", "indicator--564f0b12-446a-4ca9-84d7-2aa46bf1d443", "indicator--cb1675a2-a53b-45a1-9e17-d2ce795f96f0", "indicator--0294b56e-ba82-4f03-9112-6e33b33c4cfa", "indicator--75f42a07-7e59-494e-b5d0-0ce7f5295198", "indicator--f6a6307c-f365-4720-94f3-22a6659e6a4f", "indicator--0a8d6856-4bd7-421f-8183-882f5b7d3ded", "indicator--fbb5d9f9-4ad5-423d-9e92-d955ba656a89", "indicator--9e514846-b713-41ad-a0aa-857816148fe3", "indicator--0108eebe-c97b-41fb-a85c-39e29f14d508", "indicator--097f5392-7357-4432-8c31-114a2dea3906", "indicator--e0112e37-b6e6-4a64-a90f-bd123bd8ff03", "indicator--24b941ed-459d-4de9-ac6e-e6ebaebe46d3", "indicator--8e9e5aa7-640f-4ff8-918a-9fd15344db7e", "indicator--c1b28b2d-7ccf-47ae-9bc9-5dd948130bb6", "indicator--79f09697-55be-4462-a498-b7b4ff967777", "indicator--a7480554-fa5d-4830-8b95-b44465ebd5d0", "indicator--9a557ec1-3a27-4bfb-8ef9-945de314d460", "indicator--c974b4fa-1c68-4161-9309-00f5ff6e30b7", "indicator--685c915d-c39b-4e9a-a054-2e0c10eeedc2", "indicator--05c22330-209b-4b96-a0c4-8226cd15919d", "indicator--aa0943e6-c5a1-41d8-82f7-538f14779c05", "indicator--06f6ee10-4ceb-4c7f-8459-3ce6a3e9861a", "indicator--c80fd727-746c-48e2-9e96-25295cbd80e8", "indicator--7bb857be-eeff-4e64-befb-50141371e505", "indicator--d42e0a9d-5f7f-4d98-8dc4-c6d9f48552c1", "indicator--0d4f32d0-20a3-47c8-975a-4929c1e4ae21", "indicator--4d0a30b6-cdd4-4753-9d44-9269a7220d81", "indicator--304fd25e-a09a-4751-b5a5-74c6250b8227", "indicator--c5910451-ed56-44dc-b8df-3fcea419872b", "indicator--ad78545d-8082-42da-bd8c-27c8544c8e25", "indicator--121a4ca8-1d0d-4b3b-bc59-3919556ed38e", "indicator--5e5099e7-89b5-4c4d-93b4-44cf5df942f9", "indicator--8b3abc61-da41-4110-9112-74f7c3d6344c", "indicator--58b6cff5-dec4-4d52-814a-7a020bc49705", "indicator--a7d8a0da-cccf-4bc4-804d-147aa3103038", "indicator--16958007-6bec-4f12-8e0e-ca0d25330d0c", "indicator--dd638ae1-122d-47e8-8a9d-7d66d9354146", "indicator--d12dbda5-4369-4293-9dca-1cb5d41a67e5", "indicator--2ad4062f-9891-4de9-91f6-e335e6d4b64a", "indicator--7cc470e9-ece9-47c4-967c-aef5b04ec963", "indicator--35a88fa2-de3f-4234-9115-04779b1537a4", "indicator--fbab73e8-4677-4c45-8274-c1dd0199bd21", "indicator--72e40395-79d8-424a-ae5d-e2c5b3964fca", "indicator--ef9590ae-4100-4a08-b87a-1a06b1d28ff5", "indicator--36436db1-80d2-48f3-bb37-4812343bbadb", "indicator--18c55c3d-228f-4058-86e4-583ff7a711ab", "indicator--e7cfa66f-317f-4b98-8523-8dab0ecdbe90", "indicator--a449a924-56f0-4e6b-bd6b-0a8e3c080a99", "indicator--7b4c7126-4382-41ee-bffb-61b90d4c7f2a", "indicator--1dfcccce-e852-4de8-99db-c2927670e48b", "indicator--3737fa85-2fc0-415d-93fe-0b0d342d4cc5", "indicator--13d8fba1-19d0-4b25-924b-1eb52b19b190", "indicator--0d672f11-2674-4f40-a647-1af86e42d13c", "indicator--2de2f7c1-198d-4890-b86f-29024a31c45e", "indicator--b52ab90a-152d-4c95-a666-e4684cf44f9a", "indicator--3068f438-d54e-4dd4-b23f-aa69704215ad", "indicator--289c941a-3a43-46fa-808f-b68394031c5c", "indicator--1bde470e-2166-4322-a8b4-2e9b12c04d63", "indicator--e7c637ba-5560-47ca-8f9d-4a4641899aa5", "indicator--025648f5-c210-4cda-9695-6af15a96c90b", "indicator--d7d521d6-47b5-4449-82a4-3f04509e6c42", "indicator--8676ccc2-b220-4481-932d-5ba734359a75", "indicator--11de8dd3-280f-4a28-921e-b3e49797246f", "indicator--0ada7fe3-e855-4e87-a5ef-bb6bddd64ba7", "indicator--fd10eaf7-4558-46bb-9668-693c53c3501d", "indicator--aa8eddc9-1e70-491b-94bd-bc648e15164c", "indicator--042e00da-7426-4e69-a931-24df153ced6f", "indicator--87747f05-6b38-4100-923b-b368a4cd4b8f", "indicator--c486d809-1072-4755-a58e-0d74ddc88ada", "indicator--0ba0c2d6-336c-4d6e-a55a-b90eba7a206a", "indicator--316da565-3379-4b7a-aa69-55c660fb925a", "indicator--221bdaf9-e90a-48b4-aab3-1929c4d60198", "indicator--ecebb680-8c9c-4d93-a16e-a0e0f3f6e26d", "indicator--d4cbbc61-fe98-4a12-ae3a-0712bb5bf22e", "indicator--d096236d-38f2-44e1-b4a2-67683cc43f0f", "indicator--cad3714a-882f-4a06-babc-e40dfa6de677", "indicator--fe1257d5-6463-4569-8224-f8740607cb84", "indicator--22903416-6773-4fe2-bcd1-79bc0b24d3ec", "indicator--d3502579-c986-4eee-a042-b73dc260c995", "indicator--3937bfbc-39e3-49bc-8526-ed6e8b053b01", "indicator--5304e3c3-4a66-4646-9530-1ef7c7fbd15f", "indicator--15f2fb07-6c60-4faf-8251-b0a206bfad25", "indicator--a28339a2-52c5-4e34-aaa5-cb1aee2cbac9", "indicator--0363f6fd-eb7f-4206-b554-740de60d1d20", "indicator--6b1a4b5f-27c0-43fa-a340-94cda580ba55", "indicator--d4d5d76c-b49f-4233-9f25-a5cfaf39297d", "indicator--d9c84159-b7a6-427d-92ed-bd445724920c", "indicator--3df67eeb-809e-499b-a447-cfa514934882", "indicator--32622426-47f1-4645-a9ad-20063057c6c5", "indicator--8aa64354-f1d5-4c10-b6ea-a15e1d6a69cf", "indicator--a63a5e1a-0cff-4fde-8764-8d7e86fb2906", "indicator--2556b676-cc32-4bca-9b73-f8c7044696a4", "indicator--0a561602-aade-422e-8366-d22b35a712f0", "indicator--df946f41-a2b9-4550-80fb-8d80514745e1", "indicator--1dc73920-1ed0-45df-9440-1ed3d5dce915", "indicator--cad947f6-3dd9-460d-ae70-d20c192f612a", "indicator--de1ba36e-80be-46ea-85af-0a1c9ec2b45f", "indicator--bce86389-2b33-4f84-86c7-81c5b278d177", "indicator--54effa35-4e78-4d14-ae75-85535db0fc0d", "indicator--f2908fbc-2df8-4f6b-8980-4e6d9679ab37", "indicator--5de60c12-1743-44bb-97f5-749db2ee8e98", "indicator--0c32b8e3-2930-4c04-a4d7-4d1012e10e11", "indicator--f99d8a3d-6966-4ef2-b6ad-762967dcbabd", "indicator--6e8c4722-b24d-4c62-9b26-8c71e5735703", "indicator--bc7a95a5-85e9-4670-9d8b-9e94f58c9ce8", "indicator--1d9cbd7c-57d3-4320-a2b8-b99b68fa4a26", "indicator--85e29d1b-62e7-4393-b784-b2432181546b", "indicator--da2998ac-8288-41fb-b499-457b1f2da05a", "indicator--707e7232-0d4c-4ed0-ae19-72033846002f", "indicator--625d2671-1696-42f8-8e58-e867ab0bbb89", "indicator--aad62752-fe2e-4d3e-9601-da596098dbd3", "indicator--642a2f6b-2e99-476f-89b8-75fb00ecc3f5", "indicator--42368afc-fd63-4d98-93d4-fb6f353644dd", "indicator--af47299c-4d16-4be4-8bb1-5ffb495ef01e", "indicator--18cc34fe-e47a-4bda-999a-aa6b86157156", "indicator--d0c79f8a-c4aa-4a4c-8534-7b37df7e3f22", "indicator--cdb1f8b9-00c7-4df4-9b27-c724a5b5f9fb", "indicator--f87c511c-b1a1-4dbe-8929-713f537844db", "indicator--f4e886fa-042e-46ae-b972-303321813d81", "indicator--52adb30a-a2f9-46c2-865e-5efde789315f", "indicator--c3300810-ce1f-4ac1-939e-d5b6f0414170", "indicator--3672163c-323f-41b1-9a4d-d10e088caabf", "indicator--3ef0a141-1c3d-491e-ae4c-8c8fb9e896df", "indicator--14ac6db5-8304-4e70-bd13-3008910dae1c", "indicator--b896f9ab-6315-479a-9c23-4efdcedddd74", "indicator--1abcaf3e-c1c4-433c-8d72-7d695a702633", "indicator--099a912e-a44e-411b-aa61-2d350b26f17b", "indicator--5dc1eaee-b775-458a-baf6-b4452c2a6ffd", "indicator--0ac3faa9-6a83-47f6-9079-b7953720ad8a", "indicator--3d89a317-fc42-41be-95ca-c3bec875d705", "indicator--d2236f8d-5801-4fb5-a053-2cecd3088c1b", "indicator--39ad73d2-be98-46fb-8eaf-a89fb6744ccc", "indicator--0b06b4d3-9523-4494-af0c-331c58e8b6e1", "indicator--4f0dcb32-2f9f-495e-98a5-5486da6456df", "indicator--39d9135b-e109-44f3-aafc-54ae0c6d1022", "indicator--06e8142d-077f-4032-98e7-1b85f0b72c28", "indicator--6c72fa42-9877-4e82-92c1-c4c9ec5f5834", "indicator--676dcb1c-2279-4110-970d-16d27b5cd32f", "indicator--6b847edf-4197-4e47-b9c8-5a7b00299e88", "indicator--ddcf8048-8ed5-47d4-8202-d8f9ed4841aa", "indicator--b7df9169-ad3b-4909-a229-bd4f206889a6", "indicator--e4cef8a3-6411-42c2-9bda-32b2f2fc2581", "indicator--f07d87b7-e697-4879-bc51-ebe717b1ddb0", "indicator--220221db-1ef4-440c-866b-a3ed8ed0bdf9", "indicator--8feb915d-daa9-41e1-8e2c-fd2658ec16c3", "indicator--a871bfec-d0a1-4612-971a-852309bb5085", "indicator--63b49e17-301d-49fb-8839-69d9979736b8", "indicator--f58eaff7-636e-433a-a87f-5b5bfe152834", "indicator--897ef271-ccae-4293-82b2-94a6e84e382d", "indicator--ce6d1acb-34b1-4904-8a32-f17400d231a7", "indicator--74368e9b-743a-4e6f-877d-5c4a4402a800", "indicator--365a909d-29a4-4807-8e58-29aa0440ea94", "indicator--198f3c11-4919-4d8d-b4b9-f2fba546b16b", "indicator--9f73c4bb-a88e-4894-b607-580e9c4e96d7", "indicator--d745194f-f7d1-464c-ab6b-2d373c2f4341", "indicator--845d9cee-dfa2-4369-8b9d-d7b5b6395a8c", "indicator--5c3f4c66-b08e-4eed-bba5-c2ee0d209b6e", "indicator--f4b24902-111d-47e6-8a88-4c4ba7c541ef", "indicator--6d1471ba-dfbf-443b-9182-c75c17a8a612", "indicator--d5fe775d-1b90-41e1-a09c-f9bbbd396fa5", "indicator--7e66be86-fa7a-4831-b771-0051b3a6a1e2", "indicator--bdfb522e-c628-49d1-9a07-ec68ec4464fc", "indicator--7ac9ab2d-4eb1-492a-ba46-a4b6e135b8dd", "indicator--544f6e0e-2ad0-41e7-8d74-3a82948ee1a3", "indicator--5e413fea-a5c1-4db9-a024-e7cd34ece962", "indicator--87440513-1aeb-46c3-a139-633e49fc0844", "indicator--3555b2d5-1d17-42d8-b8da-5b94c75f9105", "indicator--f829c4a9-8e2d-4fc8-b894-0f4e83598c9f", "indicator--42027387-77e0-4171-83fa-e97317046a94", "indicator--d347cfc5-46c2-4a43-bdd5-0b818d6d15fc", "indicator--3e698ad0-1d23-4149-9175-6398487d5edb", "indicator--87b594c3-2130-4a64-97b0-63ecd7da9f6f", "indicator--44eb4c4e-ab85-4703-9170-b5ee2512fe10", "indicator--3af624b5-0b6f-43a3-a5d0-550bc983b933", "indicator--a67a5252-408e-4c53-aa51-e9e2ebb80689", "indicator--0852c1f7-e386-4ea5-a124-844b9d47d9d1", "indicator--2c75c5aa-5b2f-49f2-ad26-3d919c1c3c61", "indicator--35e4cd94-c108-418e-b065-6a222e83d957", "indicator--91f2c7be-ef32-4b85-bd91-a380992c9e1c", "indicator--ea7509ca-0db0-46eb-8360-df7132f254b1", "indicator--bace25a7-74c0-4785-9b0d-fce55cac5cfd", "indicator--d24be788-e5dc-4336-abf5-17c263bda6ed", "indicator--51bf37d4-cd6f-43fb-85b7-b2ed1b1a6e48", "indicator--750ed4a4-d2a5-4dc4-8bfb-14fe69a4ae36", "indicator--cb54f1b9-fb1b-4052-a43f-9a9e4c09ec91", "indicator--ea7a840e-b1d4-4150-a8ef-dd5df08f3d49", "indicator--445bbdf5-c13a-48e0-b53a-64d360da1972", "indicator--33f563e3-c1aa-4b90-b73a-d2a1ca346015", "indicator--2311861f-63aa-4ade-803e-a4eaa767818f", "indicator--e78cf04c-20b9-4e26-b647-11431d4d9196", "indicator--9d53d950-ee1f-4b37-8b4f-4b3301a34ecd", "indicator--4f43b26b-6e3e-4fa4-850b-f7f1f2f6510d", "indicator--f0632d47-c6fa-4bd7-999f-b5f9f9738366", "indicator--966a6b54-7ece-4207-9bd5-9f8db179aaa0", "indicator--b761b6c4-4356-4ce5-9ba1-0a07945ad99d", "indicator--f7d26997-5b63-4232-be1b-7540a149e43f", "indicator--edcb9341-e0f2-4bb0-9c5d-1e732e0d3650", "indicator--0b5a3e32-5bec-4085-8c63-1670861173de", "indicator--9d306dff-efd1-4028-8438-938a70b876b7", "indicator--39b85ab8-a64a-4d5a-8df3-8e91a6280940", "indicator--0efd6207-cae8-418d-b3fd-4fa7364741da", "indicator--cda7e7db-8e4a-4d8d-ac3c-9c98c22fcb48", "indicator--e4165352-2cac-47fb-8030-0c6e73443bae", "indicator--a18b41b9-5a49-4130-bc7c-525ccabf9ac2", "indicator--f08a6ae6-1ac4-4c5a-a293-d66334fce3f0", "indicator--d0c27dec-298e-421a-932f-9f04b675f090", "indicator--d00fa307-eaaa-43d5-b270-e786149747ce", "indicator--695bb01a-4ec3-43f8-9051-905b1a8379b7", "indicator--77534040-e18a-4fbb-aefe-f95322376fd5", "indicator--f810d028-99ed-402e-a13b-b62b48dd005f", "indicator--a0f28570-329a-4436-a439-cf55cd90b2eb", "indicator--7b57a852-bc9b-49fd-afae-2dd72395378b", "indicator--4c41e7b6-685e-4abe-887c-587d4d94bd3a", "indicator--6fa92077-6f4d-4833-97d0-a7bb534aa4f4", "indicator--bbd934be-9004-46c4-a3b8-95a0d9865c97", "indicator--b6d6e330-f720-484b-8bd4-3975971415bb", "indicator--9cc62ee6-f094-4055-8936-d2811a49e478", "indicator--6c3fc522-fe08-4455-b57a-0d1849d00611", "indicator--adc4d70a-2296-4149-8bd1-9901c24ca3e6", "indicator--dc05e12a-53cc-4970-9a7f-ea8f2ccbd8a5", "indicator--0f60d59a-868d-4e89-bbdc-130ed435b11f", "indicator--379bb228-d724-4443-97cd-9b52a7a63746", "indicator--e19d89bb-1017-417d-837e-02976c670300", "indicator--06b88892-af02-4866-b395-9b8e79cff05d", "indicator--09dc151a-0f01-4dad-a5bd-d5f0706e58b0", "indicator--6c669f14-0db0-4c59-9767-975e3d1f0643", "indicator--dfcf331e-405c-4593-bf2c-584a1071d997", "indicator--6f4bb004-df87-4fcb-93f6-4ae41925944b", "indicator--9e2e5c74-9f11-4165-b218-58b5f5fb0d9c", "indicator--6b26a099-b5b1-44fd-8163-bba3d5f48be2", "indicator--e9fb4fbc-9cf2-43ca-838c-19b3d3562afa", "indicator--e661e47e-34ec-40c7-8932-ae9855e7ea7d", "indicator--edecc440-ef6e-4bec-8fa8-18a6f95c4897", "indicator--760a50e3-a2b5-42ae-9754-fc7ec3403e64", "indicator--349266bb-b879-457d-80bd-c1f8096833ac", "indicator--012c60a2-2006-4c22-afeb-1d924842c0b8", "indicator--95cbf1a0-ac48-48c6-b479-3a9b33951896", "indicator--cafc17fe-dd89-4bc3-a67e-c855b684f9e2", "indicator--2ddeabc5-ff27-4b35-9be1-8ade6369a0f2", "indicator--e2ed60d7-34d3-4f58-af5b-32c40d07deda", "indicator--61d67be6-6dff-4e54-bc5b-a5fcd2208343", "indicator--203d9a65-37f3-4ad9-84f8-3d7527880cb4", "indicator--bcd1b4a3-84e5-4b87-a8f0-b0027f8a2c6a", "indicator--7277d43c-1700-44fb-8db5-aba2c070851f", "indicator--dee519b5-4054-44c3-a056-5811f50e8b2a", "indicator--e972a5ce-8454-4aa7-bff4-a5691ff5f0a4", "indicator--b66611e1-03fa-4f8e-bc3c-a655691aaf52", "indicator--55b95532-6d8e-4528-b684-99192be22740", "indicator--a1e4824c-f85a-4229-a8a5-124762e16259", "indicator--d5229e2c-5980-4231-946e-cd5e41f3fdd0", "indicator--9307ab29-8759-4372-bf44-cce9d10ff88f", "indicator--bb659a7a-d368-40d3-91c6-fedd182ba897", "indicator--5770c70e-128a-4404-8b60-b4f904b5a03e", "indicator--332c86f1-6f69-412b-83df-b298ac2c199a", "indicator--93f1e450-7cdd-4f22-8a61-325c8e76d590", "indicator--9279beaf-d6d4-4c8e-9d95-ddbcb3e95e88", "indicator--b3b2a689-c4fa-4c27-a7fb-a11c38161124", "indicator--8b38ccd7-3695-4799-98e2-58dceeae31ce", "indicator--6017d215-276a-44a3-9dfe-0f6fce826c4b", "indicator--136ce01b-f6a0-4669-a84f-bd47922ff97d", "indicator--974d7efe-280c-498f-912d-8c2c4d10eef6", "indicator--fb9c480d-002a-4042-b33e-fc97a425473e", "indicator--93774e68-5396-4dc0-8f46-36a22f065711", "indicator--4bf2b679-16a3-4bf4-9ef5-98fa54c616c8", "indicator--52b94fee-ec0a-4e1c-a0e8-2ab158ac2a8e", "indicator--5f442d31-b70c-436f-adf0-69d506884b03", "indicator--7be05211-70b9-467b-87dd-9b4bb2e3ea09", "indicator--d01d89d7-e46c-400c-9d11-3f36fa8b8138", "indicator--76218df0-993e-43b9-bc44-8eaeb5aa40d9", "indicator--44fb9fd8-ec57-466e-817c-110a2cd9b987", "indicator--cfb226cc-23f9-424e-86ae-121c639d1383", "indicator--547b095d-8f04-47b8-b57f-d2ee62bfda34", "indicator--b121aa43-a51e-4276-90ed-1bc2fa7e210f", "indicator--da755082-eeb4-40ae-b33a-24d82eab09aa", "indicator--0705c16e-4700-4544-95d0-92eef7752008", "indicator--8e207696-d876-47d9-b04d-b0a72b88a14a", "indicator--c52173ab-1881-4d70-a8e8-e02044afc6e4", "indicator--6aae5ebf-ca5c-4f72-8db6-28cdfbfe2eaf", "indicator--8a971b55-6c30-45ff-a560-ca419bef13e0", "indicator--dc6e6ed4-aec3-4422-b702-edf6161c33bf", "indicator--300c95ff-d6d1-42de-add0-8edbcea5dcd7", "indicator--a5d3e42f-ec78-4ffd-b1cb-122ab24b8189", "indicator--dc84f976-fde3-45ff-bcb2-6b67e6e42b36", "indicator--c74b4603-701d-4d89-981f-ecee65ce39cd", "indicator--8e44b1bf-07e7-4b66-a606-916c9054909a", "indicator--c310557c-1120-4a26-8283-563b477d905b", "indicator--b1bd39bc-2807-4ebf-9b31-cf2aea57a798", "indicator--2b31ea0e-b9c4-4695-b7fb-b4de18de0cd6", "indicator--b59a4456-e9b8-4785-841a-ce945173c8f6", "indicator--22fac600-38de-4d59-8b6c-d3ff1fd33e56", "indicator--6f8d8375-8f08-4fc6-b641-b12fbf078a73", "indicator--b429e2e4-b1f2-4cb7-a80c-d9a2b84237a5", "indicator--122dea73-b666-4576-b3ff-0ebf75c36bac", "indicator--972374a2-5741-4dc4-81e6-83060df17693", "indicator--5985933f-3cd5-4664-80d1-68ac0013eb1b", "indicator--9ddb3892-6830-445c-a9a1-2defa55b0c0e", "indicator--c6a47053-8a2a-45bd-883e-1744165b2cfb", "indicator--6101c2f1-e389-4503-b654-e38fa4ae5019", "indicator--04b323f4-50bd-491f-8c8c-9a76bd2b2a77", "indicator--226476cd-4658-4668-8bb2-73e25e3c8515", "indicator--9242ff4c-ff4c-44a9-ab9d-0d34801499f9", "indicator--c25c95ba-ee6b-4a04-b4c8-f58124830be4", "indicator--129c0dfc-7cad-4eb1-8dde-f7663e756e34", "indicator--736623d6-bace-4601-a9f9-05031e89a8b5", "indicator--11b945bd-bda2-42be-bf27-bb39de53be22", "indicator--9539644e-fd98-44ea-8d5c-c178de969606", "indicator--0deb4ef9-f7a6-4c19-bb80-ed872605c8ad", "indicator--f548a098-8aef-4380-aaf9-814bf82bb773", "indicator--7dbbd7f3-a1e0-48ff-b7e8-f3872af8a4cd", "indicator--94065159-caf9-4848-8d1e-1626a39ff422", "indicator--4911eb6a-b556-4618-b209-fc80b37228da", "indicator--bbc9ff7c-8e9a-42d2-a8d8-8fd67c06872b", "indicator--f2c3c050-3566-42b4-92a8-5271cc0b399e", "indicator--8171219a-6472-4112-9d6e-61b74dd22afb", "indicator--9c009615-434b-4e30-99b2-720b381b5051", "indicator--8611f185-d17d-4b22-b03a-44c7d585032b", "indicator--34077ac9-98bd-4c2a-ae94-5d9c9f06d7bc", "indicator--965648c9-479c-47fa-bbc5-9d3fe4e5a245", "indicator--433b9469-491d-4d12-a581-44a617ed6f7a", "indicator--3bc7c6df-3ef3-405d-8e49-e6b39f531a4f", "indicator--341d3393-8f4f-4c3c-acb4-dd2c164f658d", "indicator--40d7c39c-e719-4e1e-ae8f-e9733dd5308b", "indicator--6f001c43-92ac-494a-8d7e-8b19292ce43d", "indicator--d271ccf6-c68e-4ba0-90ec-d977ca378db1", "indicator--866eb4ed-6096-4883-af91-a524cabde68a", "indicator--723d15e2-159e-404d-bccd-c84696957790", "indicator--0c1aafa7-e2ec-48ea-9cd1-d00865c62f12", "indicator--fe05985e-617c-4e50-886b-0a4121b3d0f9", "indicator--76719028-79f5-429b-9b3d-ba06c0f129fc", "indicator--89103ed2-0e3a-476c-9499-5319d24b01ac", "indicator--f65e6a8d-4d34-4779-9156-9906e2eb9990", "indicator--c5033562-2319-46a6-826c-a10820edce73", "indicator--63c82510-fe05-4ee8-ae7a-8622b8bd3cd1", "indicator--d31f92b9-733f-45c0-915b-033393b01f63", "indicator--ce84cf07-7347-4865-915c-a8dc19cfed3c", "indicator--084916f2-c0d5-4c3f-b1eb-a5d9976e99ea", "indicator--6760cb0f-f823-4a6e-8ce6-3ba276396c63", "indicator--cdaccbf9-8f6a-4a1e-a700-84f0eb27ed98", "indicator--3defb6c1-f7b9-4f02-8d0f-c8f2967d9b6d", "indicator--caaa3f54-483c-4eca-9a16-cf575bacdae9", "indicator--450bddc6-edcf-46db-86ad-25d7606d74de", "indicator--b60ea48e-ed37-4924-b6cf-8b917f429109", "indicator--eb12590e-87f1-4ddc-a3e5-fa3b98a68b81", "indicator--2c59c7ab-6d02-48e0-9516-b7fdf2f754eb", "indicator--048e5d2f-bf0c-40a9-9e7c-1928de4dad11", "indicator--7c57daaf-10a0-444e-a780-0ecffe6f94b1", "indicator--f695c806-15a2-48bd-bc45-5f328e641f7f", "indicator--cb23a440-7fc4-4154-bb1c-5e246b29fce9", "indicator--4c60c356-bd91-4f43-8544-496e97cab473", "indicator--41eaeb69-573f-4270-b233-d64b6d19c5e0", "indicator--b124c75d-3705-47dc-ac29-def523ba15e1", "indicator--85ba4bc7-da79-4059-8416-7c0ded3ded46", "indicator--5e90d75d-2639-49df-82fc-88cb8558265e", "indicator--827ea009-12ce-4106-a7df-db279c9b3fd7", "indicator--1bec7d8d-aed8-436b-a4a3-5cb8c8379393", "indicator--f724c73f-62d8-4809-ac22-735d5ba1969a", "indicator--a7a96b62-62a2-4361-b4d6-18bcb32b16d7", "indicator--c3c863b9-918e-49d2-b54d-b07960645814", "indicator--c98dc4d2-cd04-44b4-8fe0-080781af7e83", "indicator--98527cd5-6d75-496e-afd0-fac7c6322b3b", "indicator--4ba3f496-1704-453f-be46-50768d8842b8", "indicator--d1570295-7aea-4502-aa03-94a5fe796675", "indicator--4da49ff6-4eae-4167-8907-c0fc393cf87f", "indicator--c55b9623-db7a-48b6-a725-183f5195c187", "indicator--d9d0c595-1209-4809-a9c8-48cebaf4024d", "indicator--a5e5dded-c4ea-48f1-87ba-a03dc2053962", "indicator--9a492b28-43e1-4946-aa1e-97258e0e09fd", "indicator--2629b12c-32c0-4079-b8e1-06311cd96b6f", "indicator--f6735f8e-7c88-4b84-9538-c2f7820b313e", "indicator--463f1561-ddaf-4613-9ded-bed1c15ab106", "indicator--a0f8cd77-24ac-43f5-939f-6365d599a162", "indicator--77a23c8a-ce98-424b-a062-04bad5f456ab", "indicator--b2f3cfa3-8fce-476f-bb5f-505f7b455e17", "indicator--5ee6ebb9-34df-45ab-96d1-0e6819169223", "indicator--581a4851-3b7b-4d7e-9b4b-087d8dba1719", "indicator--e0dc03a9-1bf0-41fc-84d4-e50c3436826a", "indicator--c1cfd136-d321-4f08-aa83-ee980ac500d3", "indicator--307ea9cd-d6f1-4d62-849f-9666781e7c77", "indicator--7b6eeccc-c240-4901-b288-324f9facc4a4", "indicator--c720749d-f403-40ac-b6c5-c887328370d3", "indicator--1901c6d6-c6d0-49ed-ae2f-8001aa160425", "indicator--a6335bcf-5be4-4066-a294-ba72d3ae469d", "indicator--703c9beb-1720-4777-8332-79ec324aa200", "indicator--79378778-5189-4e97-b762-98ab9d6bb51c", "indicator--10a598de-8b47-474a-8869-2b4d5bbdeee7", "indicator--e6317c15-8911-4d7c-98cd-3171bcc3a648", "indicator--c61e9570-5b1c-49f5-99dd-5190581c71de", "indicator--97db0a7f-d16b-4df3-96e6-a1f40de32bd9", "indicator--7067dd1d-0a92-4aa4-a433-4390e0a6c82c", "indicator--19827901-a7a4-41f9-b847-17153a0f0590", "indicator--83b18f13-ec51-4720-b5ea-8252cced0fa7", "indicator--9240643e-4cc4-41b4-aa07-8a26d266bb39", "indicator--82cb5842-8501-42bc-b27e-3c2dc16ee02b", "indicator--4c5baab8-a1bb-474b-82d0-3f252bc57878", "indicator--3eae9e07-db98-4509-b8b0-07375241132d", "indicator--803d8c60-9195-4b58-b54f-fc694573eb79", "indicator--8065eae2-07eb-41a7-bb91-be3bad9da979", "indicator--5a5e35fc-b3ef-4011-89ad-d7ff5cccb1e6", "indicator--c2f39644-0019-4e45-bdf8-372b0baa9e0b", "indicator--c82f0c4c-45fb-4f6c-85d4-d7018e703465", "indicator--65ad10f4-2d18-4445-82d6-058a856323c5", "indicator--671f9c3e-5f2b-41a7-9769-a42c8b25ede9", "indicator--534d5f5b-a0ca-4291-9071-fd0123ef2c56", "indicator--fb3d2c94-aa30-4e8f-acd8-876bb8482dc1", "indicator--29878daa-b010-4f0e-8e46-79dcf22fefab", "indicator--eacc04aa-36ac-4951-873a-892efaac2a79", "indicator--d44b5616-de51-437f-90e2-b2ec789bee87", "indicator--3ffba104-7364-4805-be61-ce0b038510d1", "indicator--7874cb0a-0881-4633-bb76-943dbb657367", "indicator--0110fdb9-b989-404e-890a-349a593dcd03", "indicator--6b4fe5d9-1211-4ac2-90bb-dcd6349e79c4", "indicator--d8dd884e-08b1-40aa-9107-1120f500437c", "indicator--80966436-0d27-43f4-a8d8-157c4d4e4d4a", "indicator--9bccd1fd-491c-4b97-94f0-a51245e5c2d1", "indicator--05eae6bc-bd06-41f0-a7f7-2b02d939b661", "indicator--75ddd82c-1362-437b-ae9d-364dbca8761e", "indicator--9b654c6c-2c4e-46a7-af19-ac389f7c0eae", "indicator--435539ec-c3a2-4ab8-8f5a-e62946868114", "indicator--143c57a9-ccb1-4ea5-b8e5-102051a861a6", "indicator--767d1c4b-1505-4ee2-a42a-76bf97f22a4a", "indicator--df62aedb-b05c-49eb-8052-62ba44c59722", "indicator--e9271dd8-0257-4f55-b3c7-9f0b53860514", "indicator--5694afce-91ea-48bb-8cbc-158dfe1b3196", "indicator--1805bffa-eae5-4e85-8128-421cc940916b", "indicator--4fca9b7f-f244-45a6-a815-5c3e9893e4bd", "indicator--3c53ec72-13f0-4eaa-ba6e-17ca84da7b7d", "indicator--a9edf0e1-ea17-4dd6-afae-6b24aef66dd6", "indicator--fc2660cf-449f-4d6a-b6e7-5a00db632a91", "indicator--f0540e96-1a1c-49b1-8478-1d6d04360bd7", "indicator--2fd8aa89-c8a8-4f90-a034-d2b9ff395d2f", "indicator--fcad8625-1967-4c97-87d1-c86d0068d9b2", "indicator--74b39cb0-4d3a-4850-a935-e0e5aad626ca", "indicator--8ef85a7e-64b3-4b21-a4e7-93bcd6a2afdb", "indicator--11c100f4-5a54-4e35-8c81-1f41700061b6", "indicator--ad135ffe-b9cc-43dc-bec5-35e674329568", "indicator--6d4783c8-14e0-4521-8aa3-6b37e0c5189a", "indicator--e237bbb1-5397-4b23-b367-922c5d618ad9", "indicator--2f3657ad-6275-488a-8608-946cc88a0649", "indicator--26f37286-0eb1-420b-9ee0-55448961d0e5", "indicator--3d95dc8c-9c74-47d5-bc62-6b4056cde603", "indicator--b624e350-9fb7-4ba8-9bdf-b4941ec1ab87", "indicator--c263c0a0-fb45-40e3-937c-da55056d4c5d", "indicator--e9388fe9-ce22-4ae5-b104-59b21bc4aece", "indicator--5d216395-5cd6-48c5-aa4f-29bc8ec057a0", "indicator--f737e5a3-238d-45e9-8803-ecabdaec7e02", "indicator--46936518-27e0-4b3d-8316-5d4b7e58b390", "indicator--579f3010-e2de-4b14-b493-1b55011cd78d", "indicator--701b1f62-e9a1-453d-a883-6068b19d32ce", "indicator--3e048fb6-da3e-4111-8d0b-b8ec2d24065e", "indicator--6315028f-6f01-40be-a101-c5baddcb497a", "indicator--e27df043-5de8-4574-8658-b3d51316591c", "indicator--5e64c3b0-122c-40d9-ac2a-34b6e783727c", "indicator--aae5ee6d-d11f-4285-8f4a-c814ae65d52c", "indicator--3424b0c9-d665-423f-9f11-6e039f54d72a", "indicator--eb1a1cbf-39dc-4810-b21a-840ed32d2843", "indicator--1893175b-6612-4147-a8df-c2f89f44cc85", "indicator--afd4a7fd-8614-47b4-b6c5-308fbfe0569a", "indicator--776baa31-fa33-4d60-b48a-b102f99273d4", "indicator--a96237be-937a-475e-9d3e-5f88d936c656", "indicator--86f41b1e-cdf5-4e9a-9f0b-18822c0eb479", "indicator--6bd39217-b900-4282-bfe6-a18e7df93f5b", "indicator--d636c26c-8f31-482c-a36a-71eb151b1d94", "indicator--29ed0c42-4dce-44c2-bed7-17f45ce2299b", "indicator--d35f0088-e714-42ee-b898-27ce05bf7a68", "indicator--a8c0e686-c17c-4bbf-b56a-d7338c51d06c", "indicator--b5fad43e-a825-4173-98fa-7b8e0405083f", "indicator--ce41ce8c-d737-4e30-a320-4805c6bb2d6f", "indicator--1aa3211c-4bae-4fab-af08-7f97d61490a4", "indicator--e1cdd292-8497-40f3-9cc5-b61844e162e3", "indicator--148b38d4-c202-4729-a1d6-665b4cc32e8c", "indicator--bcdcd4be-fe88-43ac-a2da-e6b51d0444d3", "indicator--2768e86e-a7b8-4598-bc1a-3c2f1c2ba213", "indicator--52c1670f-ed33-450e-91d6-69e5f4968363", "indicator--11da20d1-28fb-43d0-b335-96ce986cf4b3", "indicator--f3bbab0a-550c-4fd1-ba26-a52123b18fda", "indicator--89968048-5c14-4510-805e-f2781317ece0", "indicator--4910c057-adc9-4c18-a99f-586566ce4b2e", "indicator--86b92e9e-a42b-48e1-bb21-913b49912d70", "indicator--825e8320-5238-4e76-b43e-458bc421f09f", "indicator--240edf22-74e1-456b-9504-0e82058861b4", "indicator--e7014850-fa78-4956-9fef-69f214108134", "indicator--ecc69f6c-1a57-48ce-8927-ae8dc18535d3", "indicator--d5d3dfcf-5acb-41fc-ad0f-aa2eb404a88a", "indicator--cd06a6a2-f928-4b6b-b329-5661a3e17d60", "indicator--5646dbf7-f3a5-46c5-b356-fb3078cc1d74", "indicator--d3f752da-c5f8-4f02-ae64-3e46d01a80ca", "indicator--c5661cdf-b959-4039-987b-f2eab15e507d", "indicator--ebe669b1-96c3-410f-a368-edd627e85961", "indicator--1e1d18c2-4502-45f2-ab93-f6683e9b0c14", "indicator--bc6c3e03-9a45-4eff-b6cf-30da4513dea1", "indicator--a99a1058-d5b4-4b3d-9ea4-588c7de7da70", "indicator--23fe6f71-de08-47b5-9d85-31f94432d148", "indicator--25d28329-298b-43d7-8c12-78555899b178", "indicator--6c09a3fa-67be-411c-8fa0-5266d4bcf18c", "indicator--ed13e5d4-3dfa-4f75-be5a-12b1b2347cfe", "indicator--ef40c361-50ee-461e-8e40-2e7db3ff546d", "indicator--035a9c6e-3a49-4f4f-b2f3-32b7c9de818e", "indicator--9487cdfd-08b6-4676-8a14-a10acae9f4ff", "indicator--6a36f85b-e75b-42b0-8684-dd60ad32363d", "indicator--386b2c22-d3df-405d-8695-351fc75defee", "indicator--693f461c-cec4-4c7c-92e8-3361e1ef0473", "indicator--e3ba7e73-8dd6-4d64-8500-f87a9ef53927", "indicator--202a465d-d983-448b-b199-835d19aa3c5b", "indicator--aba9a9d8-075f-445c-b570-c141c0061569", "indicator--5cc9a972-3788-4c3c-8ba7-582b073b27d7", "indicator--a66f2155-6e6a-4dfb-99e2-1610faacd561", "indicator--cd7c49e8-2c7d-4ee5-942c-280692c3858d", "indicator--3cdf1fc8-4d90-4ff8-ae4e-8b1dbfe8adfc", "indicator--d50ceaff-5e83-4ea3-b181-38c01a1f37b5", "indicator--62873d12-39d0-4f83-95d2-e1dfa395ba4b", "indicator--57a411bb-f985-40cc-adfc-2e1983607f90", "indicator--72aafec8-ca88-43fe-a87f-e9f76c8b0aed", "indicator--0c12af3e-d912-4d34-9de2-dd4ddbb12ac5", "indicator--f87b4a0b-acca-410f-8ded-5aa737001014", "indicator--68cd986a-1376-47a9-a997-69abec1cbdc5", "indicator--a271399d-e0d2-4c66-96ef-288410c23ba5", "indicator--e0f4d150-94ac-46b6-ba38-21ddbf44e0c1", "indicator--98e04651-9b51-4b57-95dd-13081210fe4b", "indicator--214cebc1-1937-4835-8bcb-227c860da4a5", "indicator--4dcc306e-07d3-40e3-ab60-abcf208343cd", "indicator--aaf9c4af-a69b-41db-8e12-0721ff542979", "indicator--1b267f44-4f26-4e78-8900-41aa75c6915d", "indicator--116fa84d-5a5b-4338-8f04-9d9b42aa894d", "indicator--7dde4bb4-6b1e-4906-b5c7-740c64cd08ba", "indicator--302234e7-f5fc-41c8-8f41-59bf8f60c349", "indicator--56a8fb98-4c4a-4ae9-8fb6-c11bf1bf2f5a", "indicator--6fd8d8b7-ba75-4004-a937-e17697f461df", "indicator--fb74431c-c0b7-4f84-8b3f-4ffa2db02705", "indicator--8c713558-6b23-4c6b-9aaf-15afe45c5bd8", "indicator--cc36de08-c0cf-4fb6-b326-1731a494d73a", "indicator--cc1ac197-09e0-4222-b68a-8377b2f13294", "indicator--03ad225c-740b-496a-9371-49e106b6ecff", "indicator--b894d16b-0854-410b-9634-4d0e8ae1b26d", "indicator--d47fa6a5-64b1-4477-9ae9-5446d33be00e", "indicator--e0fcc951-b1a5-4a97-b740-e12521e07041", "indicator--30b9bdd0-2005-419d-b49d-247b09c04aba", "indicator--91db0b46-6793-4db7-8bb0-81a0805c2d89", "indicator--d24637d4-0fa0-4390-b7b6-d3e33f28120f", "indicator--b1f5063c-1ce3-44de-b608-159f3fec79a5", "indicator--5b75ee86-77bc-437a-9894-fcc9ab610078", "indicator--d7bc38d8-f44a-4c62-b86f-e9dfed59bcf4", "indicator--bc4062f2-da0c-4efe-a238-06258d8253c5", "indicator--28baca24-9ee6-4db9-a964-f3ae5084eee8", "indicator--73c5947a-69d6-4bff-a05b-f7bdffc36abe", "indicator--f68558da-ad80-46c8-a091-3724475beb26", "indicator--63d375cd-f950-4208-9365-995bac557d01", "indicator--2ce76211-408b-4d13-8c50-9972fc8e09d9", "indicator--dec4403f-5ffb-47b1-b9f9-0291809cd033", "indicator--7fe2167d-2fdf-42dc-9861-5d2471dcce3e", "indicator--0c35fae0-1f8d-47c4-9ce5-1e8771aa332b", "indicator--97646d94-1f6a-4395-a0c4-e753d624a1f2", "indicator--e9fe6d9a-09d4-4ba7-a9b7-1143a25c6e52", "indicator--dd67ae4a-dd26-431e-a55a-2b9d30e70b73", "indicator--19e24312-f6b5-4f7e-a3fe-1134f4dff822", "indicator--2cba8d1c-f9aa-409b-a5f6-bc06d2c04dff", "indicator--2513e23d-fc0f-48c1-9de6-1b95f9e00ade", "indicator--ec1e5729-b27e-47f5-9d1f-1c9e3e54896f", "indicator--803fa9a6-1522-4f64-9134-f51132765e1d", "indicator--b5c76135-28c3-4f2d-b208-c104e8066e5e", "indicator--1a2ae877-cf11-4bff-835d-cfe1e244538a", "indicator--7fb67f6c-4549-4f6b-990d-d8f76583695c", "indicator--fa9319fc-7289-4df4-ac12-1739605fe921", "indicator--d907928c-395e-41be-8930-183f95655691", "indicator--ad09b8b6-3b3f-4358-b5ea-bc3994ace139", "indicator--5fbfd69c-fe28-4ec5-a3ad-20532fc24649", "indicator--85937930-fc08-4046-b505-3353b059fd0b", "indicator--b6c6f279-3065-46d3-9901-d5ea58c01b22", "indicator--467d4893-493f-4196-8055-592a3965ccbb", "indicator--d16bfa22-afdb-471a-8eca-43afbc8d6185", "indicator--abddb3bc-7993-448b-abb4-c72da7c45f28", "indicator--88da9c71-b36b-420e-800b-529080a8edca", "indicator--45648d06-ed36-4cc3-ba2c-ced74993273d", "indicator--472d4498-52ca-474f-87d8-7d299a54a677", "indicator--7e74291e-a819-4df8-a2a8-85c32fa7ae1e", "indicator--7515028e-2815-4b91-9f9c-042e276ae610", "indicator--57b7f7a8-00de-4ca3-b9b4-1de9f7b04bdb", "indicator--7fb81b32-5215-439c-bd3c-4f561165718a", "indicator--cbaab657-d7b1-4b3d-a168-f9e631095095", "indicator--3dd24b6a-5c81-44a1-867f-b4da346f6ba5", "indicator--22161394-230a-473b-b103-360c49aba90e", "indicator--15caac64-01ca-4c24-b8e1-7cea5bf837ab", "indicator--99621612-18c5-475b-b865-f63f7bca11e1", "indicator--7d94418d-52c7-4aeb-8097-a9bb26cb8474", "indicator--94a37a4d-e009-4192-a9a8-fca44371f340", "indicator--78cbea52-620b-4332-8600-6c8cd4b0aa6d", "indicator--ba6bc3e4-865b-4519-8c77-bb2dd4228b16", "indicator--95412f23-bc5c-447d-95d1-0c32f7d509a2", "indicator--82bd7cbe-f083-4d8b-8486-a14b7eef82fa", "indicator--c4d59612-d701-41b9-9068-f557dc2423ec", "indicator--6aa1e56c-d629-438e-812f-412d6f5904b2", "indicator--a97d414f-2061-4f56-9c32-173c69c210ea", "indicator--d2c2cdd0-e56b-4a4e-8965-3966a416199e", "indicator--baa0f932-3b19-4ac0-8170-db30d058659c", "indicator--0234fdd3-d18e-46c7-87ad-92f3ffbf2801", "indicator--3a9c98a7-abb6-41bc-ae62-337d2b2bc25c", "indicator--8372b487-d22a-47a6-86fe-6f300c60b3fe", "indicator--b0d5cf17-8800-42c3-ae0c-a1e8fca60c43", "indicator--1a5e186c-de8d-4d58-b396-4034d1d5e49e", "indicator--e125dfbe-9cf4-4051-8bb5-40ec127b4a26", "indicator--7185b380-77e0-4ddc-98f4-df425a9eae79", "indicator--4c989ad5-2fd7-43a3-bd83-edd070b0724b", "indicator--463404c6-3c40-42bc-a87e-1d9ae0706930", "indicator--1536d711-c430-4cc3-8f8c-6b1d4b4da0ef", "indicator--1a848a25-d9e0-47e2-bf57-540c5e825e80", "indicator--12772baf-8ee9-4fee-a00f-e1c9c87cc312", "indicator--e5e2fa91-75af-4491-bcde-144bdf2194ab", "indicator--461c7ad0-86df-4b01-b809-3395f43d5f9a", "indicator--f8dae71b-ef6a-42fd-8322-4325ceb51d95", "indicator--d9c7b814-b952-4df4-90e8-79a80f8334be", "indicator--74f5a67c-657c-4e00-b19b-50d4f09e95a2", "indicator--47ffd8cd-4275-4349-a1e5-2525e444c7df", "indicator--6e51005b-7f4c-4814-a964-ace2bb1f75d7", "indicator--0e27956c-6b11-467b-acc8-1283aef04142", "indicator--39275223-8d55-46d0-aacc-4f5c6dc59f8b", "indicator--c922de66-f272-4db6-ac0f-7b3ecfda550b", "indicator--2f6faaa1-e45b-4757-99d5-33a4c11251fc", "indicator--b12c1d75-20f3-4366-883f-a8b1fded3f34", "indicator--d5db2499-5852-4686-9bd8-b4bdb68920d1", "indicator--7fbdb1dc-d0ac-41e6-b3ab-4d66e7f01dca", "indicator--64fe2851-95ce-40e8-bbfd-1f187f62e2f1", "indicator--20ab884d-1945-4cd9-98a5-dbb6903cffa3", "indicator--b8cccdd0-d05d-408a-a4f4-f61670767b96", "indicator--622d479f-b7ea-4ea9-8d3f-f65898355141", "indicator--1c80a20d-0dbd-4001-8e65-01e753cf5ce7", "indicator--91ba86cf-8654-4872-b46f-f795db0de6b3", "indicator--7d1acf7e-958a-4811-a336-cb240706c7a0", "indicator--5b6e06d1-9e98-4156-b89e-3d4f7ba093e1", "indicator--0590431e-068e-41c1-929c-a514e71e7aa6", "indicator--8cc4b525-a9dd-4850-a7e4-4a996563b984", "indicator--44b44c84-6795-4ab4-937b-c31cad92d7a7", "indicator--52d1f5d3-ca17-4a3e-8123-d5339d385748", "indicator--45b01ef2-49cb-4c7f-b2b3-c1d99df11ae4", "indicator--81426c40-0011-4826-be3d-b971b66bf943", "indicator--b12b1f84-2301-4558-b412-ba29961ac100", "indicator--1f0dd90e-4914-4467-919e-b99a7cbf4318", "indicator--084ee3af-1081-4b87-9ee2-77777eb1f097", "indicator--47f8a0e1-b483-4178-84d3-bbf9c44acabb", "indicator--1b3a522f-6a0f-47c7-bc6f-ad894acb0094", "indicator--103c55cd-573f-4d94-b93f-edbb788715ea", "indicator--58957a92-fe9f-43b9-b372-ce47b0336f37", "indicator--209fc173-5bff-4847-ab26-3cead53adae0", "indicator--6a67a79f-7b01-4e56-8db7-01777d2c769a", "indicator--e04f237b-84ff-46d0-935d-1e0edeaf5c93", "indicator--7b0ea810-4efa-4374-af7a-d0d5383402ac", "indicator--890d803e-03e7-45ec-ae29-11bcdaeb30a4", "indicator--2d7b5c88-6f97-4ae1-af7c-34be2819d201", "indicator--15a64b84-3b5d-4fb5-b2cb-78e66aebd73c", "indicator--73ee428f-24e0-4507-a8c9-09048eaf1891", "indicator--bb087eeb-a488-4cf1-b066-5e7002ab8e26", "indicator--97209084-0c8d-45af-8035-392498172a22", "indicator--20bac039-ae42-46de-aa2d-51104da536c7", "indicator--73ad28a6-374a-4239-8f0a-d69b011ffcda", "indicator--aeae88d0-50f4-45e5-acc9-ffbe3f287dc3", "indicator--5b22631d-8d38-4566-837f-825f6a824187", "indicator--3215a123-7e73-4e03-b7f9-e34802ab4629", "indicator--e66aa3ea-e7c1-405a-b4ba-1a579b60b9fa", "indicator--51243f6a-0a74-47c1-8836-b58ecd0a28bc", "indicator--459c7782-35cd-4617-be95-397f4c761fa7", "indicator--ed659349-7253-4a04-8a89-db3765e9bef8", "indicator--8953a449-5965-448d-a6e5-92196adff195", "indicator--f1b7b2c2-027e-4927-8694-64423cc68dea", "indicator--36456677-79b8-47de-9997-a340bf65005f", "indicator--407ee12a-2fb7-4ea1-8080-c3bdcf734336", "indicator--e900ad43-bd50-4480-8388-bdfe8f124333", "indicator--c09fa8e2-a5cd-4018-8e76-8f42589eeba9", "indicator--b3fee9c3-88bc-4593-b286-fdc50efc8f51", "indicator--efb52f1b-bf95-4527-a3c5-72a096e2af88", "indicator--07385547-e0ef-4156-9168-1a87368fb031", "indicator--f76426e7-8a18-48c2-b7e3-bf43c8e24eef", "indicator--21c94b94-8472-4c3c-b3d8-b64c487b7fa7", "indicator--7f8d03e3-6f19-4968-99c0-bcd2d251c52c", "indicator--9b651a3c-4f3b-4bfc-9e4d-5cfefdbab104", "indicator--f77a8db7-44bb-4271-b57a-c8967503abc5", "indicator--0a6f58e8-f229-4058-9a65-eda50ffc0a57", "indicator--dd19479b-1d27-4708-8c76-1881256e4275", "indicator--65e95f02-9e8c-4547-bce2-7facb456a2b1", "indicator--6d261c09-6b93-49b0-bdb3-2ba7563a2fa1", "indicator--ac41b231-617c-48d6-96f9-b4c62071d1da", "indicator--31156411-8d3f-44a7-8cdb-05626cc1e845", "indicator--3ae0db56-2f50-471e-9566-8b96868c5ed2", "indicator--6d14510c-3577-4f3f-854e-b1c129af86ce", "indicator--ee51f803-6053-4826-9ad8-ec807ed534c9", "indicator--c16673c3-8542-43a3-bd08-c58855b03961", "indicator--0c6abf33-58d4-489f-b532-fb5bf6161d93", "indicator--0602ae5e-7aab-4f02-8e39-bde1d563d672", "indicator--595d502d-f050-4f6b-b04b-7c8358764c07", "indicator--d3b5cceb-d30e-4cf0-84e0-5625d7b44228", "indicator--e8798315-69fb-4d87-9e9b-78cc1c1078a5", "indicator--831e15aa-ce54-46d6-8d6f-4154b8462c2b", "indicator--fefbfa63-8be4-4f69-8be4-4e45d817e238", "indicator--ea9a991c-ec36-4686-910f-4e8dddd38ef0", "indicator--ebd8fb81-2b55-46f7-8451-f962b0254942", "indicator--303aef7d-a107-410d-9742-66dcc6a54dc8", "indicator--9bef8f46-7463-4a58-9ab4-9dd008e24e96", "indicator--7bd3c051-e5ca-468e-b54a-4172ef7855ce", "indicator--b923c6bb-e0d8-4c11-bfc1-690ec5fdca39", "indicator--f11685a9-35df-4998-a782-3943dcec428d", "indicator--c116de24-cc76-4fc9-aee0-1a8d84ffc097", "indicator--cfc2ff18-feae-4969-9689-3c965e7ccc53", "indicator--14df0cec-3927-48c1-b55b-594a2beaf498", "indicator--8f29457e-8fe2-47a6-b02b-aac07127d7ee", "indicator--1bf9cc07-a798-4393-949d-d2a81f37de27", "indicator--c9901293-b39e-423e-9f7a-c79387c353d9", "indicator--a471c0f2-cd72-422b-b2c4-705939bbfa92", "indicator--cc928fb4-14c5-4028-928c-8e2d0d5f57c4", "indicator--390ada13-a491-4df4-99ad-855cf0b9dec5", "indicator--58a40833-2e91-451e-8b58-50e097f6e062", "indicator--4ffb7e5b-481b-4ce3-a39b-e58ca269064d", "indicator--77d49b85-1af4-416a-80cf-e475a49614f0", "indicator--1a3c9138-5490-43f9-9b4d-f4c9bd1a2380", "indicator--5f2c6eda-779a-45dd-94a3-a21216fc45ff", "indicator--4f7b08cf-0689-4377-9170-fd29ec81d3dd", "indicator--d4b865cf-1a3f-4a0f-b2c3-816f095b2f50", "indicator--d8638cbe-712d-446e-a785-b88f59ab95e7", "indicator--0d987a62-a5d5-49d2-94a9-aad1ed475006", "indicator--a3d27a4c-aa06-453d-b9b9-ef995b7e0151", "indicator--cd5f1475-da69-442a-847d-10d11c2dd02f", "indicator--29071124-b313-4657-af64-b0f20078c3b0", "indicator--93e07750-533d-4444-84b7-dc0542b84b9f", "indicator--0aa0827f-e5ac-46f1-ae68-e630ca77b987", "indicator--31f7aa75-488a-447f-9346-de11799a88ce", "indicator--1533e392-0135-4306-8b25-d8bb5b450f17", "indicator--e212ed71-0e7e-4fb1-91a4-2d587799af4e", "indicator--c55e6858-f746-4284-95ee-2f5462fc5732", "indicator--a4ba7927-9a09-443d-b5ce-3d8d26c57330", "indicator--efb4f2f2-98f1-4f87-8056-54c233609e27", "indicator--095c3181-2d6d-482b-a291-2a7882789701", "indicator--6bb23775-9b98-43f8-980e-620be82ed97d", "indicator--62c64a97-e0a1-4ebc-b1d8-41a238bd757e", "indicator--3aab19d2-5cc8-4aa8-8e4e-e9fb9d3046da", "indicator--a83ffd2f-155e-4d63-ba69-cb1ceab7ca87", "indicator--c960b930-9b46-4649-af67-d37bac4123d2", "indicator--8ea490c4-c994-4336-9397-d37908beeafc", "indicator--b118b78d-efce-42e1-8958-c7859d1fea43", "indicator--74bc913b-7100-44bf-84c5-2802b9aa341c", "indicator--b38454ab-641f-40f9-b47d-3a5779103708", "indicator--97d1b1c7-458c-40a9-bc0c-34293890a460", "indicator--f3d7c48e-9306-4f41-9dc0-27bf4abe9add", "indicator--0a881f86-b2bd-4d03-99c7-e55645948d81", "indicator--b262958e-badb-4cfd-8af2-684df47e7bb6", "indicator--1bec9adf-81b4-4937-abb6-9d917352ba42", "indicator--d73f9034-36c0-416e-bbcb-30d9db116107", "indicator--a3e1b625-37e2-4c47-9f20-69d775aeccae", "indicator--4c534637-1d8d-46b5-ad4a-34bad08c5317", "indicator--ae3a7930-a7bc-499b-92b2-4fe5cce71613", "indicator--49b392d2-39c8-4961-bec5-9c46888fb220", "indicator--38b629ea-db00-4bb8-90f1-2be73e8d9187", "indicator--26274883-f24e-4405-8ac4-5150cd8975eb", "indicator--ee22f983-8621-4cd0-8949-a05b4cb057c2", "indicator--01ae6537-773d-43ea-a962-d16fe6eb5b79", "indicator--e27f5b85-a671-4770-b756-301ce6aa260a", "indicator--ccf66531-e88c-4804-ad65-0fba9d459bd8", "indicator--6ec5fd0c-2636-447b-bf8c-9a7f9793c8a7", "indicator--8f6a4d56-d776-465a-ab9c-75c4613a3fdb", "indicator--2dd97480-c025-49d9-92bd-603679437cb6", "indicator--0f2b59a1-71f7-46b5-95c5-66ae54d29016", "indicator--50ad5d25-b864-4fe8-bb08-86bbf64ba05d", "indicator--53a98b6e-f848-4d34-9aed-393aebba33cd", "indicator--4bb77664-167f-464f-9824-c416935beb2a", "indicator--2004f50c-cb80-462e-81ed-d799d5f6c916", "indicator--7724b4f9-3d99-441a-988e-d295e0e9d714", "indicator--378c0d6e-13fc-4ca2-9288-bfe055feed68", "indicator--45d393a8-18ad-4863-a716-33fe0203ec66", "indicator--a03b4695-5649-4af2-8e40-4814c1341d9b", "indicator--c85d8e4d-18a6-4e4c-b9b4-479989d88bda", "indicator--497893c6-92a6-47a5-954a-8c03b518864d", "indicator--f742fd9e-9f38-47cb-a7f6-c2c33504bd60", "indicator--7ffb5cfd-6085-4622-8fa8-c6dffe03c894", "indicator--dfe91002-2847-4965-a5f9-f74bdb52ce42", "indicator--4f2f6538-602c-4aa8-a64b-44caccdd1082", "indicator--23cbc1d2-5a74-4329-88c8-84ac1d8ddcd0", "indicator--d350b3b5-8e1f-485e-9c37-3051e4582b9e", "indicator--049831c7-c1bf-4c17-aca4-7ad6a9c5e9a5", "indicator--9818d0a4-ffa1-4644-85b8-33351b6692c0", "indicator--8daa716e-e360-42ce-acfb-6198981cd19b", "indicator--7e7eb011-063c-4ab9-86f4-667b42720497", "indicator--23f3eb34-3a09-454d-9217-dc0bc16d33a2", "indicator--eab2a698-f374-4816-858e-61cc7a66ce3a", "indicator--5b9989a9-a563-4a74-a4f6-0c8a9de41966", "indicator--9af84c44-a258-45cf-b5a2-7369d8b842bc", "indicator--aef8687d-b589-4a63-bfe1-1113a942349c", "indicator--8d662598-92e0-41dd-9638-4e912c179e51", "indicator--9122337e-4dc9-49ab-8e9b-848d6d078e05", "indicator--4e8d9a0a-d452-4bff-8fa2-b476ff58a485", "indicator--4d7042ee-6930-42fc-ab62-561a76a7175a", "indicator--2264fc30-868c-44ec-8a20-90ea3776cce9", "indicator--1c7844a0-aca1-445b-a89d-cf83a755554a", "indicator--7c0b87af-4627-4267-9abc-61707d1ea67f", "indicator--257118dc-88b8-46fb-9e9f-6cfaa555fc06", "indicator--6e0ffe54-49d9-436d-a816-7941dc6f2aad", "indicator--deedbdf4-a600-4d44-a7d9-75e2af0297c7", "indicator--f4477ff1-1cc7-42bf-aa57-df8798bb5b71", "indicator--43a24995-dee2-4ddc-9622-f215e6986e06", "indicator--b803429c-e8ee-448d-af22-081e3a666384", "indicator--08db2b3f-f749-47c1-94d0-033d77f14cec", "indicator--2888a918-71f5-4d1a-a895-6f3964e769ee", "indicator--591afe7e-7e53-4a95-8322-2814476325d7", "indicator--ddc363a6-3ccd-4192-9a98-a7efcb9a8054", "indicator--d871e12c-900d-4654-8797-8b1e2bfe7534", "indicator--0a21421d-ccb0-4a72-acb8-c7c0411c5b66", "indicator--7deb72e7-50f1-44d1-ba2c-0d58fe0e8d7c", "indicator--7e7921e3-f629-4c56-a4ce-c36e54ced639", "indicator--ccad205a-a3f5-4920-91e1-370889f0fd6f", "indicator--43800ffa-4842-41f3-9adc-7f32fbac83c4", "indicator--43b094b4-21bd-4e5d-a8d8-ef92bcda395c", "indicator--e16f0195-617b-4193-8a82-9e6ba36612db", "indicator--70f8c5d1-091d-4907-8ac9-3c4cfecc12ef", "indicator--f4b91b98-18fa-42e4-b8f3-62ee6654ea54", "indicator--0fa544e4-c522-4554-b773-699284c5ecb8", "indicator--549cbb14-7f48-4f7e-917c-1a16da606d92", "indicator--d2581f62-c0c7-4571-8a02-7e5b24ccc258", "indicator--1bd23450-7fad-4519-ba27-05385ac6534a", "indicator--dfb863dd-2b93-4586-a633-a266adbaeee6", "indicator--83d81e30-ea65-4ccf-b7b3-39d17338e6ed", "indicator--1667fead-f35b-4d62-b730-911b77ab409d", "indicator--1526e371-99ec-4e54-8104-2f2209a27133", "indicator--a0792ee5-1ea7-4098-ac91-234f9d0d4e1d", "indicator--21084bc1-f17a-4aaf-95cc-fadeceec2e99", "indicator--07259e8f-6b6c-4a17-943e-a6cbcac9704f", "indicator--bcd428ce-3724-4e6d-a3a5-b20dc9283584", "indicator--3e49e03b-252d-4803-8a16-40556e0d0e2f", "indicator--e32c94df-26ae-4a4e-b7d1-a5d20344d315", "indicator--b0a1c8fc-d698-4a47-ace9-b5e55ca4e6d5", "indicator--b465cc5a-2fb9-401f-93c5-93d5dc106558", "indicator--eba1ff92-c8b9-4f6c-bb27-2463f880e1e9", "indicator--86dabd54-6345-4faa-89dd-a23ec2b73bac", "indicator--2425d424-5c95-473c-adb3-ed6cf3ac6eff", "indicator--f274565d-4afa-4c01-8bb1-96eb30f66ecd", "indicator--309542d5-8368-437d-9823-42cfa59c55db", "indicator--65e5a0c2-3edf-4629-a363-0579f3ace260", "indicator--50c0d9d7-b1ea-433f-bff1-665f2b18a438", "indicator--80109195-85ca-40f0-b4f2-8fee08a147ba", "indicator--3fc3da22-4b71-4827-9649-c909fe0382bf", "indicator--8d567449-534d-437f-817c-23b3decfe96e", "indicator--6ffa37ba-03bc-4fe5-8ad7-83cd8edf5092", "indicator--4ce59620-16e4-452f-ab14-80b1c6602531", "indicator--800ce1ec-9d73-4a67-b193-02217edd35b1", "indicator--7f7baa54-a4c4-4d9a-9694-0bbb30bae91a", "indicator--b0b952a1-c9d5-46a4-9e64-619432e98a75", "indicator--b4379c14-70c4-4436-ba1b-fdc80a069603", "indicator--63561a13-4377-4a8a-9868-af45b161e84a", "indicator--7b3a2edf-b2b4-481c-a951-b0c4f78e5c63", "indicator--bb0fe063-645f-4fa4-8ba0-b3f18402f68f", "indicator--f7ba6499-c813-43a4-96ee-2666681b0089", "indicator--f2cde630-3bfc-47de-bd7d-5f4c67432f5e", "indicator--6c6b408e-ab27-4e6f-9292-5fb7cb81cb18", "indicator--6787025d-5a26-45cb-9e07-7acdf2bab3a7", "indicator--a4517887-b7ea-4c72-a777-6809177027b3", "indicator--c0ef8723-d139-4d05-bf3e-959534f7d82f", "indicator--85a2ab96-9f0b-402e-827c-189ee2a5e21e", "indicator--95efda2c-3ce9-4260-be86-a56a05fea643", "indicator--8042ab44-60c5-4abc-a51a-5ed3044351f3", "indicator--d525e93a-4d52-4827-b44c-51ebcbdd1d23", "indicator--1d03f842-4b2f-4f0c-a542-ad5fb5e78a99", "indicator--9bf664ca-8a37-4e13-bdd4-32ab56830004", "indicator--ecacd2e2-103a-4dc6-ba13-ca2135064009", "indicator--673466d7-962c-456f-8336-5cfab2fd9038", "indicator--b7201129-d00a-4ec2-966a-35db58f773cd", "indicator--88b58af9-ec93-4a3e-a748-85b27fed88e4", "indicator--4505c347-705c-4a9e-b114-6a5b1f3e49fd", "indicator--9d9f77ed-5a1c-4a7f-96ed-6ee84de7e9b7", "indicator--27d2e0e0-556d-4a04-be90-f948e5e48e1a", "indicator--08fb028e-1018-4fce-9871-586eb2284be9", "indicator--3481b7ec-8896-411f-b6ec-438411ee2655", "indicator--78224973-5c43-444f-aa20-5493f3e873b9", "indicator--9d6ede63-0d17-4db0-b59d-088a04b474e2", "indicator--764401be-454a-4c92-b292-b7ec601b04b6", "indicator--ee7f35b4-61d4-4078-b008-e011f99d1fb4", "indicator--e2c4ad7f-4c1d-45f6-b10a-bacb330e66cd", "indicator--c027052a-6015-4ce1-bcaa-ebb5a55ea623", "indicator--bbca9a0d-7b9a-470f-9176-6a2248c11607", "indicator--c6bf0977-bf17-4524-8b77-8eafd8f2887c", "indicator--eaa87ceb-d42e-41bb-93cf-aea8b80d655e", "indicator--c34ba8cd-ecff-4825-b880-6309ce2218d8", "indicator--faca4bdd-4645-42bb-8a17-36c3bdcf0533", "indicator--4a964e0e-2e3f-402e-898d-ab17f1883094", "indicator--4f85666e-cacf-4a1a-84c6-1811458f45e0", "indicator--f2651248-32e2-4f59-b8ec-22e9f88d6c77", "indicator--d736319f-cee4-49e9-b4f9-1e20b7b2b516", "indicator--cfbccefd-b05f-45ac-a53c-0c618a64ea1e", "indicator--95bf75d7-d79b-4688-80f8-3db04e45b1af", "indicator--92b2487b-f778-4d88-8afa-7f0ce99ce81e", "indicator--faf3043a-66c4-456b-adb7-922bb279d632", "indicator--bb411c11-d5bf-4585-a384-e8dfa6046718", "indicator--7deedcbe-b627-4a91-a135-c55fe218dbcf", "indicator--4492b7f6-1d9b-4ea4-a842-4f8fb364cae5", "indicator--8289b825-5673-4a53-ab81-926e539ebf1b", "indicator--fee3dc75-bdae-4686-8aa3-49c1427dff17", "indicator--5dfd0891-c42c-42e5-b0b3-6e3a9df157e9", "indicator--dd099ff3-6b3d-49ed-8dff-11388ce1b375", "indicator--89f627fa-f94d-4177-a8e5-f3954699a0a4", "indicator--1d9744bf-4b2d-4199-80c5-d4662c80947a", "indicator--e24ec6ae-5766-4132-b7f9-5863a44f13fd", "indicator--d3ab1951-571e-46d9-ab4d-ad2eef60a0c4", "indicator--398d77c0-a412-4f59-9152-92886c64ff9d", "indicator--e40d7d6b-abcd-4644-a9ea-4a1ef95f1fdc", "indicator--cf9a2bda-4594-445e-a16f-6d3fc4d974ab", "indicator--8471760f-cf81-4a34-8035-6213d48370f5", "indicator--63288332-117a-4635-8881-53e6062a0e4e", "indicator--ee76782e-e2d8-4b0b-93d4-76275d8e9516", "indicator--65c8be44-3b93-46df-9cea-6bc15331cedb", "indicator--0fbd0b2a-5d3c-4f07-91ae-585425a69d1f", "indicator--8fa0af6e-afec-4ce3-8485-45d51c1b43d8", "indicator--90ea7b05-8e6c-472d-85e8-9143e9680f80", "indicator--d1dcc444-d709-47a8-a5a7-d1f03a328fdb", "indicator--62f48818-2db9-449e-a864-60691d73d9c3", "indicator--dc6af3fe-49f4-4766-8e25-bf35ae625f67", "indicator--c4e90e40-8fa4-4aae-abca-55bf10454e56", "indicator--93ed349d-e837-43c3-b644-d59aaff62338", "indicator--11f7f2c7-9fe8-45ac-9d9b-d4db15098279", "indicator--e3ed6118-29fb-4d20-b8f1-f63da183e418", "indicator--f0c7e7d2-641e-48ac-826a-5cd01358ae9b", "indicator--46080e61-b23d-4f2c-a956-da9c6fc5461a", "indicator--480e1760-f604-4296-b78e-55fb4a40eb27", "indicator--dc2f532b-5dfb-4259-be68-7d267ddfc149", "indicator--8488bca6-aa15-447e-93ac-3562f9f44113", "indicator--29e15b48-38d9-45d3-91a6-9fe9b0450f45", "indicator--736ac0bd-607d-4d34-99d3-5b1d6dcf0e50", "indicator--7e9e88b8-04a4-428d-a674-d20098242311", "indicator--c23ee024-0c00-4685-b8dd-6de38d05a395", "indicator--cd6e523d-fbef-4206-9dcb-9f3e8e3859af", "indicator--38f32e7f-a155-48a7-afcc-b95a931f95c5", "indicator--c9e22037-756c-4cda-af6e-117e10f89402", "indicator--6ea32aa9-90e2-4998-9198-8f7de7389dc4", "indicator--d1837fac-0486-491e-8fd2-5e6376171783", "indicator--5517d3da-5b28-4fbb-9090-8797369ab973", "indicator--00df600b-04a4-4505-978b-468880a9e626", "indicator--a5f33fb1-c15b-43ee-ba64-f34de240e443", "indicator--8511f939-25cc-42ef-a1b7-408980c6a609", "indicator--984a4b5c-a4a4-4ac1-8af8-1cf27c5ea686", "indicator--e35cdb67-98cc-4c30-9528-e846224b5d3d", "indicator--bec724c7-0e2d-4b9f-935c-53628e105361", "indicator--75de5506-33c0-4f11-9c63-1c43d33ac180", "indicator--206d17b5-37b5-460a-9887-6be87d85d920", "indicator--b867f4dd-a8a0-4190-b5d3-3cb9c0a67404", "indicator--a2aacf2b-283b-445f-a387-ab335cc43b05", "indicator--3812bf36-c55f-4a1c-bf5e-d25fbcecc13a", "indicator--f93602b8-7bd0-47d5-af05-3584c769211a", "indicator--fb64c2f8-e43f-4855-b105-0ff6d6010239", "indicator--a2d5421a-4fe3-45fd-8088-546e023f7c39", "indicator--77c37af2-3012-41de-84d2-a7787ef20140", "indicator--b4ced47e-0d18-404e-949e-72aed6a46588", "indicator--3ce6fdbc-1d55-4be6-a2c4-1de93e096ebb", "indicator--1b7adb04-7aae-4478-9ca8-e5b01c8e9cf0", "indicator--79f19012-92c7-4cfd-9b38-461cf6e34a8f", "indicator--05dedb3a-5b61-43d8-9b06-abb770e8eeec", "indicator--2a43a58c-c15f-4664-91ec-d7ee707aa280", "indicator--4f15d962-d2c7-4151-9333-39167bbb9ec2", "indicator--b264d63b-4bd3-46c6-8447-cdbca8cfbed1", "indicator--07c0f05a-c468-4449-8fd3-69d8995482e6", "indicator--0e19caf3-f3a2-4e21-8dad-952786a14184", "indicator--66956b9d-b466-4ab7-9f58-00cbad1bceb4", "indicator--f46f0843-a6e7-4888-914e-c9a3828af2b8", "indicator--9c4362b0-3687-40bd-a489-d244a322bc90", "indicator--dff2719d-ea41-424f-99df-7fc9755ab8b1", "indicator--a6039bf6-ba59-4896-afd9-ecaefd7c4ca2", "indicator--0cdc4e4d-04e2-45d8-b98f-9ca08d666217", "indicator--8d13c809-627f-45ed-adce-69d7af58448d", "indicator--1e968a17-8258-4dbc-ace9-c8b031adb7cb", "indicator--46569fb0-66bc-4695-bb73-cc47d56efb7a", "indicator--639f3636-1950-45cb-9fa0-d268704d48d0", "indicator--3509f69f-b174-4d16-97fb-6cd62a78406b", "indicator--f06610ff-cc01-40e7-9792-550b18c40af1", "indicator--ca10d9ae-96ee-44e8-ae5f-0ee1cb462a03", "indicator--5fa37228-18e1-4565-ac1f-492c6cff6e12", "indicator--f9ca19b0-55e9-49f8-893d-cc570a561930", "indicator--396898e9-4592-402c-8b30-067d1af620cb", "indicator--ded5a070-3264-4d41-9d0d-976283661f55", "indicator--6bcd4a6e-797b-4900-8c5a-c5a8d6147db0", "indicator--5cf5df00-7bef-4756-8b81-3ad32a9a67f9", "indicator--8e0951b2-7794-43c9-bc81-2042af7c107d", "indicator--b004b601-76cd-456e-a965-de422e111b72", "indicator--84c3bd0d-f260-46ae-bd34-c9853cb2f0a1", "indicator--031b3c3d-8108-4f81-b4ff-eef485628873", "indicator--246ada91-7a52-4e2a-86a8-4619106ca7f8", "indicator--f9303644-963b-472a-95f2-a8f8dfa226e4", "indicator--6b573994-8d75-4f53-8480-45893e705e4b", "indicator--37bc64e2-a0b0-44dd-91f8-69cc71b7f480", "indicator--2f9cd008-f9b0-46e9-b93b-80357650fedd", "indicator--910b0e8d-1db1-4423-9de8-d0adf0df945e", "indicator--55c70bd7-e5a0-473b-9ff4-db540035f65e", "indicator--a3ad00db-1a91-4943-a457-a981bf2bae0f", "indicator--c4d0a8d7-56aa-4908-8274-db1b1e7ebad2", "indicator--82aeb092-e763-4e34-8ac6-e636df91b38b", "indicator--da94c9c8-10b8-431d-8437-97d47a832f34", "indicator--7859afca-cbbb-46de-9357-9b8f58ce710e", "indicator--b513a541-ca01-4b25-83ea-274b437ef9b3", "indicator--7aa92dc5-5d02-4199-8fb5-c61563d134d6", "indicator--c6b18b42-bcfd-4e1d-8fd6-f319eec1ecfb", "indicator--3cb0813c-bb48-4640-acc4-5facc1beec0a", "indicator--3c804cfc-0a63-47fc-a330-582425d5b635", "indicator--b8fa0d18-e5d2-4925-8c0a-71e349abeaba", "indicator--2c1c7d88-f18b-490a-ae43-7b1f21fd4a6c", "indicator--aa6d11d4-10de-4813-a9eb-fcb9ca60d75a", "indicator--6b36d1e1-ba05-4cdc-a371-de7938754cc8", "indicator--125f855a-a3d0-4e8d-b98e-e90a3c1fbccb", "indicator--294881da-3c21-4e45-8e12-35f426fb005d", "indicator--189dbf37-0902-4507-88e9-7d770018f7e3", "indicator--17ee792c-60d0-474e-acef-dc04c35c0779", "indicator--facc2278-328c-464b-897a-fbc3ffb0a911", "indicator--536f1c4a-74bf-4a0f-9e02-4ea7d412255b", "indicator--05d86198-aebf-4c1d-b920-06b8922465d0", "indicator--a91b9d64-2851-47e6-aae8-94048120d565", "indicator--165c21f0-1a07-4b69-8d67-cc112612edb6", "indicator--75d1ff2f-1df6-4398-b3e8-d66b1f235f91", "indicator--5a353c98-1e77-4616-92e7-7429da23d1c1", "indicator--adfa598c-f7ae-4a89-9c90-819556ba4e16", "indicator--cd2a87d6-cf81-46ab-b374-3c455ae4350a", "indicator--07084dee-1816-4a3a-a1c4-7a14047e45aa", "indicator--679f54be-cb9b-43fd-97d6-6136ab0df2ae", "indicator--d6b9a80c-44c7-41ae-9533-77ba518c1485", "indicator--46a018c0-fb00-4cf9-9644-bbbcefa324f1", "indicator--136ef7f6-b496-4589-91ba-666af44cf4dc", "indicator--0a5bf2db-fb8b-4f75-ae5c-aee74c56b0e1", "indicator--8bf16778-fae6-41d0-9b98-a5968004792c", "indicator--8d72bd75-8510-4272-88b2-263a8a513a5f", "indicator--b38197e9-f8c0-43a4-bdf4-1456966edcb0", "indicator--e50afd90-505e-481d-8d72-d6c8d55c648d", "indicator--245cbd3e-04c6-4704-ae8a-2866342e215e", "indicator--8e8d94b8-4a5b-4471-a5b8-5ed0436048a7", "indicator--1fcfceaf-997c-431b-bbd5-f974c57d4a44", "indicator--1ad614ef-08a8-4519-9dea-ec0ca685368a", "indicator--6d4f7b8f-7c9f-47d8-a440-6bb5cb39c94d", "indicator--d469f53a-c709-44b7-904b-9e7d4c3126ec", "indicator--bd651b4a-cfd9-43e5-8f14-4a44a10721a5", "indicator--32b99ad4-860c-4bcc-b40e-07b7a09df7d3", "indicator--5b8dc559-94b7-46ff-a883-6a9dc4ee23e5", "indicator--c7ac74d7-c016-4bde-809a-de9856cbf676", "indicator--b199a3a1-b751-44f4-a940-e508a6336e29", "indicator--8615a2ae-2fb0-4f56-bd5e-789eb87885bc", "indicator--4165033e-4bf1-4723-ae7f-c923bb2ced97", "indicator--4db62746-6563-4fed-8bae-796d7d631ac1", "indicator--b0cff93c-a48e-4aa3-8db8-1bb6f939073f", "indicator--579467b4-1c16-4a3b-865b-df9fdf86a523", "indicator--390ffde2-8919-4a42-a73f-ab88d5da9bb0", "indicator--5634fe65-d948-46f3-8f3d-97316bb93206", "indicator--7a04711e-7d88-4555-8504-be1b5196918b", "indicator--6b7cc515-7abd-4caf-abe4-f4fdc03e2ddb", "indicator--cdcc9df8-9608-4dee-8375-f3d7a7a8e62e", "indicator--7532a2a9-1da3-42da-95b3-88d4f6351095", "indicator--43f55536-169d-4813-afaa-a912f74b8097", "indicator--3fd971e7-9489-420a-a3f9-94ec019e6a1a", "indicator--bf9ca84d-ecf6-4542-b7d7-af4862b53f5a", "indicator--d053d872-5689-4f4c-8d43-3e7c24580362", "indicator--7bd8fb08-f238-4337-bf18-e87e244d7b87", "indicator--4c2cc9ac-b226-48c1-a9c6-9194ed747097", "indicator--09537a60-3ffe-459d-8361-be8c4b5ed32e", "indicator--76e6ab83-012a-49ac-894c-fa1f617a1e7d", "indicator--1c189b06-6b30-49a1-a447-95952765c20d", "indicator--c5dd8e80-c343-44bc-9d7f-fca4221f3737", "indicator--245c4011-bbd7-4bfe-8043-dde0529ad910", "indicator--4910a33e-00b4-4df8-a03c-071670510c05", "indicator--ce4d9f43-044a-4617-b5d9-2eabb0469e71", "indicator--5836dee2-dce3-48aa-b78d-1bb518bf3c0b", "indicator--a69d061f-f569-44bb-b2be-7de311477aa4", "indicator--f7453be2-c84a-4378-9bbd-6fbf457b1ee4", "indicator--ee8ede68-4413-4cab-8972-7008568c941f", "indicator--6556718f-849e-4c47-9f98-4e6dc6fa473d", "indicator--f179ec37-1402-499c-863c-8b26c78f7b8c", "indicator--33cade05-6572-430d-92b4-453613718469", "indicator--ba0a158e-6df0-4772-937c-372cdfcd7402", "indicator--7780709f-42b8-44e9-8916-349710042ded", "indicator--5489963a-9c70-4081-9b63-bea3c687c9ee", "indicator--7bc3d434-8fb1-4d0a-9b14-5a5ebfe67668", "indicator--bfc836c2-3dca-47b3-ac0d-efda08734719", "indicator--533fb3b9-3062-46fa-8999-335aa9604b65", "indicator--fdadd49b-c295-404e-91e3-21d9fb6b0330", "indicator--75d7dd77-d265-4c39-8b29-ae8591652151", "indicator--628fe1da-68df-4cff-ad87-949ae40cd4bc", "indicator--79667654-c4b8-4fe0-9ea7-3df8d541e4f3", "indicator--68fd4b3a-1733-4217-a3f0-d51220a6a13f", "indicator--6b6ce880-4ed2-49a4-903b-39574f5bb2c7", "indicator--60228279-e03d-486c-a971-524bb95abf8c", "indicator--0ac90f9b-673b-4849-99b4-cb3006974768", "indicator--5b588821-a884-4155-88cf-e4f4d277475d", "indicator--add90265-b85f-41c5-9eee-dbdadea77b16", "indicator--17533331-0737-4ee4-a9ff-be3ef129759f", "indicator--38c9db73-eeaa-4283-bc0a-faa53159e498", "indicator--7042101c-511e-489f-9306-69c6b14170d1", "indicator--a5532af2-74f6-46e0-b0bb-035ed1f27964", "indicator--90c2e88f-4947-4dbd-9f47-4d875df4371e", "indicator--39197a52-30a2-4837-a9d7-912ed8f10c6f", "indicator--69cba4bd-8b53-4c84-8226-8540c213be97", "indicator--e6ea72cc-793f-491d-960b-97d537992a67", "indicator--75c7aa26-182c-4ffd-a354-477cd65e6834", "indicator--e27d2797-d5f9-456e-b89f-c784fd726d0c", "indicator--89e8ac4c-f238-4765-933e-f58af10567c3", "indicator--5a8474f7-0616-4d42-b81c-88cb3dba7d28", "indicator--8f070e6e-1ad8-453f-98ed-9b7e8b78b61c", "indicator--63d82c67-fcb0-4392-9d0d-89fc75eb11f7", "indicator--a6c3a623-3de7-4d6c-877d-5ee650373efa", "indicator--e59e876a-052f-4e5f-a95f-833ebabbf83c", "indicator--2d27aee5-b2f7-453b-8ff2-ffcdf9b3c5f5", "indicator--048ee296-4eaf-49b5-aee1-02a7dbab8913", "indicator--f85a0286-bdec-4ab8-86e1-99eac156e5c9", "indicator--605e0748-466f-4cb9-9ac5-1483267940c7", "indicator--0f5a70bc-42d9-46bb-9464-d0f55d544091", "indicator--867c40e7-be74-4018-90da-88dcc6180789", "indicator--634e16a8-0479-41a7-8a5c-4368c7d8b476", "indicator--b71d6ffe-cb3b-4585-a5e5-85edb2380041", "indicator--beac4b64-efd7-4800-821e-05fb4e8b48c4", "indicator--ae56a4a7-eee4-47f5-8e73-725a2e74d700", "indicator--519c0965-c1be-4dec-85b1-4c5d1bdb0e25", "indicator--37d64d9a-577e-4ae6-8cbb-b5a8648670fe", "indicator--9be88b5b-11f1-4e61-89e4-52695d04f21c", "indicator--a70637a2-1ff4-4cd3-95fa-23190cc6d8bb", "indicator--a9549506-466b-4667-bcce-76a40e4d9af6", "indicator--f04b2d3c-d2d3-4e47-b3c2-a7dd857a3a6f", "indicator--78ff5a13-970e-4cb4-885d-8239ee96344d", "indicator--251a7b7e-0f80-404f-ba86-8ac6b1ea9944", "indicator--a8e1e781-33b4-46b7-a4e4-5268c22a164e", "indicator--539c965d-ea34-46b7-b2c5-00aa3b1cb96a", "indicator--c57acd0c-516f-428f-abda-183732625de1", "indicator--dd0c3f8d-3bfb-45b9-8538-7e989c8c0661", "indicator--4026f93a-3420-4156-87fa-fb3cd3fa54ba", "indicator--88edbc38-5d29-47d2-83d9-6c4c7252eb06", "indicator--866a9c03-a4ca-496b-9bdc-c3ddbe080cfe", "indicator--abe67b9a-f649-4bb5-8768-14317f391db8", "indicator--a09bca2c-4ca4-43a3-b674-ca5d43934288", "indicator--bd607b6b-ba04-44ee-b486-423dee69f368", "indicator--4cff0ae3-a1af-4f71-8741-240e4c40ead3", "indicator--471796ae-3f88-4422-914b-3a20efafed72", "indicator--62ce1636-457f-45b5-94cb-1654ecbeb401", "indicator--23b9a678-2a9a-4fc9-a419-f0e757394022", "indicator--1af96838-e327-48c7-913f-c0f6dc55c0ea", "indicator--f2ac40a4-bcaf-4946-a6e4-8236a64c8f2d", "indicator--c4bac86f-ad29-4600-8e19-95ce6a320e57", "indicator--e11db530-ef2e-4749-8cbf-f8f0c5264816", "indicator--67c4eb69-c1e1-4f56-b0e7-8a484d747e80", "indicator--5a162758-0953-4d19-bb12-b6f19502d3b1", "indicator--d780a082-e68d-412c-80e2-eeedfbacb567", "indicator--730c2456-6a84-43cd-9b62-e324bea004ee", "indicator--d583248c-ce85-4bd2-b866-3357c3379148", "indicator--c887f053-046f-45f1-a54c-5acf4aec8f69", "indicator--5f77c173-19cf-45e8-a5b0-f5064ff9f432", "indicator--2f35acd7-5150-482a-849b-1a4d92ef24d5", "indicator--7a51abbe-3a5a-4f64-a8b3-0ccc834324e7", "indicator--c3cee334-e6c2-4b13-a00d-d6f0da8d94c0", "indicator--a103e500-924f-4963-97c1-1ee5752432e6", "indicator--6df31ff7-883f-464f-9887-48542503d1f9", "indicator--1737b8c6-898a-45c6-bae3-303e4e354587", "indicator--130523ef-c25b-4588-a35f-97c86cc6fdd1", "indicator--f4d4cc8f-5c85-4248-a5d5-177fc0e0b6ac", "indicator--9bdaf4bd-5f96-42a9-94b5-bb20e2d63a55", "indicator--634590bc-e7c9-4eae-8dae-22a29f1cf416", "indicator--8b9c59e0-dc36-45d7-a76c-7899885b79c4", "indicator--6d643fc8-83a3-4202-b8a6-f8f45a3039cf", "indicator--1629e9d9-28b3-4064-9653-65b69af20102", "indicator--1c2f1be1-f08a-42ab-8847-c5f138a98f4a", "indicator--bf2a1f86-73ae-4d0e-bdb6-8b81af50b677", "indicator--28e963c6-749b-44f4-ae83-580b1768805c", "indicator--a643cd59-1390-4f30-b1cf-9e437cd18d59", "indicator--347e9408-f041-4fe2-ac19-85f0b3ad4049", "indicator--dbce3c38-7b18-4182-b377-b720a21e78df", "indicator--6b514305-c513-40f7-b74a-ca0ae102f9ca", "indicator--fc6eb840-95f0-4087-8b1d-be8988cf7eb7", "indicator--b905ca0a-6702-4146-8658-31278731d3ae", "indicator--e5859ff0-a088-4ec0-8567-55cc083f8f7e", "indicator--cf50ade8-4572-40ee-8f53-bca0d8a6a0d2", "indicator--2892d21f-ffa2-4d24-952c-c39ed4f88fad", "indicator--d98c74a2-9a49-4951-875a-9c9e76310351", "indicator--17862fb7-b798-49fc-9597-0654509273b1", "indicator--f5af1c1f-e303-43dc-8729-c227ee4e8d66", "indicator--374c3a93-cc34-466d-9e00-22425e333e39", "indicator--897e80d1-385a-4266-8dae-59c14a7cdd2e", "indicator--1a751243-f20f-4133-9873-d5bae618227a", "indicator--8314eeb0-55cd-4516-891b-7e75d2364db8", "indicator--d7aa46f7-0594-484e-a09b-18ba385dc152", "indicator--6f573106-185f-481d-a68e-87425d4b9c4f", "indicator--535f56b0-b516-484d-8a90-3caef087f5b3", "indicator--c7efd37a-28eb-4cea-a747-ebb8b58f97ae", "indicator--8d2c61eb-4aaa-4040-a1a3-178a6cb3ff9b", "indicator--fcc682b7-a8f9-45c7-b7e9-e3db253391b5", "indicator--104ac52b-d301-484b-90bf-3f8a8cd79541", "indicator--c2b502ba-d15e-4742-aeca-e84e45955cf7", "indicator--ff561bae-cf58-4818-9758-29d766074494", "indicator--78c6aabd-b6f9-4a73-9bf1-910d10fba8d3", "indicator--cf665315-dd8b-4af8-aff6-1d97d9404805", "indicator--b82239c3-57b7-4f89-951b-8c7f9bf66cea", "indicator--edeca14b-31a5-4772-9ce7-501104745f54", "indicator--6433b618-e985-4684-afea-6e29c6e113c5", "indicator--9b9f12e0-08c3-457a-b3e9-37db37293862", "indicator--65457e05-f99f-4c19-a6d0-011f1ea6e5eb", "indicator--b6080ce6-c3fa-4865-a4af-22115ef58fec", "indicator--0b46f090-9976-4e89-bcaa-bfe7cd36dca4", "indicator--9a0031ef-3e17-4c0c-b860-b885176a1889", "indicator--b2ab61f4-b2f3-453b-b9d6-b09e22b7acae", "indicator--c97bd055-60ba-4d17-8788-f49e7c22f61c", "indicator--0ace1626-7733-4e7a-b9e2-2fe6fbf48bed", "indicator--5c4f9b45-dfb2-4fea-bf71-f0f26e441043", "indicator--1e0a8768-ce5a-4fe4-aa6d-94e88990e579", "indicator--3aa48c48-be5d-42a3-8760-8b12f1724188", "indicator--e6ab0953-5322-4628-b71b-7a4f483134a1", "indicator--88ba49a5-c6c9-4f21-abf0-bbe7af50af7b", "indicator--37268b88-5d06-4e9e-9f3e-1bddc00807be", "indicator--b080603e-9090-4e02-8a0d-5926352315f8", "indicator--0c754c3b-8ee7-48a0-ab78-86cc7ac95ba3", "indicator--b9566f30-5980-4486-a4f8-3f1d13e39239", "indicator--92dd8928-7c55-419c-9045-b362fbd5203c", "indicator--e26ca974-efcb-417b-84f2-4e26ec62df6f", "indicator--95e2aaaa-fac6-443f-a5e8-fb6cf8e42855", "indicator--656912df-b7df-452b-b439-528a9b0bbf94", "indicator--5faed2af-7b21-484d-b09b-f8ac024ed872", "indicator--97411a73-3823-40fe-ab4e-fcb18ab6126f", "indicator--4e129640-380d-4230-8c41-0672638826dd", "indicator--374fb0b1-7232-472f-8138-680ebab3665b", "indicator--fc7e8635-48db-4380-b008-a659a58c63cc", "indicator--25a077e3-98d3-4489-844f-4eec01d21aec", "indicator--a1f0aa9d-5ec5-44bb-91ee-a5f13ede838f", "indicator--465075ea-90f0-431c-a468-e37211c80cf5", "indicator--57450a2f-941e-4157-86c4-1a791f971620", "indicator--1c199b86-2bf1-41f6-aa95-2705243f6f02", "indicator--18ada7b1-5175-49cc-be48-448911704316", "indicator--70f27b78-8dd1-47f9-9c3f-8e5c76239e32", "indicator--b5defdcc-48d3-48ed-84d5-4040e1712d24", "indicator--2420b586-6403-41c8-aeec-46ec5262aab6", "indicator--7081c7cc-4ac3-4a21-8d8c-b601225fa459", "indicator--4ce5c865-1e43-4d52-acac-36038bbc65d4", "indicator--28e1cd56-f154-4a8c-b540-2b57166c3803", "indicator--d1ce7610-cbfd-4c8e-b052-689f50499b53", "indicator--6e1d72e7-fc84-4fad-b086-eeacdc41a8ba", "indicator--223248ed-91a7-4bae-9e4e-7ff855b578eb", "indicator--c71c5eb5-4f7d-4ecd-840a-c26358b12b45", "indicator--154db0e3-275e-415c-855e-32cc9a4f6c4f", "indicator--c3c9167b-c0ed-4c77-b3f1-a8251eb2dd9f", "indicator--fa6d65b1-2abb-476e-aba7-892b52460e34", "indicator--794e804c-5d5e-40c5-a3ae-d5772c1e17f3", "indicator--e80d4e59-c6e3-4e25-beac-61dc0c041559", "indicator--c6396b4e-ed19-4e15-8aae-fd83d88adbdc", "indicator--a7806db2-b5cc-402e-959d-19cb2379e237", "indicator--ae400dbf-b516-4561-9d0b-fa4b9a561f0f", "indicator--8bbe6f48-6a9e-4ba6-b9ba-62c157d6243b", "indicator--65a1fbc2-1b88-4d94-914a-090e6968647d", "indicator--3f99fad2-295d-4abb-8a60-7904d5dbf810", "indicator--c05ff53a-73fb-4d1f-b38d-5a57eee28a03", "indicator--d2352c82-a038-4d3d-b108-b0dd8b52297b", "indicator--3e4e4dcb-b5aa-48d6-9f48-eac4120d73e9", "indicator--a25f5c12-cd9a-4636-a676-e214eaaa0e93", "indicator--a22ea075-9a0d-4e14-8683-dc324b97a899", "indicator--2944e5de-a1ac-4749-9d45-bce26d347e29", "indicator--7e1206fe-989c-47df-98a8-1755474422fe", "indicator--00f95093-659a-4501-86bf-5fe1f914b674", "indicator--d22b7350-e248-4e8a-967a-263c48fb4cb2", "indicator--22651537-bafb-467e-9d60-ecfdcc30c9ec", "indicator--6e9504b4-af82-4c8b-9a44-0e35a5e455e9", "indicator--c99b1b32-d328-41d7-8831-492f3ac9406c", "indicator--5fd3349e-a137-4f15-98b8-c5a1a364388e", "indicator--51fda84e-f5a4-44b0-b9d4-e2227e4fab50", "indicator--8b4800cb-08cf-48f2-9363-197f41ebb90e", "indicator--356bcd91-7069-4113-8e1e-9c3c60d2cab9", "indicator--18a9b897-640b-409b-8d16-e8c06a3bac7d", "indicator--73dd05a7-6fdd-45f7-9733-e65f3065b6e7", "indicator--aa9c7785-6b60-461f-b249-1dc580bde10b", "indicator--01f3fd89-80c4-4e57-a111-f3db99dedb41", "indicator--a36ffbff-2a37-45a9-b7e0-b3aa10759af3", "indicator--bee3fa45-2ee2-4fb9-b3a7-aa8e167da115", "indicator--352699d7-1bba-4ef7-ac62-4b2206d3cad6", "indicator--1f8068ea-a20c-48b4-b825-20af4d40a2f2", "indicator--36734d4c-c2de-4bac-92d3-6cba423e7d32", "indicator--91e31a6c-a8eb-440d-a29f-ac0440022707", "indicator--427721cc-7e1e-4f21-aa0a-a17c8f0c1260", "indicator--250eef27-49bb-42d4-880a-4bb2e645e5d0", "indicator--bbb65152-a257-46f2-9604-07562e8fe4c7", "indicator--311a58cf-e213-43d6-8f42-48ae587fab4e", "indicator--0fc777a5-f432-4ba7-b6c8-8f75f7e42074", "indicator--46e723fa-e9f3-45b9-89fe-0b4c31acfd10", "indicator--8b2c028c-c04b-446a-b0ba-6d2f09309f1f", "indicator--67744ae2-2916-415a-9d6e-fdae9fd178fd", "indicator--e36fedf8-49f0-4721-bd21-b3fd4a8e59c4", "indicator--68c69f74-a7c7-444d-bb71-525f967424f3", "indicator--50d88989-a23d-4e0e-bc8b-32772e384535", "indicator--8b751e8c-c5e7-454a-b0ba-45e84a9d02eb", "indicator--d3034edc-be28-4346-922f-79984e79bafd", "indicator--ef4e6143-4e66-47d4-ac18-7dee90f23e8f", "indicator--557468ca-22d5-419d-a26d-0fd7d7a03120", "indicator--a21ccd1e-d209-49c1-b77b-6f1330cfa4bd", "indicator--47db924e-828e-4359-9341-b30f6b7f7d83", "indicator--cdc80a9f-ff81-4064-9244-d92e45728e96", "indicator--0fa33aea-6370-465f-a087-60fb9e3d93e6", "indicator--597e78c9-db29-477e-97ec-0a6e0f09e0fc", "indicator--c7e498e5-385f-457b-9ea5-a952b7a854ce", "indicator--abea6da7-a84b-4fa0-a2d6-00586158aeda", "indicator--6e005ac0-c42d-4852-9da1-9635f61581f2", "indicator--7db1f7ff-3d12-46f3-9130-d67280ef4309", "indicator--fe346c80-7fc1-480f-8ad5-c9548941044a", "indicator--da8122fb-7754-4b0a-9a73-623523873601", "indicator--359bbdc7-a089-462c-8a5f-96ef13768d37", "indicator--b96d5bf3-d979-4e70-b0bd-76eb8a637060", "indicator--15e4f1d0-246e-457b-a053-b745ced96486", "indicator--cee70253-c3d4-4db4-8b50-af7b197c1549", "indicator--42ff7916-7860-42b8-b9f7-0fd0d03c1e3f", "indicator--6595c3be-bd73-4e41-8193-9c29ceb919cc", "indicator--56fee575-b6fa-47a7-b5ca-82faf34280a4", "indicator--fe7119dc-c74a-4739-823f-51498a1d68cd", "indicator--e17f1810-ba0f-439c-9eb7-1a5b435bb9f4", "indicator--0c085236-00f3-42ed-b01f-7053c27922bc", "indicator--689de169-62f2-439f-9fc7-783bff43f961", "indicator--f1af028f-8d33-4f04-8e47-c9ca3cc80e1a", "indicator--f3cdb217-851a-4e36-8150-b73669bdd520", "indicator--fcd9c3fe-56b0-47ca-b937-1b8d79018d83", "indicator--7a5a361b-f007-4291-bca2-baae8a29ae05", "indicator--ae090f51-f457-4f66-9a27-6e5a985325c6", "indicator--f1b10d65-f47f-43e8-a527-0db2cd38d886", "indicator--381c1f42-a4fe-44a5-b55b-93602f5fffd5", "indicator--eb2f483f-08df-468c-82a7-a9797dd92418", "indicator--4c3078ee-51f2-4355-91cd-9cd151900a1e", "indicator--d4155952-54ff-42fa-a43f-3872689a26f8", "indicator--9c8d0de1-2c4d-45ac-91a6-872d851ae76a", "indicator--ae2277d7-312a-4c04-9112-f36b9a2534ea", "indicator--dc07323a-cdc8-4bfd-a544-e9d61c8e1dac", "indicator--5aeb12d9-4e63-43e6-8acb-18304c83321e", "indicator--e08134e8-00b9-4018-ba69-de0e4b40266e", "indicator--342562ff-5e21-4352-8b15-4945810d7d95", "indicator--6ae3b3bd-e4b6-427d-8976-3c8c66c94589", "indicator--8d097f5c-d6a8-40de-a9b2-1189c6a0afa3", "indicator--55f6e8c4-7527-4956-90cd-4a94b647380d", "indicator--2b2c2dc5-b43d-4652-af7d-c4e645402705", "indicator--bbc695d8-5466-4471-bc63-5b7047713018", "indicator--a601c469-2983-4b70-8ca8-87cc13780605", "indicator--6ac140a3-8c3d-4f36-8c7e-2e28513a97c7", "indicator--53bbe70a-f8ca-4b55-93d3-a5ef71e29993", "indicator--94fac633-9aeb-45b2-a669-974065805080", "indicator--8ebd1d80-df47-4853-93b6-a9054169b8e4", "indicator--3e15d27d-fb3b-43c5-8b46-ed88c021d454", "indicator--01403f49-01ee-4a11-8555-9faed37ee05a", "indicator--3058ca38-e9a9-4583-a17b-321cfcc5f57f", "indicator--c44d86dd-558f-4bc9-856e-46934d3fa017", "indicator--040ea58b-1410-42f1-b5e6-aa295d8a3afc", "indicator--19602d51-07c5-44bc-8d9a-2b9bc1c5c24c", "indicator--db629ee5-bee0-4a7b-993e-3bdd63a220ab", "indicator--b6d3b085-da5d-463c-9105-04b32df0297d", "indicator--7e000b0d-ef56-4d26-9ab7-5ecf2ae26497", "indicator--91ea18cc-b4ac-4dec-9fe6-d6154acd3c94", "indicator--23d723c6-7b03-4cc0-bc5b-c398b8b96739", "indicator--049fcde3-26ba-47d2-a890-bd2cc24bd6af", "indicator--55271f8e-8f51-4b0a-93be-9d1cf370913d", "indicator--744a1c8e-770c-41d8-9e4b-9feafb1fc3d9", "indicator--257aa655-1692-4275-b415-f6fb050f2f75", "indicator--8dce6022-ad72-4a48-8b4d-cbae9e368728", "indicator--2d17e659-c9c9-425e-9011-0b2a2a5af27e", "indicator--beb32a5b-a941-43ff-a5c9-8f74036c6ca7", "indicator--58f861db-df9a-4632-93d7-8edf2cdac81c", "indicator--4121cb4b-eba1-4a93-a63a-c51cbc0eefd4", "indicator--26e4d39f-747e-4143-be3f-af5e40c3f708", "indicator--28379fd3-b0ac-4734-ba8d-c405401bff97", "indicator--82a76e1f-b8c9-435a-86cb-c01ab80cf229", "indicator--798ada20-01df-40b1-8935-219c28855a21", "indicator--553e38c4-4107-4b7f-af46-8ba284330ead", "indicator--89490e65-c154-4708-854b-b51aa1346b63", "indicator--65f22fe7-0190-4fe1-8ecf-a9f3d1131aa4", "indicator--650a00f4-eecc-4d9a-8cc0-6c791715e39c", "indicator--3ffe349d-8981-46f3-9652-3c8284f9d929", "indicator--a2606d27-2533-409b-a833-6547132f9681", "indicator--d3475275-5b8a-423c-933c-b26966a1c9e1", "indicator--f6444994-6408-449f-8106-998722a62644", "indicator--7ce43805-8e4c-4bb1-a8fe-63fd34b81ea2", "indicator--09989953-89d4-44ae-aafa-38e06e273ce4", "indicator--dda31869-f6d4-4186-9862-662eeaa8220b", "indicator--9a862122-1bcc-4a51-b36a-b40565091ac0", "indicator--fb1b9183-bf3c-40ac-9d2e-defbddcd7588", "indicator--9202eab3-756d-45fc-a6a2-924d6e97fe7d", "indicator--cae3629b-3abb-4a50-b9ff-38f14ff1a87b", "indicator--d826333e-45f6-4beb-8304-f870039f3d61", "indicator--b077ff74-504c-4f31-a0df-97c16d155f8b", "indicator--53ad2695-abd0-4f63-afeb-09ecf6030753", "indicator--5b30e28c-4991-435d-ac41-d7778b93e003", "indicator--667ee94a-fcd8-4883-acd6-e3f4c7c3735d", "indicator--3053190b-ce09-483a-9876-5d5649656fe3", "indicator--10ff2ef2-91b5-4664-bc65-c8a10948cba4", "indicator--375ff7d0-fe05-4830-9db4-d472c04dd51b", "indicator--f897eed9-1259-43e5-ad67-97fdfb86c78f", "indicator--3982809c-1adc-4c97-a967-6c6aca6890d2", "indicator--8f8c567d-c289-4aea-8398-026562bd1cf0", "indicator--3a401ce4-ef66-4ed1-84b6-6f71a06a0ccc", "indicator--4775c20c-8c8d-48d1-872b-aa527f376215", "indicator--17dfae98-1b4e-4bc4-9684-f0b0dedef47a", "indicator--786bec22-d304-4046-b34f-ca4045a67186", "indicator--831215ca-98d2-4e52-8664-7f3a33a5b5cc", "indicator--8b15f0f3-7756-4ebd-9b56-e217f8ada8ee", "indicator--e8851e4a-c106-4e5e-b9d0-6d4bc4bd3009", "indicator--15de1acf-56d9-4147-b3dc-f0b92acfdd02", "indicator--d739e2d0-8e61-4654-8322-d0473276f37c", "indicator--4dc12a10-c1fc-4cec-a865-0e52da00ce35", "indicator--68875056-ee3c-4149-9cd6-97bef293cc46", "indicator--00453e51-727b-4229-930b-7d96f7d76130", "indicator--90ad711a-91fc-4e19-8d67-1b856c983897", "indicator--3edcd637-d9a0-4d76-900d-10af8d5cc7de", "indicator--d2707bbc-a960-48d7-9fc6-5dffea44297e", "indicator--6c5e34db-a69d-4c55-907e-0a92d6f71da9", "indicator--3442e023-806f-4f9b-862b-9de63d6c30cd", "indicator--9b9fc1dd-87e8-4dce-8b45-7f9597cc4860", "indicator--77e11365-b626-4476-9105-b63a8d476287", "indicator--4516f81c-8d3e-4304-ad76-359d5dd9dfd0", "indicator--365cbda0-1cc9-44fa-813d-e5f7cae91f2d", "indicator--f57a73e1-fefb-4f83-8081-eb15fc62da21", "indicator--22b85935-ebd5-47ed-b7b5-ad06c03b1c94", "indicator--ef251ec3-4dd5-47a9-8f3d-85d50573ab8f", "indicator--9f6149e0-8455-4864-8905-4c50cbe9bf2e", "indicator--a06790aa-2a85-4eb1-80c1-bbfac809ddd0", "indicator--a2cae8ea-db57-4e92-a29b-ac9af1ce701e", "indicator--6637957f-1882-4f2e-ad30-f0dcf9162723", "indicator--66f179fc-edfb-4eb1-a77f-fadc5b02ae79", "indicator--c6713a08-983c-40d9-b02b-7235584e4b17", "indicator--544d310f-5fa6-46fe-b635-95f08fb92c73", "indicator--452a300e-b216-4c53-a563-a84682d5b84d", "indicator--b92cc0a9-82fe-4401-978b-b571aee974ac", "indicator--fb3cde1d-050b-4cc8-afe0-829c4454d9b5", "indicator--3edb5373-0638-4350-b91d-9cb37f96007f", "indicator--d15daf3e-e933-443e-9fb1-8c48dd189334", "indicator--4a229038-552a-4418-b4d6-a97a69e8bdd4", "indicator--1e51d2c1-1e86-4327-8b97-79dc1b43f0c6", "indicator--a97c1d9a-cf3b-4068-8f29-54ab6afe104c", "indicator--6475ce70-45b8-4b18-a1fc-c01a1586b05b", "indicator--7984b0c9-f041-48bc-8cd6-3954d33f99b8", "indicator--77fbd85d-b137-4904-8e72-6b3576340bc3", "indicator--4aa737f6-bd29-4a80-9b22-29d01931efc6", "indicator--172ccd16-098c-4f72-9590-6164ffcf0699", "indicator--05ab0ede-5aa4-4b15-ac07-31f6e0cf37bf", "indicator--50700b0c-9c07-4513-bcc5-c99b4fafda60", "indicator--67c0fb6b-a119-456c-9458-60281031c698", "indicator--a9f13710-e210-483e-a56d-aab1332d913a", "indicator--60c799a2-17a4-4eab-ad63-3e03f01681cb", "indicator--7172d57e-992d-44e0-9dff-9aca04c62b63", "indicator--d6fcdf97-d87c-4e76-8097-dd40b59ed176", "indicator--d18c3cc5-fa66-4140-941c-21706ff2da2d", "indicator--e2db12ad-308c-4b09-a76e-7f4ce1eb33d1", "indicator--60e4ffde-41b7-452f-8160-e1c1957dca3e", "indicator--3e44819f-1d67-4e70-8900-cea0d053ba9f", "indicator--bc8cf043-531c-4e86-aed6-45c2cbc18b5d", "indicator--e37881f6-d375-4680-b643-f40f0018d434", "indicator--10f4734d-47d1-4daa-a5d2-39be756b822f", "indicator--85c59942-4c10-4721-80ad-1e8d5f2bb354", "indicator--58192434-a14d-4cf4-a02e-9e00cb86af98", "indicator--e8ae0da0-1e11-4645-a32a-2519573b0948", "indicator--23e273a6-3346-4be6-bd12-4c67631d97dc", "indicator--0f3d893b-56c4-4d49-8d04-5810dd4fbbd7", "indicator--efa31d47-8eaf-40cb-b657-9cfde729eaf4", "indicator--d736744f-e1a2-4648-b403-6898ea3c0b25", "indicator--220d4f07-64b1-4659-a4bf-7e9209202c34", "indicator--2e07f577-058e-41f0-8e16-70c9e50f6a1c", "indicator--ab7067df-66cd-4684-82f6-b93fea55a95a", "indicator--ef656a70-66c2-4d97-8dff-4a3a7ab9d45d", "indicator--6cd7bb89-9519-44a3-b78b-4a73bea4997a", "indicator--881bd793-64c0-41dd-99a3-25df2199baf7", "indicator--4ec25ad3-bc8c-4366-a4d6-c5459f183ba6", "indicator--8076339b-7016-459b-9def-d540760fe6b6", "indicator--525d2aa9-3475-4fca-bdca-1d7e5196e9f5", "indicator--cf709c43-fdc8-4c40-9729-e815403419f1", "indicator--6141cb26-ee85-4d33-9402-b8521321de6b", "indicator--3e16696a-b012-4c1c-8f66-2546546e04d8", "indicator--fadb3e9b-d703-43f3-aa37-fd8fd2627e4e", "indicator--b326351d-52a0-4bf3-97a1-059f23fef27c", "indicator--09c36b92-5b23-4d7e-8ba2-47093ba31e77", "indicator--3ddfaf6d-3611-41c4-819d-2ee4841f7594", "indicator--8062d962-ea51-4e97-a3de-c508af230ea6", "indicator--1b1969e3-05c8-4102-a432-56f6049d40a2", "indicator--a004237d-fd8d-4929-8a27-462da6501e9c", "indicator--17320d17-3f3e-422d-b38e-b5b7d13d96c8", "indicator--9d7d0275-edc8-43af-ae91-59e15e884308", "indicator--30ba6664-542a-44c8-9257-96703163febd", "indicator--9cc74a25-917a-4f6e-9e47-891ec37f3aaa", "indicator--e30557ab-9122-4b28-8079-e7f7d4ea2b93", "indicator--fae3ece1-0cc7-42ff-9c41-f81576358e1c", "indicator--9c230546-8ad7-41bd-ac12-0a6a63122c9c", "indicator--7ea4f148-fe36-4a27-90a3-f72b6fd6da71", "indicator--d746f3bf-8bca-457f-ae50-b4ffa07b2ee5", "indicator--74a17f41-c7b2-4c86-8b38-dc7c2cfcae57", "indicator--f396d4cd-ad8e-4087-993b-46feeed3f052", "indicator--9cdb9c24-d356-485a-8653-174f4cb0e562", "indicator--6e55eed8-eda7-45ac-9918-62cd54569e6b", "indicator--d4cb985e-89d1-4c9e-bc70-42dc03f91ef8", "indicator--ce2cd566-baed-4451-b372-3c12c970ddf8", "indicator--77ca7cc6-9e70-4681-b263-ea96b110a33a", "indicator--272d6726-a23c-4536-a996-e663353c473e", "indicator--a4c67ec3-f3ad-4f63-907e-ded3c1b02fc3", "indicator--647f3108-e9ea-4821-a673-a8059c5a90a3", "indicator--f3b01c40-920d-41a9-addd-c1b81df88afd", "indicator--f9f9442a-9534-42ea-9a0c-98822380f321", "indicator--29b877d6-c879-443f-8ed1-a5f057d318ff", "indicator--8c0bfc32-24d2-4ded-8e12-8ccccd7c38e3", "indicator--c15ac441-c844-4da0-94a2-da9c87266577", "indicator--ec3c7b1e-e709-4d1a-a0ce-e51885598cc5", "indicator--72b3c81f-1242-4bb1-993a-ade7592ccdd2", "indicator--4e0b96d4-2bd0-4cd4-88d9-3e4fb9022bbe", "indicator--e937817d-149a-4f9b-8da6-71013bf99e1d", "indicator--27cce535-5738-4b50-9d0f-c9d12a149d7c", "indicator--f0e80db6-65a8-4437-b2b2-805d43bae434", "indicator--78c17927-bf16-40b1-ba63-b358d4039ec7", "indicator--6a96d8c6-d6eb-4e2c-8044-a6222ad9f89c", "indicator--3d71aac8-cc0f-47ec-8b06-3e50d24e2d6a", "indicator--2243d614-9f83-43c8-86d6-887102793b21", "indicator--eb01fb58-76ec-47b1-9de9-60d97e8f0762", "indicator--89fbf7a7-b86a-4e6a-aded-6a9be13acaea", "indicator--e5252329-578b-4b5f-a5d6-d260d3f4729e", "indicator--4984957b-ca34-4d58-886d-9c9629f3a8d7", "indicator--74336062-bf7b-44a4-b9fd-c070c2802c5b", "indicator--b7b4a612-1e77-466b-928c-dc5ef5e85be3", "indicator--b01315b9-b35f-41a4-9db9-2eadade8def7", "indicator--afef46d6-79de-4835-83c8-65424dbaa02c", "indicator--f2691f99-523a-4d81-b8ec-52a00b394f5b", "indicator--06464c15-a428-4de8-8dd4-d531259b3a89", "indicator--b5edb9d2-8345-43cc-8f82-2ecc800d439c", "indicator--1e92b733-4ce6-461b-9ca3-02a8e10c07c4", "indicator--07bc8631-b525-403b-8cdf-f3289f1c820b", "indicator--04562419-e76e-4b3d-9e70-561670cfcbcd", "indicator--ae266136-1344-42c0-a4dd-b1ace4f67926", "indicator--36a99cff-3376-4d08-b8ee-d81ec0b9890c", "indicator--2e820f54-d180-4cc5-b45d-ec144fe155e1", "indicator--8dda1034-2596-4689-bda8-d1a325905320", "indicator--805a3f7a-beaa-4d95-b416-b1622237d8d3", "indicator--c7abbe19-c286-4847-9efd-ead234217573", "indicator--fe50a52f-93ba-4f72-af77-5eaef71ccb59", "indicator--7a1604e8-7abc-46bc-9187-cc951f365247", "indicator--a9c37098-53e2-4145-8145-b0ac37aeaa22", "indicator--b2e4f036-e57c-462b-a25e-f67ee006736c", "indicator--a74fe080-645a-42fe-b6ef-abec1c9e7aca", "indicator--44033c40-ea8f-409e-af12-bbe73755bc6a", "indicator--f57f2be0-82b3-48d7-af55-eeca51384aad", "indicator--ad68d14f-0e43-4ee6-8803-96813af6488b", "indicator--28303c4f-9729-4a72-a387-d79cef1f036e", "indicator--87232e17-d9cb-4629-a4f6-348d0146a1c9", "indicator--f411d9dd-8e15-461f-850f-8c0e6790c0c1", "indicator--23b53dc7-bbab-4fc3-a52d-c933e3c37149", "indicator--41bfe4ef-3b61-4b9d-bfee-0d9bf68dbd2b", "indicator--e9360b24-3875-465c-9e26-941cbcb6fc84", "indicator--2038f74d-1d68-48e6-ab77-1bf6cc682f15", "indicator--1b780ca6-7145-456d-b570-a89f26cffc2e", "indicator--34357c4a-5e90-476b-84fd-3afd183e0ca3", "indicator--4c63795d-1f22-41f4-bf2c-d0b533199177", "indicator--3f2fbdcb-4ecd-43c4-a6bd-4204a7fd4c31", "indicator--902b57be-702e-4224-9ddb-fdfa7084b96d", "indicator--4a5e66ea-4cb2-49e4-bede-3a36857fc573", "indicator--ea6af921-8b9d-4df7-8fdb-1920d2efc6ae", "indicator--edc18991-8fcd-471c-9443-c03cfcface29", "indicator--75867f82-0e74-4400-a79d-22423b128c89", "indicator--1eb75e47-bfec-47cc-840f-d4eda452ac3b", "indicator--f2227c1e-5a45-40ba-911a-07aeb2cc2303", "indicator--828c77b0-27aa-48e7-abd8-b7f20a9cbb41", "indicator--1a534fc9-e6a0-4ffa-8f16-c93debaf6403", "indicator--c580ca09-cb3c-4928-a55c-df34ddbfceb8", "indicator--d0e36225-ca70-4197-a1fd-58d262ecec33", "indicator--b17e9681-b719-43c4-989a-4f8ba7fa4210", "indicator--4301d06e-407e-4488-ad7f-8fffc1b4b2f3", "indicator--a6fa0471-d48c-4d0b-9a52-f17a3f26a071", "indicator--7c700104-d3a3-4000-817e-ed65ddcc7e85", "indicator--c5d56c24-3cd1-4627-a86d-53903837b8b3", "indicator--d0084633-3260-4926-82da-57f4ac048eb6", "indicator--3376dd3f-ef67-4bbb-8cdc-0e90ee518ef3", "indicator--37b3b50f-da26-4517-9887-f56e72d28596", "indicator--2c6be90b-b63b-4a92-af0e-357cc1631a95", "indicator--d051c06a-41bf-41c6-815a-0156edc26dfc", "indicator--8e8db124-7869-482f-ab84-045758116ccf", "indicator--a921b308-946a-401c-9105-62a918e4ac7f", "indicator--4b87d5b1-4d98-4161-9381-218c44e036bf", "indicator--8d7bdc93-8c1a-42d0-a9c4-01b7d94e3b0d", "indicator--21a2b6a9-baf7-47ef-a1de-51ed2fdacad8", "indicator--458ffc55-57d0-4464-b21f-5b26ddc903d8", "indicator--26eb7c0c-5434-468c-8aa6-171030d9fb79", "indicator--d43a9589-a2c6-4ef5-827e-90b3000e133e", "indicator--ba4d26e8-329a-48cc-b399-50c4bd9ed115", "indicator--ba8d21ff-eecb-4a15-b94c-ffee70c111e2", "indicator--64895639-6dc7-4833-a87d-d1316298998a", "indicator--69ae1970-097f-495a-95c0-a0af8902b8f7", "indicator--cb311d74-cd94-4f53-a86b-5483e4f9513a", "indicator--4796aea8-03eb-43c0-9081-e3903b61b0cb", "indicator--458a2292-c868-44cf-a352-39922142a0bf", "indicator--e67cf82b-22da-475c-b957-652f5f848af2", "indicator--47890c3e-8414-4e55-9a10-cbff1ee56941", "indicator--6c7c63a4-de32-4066-a5b4-b33bc60b2b3b", "indicator--4e62a545-0985-4fd4-9c90-34a051784506", "indicator--5aa6357e-bb5b-4ea7-86ce-b2c77890a065", "indicator--9a4de676-1bda-41d1-9643-9b2c76567a5a", "indicator--aaa366d5-8e65-4b20-a0ca-6e8acbc13c4f", "indicator--07e3c7c5-41ac-4aaa-81e5-b2dbcac466d3", "indicator--67f1c1b2-a0c3-468e-9ef8-c250d0ddb528", "indicator--138f9609-1ac0-4820-84bd-7563749e7f3b", "indicator--c803c175-7d5e-421f-afd3-f8d09e4f081e", "indicator--74849fc7-519a-4737-be1c-f98cb9f99913", "indicator--2da449cf-bb19-4c2c-a8f1-22dfe45a68ec", "indicator--96c5f18b-3f6d-45c5-acb3-cb227a85ae8c", "indicator--905d436f-6a5c-48ca-aaa4-0ffd50afa1b5", "indicator--db3661ea-07b5-4cd2-8c40-f6a03dc15ebc", "indicator--4b7e74b1-d3e5-47cf-be47-8139d899425d", "indicator--a4ee45f7-8698-422f-a7c8-91383b9274ec", "indicator--43aee06a-c227-4e7b-8108-8238e9256290", "indicator--051f5581-7a59-4292-b062-03adba79b92d", "indicator--27b95d3d-f274-4611-82c1-d8e61674b9b8", "indicator--8fd295a4-c9cc-4e7b-bd18-a738da96c890", "indicator--cbc4cbd4-9739-4f25-934c-1dd9da46a155", "indicator--0225900c-b234-46d7-9855-1d75dc08775c", "indicator--63232a70-5c93-47b2-942b-b967ceeb9442", "indicator--01796587-de0f-4292-ae2f-6f6dfb40d84d", "indicator--32102501-3578-40dc-8ebd-82040a651185", "indicator--62186c65-62e0-40ff-afae-b8774ca66bae", "indicator--220d7514-66a2-43c7-8433-ac207d8c8aca", "indicator--7e05ff11-954f-4f9d-bd34-02e3256731ad", "indicator--3ddf6e23-89cd-44e7-901b-ed2446c18e31", "indicator--940b7846-2226-40ef-a30a-b1896b943934", "indicator--9c6e156c-8be4-4cbf-bca2-9e529af93393", "indicator--41244c92-3e67-44fc-ab58-5ced134574d3", "indicator--bed12776-34dc-4b12-afca-57217e04cc77", "indicator--997aaef8-15b2-467a-96f3-7f833e02efc0", "indicator--433835b2-549e-40fe-87f7-2b8bd061397e", "indicator--46de581e-9ae8-460d-99fd-98bfc613cb86", "indicator--59cfd6d8-becd-4191-a04e-9e1416093fd3", "indicator--ed61b812-af29-4440-88d7-532ed41932ad", "indicator--5097dc34-9f90-4994-ab07-25da0b1e438e", "indicator--5eb86a18-6b06-4702-a526-8eba96eebc72", "indicator--ddd6278e-5bd8-4d80-95ca-7d554a9766db", "indicator--0de61511-17c2-4bab-9623-c8c58330b158", "indicator--e7f6fec3-6e8f-4987-a500-f352455f8877", "indicator--1df2bf08-fbd1-4ab3-a0cb-07df7d61d2ba", "indicator--57d5f254-3db1-46fb-aa4a-186f7398e2a5", "indicator--2e6782f1-410f-4d67-b5d9-286aa3ff889e", "indicator--c6933c7d-62ee-4a69-a671-74c82194ffcf", "indicator--e0194275-22e2-48bd-9f1c-551029b80d19", "indicator--21e09d39-6fbb-4031-ad73-629701562242", "indicator--8f572283-ac34-4430-923f-202e24c3cd8a", "indicator--c1f64ddb-3c47-46f5-ab74-d10465d20e29", "indicator--baf63486-cbdb-474c-808e-a4ad15bb9b71", "indicator--535b23dc-836d-4b77-84bd-0ab35cdeccb9", "indicator--73efc7af-843f-4c7e-967f-ea561efac9d8", "indicator--1cf7440d-b23e-4de6-afde-14026c82644b", "indicator--72447a38-871b-4a32-876f-002b28c9f4c2", "indicator--46f2f8df-8ae0-45a9-b768-c679381d583f", "indicator--2efbdcb1-17c9-4120-b1aa-c43a4f805df5", "indicator--f57c1348-919d-48ef-980a-b0e9600bf840", "indicator--5a9b0f34-172f-412c-8110-69d431cd86f2", "indicator--ff5fa921-c7ce-45d0-a088-a9418c1d97dd", "indicator--66cb7ed4-2510-4e33-9487-7a521a11fa3f", "indicator--793ad71a-41fb-4916-98d0-bdf2be616cb5", "indicator--cc0e4599-530c-471d-8e17-b0b86dbcef72", "indicator--d2e39509-5808-480d-ad8c-a03fea051017", "indicator--d6e68ae2-f701-40c6-be13-ff06cad5e220", "indicator--0330c63c-b8ff-439f-a4c5-d58847265096", "indicator--6c19dc7c-16f9-4196-a218-21a2d804f888", "indicator--e41110b3-0634-4e88-9dcf-ae79f3f9902e", "indicator--4436136e-fe7c-4c4c-9386-02a2a246862a", "indicator--f9a57b0e-5ac9-498f-936b-bf62ffac04ce", "indicator--27101feb-3442-4315-a286-031d1b7d4fb0", "indicator--41d10002-3db9-4c6b-a55a-43b913dbcac3", "indicator--2d61d2b2-4036-4ddd-a87c-4ab4d349082b", "indicator--a14ade18-826e-44b9-b311-646554abc4df", "indicator--496186fd-5ef2-4f30-9911-b0ce5992e304", "indicator--a560605d-f660-4b9e-8227-361eb673f0dd", "indicator--195f9675-da41-4ffc-871e-2449e30d731e", "indicator--7db03ce1-e9cc-4b78-b9eb-68902577a359", "indicator--686f6a9d-30e8-410c-a3bd-6f0bca10dd68", "indicator--c6da68e8-352c-4232-91d4-0e5aee5d45e8", "indicator--68141e35-c827-422d-b5c3-c81eb232ef5e", "indicator--f69444fe-4996-4fe0-88c0-5f9f33921a7a", "indicator--50175ad1-45ff-49f0-959c-7009adb433e1", "indicator--fe4c0932-0720-4963-9c53-8691148b0013", "indicator--42f3de01-b531-42c9-b0b0-64e44a691ec9", "indicator--50e848c9-774a-41af-882d-8980497a17e0", "indicator--dd5c6539-c751-4a11-a226-f5c7f0a96ecb", "indicator--83ce6b31-8767-4acd-a081-ffc527c2bc1e", "indicator--b8f9658a-d3c9-4ba6-9d2f-54601620848e", "indicator--1962313c-488d-4994-9162-50e72bb7ca73", "indicator--a69386db-42f5-475b-baca-17d5fbcbe2b9", "indicator--a8f0a413-e150-4521-840d-5fb34141e0b6", "indicator--e55084b2-a05b-4830-ad5f-04ed78342d98", "indicator--352d728b-5607-43ef-81af-521906f1eb31", "indicator--d55cdb1c-d995-4436-beb8-bbd6ac6250ff", "indicator--c7c779f2-6f93-4d23-ada0-f98a18420c44", "indicator--f74e92c3-db83-4751-af59-37071fd45e7d", "indicator--7856e5a0-67a2-4e93-93c0-0ed47bb0c317", "indicator--dbcd27c1-00f4-4276-913e-89b95909119d", "indicator--3c8549ad-c97e-48d7-8d99-5f251543f5b9", "indicator--13d837f8-1c90-4029-b81a-39e1246d7f22", "indicator--1c0afd63-e7e4-4365-b0b5-a88d5ffa08a3", "indicator--b7ed4710-5eb5-4b71-8e1f-aefade90e5b1", "indicator--ac28f152-a8a7-4ce2-847c-b6f02f2bad5f", "indicator--07660088-2e1f-4024-85d3-52ddded33e4d", "indicator--560bee51-93d9-4190-9ad9-2ff41d4bc898", "indicator--f9eaeb2b-6eb8-48d2-9151-e07297429ec9", "indicator--d135ff9f-e164-4e4e-9551-234821640cc7", "indicator--bbeba8dc-30a3-469b-bac0-7baae512ad96", "indicator--c1edce49-0d5d-4649-9c93-f4c8e4fefb20", "indicator--5743b847-e000-46ad-914f-3ce28668ccc5", "indicator--15d436f8-bae6-4643-af0a-cbc3614e0ec5", "indicator--e39a9e37-9773-4e2f-801c-bc18d54f8ccb", "indicator--8860e4d8-b3b2-4ac9-b2ef-24d18757ce59", "indicator--4d3f417f-1d2d-4ce5-9fb8-5d49b1ed2664", "indicator--531360d0-04a6-499c-a03c-f32250e0fc18", "indicator--7f19f026-020a-4db5-b16c-90b8aa93a23b", "indicator--4b7c2cad-23fa-4364-bede-e2f1c6600e8e", "indicator--abff44c0-9410-41df-b4a7-ab51b6d6dc82", "indicator--0287a6c6-1588-43b1-afb5-a3609dd14cc9", "indicator--a922eb74-287b-49e3-b970-715a2ad75798", "indicator--eb46efb2-00de-470f-a3a5-29f677eaea72", "indicator--3e197229-d2a4-4b77-90c5-3cfd6cb9c3bc", "indicator--669ba271-8ccf-4245-9532-5cdaa3860ff2", "indicator--aa0b6263-6b2f-4275-bd9e-b0067f6a1ebd", "indicator--11358002-3d30-4105-9ff1-54d7f3f8a6cb", "indicator--930cba65-4e24-489e-bc49-2df39aff49ce", "indicator--3fb33d26-10b8-42dc-9e8e-d6fae57aeb26", "indicator--f5d5a2be-a524-4f1a-a21d-626833ec2cc4", "indicator--3c65ec26-96be-4766-af7d-a289bc580ef2", "indicator--9d7ff325-f55e-4a45-9aa0-49e1ac6941ff", "indicator--76673a22-a37e-485b-98eb-c619e5c00101", "indicator--a535d233-c0c7-45c4-b607-233a69a60f2d", "indicator--14524536-a63c-46bb-9858-b08180e4b75f", "indicator--4018c94d-9002-4fb2-af30-14c05f42e467", "indicator--1d71c39d-76d0-4ba3-b523-dc31343d660f", "indicator--fd740f47-ca11-42b1-92aa-0e8b07b0772c", "indicator--842339d4-c4d1-4a28-a628-c111d12abc61", "indicator--bd414a71-00fd-4dfa-9e53-e80315d32aef", "indicator--00497233-83f3-4fb0-99fe-f9a8be42d0f3", "indicator--30748c57-9dc5-428a-9521-7787aea7e630", "indicator--08601e7a-b7c8-4bd0-95a4-2047d54cee01", "indicator--7b5332e9-2292-410d-8afa-13f0dfd1c692", "indicator--8618d6a7-0908-4a5c-9d33-f60edd81c843", "indicator--3c5f8ca8-b497-401d-ba11-dc880ae6dbe7", "indicator--3a569a6d-8208-4d88-9dc5-c0b14dafb917", "indicator--1f181e01-d77e-4cb3-bcef-604170b5bcb9", "indicator--56620b5e-dfe3-4838-808d-a2bbb72e0dc5", "indicator--f346d560-fd3b-40e2-b6b4-400d5a440625", "indicator--7e816e3c-88a3-4b14-98f9-3e0e3b8c38eb", "indicator--df0998e4-9632-4c26-b6a3-17a5ef472826", "indicator--3a01854a-aff4-4e39-9677-185a3d88ca90", "indicator--52cef2d6-9ee9-41fb-8db5-d25f1c99c387", "indicator--b8a8c9dd-6e8b-4b36-90f9-afc13bab2d76", "indicator--615ede92-cc1f-4a95-893b-02bf97315fcd", "indicator--dc97bce3-d792-4ec2-9cbf-5bd3084b542e", "indicator--da263371-e8c1-4e86-9c00-2e743dcfae2f", "indicator--9d0054f3-5c37-46ab-966d-bbb30349c307", "indicator--c474e6e3-d692-44f6-9ae6-de835599cb78", "indicator--d11c06a7-fd1b-48ad-8d33-6b854c918bda", "indicator--c188ac5a-39e4-4ddb-aa1d-3eb22a89d437", "indicator--c4b72fda-5f99-405c-a1e0-c0492c084057", "indicator--3b75a91e-0279-40e1-b2d9-7e12780736c8", "indicator--4c882545-42f1-4187-90e9-e57dd687bf4e", "indicator--6a77b2f4-9561-4fd7-b600-d4f3d3730060", "indicator--b94cd9b5-1432-413c-97ca-2cf514058b2f", "indicator--3778349b-db18-47a1-9b63-5888dd080ed3", "indicator--c0c6befa-c0c8-44c6-9db8-bf220e4a2442", "indicator--0607965f-5d95-4cb9-ba9b-6579735e96ea", "indicator--6f4aeff3-fb39-4cda-adf2-2def73cde26d", "indicator--785c8419-66ef-4a34-a6d9-1c37a9852edb", "indicator--e2e3e95c-b686-4980-b072-c31ef33d8759", "indicator--7c11d578-1779-401c-a418-7db24a010e1b", "indicator--033cee23-b275-4927-a93d-422cae81c59a", "indicator--cfcd3aed-4b26-4858-a0eb-e7ca0bdb7679", "indicator--0a806a77-9072-4e60-8141-83bf03671298", "indicator--53e8814b-1959-45ed-8d92-8d7d527c224b", "indicator--c6844941-e178-4e39-aa32-53158b68e0e6", "indicator--316cb7bf-eb2b-4956-8a47-a1dac30c7381", "indicator--bb55f51a-756f-43a4-96c7-0dd3ba97e738", "indicator--9aa97985-7df4-475f-8653-ea852ad29f10", "indicator--e378b246-7c20-4ea2-91f5-ee6ee80e6b32", "indicator--b8228421-e3b4-49bc-bf0f-b31c3302d196", "indicator--00daa4cf-f2ff-4110-aeaf-da27d101594b", "indicator--7cb046af-6921-4e7a-81c3-b6c604ec215a", "indicator--3623d655-2127-4ac8-b18c-780d840f36c5", "indicator--a85bd34b-84c5-49e4-b3df-0a3e266d6a5f", "indicator--88dac8b6-a0e3-4dc4-b844-82866a6ccff8", "indicator--03a30282-f7ff-4c54-8025-fe120705fded", "indicator--7ed1526b-1fb2-4671-b35e-9a3337d5cd7c", "indicator--ef3a172e-1aa9-496c-a287-1b3e1fb0718b", "indicator--1793c5c8-8d41-40e9-8893-ba6a0821d79e", "indicator--99653fcb-2ef8-4223-b067-5ac3b0e6e72b", "indicator--e6723742-1b0f-46a9-a112-5fc4758e7601", "indicator--521358fa-0a5b-47c0-bc7f-82f7c8d64791", "indicator--e44bc020-9377-4ad1-a34e-605d4b46cb95", "indicator--f2c52722-e14c-4730-a80c-afa02029d302", "indicator--1746dc06-7a88-48c0-bbe5-00d6d0163538", "indicator--703571e1-3f88-44bb-909f-6d49c6fb56b4", "indicator--cc1eeed5-a54b-4b43-9c3c-9e568114c927", "indicator--9380b520-ee11-4dc9-8ea4-85945c6a1f79", "indicator--e5b93c20-8761-4105-aa7a-725554e81178", "indicator--aeff8532-3231-4faf-bb5c-6454b469c0a8", "indicator--ed41b922-884e-4f0b-a906-3d60f6797661", "indicator--757be3ff-2fd7-4dc9-8672-67974413ef1c", "indicator--91c6e38a-915d-4f4a-b0ba-31ef880fd1d8", "indicator--b8616548-da30-41e0-b2fa-60bff51b67a6", "indicator--dbbac9e5-2241-41c8-bb0d-a22f13784dff", "indicator--626af175-969e-46a5-a8d2-d24e2518a3d4", "indicator--a0fb9547-c4dd-4683-8fb9-8ed9ed642c8e", "indicator--6ff0d160-629c-4fed-bd3e-c4d67932674f", "indicator--14b86ff0-5422-4ee6-9744-a874e38ae1d9", "indicator--8ea03aee-48d3-4c44-aff2-a8f847116ca2", "indicator--2673b78c-7e4c-4b34-a958-83fbe39cbe8a", "indicator--4d9cc29b-5ff5-4ac1-bf69-dfc8494d5381", "indicator--86681767-7ff6-4279-9b5a-1ed8c56a5f13", "indicator--d502008d-9319-436d-87bc-47486932f52d", "indicator--15dd0f78-9ae1-445e-8dcc-31f26ececce6", "indicator--a9dabb47-ad09-4e2e-9759-52c0e022b9bd", "indicator--c7213d47-1bf8-4ad8-add6-fb38dd558418", "indicator--c6fa1c34-1d2d-4b40-8438-9bae20f9fb83", "indicator--3ff861c2-3c8e-4dae-bd98-1a72117f43ef", "indicator--a26ed99e-8579-4f3b-8fce-e120b956551d", "indicator--50b71da9-40c1-46d4-b9e9-ba9f918e7f19", "indicator--6a68fe9c-574c-45cd-84c2-14424e82fa35", "indicator--b52fe188-f300-4242-8960-215d2d6776ab", "indicator--fe0ee0f6-d168-4074-90a7-91f1e2b12f47", "indicator--44bfd593-eecb-475f-a1e3-465b9d4c4bdd", "indicator--61091aa4-cfab-4d70-aa9c-b0d3bfa55108", "indicator--814b74e2-c19d-426d-b03a-3276535e5e28", "indicator--069d3409-740d-4c95-8599-0ebd6874e21d", "indicator--d2231350-69cd-4983-8e35-e82b75cefc28", "indicator--cac79e14-ebd6-48ee-a65f-2ef16849200e", "indicator--14486fbd-df18-4ff8-9285-87ddc1cfa2d5", "indicator--5c468e81-e8e3-4890-a374-cf5d6658374f", "indicator--064af5d0-a900-4b85-962e-df56c74aec0e", "indicator--1159e895-cf6f-4e9a-8954-99b3c3bed9a2", "indicator--4a64d47f-224c-4f0b-abd1-a0ee191ff7bd", "indicator--750ff906-ced4-4691-9cb9-ce77aeea1639", "indicator--629c1873-725f-4908-86ea-7ae4c5329457", "indicator--776553bf-a8e0-4cdb-9da1-56d95903e302", "indicator--835b68ac-efdd-4d37-b4f7-04969c6d2861", "indicator--5472cc3c-a9d6-4d8b-8562-fbc90d08e136", "indicator--db43f7b1-2b27-4c4c-9e78-0d1dbdc52969", "indicator--c042559d-a827-4634-94cf-3c22b832af95", "indicator--1166a4a7-82dd-4baa-a8de-e529c2f97abc", "indicator--0867e4ee-7491-458e-80bb-8968eae75a0c", "indicator--0b4161d6-b2d1-4f37-bd6f-590ece4bc58d", "indicator--598306a4-6773-474d-95b4-b34777283339", "indicator--adba6544-7a33-4afa-8be3-ce20f1667089", "indicator--3acb692c-f98b-42e4-b032-5a52f5592bd3", "indicator--2cfc9655-6d2e-405d-8411-4844ef79f647", "indicator--7217fabc-4ed6-4ef8-a782-46421a366bd2", "indicator--6904018e-4660-48f5-8906-bd5009ff1c6a", "indicator--d6857bbb-ff78-4dd1-86e6-aa0b303bd393", "indicator--466e2a34-6b51-4b37-b344-013ad88329bf", "indicator--b065a58b-1bce-4caa-98bb-d04dd608dcf4", "indicator--0c745942-59b0-4eb0-9c32-604a67096be8", "indicator--1e64754c-8de2-4c0c-889c-3fda40875ef1", "indicator--b690ced2-4e1e-461d-9e89-f95a6465d916", "indicator--b8e21c86-3f86-41ce-a258-0481e1a90ab3", "indicator--b4cfb867-be4d-48de-9562-8d5193887706", "indicator--851ac744-d796-485a-b787-869e5fcf0548", "indicator--166205a0-e624-4bf9-9e55-96f491722fff", "indicator--ace23bbd-3069-4e33-b7bf-ccb1480cc220", "indicator--89211e36-a640-454f-8b63-440fe2cda497", "indicator--e351cecd-da0f-40bd-a13e-a925d782ca05", "indicator--38d4d211-748b-4919-aa53-2816faab2a10", "indicator--5e2a04a9-d857-4136-af49-c71692d858a5", "indicator--a207a5b5-7762-488c-a6c7-f53f460be8c4", "indicator--8a5610d4-95bb-4673-9c32-21b395d2ea8e", "indicator--ad328bd4-4c5e-4ff3-aead-90babb21dfd9", "indicator--51f14a5f-7b44-4f41-946d-1127172571c6", "indicator--46c75a0c-ba20-4ce1-8df8-f7dab4bd8828", "indicator--baf6a6fb-6057-44df-ad05-b957cadda29b", "indicator--026b1b8d-ebf0-4584-b750-234f758e47bf", "indicator--a46a5d65-a29b-4c86-86a1-0c5caea509f1", "indicator--89d22cd8-177e-4fc8-8c2c-45ffd25d3d5f", "indicator--9746390a-70d8-409e-bacb-7af49648bdb8", "indicator--f065d774-82c1-4864-b583-7801da108b31", "indicator--d667d23e-5889-4a7b-9130-6233ff6f3f6a", "indicator--f4144137-5181-45f5-b62c-1ef8c1778d7f", "indicator--76f910d9-5d6c-4e90-a41d-8dd14b698f09", "indicator--32728d39-664b-4f2d-8dc0-22a82b42e744", "indicator--7167690d-f9f7-4c3b-b0b6-13ddb7fb9d03", "indicator--df97eddf-b949-4bd2-8b76-aa1e1651705f", "indicator--b27b4292-b77a-4361-a706-7294cf663740", "indicator--cae982cc-6fa8-4338-8a4a-66fc87709068", "indicator--ae9c9a6b-4ec4-4c4f-a07c-0c2aa272af15", "indicator--71f55e12-944d-4ee4-84e2-894305f3ab0d", "indicator--a455cb07-192a-42e6-b6d0-004733b0ac03", "indicator--2b3fed92-9727-4cea-b947-da371c744f9d", "indicator--fba3e129-6945-4a50-a62b-026a6f559847", "indicator--949e6628-2511-425a-b221-6d5c5aa46a34", "indicator--e80badf8-e69c-4a12-9404-7c0759a9d167", "indicator--5aa3359f-db31-460f-8d63-771667096516", "indicator--0ee2c6e7-a60a-452d-9503-a609fe1285ca", "indicator--bc759e7a-9156-4015-87c3-6d0412e44f44", "indicator--ada449da-3c92-443c-a02f-0c14e09a1846", "indicator--31efe0f7-c4f0-47c0-96a1-b954fe48b3ce", "indicator--5b426ab6-3b40-44ad-8a0e-c2f459b1d5f3", "indicator--d49003bd-1f2b-44f6-9d1e-ac6a1a63aaf4", "indicator--41032e9c-8370-4554-a330-9177203b338b", "indicator--d9173c16-73bb-487e-b17b-361991fcfde1", "indicator--7b954173-73e8-4001-ae7f-6ba95ef2c369", "indicator--87424114-76d7-4620-892f-3573adbc76c0", "indicator--dde1e137-4938-487b-b3a7-d1ea8d96a2c7", "indicator--14455e24-eb20-4924-91b1-323ae0903dbf", "indicator--03f0d183-a20f-46e8-b540-4bfaf118b640", "indicator--4beac4b4-d2a5-4d2d-8242-8a8e235245ff", "indicator--9db40612-d52f-409b-8303-6f2119fcc5f6", "indicator--151a17ce-dff2-436e-96db-80382488b235", "indicator--8e1c20c5-8835-4d9e-b262-2d1b8bb0cbdd", "indicator--8429ba28-07a3-4e2e-b2e3-0aeaf280693e", "indicator--def4ba61-764c-4833-bcde-fc1d17ca0b53", "indicator--6adf3281-3cb5-4ee7-a6bc-43c94455da87", "indicator--41607efa-c4dc-4957-9c2a-be5de110fd59", "indicator--6a70c312-82d8-47e3-9621-3717b27e3451", "indicator--60dc25ad-551f-4217-a457-ade3f8ef22d4", "indicator--8b1c4548-5055-4734-9dd1-7117ea41aa3f", "indicator--2144a581-b1e2-4cc3-9e05-917748ad4770", "indicator--f4f06b87-8c13-415a-91eb-5562eb9f9d82", "indicator--70ebe9b1-f5f0-4b03-ae07-d88dfc257329", "indicator--4659fd23-9027-4b42-b9d4-370a8c2ea049", "indicator--f0ec2c24-04f3-4afc-a668-38b512c5611e", "indicator--3d7d1da9-f65c-4388-8646-a200117dad49", "indicator--8de7c561-e5fc-44c5-a762-4e950ba8124e", "indicator--40a2715e-a574-4ba9-b855-d728cbbcdae1", "indicator--ec2e819f-f345-4ec3-b59e-12e276b34ca1", "indicator--e47cc3b0-a881-4f28-843c-55f344fff21d", "indicator--f4029521-236d-472a-a221-bfb5e399c171", "indicator--4ce777c8-31fa-4fe3-a2ca-ad3626c2b4d5", "indicator--417e1028-8e34-4bc5-b31e-bb60dc537de3", "indicator--5a68d3a1-ef9d-4339-9dad-00515d20f13a", "indicator--e4cba851-5077-4fc9-90e7-ac985fc4dcec", "indicator--e3541022-89fc-4e38-86d3-1006054a1cdf", "indicator--4c6d8361-1d85-4fa8-b3f3-fe8a4bb81fa1", "indicator--c6af099f-1496-4821-b0e0-9a39337e5baf", "indicator--d08cfba8-a711-4f77-ad0a-c465f164e6e4", "indicator--efbf91ef-fcd1-4631-9f26-78262e5701a3", "indicator--6899a338-8586-4e84-8019-6b4b845a17f2", "indicator--71b09c4b-9817-4f86-b8d5-2743c98b7e06", "indicator--55aa3047-837e-43ec-97d2-553eab88a5cc", "indicator--ffa435e6-afd5-4382-b177-6a4d68ee72be", "indicator--39559dde-8825-442e-9e68-51071c5211ab", "indicator--fdd5f914-807e-4da3-9822-fc327fa08d74", "indicator--e3fe9162-7c50-4df8-8fad-f8f3c8c060f6", "indicator--3c86b3cb-a586-426b-aa77-54e29656546e", "indicator--940ac1fc-84c4-4e7a-9033-d5d556bd1918", "indicator--0e26b317-b7c3-4da9-89ad-436f96bda736", "indicator--52f3d2e1-ee16-4834-a61d-5708b61bfc2d", "indicator--3f86c24a-9c8d-4921-bbd4-5d6224b38d78", "indicator--fa04fac5-f9f9-473a-8fd3-e14357d5a384", "indicator--6f221767-28fc-494f-a9ae-dc56ec802a9a", "indicator--b90399dc-5446-4a4c-b8cd-fad673f063de", "indicator--e32b2154-08c2-4315-9061-e8a4aff71e12", "indicator--019cd511-45db-4e2d-8d32-a85b1a8d0645", "indicator--c095dd69-30ba-4ef4-ad4e-fa54a5cfbaad", "indicator--84dd9f12-dff8-4bf2-8601-ec3a8fc8dfae", "indicator--45edc7cb-89de-45b0-a510-e228f3f254da", "indicator--63cf6134-3a31-4d08-9682-f6aec774a226", "indicator--365340cf-e495-4a29-ae27-1fba6e47d54a", "indicator--2ceec511-7b1c-4166-bcaa-269882628d6b", "indicator--e15d3846-8281-4cfb-9745-42a898a223e1", "indicator--bcac7a12-4696-4f46-addb-bcff027b366a", "indicator--46fa1096-5c73-42e2-878c-5ae05aa61df1", "indicator--4dce6ba9-3ece-45ad-933e-539e3bd61d0a", "indicator--51188a6f-8b4d-4ff2-adde-6031e4d432a8", "indicator--e80c84f6-bae5-4c70-8476-b56445962b2e", "indicator--db507f25-3119-4275-afac-78f79695a2c1", "indicator--85d1359a-11cf-426b-ac2a-b5107ac7a7ab", "indicator--a09225d4-6997-414d-bc11-4046e3271579", "indicator--8ed01490-f7a3-4a42-ace1-7bada5f75d60", "indicator--bd9d654f-3af6-4b18-a96d-afd2fb47bd66", "indicator--74ec1a41-1903-4f96-a477-db1b960dc6e3", "indicator--f8296b42-9642-4276-a16c-4dd257348b67", "indicator--17d38347-e6c5-475f-be0b-d1f4d7b17a59", "indicator--0627c121-35f7-4438-b947-9df4459dc0fa", "indicator--f1a05f5e-ade4-47d0-802b-7b2fb0975d3c", "indicator--21d907a4-2a10-4bce-877d-b4635079c5f2", "indicator--252d3638-e84f-4428-b182-903c17dbe87d", "indicator--b5aefd08-0e5d-43b5-a117-e2b562d9f097", "indicator--43bddbe6-88a9-41ad-8ef0-0f3784902330", "indicator--041df810-b775-442e-a666-cac219071ad8", "indicator--23ee3ce2-fdd4-42c8-b80a-12191099e5e6", "indicator--a52134fd-5b22-4441-82d7-6fa4c9f5d5d3", "indicator--186dcc8a-bf36-4d95-a59b-5df4542450db", "indicator--bf3c640c-32cd-4a5b-8919-49f448bdc684", "indicator--990b3633-cf7d-4fd4-ae08-c35e54fa3206", "indicator--67985dff-f9d0-42ad-a6c9-18e1cf68a3ee", "indicator--b81fb5cf-9896-4f4a-baea-048deb04d03c", "indicator--c7344cd0-e0b3-43ea-a83e-243c88e4a8f3", "indicator--127ee514-b169-4057-8986-a64445d3d3d4", "indicator--1d34925e-b1cc-4ecc-b7f6-13293a5ea58e", "indicator--dce32b34-102f-4bf3-8470-775ee4746f0c", "indicator--e4e442f3-e93d-427f-aedf-25d1ade215fe", "indicator--703df276-8630-4b38-afe9-97024a7ca689", "indicator--cf20f06a-7996-4e1d-b87a-3d05b5fc799a", "indicator--9ce35c80-f3c7-452d-8011-65492a27d59a", "indicator--c9ff8791-bac0-44e7-88c9-79621638d411", "indicator--fdb1b48a-62c4-4c27-a0ba-958550c4219d", "indicator--cb35c894-2b2c-4d88-9ded-50cd7a92bb38", "indicator--cfa2b8d7-f049-48f0-bd88-5f6c77e3ad31", "indicator--7b3eb245-5bfe-478b-bff7-c87109ac1417", "indicator--521aec8c-5829-4c0c-a7f6-4a43760fcec0", "indicator--9f6d1813-29b8-4069-8487-8099373079db", "indicator--c423214b-7814-4b14-a3b4-3b32c99f9ae3", "indicator--827ddc47-ef24-4640-b5e1-964c8bc71ea5", "indicator--8833d6e9-c4eb-4c96-9ab8-10c2ce820557", "indicator--27af5c71-67cd-49d5-a6f7-c1e5fa066073", "indicator--4dcff4ef-3415-475a-a511-ac53565318c6", "indicator--efc1448a-f735-4bc5-bd87-477fc9e4b667", "indicator--0e7c2567-3b20-4173-8bb2-05262bfdabf2", "indicator--d2a4c77d-d0c9-47f7-b3b2-7835af79bbf6", "indicator--58736bd4-8294-4e5e-82dc-08cd2259c09c", "indicator--89a47247-f622-48cb-9e23-f1cdfc7f3f8e", "indicator--015a7ecc-1187-4cce-a6fa-21565c5305d5", "indicator--34dc86ba-377e-45b3-b6af-8684f1f6bb28", "indicator--9920da2c-2fff-443d-8391-fd0ee7355f03", "indicator--8afd8a11-8712-4de1-88b5-bf8a2d43947a", "indicator--07ec1e6c-cfb8-45e3-91cd-75c6b96af8cb", "indicator--4514af2b-9b93-43dd-8d72-c904337c7782", "indicator--5e7fef20-ff55-4c20-be4a-d114b836b050", "indicator--638a807c-6c47-4eb7-81fa-50687ba29073", "indicator--d561f0fc-f4db-4f4b-850a-56da7c3d3901", "indicator--3d894733-419e-4581-a1a5-b019eb734969", "indicator--54634480-755d-4b2a-b983-bd50565b257b", "indicator--ce9cf7ed-a269-4dab-9fd7-ad582cf8dc60", "indicator--1b6182ad-d69c-4175-aa48-2ae35cf5e32b", "indicator--f8ee3371-83e3-4dbe-9fd1-db4e0779e1b9", "indicator--7c900dd3-01d3-4049-8dde-9a67d2b3c74f", "indicator--4ca838e6-6e32-404f-8d20-bb255587af08", "indicator--83a9f930-1853-4579-bd66-ad4c5a9cc8c7", "indicator--211ee587-073d-4cdc-ad10-96487a83fb34", "indicator--5012246b-1c88-4c4b-beee-217511312cf1", "indicator--5f2c6337-8e42-4c1c-af45-822f1d816436", "indicator--0aa9b1a5-ec00-426e-b0d9-c6ab4678bed0", "indicator--816597af-4784-441f-94ce-3c66141cd6e8", "indicator--bf832ae8-3832-4974-8b7a-5b3fa9b29628", "indicator--743639a4-722c-4100-8fe5-f9f412a39c8a", "indicator--065581fd-5ffb-4b08-928f-cd2ddabdaa84", "indicator--464ab512-3535-4bdb-a309-4869b889a713", "indicator--f75f6f34-693b-4a2a-a984-e59e32ccc117", "indicator--a853eee5-ac09-4829-8617-33e45e594c9a", "indicator--c4473b99-dfa3-4f56-b9fe-c3212d438758", "indicator--7cc8bd6f-c361-4be7-9f76-de915007547b", "indicator--2201dda2-f5aa-4ad7-9b7a-c7dbd53e33f8", "indicator--e0641324-0c32-46f4-8a59-6f07b9ae3ec6", "indicator--7a593ad3-5d57-4bdb-99fc-08ba4d3b73e6", "indicator--d64c22c5-6c8e-4935-bef9-6b2b30ec0ce3", "indicator--a16246c3-bb41-445f-b48d-3cfbdbda7d93", "indicator--1ae8fd1e-e533-49e6-b3ab-2ceb1bc7c4dd", "indicator--db259d36-b902-4767-b840-234daa62a779", "indicator--83686a3e-4ab5-434d-958b-cf99d7a17190", "indicator--8bfd7d41-2b8d-4482-b3cd-07d89a12c63b", "indicator--65aeec2f-a5d0-4afe-9e8f-0115a155409e", "indicator--43551f38-3068-4332-97b8-2bfd3bbb2f62", "indicator--7aaed31e-0d58-4130-9e34-a128a4cd438c", "indicator--bbfebc77-9e4d-49cc-bfc1-094dbb628e58", "indicator--6396334d-5cd3-4995-b422-842692f7b4a8", "indicator--b14c86c5-028a-4ebb-a265-5ffcfb343d86", "indicator--9e919207-c85b-4925-8c82-56dfaf1ee1cd", "indicator--1a375df6-83ca-4364-b2aa-32dd1a4b9420", "indicator--ad97bf6e-55e2-4774-898b-57a6b6db9508", "indicator--69b3deca-a701-451a-bd95-c779171b9d56", "indicator--e73f7f77-798b-47a8-b5c6-132cb52af8bf", "indicator--93151b9e-0beb-468d-b164-ee1d55ff31a0", "indicator--770e50b1-4c2c-411c-a180-efca8ff554c6", "indicator--e2c9b862-9448-4528-8fb1-7341079ab851", "indicator--22d7a22f-e31d-4e59-9cc3-a29e5de777b6", "indicator--7023818f-6b4f-4ac2-8ba1-60ab13a6e984", "indicator--27d32f6c-b6e4-4f8c-b5ba-483171acfa31", "indicator--368ebe76-f97e-4ecd-a1d8-ead55107c3d2", "indicator--77332965-8a0a-4afb-8b6b-b539fa685809", "indicator--8f0efe41-2dbc-4a2e-8ae3-9e77b348939d", "indicator--e4b1dcff-a518-4c45-bd00-d5aa8f09c563", "indicator--4eb67ec7-7221-4bcf-9520-0a426441882d", "indicator--fb3e5848-a702-4b9c-9ccc-7e71add290e4", "indicator--2792da51-aea1-45e7-8091-2d2e08637f8d", "indicator--ec501f94-7cba-4a61-b246-383be834ac48", "indicator--821b15fa-7a9f-4171-92ad-b50099adcd3a", "indicator--5e61b9ea-7759-494a-b5d5-b27bf553357a", "indicator--9fe517cf-6bbe-49ba-bdae-f4290a8b4ef2", "indicator--3025386c-9970-428c-978d-28529f82352e", "indicator--93283c4d-0df8-4e70-b066-47535f8268bf", "indicator--3f1103cc-0712-48b1-9220-91b8551261bf", "indicator--00e2b0a8-cecd-4d13-be87-45c94aea097c", "indicator--dea24b63-d65e-4299-88a4-69eef26225d0", "indicator--7f51bbbe-470e-47a2-8ae0-86b5b846f2bd", "indicator--e4f4cbd6-ba08-416e-b034-b245f095856f", "indicator--52b100f8-eb90-45cd-a0dd-7994578aa852", "indicator--305178c8-833b-4702-88fb-59f351daeb31", "indicator--29ffc107-82a4-45f7-9e4f-b548208e00b7", "indicator--4e6df4a7-2960-4078-ba5d-76bc67d146a3", "indicator--94176eca-3eb3-4a11-853f-c900c4ed25e0", "indicator--96488fa8-b1ec-4f9f-bc8b-243072e7c036", "indicator--47ea4c21-f0a4-4e71-bdad-f84bcfd70633", "indicator--0352e95d-6e86-4705-938f-e4dc39bfece8", "indicator--69f7045b-6cd3-49ae-98a8-b881e7d0296f", "indicator--b1eecc41-04f7-42d1-85c0-047b33e89cec", "indicator--2cf67286-2aa8-42ce-a0f8-d482b4fcbe4b", "indicator--723fb47b-3eb3-41d5-9b8e-04e1e06e2919", "indicator--d36019b7-a6ba-49df-bfbe-5235535d6aa0", "indicator--6e729499-c2e8-4274-aa35-1d47ba01b931", "indicator--28967f52-72be-497f-8ed3-919853d51579", "indicator--b6cb7fea-7ed3-4af9-99ae-78c3aa06b85b", "indicator--933c7cf2-2639-40f7-9d15-ba0bf1ccf733", "indicator--d5838332-d0bb-49f9-a243-b0c6da23b985", "indicator--7389caf0-b8c2-4cba-a382-d675710ac644", "indicator--2226aa0f-b999-4e1b-86d1-f4c21121a4e4", "indicator--db0bbbc9-f28b-4487-8c2e-d97a5f7194c2", "indicator--fa379b36-e158-4a51-b365-a89a79026799", "indicator--52e89406-6056-4acf-8e22-d8b05cf81dd2", "indicator--9ea567b8-257b-45ee-bfe3-0e1c69574cb3", "indicator--d9a355e8-3d43-49d0-a119-c05c809854c3", "indicator--6d3ba100-2535-4d0e-9df7-550b08038563", "indicator--72c450ab-ff78-4ad2-b61d-e238b1c6b1f2", "indicator--dad8a00e-7684-4abe-88d4-69036626dded", "indicator--1ef6fe67-08bc-4b5c-99b5-402477daa05f", "indicator--86d82399-7141-438b-a2bd-967a92e37ba4", "indicator--5f662813-d0fa-4985-b080-f3a2e78b5da6", "indicator--8eb4322e-a0a4-4c20-9be1-fe58883d2571", "indicator--5730067f-c64b-45ff-b02a-e2c978ef861a", "indicator--e27f5f20-bd9e-4992-99bd-4c92ca510951", "indicator--b06a0752-1547-4dd4-b781-0356d4e0aaac", "indicator--fd75e085-39a9-40da-b0f9-d13e8e00357d", "indicator--9e402b80-76bf-45d4-952f-8f2f6159d0a3", "indicator--a3c14c1a-fe86-4b82-aa1a-d7e6fb2e2c0a", "indicator--e4256127-1486-49b3-ad1e-d76184309513", "indicator--b90c80ec-ecef-488e-aac6-ee9986c25f9b", "indicator--3a6041c8-dded-4028-9b9c-4d39997c6b86", "indicator--3835d48a-47cd-41bf-b6f3-3767983766da", "indicator--313649f0-e02b-40d4-8f29-502eac0c1ed7", "indicator--b4d54396-c23f-4532-8540-acbd182d6f14", "indicator--a8b0092c-21eb-44c5-9558-c3c08b4e7e9f", "indicator--eb91421d-fcfa-4ddc-abad-6b1acb91e9b7", "indicator--b138f36f-6f5f-452c-8f56-1dcf6e56704d", "indicator--6571c906-29c8-4246-b8fe-171cf323926d", "indicator--7a9a26d1-2cb8-426b-9580-696363a811dd", "indicator--3688310c-77e4-41d5-bf28-cd4461252213", "indicator--1dd79577-4dd6-46ec-88c3-8bb9f36f549d", "indicator--dabae1dc-5822-4325-947a-66b6dc1ef333", "indicator--4671a3c6-a1d5-4f20-803c-8b06a22bef75", "indicator--317d1c1f-5582-4e54-8e5e-6ac00a053aee", "indicator--52dde1fb-09ed-4657-a5ff-5e9dfaae4ea5", "indicator--d0bf6be5-9821-46c4-ba3a-a9dab546e654", "indicator--09b2d761-38f7-469b-ad8d-253ae5e3af07", "indicator--a0d003c0-6842-44f6-a9c3-6470562d55a4", "indicator--b3656460-ea05-48f7-b21b-0589f779377a", "indicator--a4ff1283-008c-47ef-845c-076522dc940c", "indicator--860290b5-8b15-4aaa-9c0e-84523eb8b8d6", "indicator--74b70d6d-7867-4735-8668-8ccb2a5811c5", "indicator--9f80ee0e-bec2-4593-b1c6-2a45f14c77fe", "indicator--9a4fc233-d3df-40ba-8ac6-0784626a19ec", "indicator--46d7a12f-d607-469d-adb3-5749050948d3", "indicator--4895fcb4-ebc5-4d0a-8043-d973d9d37511", "indicator--4427bba0-7347-47b6-adca-840f26ba210a", "indicator--9b65c907-1568-4f75-9961-73b746cb2b20", "indicator--af1c0682-7496-453e-ba45-0362292ce779", "indicator--d8c33712-ba62-428c-9ff2-6f8150a60b42", "indicator--9443a943-90d7-4789-93b6-b932722f1700", "indicator--1ad8c55d-57a3-4b71-97e5-d595447af7ce", "indicator--4b640337-ab4d-44f4-a85d-190eca44b0e2", "indicator--34720f0e-748c-485a-ac3c-724fdaa9de8f", "indicator--2da48e1f-e371-4f90-ae2e-ccb67fe56708", "indicator--add62379-5036-428d-b42a-8e4c43119d2d", "indicator--2002d7f0-c45f-40f1-93c4-cf5179040acf", "indicator--e44caef4-fc98-43c7-9700-450bb991d946", "indicator--bbf874a2-a7e2-4571-8b4a-d025da22e2cf", "indicator--e8682073-e752-4afa-bdad-cabf363e13bb", "indicator--126cb1c2-9cbc-4169-9532-af89ba3e981e", "indicator--c5c2865f-bb08-48d4-bb3e-8111cebf48a9", "indicator--3ab891a3-242a-4291-8d4f-b9e5a90e458c", "indicator--10b69485-57df-4860-973b-549d6b4cd448", "indicator--2121643e-7b88-4862-bb95-4cf2782cd1fd", "indicator--f712fd34-c36b-4c96-914b-c581f257cf51", "indicator--85473fde-d714-4dfc-bec2-85b05be40653", "indicator--5ba43ce9-70e1-400e-8ad2-e4768c5904bc", "indicator--57490c85-8a4a-4fe2-9914-91835df47f9b", "indicator--ed039208-dbbd-4419-ab8e-f142078abbc2", "indicator--5cb48c21-cbb9-4f46-9e96-75d8ed1fb560", "indicator--8a7117e9-fedb-45ae-9d4c-c8f1a58d6b0e", "indicator--91df85bc-ca98-4743-b45d-06ac5cbb6f18", "indicator--03116766-cb01-47cd-af45-7f718d6482a3", "indicator--48dc1cab-8154-4232-872f-dccf68ce4e98", "indicator--6b8cdd73-7452-4c3a-b509-1bed80fd43b8", "indicator--2830e4bb-8b04-4e5c-bd1c-cd83f8422094", "indicator--f7b7ac87-c194-4bf3-a452-3b44131352e5", "indicator--40d82057-5447-437b-b4ac-322e64f9e761", "indicator--646f15b2-fd19-45a1-8b2d-3eeb6bea1612", "indicator--cdff270f-c422-4907-b7eb-1743a8d7cfdd", "indicator--44b0f225-5bef-4efe-bcac-9e38f1954a32", "indicator--9f6a362a-b7ca-456d-a3d6-c8e69e7e79d9", "indicator--f3fc7b58-35f0-4acb-89de-a109c9eee287", "indicator--87ad3da1-b8dd-4ea5-a4f2-ac001e78f4b7", "indicator--8bb36e2b-d39d-462e-9caa-c18dca5dec6f", "indicator--765ade75-c203-45a4-96af-ac923ef40f47", "indicator--b0730a49-3ca3-4a0d-84b4-09667c61cc1e", "indicator--c715283a-4a47-4d3b-8c57-60ecb357e5ce", "indicator--c1fda85b-c1a1-4295-a36a-0abbae19ff80", "indicator--99f82a26-d446-4ee2-bbb9-a9aeae316be1", "indicator--f707b315-d612-4a32-b03b-443562533db3", "indicator--39987fe5-7691-4992-aeeb-1a71a462de6e", "indicator--0c822886-dd1e-42e4-939d-3b96845ebfdb", "indicator--6943e27d-4d33-454b-a5e3-9ac6e43badf2", "indicator--057c6095-e3c7-4b3e-91e3-658523450866", "indicator--3a064351-16ed-40e7-a690-a5b4b60a270c", "indicator--b9a1f712-0cee-4251-b7c3-b8d01196e80a", "indicator--030e5dac-7807-4eb0-96b8-f359a13efb9d", "indicator--de9ab101-a83f-42c0-a563-413af281845a", "indicator--580add64-4269-430f-9909-ef79e0500968", "indicator--fd84f250-c549-4225-8403-4f6aca056ede", "indicator--b64c9bef-0f59-4a5d-b190-5fc417eadf28", "indicator--050ce547-3038-4baa-9363-1b22e0b2c1d8", "indicator--0e9318f4-a060-494b-9015-bcb52076bc13", "indicator--383947d6-8fa9-4297-980a-2dcff5ef6897", "indicator--2cd2ed12-032c-4468-8bd3-8c8d9ef6a092", "indicator--5345dde3-f0ba-4462-8ac4-31daeddd1cc5", "indicator--d7a4614b-60cd-4c93-b3bd-c1bf8465b6ae", "indicator--564832ad-609b-4552-aff3-8bdbec09dbe1", "indicator--c1bb6277-de1e-4401-bb5a-26229423aaae", "indicator--3de76734-299b-4fc1-8012-6d804f5f789f", "indicator--e5049fb5-8b76-4f09-9e3e-02d2ca939c62", "indicator--5ca1521d-c7d8-4d49-a662-07d0f5f47d22", "indicator--5e48bceb-5cb4-4696-ad46-a34b9f8b76b6", "indicator--bbdf7fd5-c069-45af-ab84-ff8e0b869ec0", "indicator--94b1dca2-3037-4c75-93c9-9dc034c1a3f4", "indicator--bb2630e1-9345-4828-ae42-d3fb74745bff", "indicator--22fb9451-3b16-4c84-a0e9-9d0cb62dc87b", "indicator--95212981-e685-4b18-8f76-a1d9c1c8ae7f", "indicator--e33ce461-4343-4f47-bd58-04e205f6daae", "indicator--ce522d72-6388-4ce4-bcd6-70f5c5c3d634", "indicator--8ff1df6d-79d2-48b9-98ab-3888f731efc8", "indicator--647d0b0a-9009-4a50-b90e-1764787ce156", "indicator--faadf8fe-5ee1-44da-aaeb-fd231822c2b5", "indicator--6eef7ce4-9e4f-4276-b3e2-335b4ff1bbac", "indicator--6780ce8e-e621-47e3-aa26-08e38afdccd3", "indicator--39590d76-6e14-4656-96fa-4f218b0a678d", "indicator--b664b577-413f-47ab-9efe-2ab0a98bf888", "indicator--3293ba2f-5830-417a-8cc2-ce67f3ce0ad2", "indicator--f5edcaad-ebec-42f5-8496-08c02ce0844d", "indicator--c3965fc8-0318-4a97-8b2a-953db6d465fe", "indicator--64bf164d-0995-46cf-84c8-104669eb53fd", "indicator--72917e46-ae65-4a18-a99b-fe40afc5d206", "indicator--25c364cc-d080-49b6-b288-f1768c5dc274", "indicator--017ca285-29ac-48ba-9e9f-ceb06baa8302", "indicator--f5700c08-03f3-473d-b8c9-7e5192ada896", "indicator--a355394c-10f1-4dcc-b040-0a1c069e7846", "indicator--79949f72-e57a-402b-9f2d-3ff275884509", "indicator--1784df3b-a5dd-45c2-bae1-bc3c82ae07b9", "indicator--ec716b45-c6af-4e9b-8686-475bff5638d2", "indicator--6d25f78a-b739-4e41-8ff8-f3f569586633", "indicator--9707ee96-7524-4b53-ba2c-9156633a666a", "indicator--bf02a9a9-884e-4da5-aaf3-9fe2701a602a", "indicator--e513ad3d-0877-4d3f-a6a8-737ce8fa7346", "indicator--5593280d-6fc5-4b2b-9b70-ff8be497740a", "indicator--948d767c-55c1-46bd-8f21-16cc05e5ef2e", "indicator--f0c545f5-2b0a-415f-bf6a-5b39ab1b84ca", "indicator--cef2f3f4-2655-40e0-8d85-f410d28da57a", "indicator--b6b78225-adf3-4586-944b-ccfef16927d7", "indicator--709919c6-c20a-4b0e-920d-8784d6071372", "indicator--b5d99440-7a2b-4dc5-870b-ba6d29660ff8", "indicator--e4736b9b-775b-4662-a386-89098855fe2b", "indicator--c6b9911e-3a38-4d8c-9a87-cf8248179d03", "indicator--22d19e56-8154-437c-bb32-a04494d47aef", "indicator--b142403f-70a4-4d45-b402-132cbd9ed0d3", "indicator--c89a23cc-369e-4b36-9abc-4bda40d75686", "indicator--4347aefa-5fbe-43aa-9822-1298552c5b3b", "indicator--b686ea42-85b8-41d6-9eb0-0a743952b674", "indicator--effbe603-4337-4b36-a8ac-622893e9904e", "indicator--bf459a09-dd1f-4bbf-9487-448790eb4b3b", "indicator--e5525fe8-bf34-4508-8d60-22c697915a32", "indicator--ab4ece2e-2986-477c-b4f5-778c4ff4b4a9", "indicator--c247bfce-56a2-468a-943b-32ea4476fd54", "indicator--1cf6c318-738d-4fcb-af1f-a4f6304e9c4e", "indicator--3204b763-bfcb-47c2-95d5-597f2b5c92c5", "indicator--d2d4fa17-9497-4c46-92e4-f0f6e4f95f60", "indicator--6258884d-36fd-4dfd-b94e-f6e57fbbd78b", "indicator--95a2830b-def6-4a38-8b3b-29454edf843a", "indicator--bce66c1c-6c15-4ea9-a9d1-7646df280b39", "indicator--5b8d0722-c765-4692-8551-c40be1834dea", "indicator--5eb3cc50-bdea-40d4-b9e1-6cd9394036dc", "indicator--f1588dca-d8d8-49d7-bfa2-885fc169b65b", "indicator--8d8e74b1-03da-4418-a41d-d0dec2e44edc", "indicator--3b770be5-0f1b-439d-8787-235e59119573", "indicator--8dd6bee9-a689-4b31-a534-04b05c636925", "indicator--cdc3f1c7-31ef-4942-9c05-8725cd371bb9", "indicator--f597fb8a-f6db-40de-8be8-b955f5b965c9", "indicator--30af48a3-fded-459d-9dd8-fe50a6a6316e", "indicator--214241c2-5e18-41f7-a645-6839d2afe8af", "indicator--52a205a4-7ba3-4e64-a315-37887d21b845", "indicator--1af7241c-6bce-45f9-94b8-c00404c2b1cd", "indicator--bc89f337-c956-4e4e-ae03-916de747a551", "indicator--4cf4cc39-0604-46b7-9350-784c1c25cbb0", "indicator--32d75ee8-7c7c-4a0d-81ee-81507c04f1ab", "indicator--9f45d40f-720b-4513-85d0-ec2a979d8e35", "indicator--fc481b53-424c-4b98-94f1-5ce9b19c51e0", "indicator--f4ab5cc4-4d7d-4ba3-8bf2-483d59ff8d2f", "indicator--8c464812-eb9d-4f6b-97ac-e7301de3f2f6", "indicator--d6e79275-5613-45a5-b38d-4650e26b4fa0", "indicator--df5bb643-6687-48fc-b1a9-56671cadd41f", "indicator--b7a3f538-9d74-4e86-8f9a-092a526bbcc0", "indicator--717f6e37-99a8-4ee1-b892-2f175d4d05d3", "indicator--4371915a-409f-4720-bd5d-eb83b4183480", "indicator--2eb36acf-f50c-4221-b13c-fa80007636d6", "indicator--d7eff3ba-c882-4151-bc40-2f89e1c57b88", "indicator--24e3c202-2c0a-4566-a3bc-626de368bea8", "indicator--6a9cd35a-a417-4450-b91f-76935a5ba665", "indicator--d1833f5a-e645-4658-a5ae-607957361df1", "indicator--8f9e2d7c-efda-4522-8016-736a86bc7b5f", "indicator--c23e4a36-7159-4218-90ef-32755569c56f", "indicator--6ca9206b-21e1-4391-b9e9-661995177981", "indicator--7dc58c4c-bf35-4c16-94ca-ee2a1d825489", "indicator--5c89aa91-1e9b-424a-aa5c-de004f4098b7", "indicator--f67a6697-8beb-4bbf-92cf-05c182541cc5", "indicator--760c67ce-743d-460c-99b2-d1f47df6c8b8", "indicator--1196cdd6-7691-4a8f-a3bd-28ddb8ea426b", "indicator--16210db3-1676-4598-b225-101f5018fe1c", "indicator--9c8fb211-a91e-4436-bf91-bbadaf722baf", "indicator--b336f087-68f3-4272-b703-8646f65e4522", "indicator--3c2d7e2f-8b6c-4482-bacc-2acfddeb0309", "indicator--0e232899-a29d-4466-8aa2-81310daa737e", "indicator--36ae0571-e2e5-4ff4-8a0b-a4bc614d1f14", "indicator--84327d4a-6117-4d25-90e6-168d7c794870", "indicator--b1b9939b-c277-469a-b320-e7b63e9eb1b6", "indicator--ce03e1fe-d9f7-4961-a030-6ea83d099874", "indicator--32ce3bdb-bebf-40da-9e56-89bd113b3a9d", "indicator--4d035fa6-ef5d-4bcc-9b1c-99b6937529f7", "indicator--6a468436-d46b-4fd5-887e-6faafd841ff4", "indicator--7e6c0ef1-987e-4c88-b7d5-352490b2c046", "indicator--d3608a23-d077-43db-bcf4-a125750a645e", "indicator--a3c47392-56ec-4cea-b291-b1f3859e13e8", "indicator--c393f23d-bb65-4a2f-96ed-3b33ea1fcca6", "indicator--dbe69b85-410f-4c81-a170-b9c3120c65de", "indicator--f141ec24-ffe4-4c43-8e96-1bacb5adf87a", "indicator--24f39b6f-3f3f-45ea-b1ac-ae45705448ba", "indicator--a59a1b8e-3e6f-47c5-99d7-8b7bdd0c77fb", "indicator--fd41607f-8325-4cc2-b30d-e42a7207076a", "indicator--1be8184e-e0d7-44fc-bb74-a4291c97c8b7", "indicator--b7426854-a4a4-4435-8451-84aba4190973", "indicator--7ce626d3-a023-4926-8722-7739c7eca336", "indicator--e40d958e-81f4-4f3d-bf12-3397c9316d4a", "indicator--d370de68-6565-488c-b32d-9b18a5548f29", "indicator--b38c98ad-9a80-4819-a2ed-c1a38bb38a9c", "indicator--0fa67ea9-f8e9-4f93-af4b-23fc5201cb97", "indicator--7aa0813e-cce0-4c96-8c0a-27927b0a3d2b", "indicator--6b19c969-9d13-49d6-9d52-3a1ad09c8c4a", "indicator--5cd910e3-c87c-47a2-8029-4d673422c099", "indicator--9034c6f4-ea47-4cd7-9c6d-a29ceb1523cf", "indicator--d24f69c4-097f-43cb-86fb-8df0bb8f9ad6", "indicator--2df83a22-983e-43f2-8490-9e2df26f04ad", "indicator--6c1fe544-d05c-4fb2-8129-517389b898bd", "indicator--9d883153-b177-409a-a7b6-18ea428ede64", "indicator--98680e7d-5b51-4f47-a9d5-3760a9c61e0b", "indicator--b1cebcd5-72ab-4f3f-9ccd-3f089762f605", "indicator--64fd9815-34ff-4e46-b788-5b4835bb0de5", "indicator--3c43760c-0be7-4e7c-8648-0855a975e466", "indicator--45279236-26d6-4bfc-b7ac-dbcdd332792e", "indicator--8164af04-4726-4b6c-b0cd-c0d291970f2d", "indicator--48242adc-949b-4765-af26-ff8eb779f740", "indicator--2cd1bd72-e2fe-4216-a7c7-c6b0287927d3", "indicator--b85e29af-fb24-40e7-88a6-01e18f60288f", "indicator--5f2c9a94-452e-4879-a39b-6eb8aa6b236f", "indicator--2e705f5d-803b-48de-b80d-3bd8a666d80b", "indicator--aa6a967a-9597-4799-8d7d-f715fc9170f5", "indicator--2919c449-19a6-4836-bc1a-8f02a78340ae", "indicator--b4e2688d-a111-424c-bb51-a953f79575b6", "indicator--8d535b37-aa4e-4495-b805-fae602b3a92c", "indicator--502649e2-59eb-4209-aeb6-580436c26505", "indicator--a77f398b-e250-4ece-ab0c-21b143911188", "indicator--f1d84d33-6143-4262-89d1-c4225bc7a767", "indicator--06792fab-4464-4138-ac73-46aee5f56d64", "indicator--08598660-45b0-40ad-aaad-78a5e5e9b741", "indicator--72a2f9d0-bab7-450f-aa68-aac70d8a3920", "indicator--eae2c191-ef84-4885-bbb1-ce003e9392ca", "indicator--65b762b6-0df8-4229-b3ba-3ea7cda770b7", "indicator--6807dbcf-b971-4bd5-97bc-93dbd13d626d", "indicator--fdb9123a-51b4-43f5-ad7d-879050119e57", "indicator--e9018e49-6fa2-43cc-b5e2-c9028bf35f56", "indicator--82a43218-5e7b-47f7-b06c-77d656dee28f", "indicator--29676bf8-a044-46ab-9bf1-f0d3dc6df7a8", "indicator--6ddb4f68-e342-4cd4-888e-a70919ac04af", "indicator--baf77c12-7a7a-4f0e-afaa-a56e98151c2d", "indicator--2f051d7b-eeea-4097-8fd7-6538792e36f1", "indicator--ede2ca03-0571-4e3a-b54a-004659df81b5", "indicator--9b89f632-f9eb-4a85-aa7a-68795f84b2ab", "indicator--85abab68-fb8e-43a0-91b0-3ca30de0d556", "indicator--ffd14fae-bebe-42bc-b95e-b6c8bd6aba88", "indicator--d7385b78-edb9-4df7-bf4b-9ade830937b7", "indicator--6bd55017-b87b-42be-87be-f311bdaf9946", "indicator--4e808591-9f51-4745-9e56-36e0d59d02e2", "indicator--2f00e6cf-c075-4d3d-b719-8d2f24f66d34", "indicator--6a328517-f01e-41e1-afd8-b5b598048f54", "indicator--f6b4f34e-b178-4840-b02c-3f243fb87513", "indicator--14e63752-c1f0-4cc2-b357-8061f7d3620e", "indicator--10dc620d-896b-4fc3-8f1f-ed7f1aa14bed", "indicator--c47a5e05-f018-4b17-86d8-167fbe64c9c6", "indicator--a4b48e4d-6582-4462-b14e-3e39c2c4809c", "indicator--b75b17e4-3b10-47d3-9b27-c8b33ac0c2e6", "indicator--fc558d57-3b3a-4b92-a6dd-4d9d021e3c5a", "indicator--871bd7ca-b1bc-4468-baff-5ce5af529c08", "indicator--1ff3edf4-8c8b-43eb-a88f-a142400bfb29", "indicator--edab0c4e-0171-4e67-84cb-4ae0c0dd8384", "indicator--7d99f7e4-1294-43d1-8901-947f9a1dc92e", "indicator--7129b5da-c4f8-4e29-ac2d-f4a1bfe9c653", "indicator--d8b57cee-abec-494e-9302-4e3b382dafae", "indicator--08f59f8c-31fd-4f48-8739-7f1c60a6fd06", "indicator--527411fb-f835-4887-90ec-8482eadaa6a9", "indicator--ddf793ed-b44a-443f-994d-782e8835a919", "indicator--b811cfb3-59ec-4949-ae72-b59fb5502eec", "indicator--b6af9a2d-898f-4391-a26d-6ed39fc5d339", "indicator--19ca86d6-5677-462d-9e18-3e4012da114b", "indicator--782a4ff8-3146-4a18-aec7-3101f3b43f6b", "indicator--d1bb87e0-ab91-4735-b9d2-d8afe8d4c397", "indicator--62759c94-8ff3-48d8-b1ef-3ac748f6dcf9", "indicator--862d8e11-2cca-4164-880d-a2fb3b80ecce", "indicator--7f33003e-638f-4b21-bbbe-973a8f6696ed", "indicator--064712da-6cb6-4127-b3a2-dd4d02ac2b45", "indicator--66571d1e-d2cc-4c42-9ec5-b50987638843", "indicator--dac34004-eeb0-4d7a-af59-993e2ed96b34", "indicator--5091e200-a929-47c3-b94c-f0e55a9af2f0", "indicator--4743dc58-3e78-4ee4-862b-5f9fdfa45aba", "indicator--84802131-2ef6-4d2f-8210-27bc51a2e7ad", "indicator--4cfe8182-4f37-4466-bd6c-1226f758194b", "indicator--99372cb1-32cc-4cf3-98ab-635d21d153d8", "indicator--68f26684-c44e-4ed3-836e-0c056ab7b3ff", "indicator--3aa0446f-1ec5-48b5-a8ab-801d92aca575", "indicator--33faab4a-6107-4e63-a210-ad218cdcec2a", "indicator--9fd6da3e-6d7a-405b-8043-6f9ef0104cf2", "indicator--c422a0aa-ea97-4cc1-9dd7-f63586bde3f3", "indicator--ecbdd912-a7e6-4302-956c-73e9525f8e74", "indicator--18b8a940-ffcc-4b0f-a877-29fe3e07d8c1", "indicator--a8ff30a7-90a1-4372-8744-052bee196530", "indicator--5f43c254-2aab-4b28-a95a-bedee2210c2a", "indicator--4fb7222e-599e-4132-a1d3-b58d9ffb7ea6", "indicator--1caeaeff-d79a-4d28-beec-042ced5adec6", "indicator--9b528dfa-00f3-4581-acd7-521cb15c00ee", "indicator--51b6d3f5-b2ad-4b33-8396-ce66c5dd2c29", "indicator--69f56fad-13c2-4a93-9a08-2b794b161fcf", "indicator--14452abe-800c-4acd-b096-89dd88e45fd0", "indicator--7744f707-e845-472f-9fc3-b6f64e041238", "indicator--f8927e5f-3c39-4869-8eb0-7ea5c59f7d78", "indicator--086ec2b1-1e8a-492f-a922-71030b5de0a3", "indicator--47b3b31f-7dcc-4c07-b022-056b0363148d", "indicator--97ef735d-0e77-4460-977f-7da5001b5950", "indicator--3eb9d984-3e9e-4251-94b3-6df6a66e21ef", "indicator--bbee2dc8-00bb-43a2-8ac2-e076ac213ea1", "indicator--ce2d9ec0-a106-4a4d-bac4-21d5f7b3d9ae", "indicator--9e269e15-a81a-4464-9c2b-5ace881f46c4", "indicator--a947ac5b-e166-463b-a1d3-140dd22c32c8", "indicator--add7a8a3-171c-4ebf-a800-7c1aad9c0809", "indicator--467359cd-cd13-4bf9-8fdb-aad0311a2e01", "indicator--73b851f4-4eb1-4f92-b60c-53a4d0ed6281", "indicator--7412c01c-72e8-421a-ac2c-64cff17bfd3b", "indicator--0dfed361-be33-4213-b20a-47ccb05ace5c", "indicator--b5e9c985-d672-424f-93bc-44bebcbf4e80", "indicator--d8495618-9879-4a69-bbdf-37417d723d31", "indicator--6969b3fe-3497-4835-b409-e28a19345a01", "indicator--49cc1a53-01b1-448b-9a34-c4358fb7430e", "indicator--b44dd93e-186e-4cf8-82aa-7828596c93f2", "indicator--1b84b040-69c2-412a-b62e-3b0121577b53", "indicator--01e976b3-01ba-4449-b8b7-bf8da7cba84e", "indicator--616a3753-93b2-48ea-ba50-164fe7319c4b", "indicator--f032e603-204a-494c-8284-b5b84eb3a457", "indicator--96f76dd7-99ea-4c28-a1b0-b808e0350dd0", "indicator--2a42c2a8-0c23-4bc0-8d66-12ed73cbb1e0", "indicator--5398e32e-f66e-43e5-b0bb-f157763f6a10", "indicator--40ce49e8-740d-4458-b3e0-121f92d35aac", "indicator--80c7b722-6aec-4150-a4e7-1d9b0159c5ee", "indicator--b08f3083-004b-4c30-8581-448f52d5db76", "indicator--bee45ca7-73c5-4adc-8c40-4e0b27ed500e", "indicator--da45c2c3-7a39-4449-97e7-64c73161f2a9", "indicator--77821fbc-3c14-46ca-a865-e976f448431a", "indicator--df535164-adf8-4b86-baed-9d35ae4d7201", "indicator--2ea48637-2873-4649-8b45-0c8a690de71a", "indicator--4935e356-446c-4688-a1d7-32570031f0f4", "indicator--04e6dfe6-3806-4f7b-bcf6-fe7bd22f599f", "indicator--a144810c-4439-419a-b4f9-cf4e93dee13c", "indicator--0f643822-b58e-4e0b-8272-b6a5f1dc81f0", "indicator--d038f4dc-fdb4-42ff-b990-e5cbd85799ea", "indicator--31a17f4f-da55-4ec7-8d1b-b06c5cb1ff90", "indicator--dae41700-c975-494d-b9e3-44e71e4a13c7", "indicator--6206454e-23ac-4226-9a51-a46c51218cd0", "indicator--8de99502-7f40-4669-8d1d-33dff6868c3f", "indicator--3e72e096-3fad-4632-bf92-6bd6e09a7f52", "indicator--338c5672-9e88-4fc7-97db-2de27a09446d", "indicator--f901c2e6-8129-45ca-a638-8258c6f3f22e", "indicator--b86f4858-acf2-4a35-a90a-ee720c519877", "indicator--f918dc14-a7b6-4a9f-9838-ecd732abc00e", "indicator--323d2f0d-6db3-4c3a-bc9e-6d1efc57cf45", "indicator--e7b0f24c-52ee-4a6f-a102-5f8913993cf8", "indicator--a4179bcf-78f6-42c4-af52-7322e62ede2e", "indicator--3a378839-1051-49df-a5e6-2262791d0dc7", "indicator--4f55272d-18b1-481d-96a2-80d3142d6f4f", "indicator--a0f5a999-9ce5-4ac7-af85-39e4ae9a74e5", "indicator--87981e42-ee0e-43bc-9e3f-fe19b9ea5e9b", "indicator--178265dc-813d-4cb8-b206-e7df9c2fad14", "indicator--f72ef728-5381-4a13-95b1-72162565d864", "indicator--5e14fe0d-9ad1-405d-bdbc-99e60f4c1f09", "indicator--05091392-8f45-4eb7-be9f-df746ace8a81", "indicator--407f47ca-a76b-4e1a-9571-312ef84af679", "indicator--4271a3d6-8c61-48c1-b51b-bbd6fda255f9", "indicator--e428e2b6-f355-42a0-b970-f4fab38c599e", "indicator--5cdfafb9-18fe-49cf-b970-5ea721add4a5", "indicator--f64146f2-9983-4f18-871d-071b8c65b31e", "indicator--9023e32f-7790-4223-a311-f8a1a0ea40ee", "indicator--cebe7c72-f50b-4732-92b8-734433ab89b1", "indicator--b501ca27-07e8-4729-a070-6264c72120e9", "indicator--4197ca69-b808-479c-9ee3-d5ecfdb08831", "indicator--df1b6e86-102c-4a40-9748-5e7e27ae545f", "indicator--b54faa9c-4e09-4f5b-b7ae-e01a5c8dad05", "indicator--2ac4ca20-d260-4930-a0ca-fac7a0bf960f", "indicator--b3726ccf-fc83-4b07-971b-103233ce2aa5", "indicator--69354ae7-d397-4f96-9589-3221a3c3d6c4", "indicator--d384b9ce-a00a-40d0-aadd-705440b93abc", "indicator--6bbe7000-46a9-400d-9e87-fa88f0b9a2e5", "indicator--0b05da15-1cab-40e8-b29e-133d1ecf112d", "indicator--d475fc5a-5e65-45fd-9437-28e5d6f23932", "indicator--d0dcfe72-5603-4cc9-a914-641dc8854d9c", "indicator--36de9741-4920-427c-b356-47b56fd0d12b", "indicator--27d69ec8-7508-42ed-af6a-0b09f808a77a", "indicator--eef4a94d-15c6-40f1-b293-93bd5296e165", "indicator--da16b4cc-4b72-4b4a-af6c-6ad7544d2f65", "indicator--9d425c2f-2cd5-493b-a603-9024982d0b40", "indicator--8b2fbe21-6cd2-4cfc-89fe-aab9ecca562d", "indicator--81dee544-e224-4fc5-b93f-0f008fb1d2ca", "indicator--8b49681f-3df9-4c87-9ce2-93c5447c0307", "indicator--a9b0c9c6-025b-4677-b921-600a9b3ba6bc", "indicator--d93186aa-c4ab-4ae5-9186-7a1f3153b2f7", "indicator--d821465c-9c19-471f-84a2-2ea432b4f8a3", "indicator--bb197c24-eb7f-48f6-a705-dec52c45dae6", "indicator--5f825485-8a18-4574-afd6-6b34e6641e31", "indicator--82fb79d7-1905-4aa6-b803-1ecf2f2b59d4", "indicator--4303f504-bc1d-436d-abe1-25611ac5568a", "indicator--31076602-9b01-4135-9348-ffca75fe043d", "indicator--7fabd5cd-2c21-4a90-8df5-b8efac27c223", "indicator--5266a2f1-af07-472a-a8d2-81fa963bfe68", "indicator--a57122eb-625a-41c5-894b-80e832e20bb0", "indicator--102ce19f-cef4-47cb-8d1f-5ee11bf300b4", "indicator--a6bfb5ae-ee0e-4058-87cb-34d4f2d74e7c", "indicator--0ce5a72f-0fe4-4f84-b16b-6d27499a0c75", "indicator--9a594c2a-513c-4c3e-b563-037b0a835fcf", "indicator--e70f2222-d465-4763-a334-72c9db359dd7", "indicator--a5c3d7d4-b70f-46b8-971e-c42f326b4a73", "indicator--e7002864-509d-4a5d-9f85-feb193462d36", "indicator--2e4e51fb-4290-4f41-83f6-58a0b89c8495", "indicator--92392c8a-33cd-4444-a428-35ac7c04b54e", "indicator--3aaec044-34fd-431a-9527-2093ed61d9b0", "indicator--d8888db7-0b7d-49d5-9350-d71008e9ca93", "indicator--49fba5e1-7680-4286-866b-47199f90b07c", "indicator--60d73bfd-9ba2-48e6-94a5-d1ed226531a8", "indicator--86abfa80-0fb9-4568-98d6-53644eb8af7c", "indicator--ced51e11-2c10-4201-94fa-bccc74830a7d", "indicator--5f516647-c41f-45bb-9e5a-402eb5e80ba5", "indicator--cf57ac94-8eee-4479-8874-e15ec01bd3d0", "indicator--dfbf343c-4999-45fe-a182-ef6930f7d33e", "indicator--3168362d-161a-4136-8508-b413bd6e958e", "indicator--10164c3d-4b6a-4ae5-ab14-3744c655b081", "indicator--993a008f-d7bd-4c28-a5bf-29abfc183cac", "indicator--c88c7e01-3a54-4c55-98f2-2850dfcd92c5", "indicator--a08ee64e-e3e9-4f78-9abd-928e595f44d8", "indicator--1c570fbd-0809-4238-82d4-09861d7c699e", "indicator--0df8776d-2e0f-4efa-9aad-7f6a8f848423", "indicator--1b8ed2b4-9294-476b-9e7f-900ddf3c8203", "indicator--bbcb2174-425e-4681-94a3-775ab77ffd33", "indicator--937c663f-abe8-493f-b579-afd4c050b580", "indicator--fc6dfc4b-2b22-4419-8198-20468b55fc82", "indicator--69225764-65e7-4238-8170-5b368aa4bcf4", "indicator--cd979012-6220-4542-ae61-366f9a915de1", "indicator--b7721592-af44-43e7-83da-ec5e1d0f82b4", "indicator--d64ce22c-a5c4-48d9-ad3a-de4fa3b72a29", "indicator--5593d6b0-b9f8-424a-b9a2-488603c357f5", "indicator--72033ad6-4bd1-4ab8-8ae3-ab9c75e88ae5", "indicator--e1f3b484-ff0a-42d4-919a-31fc65d459c6", "indicator--328b514a-eb84-487b-99cb-b960ee87da86", "indicator--9b0dd9ca-88d7-4387-952f-609943a3e020", "indicator--96319902-6f66-4626-9d36-b984ef0821f1", "indicator--18d81cdf-95bf-4c9d-bfbd-b4c7ded4d157", "indicator--e11b5d7c-c8fc-4262-b20e-fd5144de8a41", "indicator--bba517cd-7a9c-4b21-8b38-cd7d4d329d01", "indicator--182a9fbf-2e62-4abc-a913-48baa99a8402", "indicator--b7500dfd-b6a1-4c26-b2ac-f70f2addcbbc", "indicator--3f383cbd-8f68-4983-9893-2c4264927907", "indicator--b21ee782-6f33-4603-8ae7-13efd4c3af4f", "indicator--781adf7b-ac28-4dc9-ae44-e2d12abc3362", "indicator--4931d394-c652-4049-ad41-d8645691e8f6", "indicator--9fe89e50-3dd9-4ca3-8d3d-8913565563f8", "indicator--bf828d69-5307-4953-a9b1-f0d0139f60f4", "indicator--99e5099c-0174-4a2f-b067-e5af317f2c3d", "indicator--b0d97159-dd5e-4b4b-ade1-30abac5850d6", "indicator--bb5fdba5-d80c-44d0-bde5-71f7cef7920b", "indicator--66e87ff8-6f39-4fa2-9076-3a4e1324cbde", "indicator--089226ca-096f-450c-8ef7-3a3966bc0bfe", "indicator--42f2cf84-512a-40d4-a23f-e29117aeea49", "indicator--e18332ad-80ed-4f31-b4c0-b8d1d25de9e9", "indicator--521708d4-29b2-4bfb-9b62-97f54f1dadce", "indicator--4c26a93f-c5b9-48f7-aea7-4a30e27b9506", "indicator--54b9cbf7-5b23-4c30-872f-cde5b6055a86", "indicator--05ddba86-a889-4815-b1fa-16a0a2d63536", "indicator--b1611313-2d47-4955-85c2-82918d58b4fc", "indicator--4d1e611d-742c-4843-80a0-e3fb097f1a11", "indicator--e7a19022-9331-41f6-92d2-5a4b152bb0e6", "indicator--e1cb1a3f-1258-4f49-bb1c-d04029472a51", "indicator--276cbc3b-b63e-4daf-95f8-705412112350", "indicator--2ce28a05-68f7-401e-9fbc-71547696dd1b", "indicator--bd64fcc8-17ad-4eb1-9a07-5a580764698c", "indicator--22ebd792-29ac-4244-8a41-b75af72f1bf2", "indicator--a1a940db-b7d2-4a25-8ea2-ad7de95d3664", "indicator--2b2f9c15-21c6-4180-8083-480c68639238", "indicator--d1c458db-6765-48db-8235-e8d1081f0a22", "indicator--a6482473-097e-40d5-97c3-aa624a3d1cdf", "indicator--7cd2ec89-1b14-477f-b921-b11e45d4ea9d", "indicator--a37a407c-0017-4df9-9db7-208258fd9bd3", "indicator--3e959fa6-4c2a-4142-8524-360c1724477c", "indicator--823dbd53-356e-4b13-80df-3ddab2043b42", "indicator--0903e97e-693d-4f15-ac07-21885ebca8da", "indicator--b7bf25e8-66f0-4a75-a1f1-a75f3118f835", "indicator--943319a8-7dcf-4955-a258-7c6082cecb30", "indicator--8b4ed265-9a81-469c-9d33-79b49961e31e", "indicator--1ae066f4-4472-4e38-9e6c-bb360bca4779", "indicator--8d1fc856-8610-4694-95cd-fe10267f66fd", "indicator--655e0037-0c7b-41bc-9024-69c9e700741b", "indicator--b81e2d97-f0e2-4fde-b313-9ce2a1384b78", "indicator--ceccde81-1f08-4ec2-bd1e-bae9b839787b", "indicator--d056cb47-f26a-4336-9a15-987266e532de", "indicator--85f1ca47-960c-45ef-8b35-bc0ec6d604e3", "indicator--54f97662-5720-4170-8e86-173886b4fff0", "indicator--4fc41c73-a082-4784-b483-532aee1806e5", "indicator--1d836c2c-5138-46c9-b3d2-0e056cf5cb47", "indicator--c0d0cf1e-8764-43ec-896f-78b6fd72d664", "indicator--4c893174-e365-418c-b1a6-0dc7c08f63a6", "indicator--50283b36-0913-487a-8ecf-23de54956cf6", "indicator--593d5b44-a625-4636-b98c-016d88c76609", "indicator--c26b0567-e1d7-48ce-9a48-b5a190c50b45", "indicator--85575bbb-7206-4b26-b89a-f1ae7c7665eb", "indicator--76e93260-f7dc-4f10-965b-02d1d3277336", "indicator--ccf319ab-69d1-4eb9-99f4-fe34b5515311", "indicator--54b6dcaa-64b7-4fe6-aabf-8f31420339ef", "indicator--25bc9eb8-40a6-407c-883f-98b141f3fc74", "indicator--5e725dd0-2388-4692-879b-34760b920762", "indicator--5b7fb391-8f0d-4b93-8db3-81ec079338d4", "indicator--35174833-681d-4942-975d-3c3be4783b35", "indicator--10c1fe18-9dc0-4435-aaf1-481841dcdfec", "indicator--5601bd71-b821-4cd7-af7e-4ffd2ef4d33a", "indicator--7149e7dc-2d21-42b1-addd-fb9d9517796b", "indicator--72015397-2bf0-4158-a7df-4a46ccf33fab", "indicator--0020eaed-b8d5-462a-ae31-7b823fd50c11", "indicator--3201ed6f-daa9-47a2-87fc-0ab09bebccfd", "indicator--5a665662-c32f-4fc7-8be0-60958c464272", "indicator--482af2a5-01f7-4e81-81ec-5f0a71e46169", "indicator--fabeba08-1062-4e19-ab7e-2a9d35133e66", "indicator--ec8f3be9-c1dc-444b-b40c-081ea005f65e", "indicator--1a3f8d27-8a46-4684-ab24-91d33bcd956a", "indicator--03740503-5783-44d6-a743-b9fcd96fa7f0", "indicator--ff2ccfa5-4cbd-4271-a07f-fab6b72dd990", "indicator--0dd7fc8e-cd14-4508-b0c0-d2f3900f940d", "indicator--abeac330-75a5-4a5f-8c66-ae0e6d627f9b", "indicator--c9f2af2b-b8b5-4c21-a1d7-2eafef460744", "indicator--bec82bb8-3900-476d-93ec-840f3df9aab9", "indicator--2997f0de-c58a-40df-9f93-89c6bbdba7d5", "indicator--e1f2969e-0f34-4801-8142-e0c52c3dbc26", "indicator--f5799549-2c91-4cfc-806f-4f4dd77fa3a8", "indicator--59a7ad3c-207d-458b-b6a7-d2a2d1332095", "indicator--430b8445-1671-44ad-84ac-ad545d97fef3", "indicator--eb0116e4-408e-4446-94d5-e3c359e0a7e5", "indicator--5f940cef-d8b5-45f6-9665-dbf608126d55", "indicator--1696a218-b324-412f-b14c-08991564bf47", "indicator--443b9197-1205-4843-a16d-d35d6453ac5d", "indicator--8c0f920d-8b3a-418b-be08-6c1ce4e6963e", "indicator--cf6fb3b0-8a6b-445d-ba1f-e1844b717180", "indicator--a54d23c6-c404-421d-bf07-70a9bd57338e", "indicator--e28d32b9-4e84-418b-8325-6befcf98cf64", "indicator--fa37dce8-ed9a-4cd5-ac7d-7d2174b39940", "indicator--d931b0e1-967e-4d5f-b031-b3a2bd799139", "indicator--c4f4dd6f-3764-481d-9bdc-f62c5e4b5b44", "indicator--a24198e6-63c0-430d-98ca-0bb8daa91b66", "indicator--8445db81-c8b4-4055-a5c3-c46b9f376b39", "indicator--40d9dc0e-6ee2-4986-af87-1b5549e7557c", "indicator--5589c03f-eaf7-4d36-8b27-48a5d8f4a21a", "indicator--7c392305-40ee-4e17-899b-cec344d41c64", "indicator--09b762f8-ce90-46ec-b820-b4a358b11512", "indicator--1bb76135-9f14-49ec-b620-b17ffc30708a", "indicator--e629b297-a2ef-4eba-8acd-eb6e86bbd743", "indicator--ce4f08f8-d5ef-490f-bc77-ee54cb1d99a5", "indicator--7a7d1b2a-05f1-4851-99ef-e2b544520892", "indicator--6388ded8-3a59-4460-9b79-d569181bce86", "indicator--6d15dd2e-5d8d-4590-9660-d7ef35fabf01", "indicator--2a7a06b9-2498-4447-a3f6-fad0bc642218", "indicator--ee431afc-00fb-47d6-865e-835cd26d089f", "indicator--ff29550c-0125-4636-9379-04ef648b796d", "indicator--4a2e85aa-355c-4add-beb1-128790ae861e", "indicator--ec801bd5-5e9d-4b1c-9144-4357126ba522", "indicator--2c0e1717-ba4e-40fa-9a1a-6dafded30beb", "indicator--a9b5e33b-3d49-44c6-9cf2-4e27189838b4", "indicator--e8a095d2-95f7-4686-b6c1-73f2e1eb3c7c", "indicator--642908bc-4b4b-42f3-8306-b8c0a8171dc9", "indicator--83bd33e2-69bf-4ee6-ae00-30c5695a7372", "indicator--d89d195c-f269-4651-8889-ffc36a2239e2", "indicator--bf9b5d21-9987-4d7f-910f-a8b5104269ea", "indicator--f6766e06-3e17-4972-843a-41413f05d302", "indicator--4d4780c8-593a-4c99-99e7-55facbf72d32", "indicator--3baff0cc-f977-4e9e-8514-b571bd5bac73", "indicator--58a576a1-aecb-40cf-b00f-9d96f61a12ee", "indicator--b8caee63-710e-44f1-9ae3-9909d1297eeb", "indicator--ac5d6af9-6451-47cd-8d10-db05095ccefb", "indicator--e1b54744-2b28-4ce7-83e0-3c44a19e6c0e", "indicator--42213b13-4853-4445-83e6-a7ac86ac9fb8", "indicator--6cb6dc99-9ea6-4f55-aa8c-2c647018d7d6", "indicator--cbc173b1-4865-4f00-be6e-7463dc104aff", "indicator--74b2f81b-2254-43b0-8369-8f18d457253f", "indicator--dde9076d-f732-4451-8ce5-aa60ba9720c4", "indicator--0bdac0a3-dd0a-4e2e-b8fe-c71d91f90168", "indicator--a6e82749-a4b2-4692-8a7a-0c249c015c26", "indicator--c882e8b4-e8b7-4e9f-87b3-fcbec8a98da7", "indicator--c04bc212-5101-400a-a50a-52221a48463e", "indicator--6fb06e8f-e094-40a4-8711-e809e21d362d", "indicator--ad771bbd-bc2e-4998-8978-3d3ce296d4c8", "indicator--7ef45247-4ed8-4fa8-b31f-57ff9450d144", "indicator--20674d77-7059-49c7-81a6-b1df3f5fc754", "indicator--5395735a-e2a6-4455-a540-220ce36aa789", "indicator--09fef9d5-fccd-4802-bd53-3f43767ec922", "indicator--f14e7803-1469-4d01-a821-dc9dcbff545c", "indicator--812e2c58-4857-4310-aeab-cd2a21270a20", "indicator--e89cf785-4dcf-4be5-aa0a-d00e2849eee1", "indicator--c9b4caad-9f31-4efb-85d3-c32b9a60f17e", "indicator--1ad67e47-7a09-476a-ad14-9d28e607574a", "indicator--61efa95b-29e3-44e0-8e65-fe7cf25f8ccc", "indicator--1a1fd732-d8b7-403e-a738-a6f71996a52d", "indicator--c97680cf-f2b8-4b66-b02b-a82fb92cfd42", "indicator--4e7550df-e46d-4a3a-888e-ff008e4f6238", "indicator--bdfb2539-97e7-46a5-b5b5-0eccf5161ead", "indicator--25723ca6-89c2-40ec-8b6c-2c620b228f46", "indicator--b34e35c4-ce2a-41ba-a810-a686da20edfd", "indicator--c7ad86e5-2ab8-47cc-9086-c4609f73a8a9", "indicator--72d41944-471d-4bd8-81e3-312c7fa6c80e", "indicator--6ab43158-8934-4d46-9252-6593ecfba68d", "indicator--653040f7-d580-4a15-86a0-3618aee3eca8", "indicator--4e515cc9-0a6c-4d35-8560-6b3edc9739a9", "indicator--13a15141-483b-4379-8234-e0938d62edc0", "indicator--38fca292-2ca2-413f-aa2d-0b304e5c3955", "indicator--235d4ae0-9088-4334-8b39-4338a3d906a6", "indicator--12c6892a-3230-415e-a35f-8e0dbcb04546", "indicator--2fbdac91-d854-427b-8481-bd89c8e2f381", "indicator--d206a188-5dd2-401f-8da6-6575c005f892", "indicator--ee07c3f1-4859-4f29-a76d-aa5f54b018e1", "indicator--b5d726f0-c3cf-4982-8f7c-7d5d613f7ba8", "indicator--90b5300a-579b-45c9-adf6-8a1d294ad2d5", "indicator--cfa95082-e062-41a9-97c8-123fc1c5fd4b", "indicator--0f7c9d69-ef65-4b86-80e7-140c20896a8b", "indicator--9fb3a0fe-6fa3-42ca-93b2-032f5f1795b3", "indicator--1bab98b2-cc04-408e-bdc1-dc11869b9b83", "indicator--4fdc9cf4-dd20-4a32-b315-4cef5f99a42c", "indicator--db8c7b58-9818-4955-92e5-205639d002be", "indicator--424107e1-48b1-498d-98d0-1626770de5f7", "indicator--cdad7e65-c07d-4957-a4fb-90a013ab3319", "indicator--19f1fd3c-722a-43ef-bb2b-ddb7a162975b", "indicator--9413c3dc-d441-42e4-a41e-b4fc75d0a6f2", "indicator--3fefc660-65df-4ea4-aed3-f1c5a6794021", "indicator--70bec294-77e1-4bb7-814b-5ff577729609", "indicator--4be58ba9-ca2f-4d21-b389-20d455e42d9f", "indicator--01722f47-d9a4-44c5-92fa-0094edac232f", "indicator--fe305a97-3e55-4362-9e5d-998c8ec140d0", "indicator--d4a5bab1-1bfb-45cd-b928-c517e2ea1360", "indicator--224a8a51-f51c-4de5-99e3-763a000580ae", "indicator--0081966a-64b9-4c62-a37f-802d81379741", "indicator--84f04513-5977-4fc5-b016-00389c0ed170", "indicator--42a00ebc-65e8-408f-8631-f620a5af3386", "indicator--c4b959d9-617f-4fe7-89f1-69bef00e6672", "indicator--e9954013-081b-466e-9ad9-ae74110534a8", "indicator--fd90f2a0-e48d-4af0-971a-8297e698ed10", "indicator--187fa4bf-3b5d-4248-bcbf-394b030f1dce", "indicator--7b4cedf4-6abe-40ae-b9cb-0fc6190f1e3b", "indicator--5c948cce-af48-40ff-a065-511a7b8dc726", "indicator--f43f2a2e-26bd-4e53-aaa7-c6cdeb95f28f", "indicator--13354147-ce37-4d10-8f20-2c2cf2ea814b", "indicator--b8cf522d-eed3-4a33-ba49-908a1245f897", "indicator--b41129e8-3a46-4b44-8a5a-84484dcf13b3", "indicator--ffdc9f36-7b1e-4b45-8970-4f6cf08a10dd", "indicator--17f3a980-a679-4688-a501-9aad64173085", "indicator--6f2711f7-75b9-41b2-a25a-c9d8140c867d", "indicator--2b9c871a-3cf9-4827-bcee-e4c5bfb6032c", "indicator--78de4c6c-e50a-41b1-978f-f89a487f7f83", "indicator--b316c7e6-6004-4d8c-8889-68bf9fd00fa0", "indicator--94c5fd43-6839-4395-a626-ffb0214ada19", "indicator--8467a0be-a989-413d-8c41-841863a8d200", "indicator--9f33c06a-7787-4216-8683-f94857ffc9ba", "indicator--0c6da260-88db-4a50-bcef-85606274d5d8", "indicator--8afff0aa-6618-46ee-9c7e-d3acd9ccb03e", "indicator--05891abf-5443-4e23-a969-ff929edd31a8", "indicator--d6220f75-f545-4f44-98b7-c8de71d3b0bf", "indicator--3a567cf3-ec68-4081-8549-5f663cb6684d", "indicator--e8a2e790-e803-4195-8a73-3b34da7bfce6", "indicator--8508eaad-82ec-4be7-8ae5-67441704c4de", "indicator--d7b59ea7-e1a9-4726-ba3e-0222da548ba4", "indicator--234ada5f-1e1e-44b7-804d-86444f0c4a8d", "indicator--86bf9e9e-9e8d-4ae4-98f3-26bccc2ec8a1", "indicator--6b4e5889-231a-456b-9c8c-e7379fc8d84b", "indicator--f1988bd4-fd23-4d1f-8499-5951d38740f9", "indicator--ce7d384c-b188-4505-83d9-ba64124e9834", "indicator--198d4705-ff03-4990-9fd1-9b1df76a55bf", "indicator--c72bc091-4817-4a83-a632-bdb74f06928c", "indicator--1f25bdcf-d5c8-49c1-875c-590888de1ddf", "indicator--e03f4b88-99de-4e09-a693-bcbe6e9874f3", "indicator--136a6aea-35bb-4f77-875e-eea1f0e92a60", "indicator--7f850d40-b857-434a-880e-8595abf20ad0", "indicator--64d8bb0e-07a5-42f4-92dc-9682132292c2", "indicator--b359270a-ce9f-4e82-90c4-092b3468fb0b", "indicator--e00f749f-a425-488f-b647-0a4bf54b18c8", "indicator--eff96a20-32b1-4c9a-b2ec-ec58401ff3ca", "indicator--564afd75-cc11-4ac6-91b1-47b76b7d4201", "indicator--5915c958-a7ee-40ea-85f1-6595f952aaf3", "indicator--62eecfe8-df21-47eb-8d6f-82a9d415ed31", "indicator--ea0dd564-864a-4c80-b8da-d2300eb6c611", "indicator--00aca914-c03a-41c4-bc20-4e4c6edd713d", "indicator--b6abe909-9af4-43ff-b2fa-270c2e0adcb4", "indicator--fa1e8a9b-8b1e-471c-a98f-7e9544683700", "indicator--672eac4e-c3c4-4a0b-8b10-4c5759d66ba2", "indicator--746898e6-b9ba-414a-b7ca-dc5d4ba49265", "indicator--bde75f32-9c4c-4e19-abfd-970548d30609", "indicator--96c3bfbd-0604-428b-a0bf-97550023e632", "indicator--1ea79a57-e063-4159-85ac-9ecd6a839404", "indicator--dea3ba68-3d84-4608-93d4-d7c6dd910a42", "indicator--4debe145-2f40-4d4d-95b0-5df310123353", "indicator--4ee721df-1f6c-4971-91d2-4005e0638420", "indicator--0e2c40c8-ec0b-48dc-b150-dd6e28c11e33", "indicator--af12ed56-53be-41fb-b837-c1435d4fc3f0", "indicator--e3e1a37f-fe84-4f15-8f69-e3cd2eb859d4", "indicator--2ceb2b39-fdc6-4dca-8014-c4d095fa8d3a", "indicator--47bee9bd-4369-48d5-b03d-ac659babfe83", "indicator--75e97402-5325-42ee-a037-aecfdf258cf7", "indicator--cf2d77cf-f6fe-469c-8f15-ee8cc245267e", "indicator--bae6766f-c4ee-4739-8b54-a15eec91f908", "indicator--e1dcd2da-9c9c-49f1-a835-b19a241da668", "indicator--42c7bd6e-6df7-4ab4-be90-13334e64c214", "indicator--11b2c7a8-0a02-4845-9d3a-4a9edc09773a", "indicator--467a2a47-6d62-4647-8426-64da6d80d39b", "indicator--45071446-a383-4fef-a350-6cfa7da34ab9", "indicator--bcb616ce-25c6-40c3-9e39-61b2fd23cc1d", "indicator--9f1171fa-1d7e-40d1-a2c9-ec597a3e4776", "indicator--e243ed13-ea7f-4c63-972d-680905364b14", "indicator--8db01175-93c5-4a7e-8c28-8b42b70b9666", "indicator--a5c4b93c-143a-4935-91e8-4fdb6dff405e", "indicator--ac13607f-6be1-4fc1-9992-8878165c3d4f", "indicator--06088276-33d1-42f8-87cb-ea2a517a7fdb", "indicator--8f075ce3-55bf-4544-ba6c-88d97e5186d4", "indicator--917a44b4-ed24-4e4c-9366-70bf422e67e8", "indicator--b78ee722-edaf-4a39-81e9-2fd94da3d503", "indicator--66efac2b-3b16-47ff-8780-bd38aa7ad3e0", "indicator--06e3c00d-a9dd-480f-a5b5-549a0914e695", "indicator--51c761d2-ed89-4c91-b6d6-b2222ba7b132", "indicator--acb2fecd-1e05-4583-8d36-1c542009d332", "indicator--8f021463-630f-4c20-b324-7f8e748dc254", "indicator--2bb27cea-c49a-43ad-a256-d1247626edc6", "indicator--7046d38b-d1c6-407a-97eb-c5ab78c0ae9c", "indicator--b780b406-7d3f-4ffd-af58-4d349c103e8e", "indicator--5a43aaf1-a45b-48ed-9a62-2169971086e3", "indicator--6dc499c0-3352-4ac8-a458-128cbcee4cc1", "indicator--32b4fed8-7fcc-4731-b3b7-ecd827714b8e", "indicator--9a8eb4f3-8c10-4754-9033-997e2216e96c", "indicator--caddf87e-cbcc-4d39-9f25-e105451bd7e7", "indicator--5b2baab0-4aa9-4823-b7af-e990c8516ac3", "indicator--4bba3e8b-492f-4516-affd-d5ea16f1a44c", "indicator--71ddaf24-9d41-48ec-82b1-e93d8545fbaa", "indicator--eccf3b07-ea29-4943-af29-ce66b178af48", "indicator--c09ee930-7751-4844-8758-3a9841e9c67c", "indicator--7d34fa49-d7b1-40ed-9930-505e3676fd93", "indicator--8ee2c0a3-fc84-48a7-9446-56591833b88b", "indicator--e7e756f4-80cf-4af0-b13e-d209b8aca333", "indicator--1203c4e2-e00a-4472-bb34-ecc137bf29a0", "indicator--10337f03-f733-41a4-8bef-1dbbb5bc52bd", "indicator--e315d5c3-2dc5-46b4-8063-a067cec82cb7", "indicator--edc11957-7e68-4f18-8506-320ea11934fd", "indicator--b646c85b-059f-40ba-bea1-479e36a13647", "indicator--abaab95c-69e0-490f-a82a-064a62876826", "indicator--62db1f3e-14f2-4cec-9c1c-c47dc426ffde", "indicator--2a819558-b9b9-4b63-ac27-d116ab67d64f", "indicator--5d0a5516-bf71-4d4b-8e34-d73891dac74e", "indicator--d44ab5f9-cc99-4df1-b325-7554a2d3244b", "indicator--32228ec9-288f-40ac-913b-8b4f3849aa35", "indicator--60a6b305-b720-44b0-b9b9-a150675b5e9c", "indicator--17d61a48-c86a-4a77-bebb-09dc7adaf5eb", "indicator--ecc4eb29-d4e7-4a8a-8d03-a6f715526042", "indicator--7fc14686-0c8e-4b89-9994-0339d39837f4", "indicator--c97b6bd2-4f3f-4300-b788-9c6d9a30225b", "indicator--317e42ac-d162-4f65-9ba1-6ebbadacc624", "indicator--dff67641-d4b4-4d40-b4d0-79bd7617d723", "indicator--612d24fc-5223-4b6a-b4c6-aed4176a24f9", "indicator--709f0d4c-536d-43b6-b8fd-9081e22cf957", "indicator--ff15d45b-e3a3-4ac6-8733-0b11cd1656ec", "indicator--aace6c8b-1c3b-46d0-ad25-6c08ab739759", "indicator--726bf84e-17ad-41ef-945c-eccdc91d970c", "indicator--eceab145-ee31-4fee-a377-6249426762d9", "indicator--24b62d55-5c6d-4c36-979c-abbcebc13022", "indicator--aab4df8b-75af-43ac-b5cb-c5495aca7e7a", "indicator--e43fcc82-f224-420c-87c1-0bf15cae679c", "indicator--d1420f09-55c7-4646-b509-2c516889a654", "indicator--7d672383-8a00-4861-846e-ff935aeb4259", "indicator--15c9e35b-cd9e-408a-8865-18a98816ee0e", "indicator--5cd739f0-bc5b-4831-b1b0-64f1e1c7a44c", "indicator--47934bec-1674-42a5-adc2-99d1f3c730bb", "indicator--72d45184-ce64-45a5-b826-98c225fca4e6", "indicator--13609647-9e99-4869-af2e-592c453ad467", "indicator--60913465-0edd-4437-b591-5bbbea03085c", "indicator--1e146a97-017a-430c-8cce-2e4e1614dea7", "indicator--f55b3337-f8c8-4a9f-8b62-8268346dfcd9", "indicator--19b0999d-5556-46b5-809a-5beb191ef84b", "indicator--88d38a8c-9dd3-4538-9df8-d8369ab5e752", "indicator--9d87360a-b7a9-4448-b1c3-c8b5516b2e26", "indicator--b3e0e5fa-c15e-4950-a4ab-1051c2e0496c", "indicator--4c1e7a1d-4f17-4f93-bacd-93df84db6de5", "indicator--8e9774b3-d448-4206-a182-8f4c3fabcb38", "indicator--6d4c9557-49f4-470c-8c70-029a4abd452c", "indicator--fa4afb45-e254-4b4c-98e7-4fe8cd022be7", "indicator--0dac3c4f-d6b5-4b34-af91-0abfb2fc7d03", "indicator--63e472c7-c51c-42cf-a781-60c9bafc887a", "indicator--657aafd5-00d6-4e5a-970f-0d0181d208dc", "indicator--bdcacf61-edd1-44ed-b54f-ccec80bc8677", "indicator--f0a3e4be-83ee-488d-9e28-330147160381", "indicator--37e96d2c-916a-42bb-b09b-bf2c92382e4b", "indicator--b8656bc1-d77b-46b3-9022-50aed40d7714", "indicator--72f03002-ac2f-461c-9b57-051950ecc58e", "indicator--a5bac658-c412-40a9-a881-871b20f19132", "indicator--a12473b4-f74b-40d7-882a-b8587d4127c0", "indicator--6230d349-35ef-4cea-8c27-ef537feae11f", "indicator--df67aee0-a138-417e-a805-97392c2f850b", "indicator--c6e1d461-e142-4fdf-a4dd-c18826c7e6a0", "indicator--60785fca-10c3-4b44-8623-2aceb273a4e8", "indicator--845ca1a6-6489-4b94-887d-e6469f0cefa1", "indicator--27d2306c-e3b2-45d6-99fc-1e4f1a4a1534", "indicator--0608399b-8812-4927-9d92-b04f839871de", "indicator--6af14e9c-4601-4b7a-ab4e-3d79fe5bc378", "indicator--168c1042-f8e0-4a32-a518-7a820c8b9923", "indicator--0a6969fd-f6ec-48cf-babf-7045e58b86e3", "indicator--54855a3c-53c4-4b7a-b5c9-0191b2c86e9a", "indicator--55dd2488-c18e-4ef3-ab1d-757d69683075", "indicator--1457579f-bcb1-49b7-889f-8bd3205e2564", "indicator--0f585b34-7407-48d4-ad4a-b5ffe09eb8f4", "indicator--37ec8ba5-77a4-4fbe-b039-be6798573e96", "indicator--f359b8c9-1918-434b-99c7-be13ec72d1c2", "indicator--e90bd7ad-fb4d-4e61-bb38-04a439751853", "indicator--31bb2967-a3f9-4cc3-a03b-258cb4e6395d", "indicator--ac267747-1d53-4532-ab61-a53dde73afcc", "indicator--e4b6dab2-0246-4140-bf17-4c8d79c6099f", "indicator--5c40fdb9-031a-45f3-9b40-55f5a92fa507", "indicator--45917cde-abd4-462b-8623-1d0832024823", "indicator--d328708a-39b7-4104-b03f-eca80df9ae7f", "indicator--3896638c-0e7f-4ba5-a392-0a7ee3aed889", "indicator--4405a85d-a517-4783-a374-9f61dd26af18", "indicator--fefc8267-1331-4df7-8477-5c186362e75e", "indicator--e489b6ea-f51d-41c5-a952-f75d70f3268a", "indicator--0e50dc21-1a49-4052-a97f-9cdba1af0114", "indicator--ecb4ae3c-5dfe-4b8a-9141-db1697a48d7e", "indicator--ac1dee16-5ed9-4dcd-b38a-902a36c02969", "indicator--44295b82-3fa0-495a-9687-50273d1e43da", "indicator--ef62eaa9-1313-47ce-9b10-bfe1b4c943b8", "indicator--2f1105c2-f66e-4b58-a68e-52f971ca0666", "indicator--466e2b83-325c-45dd-9446-8f20a1e84f1c", "indicator--7917f3b6-8846-4862-a2f2-c41cfe4747d9", "indicator--8c8d67ad-f674-47f0-a481-30b7e61413e7", "indicator--50e8b475-3a6f-4d90-8100-801407af5ca7", "indicator--0560e92f-2a9f-4f32-bafe-271314d2419d", "indicator--bc3aedf6-6a16-45ab-b2db-84de790cb7f7", "indicator--61c07bac-e10b-4b82-92bc-2f3e102eeaec", "indicator--b237e2d7-8b4b-48cc-8b16-d6f624a58425", "indicator--b4b587a6-9316-47a5-8544-50fef964d27a", "indicator--6a7e643c-cb23-4fd5-b6a9-7c537624bbb4", "indicator--f93c4967-f8d2-4f1b-b718-e2fe442df3d1", "indicator--d7662457-b3f3-4ea8-b689-1614f4da60b3", "indicator--76ddda21-e773-4ae4-8a8c-bcc89145018c", "indicator--ff7c9f29-a4d9-46ca-86a2-6461b6772041", "indicator--d4b9a734-1ac8-4620-a5aa-8ae66ea32a71", "indicator--316ddd0b-f4e7-43a0-af41-703bbaa13d00", "indicator--865fe791-83ef-4f7d-a1fe-34f73c968a0b", "indicator--6ce832c3-be16-417c-ae6e-945108bc1d25", "indicator--037e0ff8-e0da-4859-a5bd-aa27ac3aa36c", "indicator--dc5a315a-af79-4aa3-ba03-1a9b29d71ecc", "indicator--ed206720-84de-4abc-96c3-8bad99a0acfc", "indicator--4f87dee0-b360-4211-80b8-ac02e771c225", "indicator--830f2172-81fc-4ee2-b91a-ff7657660f4e", "indicator--025b8b48-3e29-4fd4-ac66-dc9ea5dcb8b8", "indicator--32444498-4cfd-426d-a1c9-20f065cb5749", "indicator--50bdd468-a025-4219-b85a-f95ad2d3a066", "indicator--e30b00d7-36e8-47bd-a4bb-69ff7eac9de4", "indicator--7fe19f87-be74-444c-8911-9858e03f18db", "indicator--1d1a9f53-b189-49e5-b256-69adb78cc82a", "indicator--9ff81ec6-9219-418a-9c74-75cdeaf65693", "indicator--9c906ee1-d192-48e9-a71c-6f5bee9fa7b8", "indicator--656fb476-e49a-44e9-ba87-9c00916ebad7", "indicator--eab8f28b-d7ae-410b-82c4-e3825c33c3a8", "indicator--e6ee4a5c-91ac-4c0b-896d-7f461b18de0f", "indicator--cb5e75c0-129f-4350-ab2d-ae047f27b511", "indicator--972c0df1-91a5-4227-a9d3-7095d97a87c4", "indicator--a7d83b77-5bf1-4226-b4b1-718887190e88", "indicator--749cde35-517e-4204-9cd7-030275641fb1", "indicator--fa2b48ac-6443-4521-b2e3-234caa94076a", "indicator--a2a64b97-67b3-4000-a87d-2e242602ff10", "indicator--4c8dcbee-b521-4294-8714-47929339db94", "indicator--010b5c9a-59e6-49df-ba00-d961f087f953", "indicator--c59aed7b-f9a0-4b63-8125-0fba4f20df7d", "indicator--2abbc9bb-e1fb-4bc9-b262-8df56232e9be", "indicator--db06edf0-03cd-4dc1-9d37-02173c2a8cd0", "indicator--de08c5cc-c580-4a7d-9a8e-a9daf48c917b", "indicator--7fdedbd1-da14-4f2d-8f60-602917b37852", "indicator--06f5f1dd-05d5-4791-b5fc-fdfc5c52db4d", "indicator--17329460-fb70-4155-9694-bd99e8611341", "indicator--c6e138e0-167b-4021-b262-3e95c079c1ad", "indicator--f81cad8d-0ff9-4053-8b5b-e156c685fbdd", "indicator--7ea8b893-49f2-4769-b4b3-69ffdb6a12f9", "indicator--cb07e46b-1281-44ae-a981-9e72b55cc048", "indicator--1727d5f0-7b60-4b8e-83b9-ddb24e4d27a2", "indicator--34828664-fa91-449e-a597-2d3c163cf9c3", "indicator--8afa1aa0-0619-4791-bd8b-03b6b32fd33b", "indicator--9e4cfd6e-8dbb-40d4-8e8d-32792b5ebb3c", "indicator--5f54c1d3-ccde-4372-b04e-aa3a1c7e1d46", "indicator--6256b287-7633-4445-8e19-1ca23f0536f7", "indicator--8247a348-b9df-4fc8-abdb-3cfffc87ba4a", "indicator--4e32380b-d39c-4493-958d-12d17537e2fc", "indicator--3a9489b4-cfe5-44d0-a08e-76f961f6ae45", "indicator--65cebab0-b6b3-497b-a6d9-9a7565ba43b2", "indicator--3b9bee4b-679a-4074-aa4e-f701be6e15dd", "indicator--ca9bc5ca-03a8-457b-86ea-3f173841b232", "indicator--7857609d-078b-4d40-a45f-84be0dc7021e", "indicator--64f601cd-a523-4dd9-8577-0f3cff0a7bce", "indicator--651b87d0-7c0b-492f-88a8-7980e2dd3af6", "indicator--713468b5-7fb1-4379-8e72-ca99ccaf1160", "indicator--eef3bcf9-c8f7-40ab-bee9-cc76d805f748", "indicator--30e9e8ca-e6fe-47bf-99e3-4f88e12481f6", "indicator--11fce0b0-c99b-44a3-b474-da8ae04d01b7", "indicator--7d11b021-b353-4af9-a66d-f82cf314ced9", "indicator--2e34a874-d0da-403b-bd58-e0f0e30314a3", "indicator--29aa4996-a515-48d5-a780-6be78926dda8", "indicator--3ca3e8b8-d5e6-46db-8e67-726caa51ee12", "indicator--0e8229ce-a30f-448d-8dc8-6196e49f8ac7", "indicator--dd346973-4914-4f6d-a167-7e36098f0567", "indicator--6ff5ca2b-4bc7-4479-9693-35d37f27f243", "indicator--597c13ca-2662-489d-99e7-041149375768", "indicator--84646c6a-689e-42cb-aee0-64d3630c30f0", "indicator--33ece072-39f0-4682-a411-b97c3a6f37cf", "indicator--0013ad28-bbee-4387-af93-f5ade709324c", "indicator--f185d862-9d6c-4069-b674-fe955f191092", "indicator--8b48a34b-54ff-4567-a9e4-bcace766c0d1", "indicator--f56af4c1-43d4-48a3-8bf1-789e1a0881bd", "indicator--3aa927b9-b2f0-4526-87b1-c7d0a7c171dd", "indicator--0ca4f96e-6201-4a26-be25-57a5493d1749", "indicator--99e1214b-1bcc-45e2-958f-44089da980a3", "indicator--611cec38-4815-44d7-8141-bdcd3f399e0a", "indicator--0167aacf-db27-46e5-af83-c7fdf07cc26a", "indicator--9dcf6ada-daf0-4f5b-bb1a-326da2a4a8a1", "indicator--00baadfe-2866-4041-9bb7-7ce565c40215", "indicator--0a8a0d85-0577-4e8f-a23c-1883d866d829", "indicator--9078fb51-e270-4362-94f5-6fff10ee47e1", "indicator--85b11593-06c1-4d5a-9a47-e86b69c25eb5", "indicator--0499ad6f-64d2-4560-ac95-d822bd396623", "indicator--6e9c9dcb-6a3a-4851-a480-b53da0836466", "indicator--c276ca31-bcce-49ad-96f8-cb88b7d2e35a", "indicator--fed8e710-4c77-45f3-bdac-7d9194dce7df", "indicator--b84235e1-c3ac-4fcf-bd5b-57035e92e5fa", "indicator--e1261f37-74e5-4cc5-b127-242ab98931cf", "indicator--e5463a5e-f619-4a52-b66f-0cda04e641a5", "indicator--6b6987cb-d075-4143-81a5-5e597e62f69b", "indicator--5b9c31ce-f440-4e70-9fbb-0cf461f1a928", "indicator--94e6ab05-6485-4cba-b9ea-574a7c37a7f6", "indicator--e8b65bc1-b652-46da-90bc-bd2160fcbdcc", "indicator--729ddc2a-0355-422d-987e-c0b7544239c1", "indicator--c03fdc84-4b80-4b19-a7d6-6dcfeb05f95c", "indicator--700c527c-9ef7-4dd3-9fae-85e44bdab8a8", "indicator--422f89e4-5d64-4640-9d7d-538b498f7fd9", "indicator--22eb9c13-9d49-404a-afbe-1560d979041c", "indicator--61f1b26d-ae68-4c01-8017-7d87bb6c55ad", "indicator--db885e13-a86f-4c34-ad94-9d2869144b36", "indicator--8d0095a0-fe3f-4927-9d38-ac1076bb3f39", "indicator--e8c40934-0e1c-47b6-aad4-0de4f5fe5f50", "indicator--d7697870-6b6e-4020-a629-7dd3446e610a", "indicator--621a4b95-288a-4a94-a684-6d3143520fe0", "indicator--a57082eb-18b7-43ee-96ef-07abb936a7ea", "indicator--bbffd7a1-1428-407f-8ea8-f3c306276d0e", "indicator--e3f585d9-1267-4dc4-a603-f3f7a60e984c", "indicator--e8f5d0c7-3108-4a7b-b202-2751eb30b069", "indicator--0c3e2044-8e87-4e28-8285-02e6b60cc0d8", "indicator--1b890d00-f7fe-44e2-8872-1e0daf766cb6", "indicator--99ad69c3-5597-4df2-8a35-8b50b6629746", "indicator--8640f902-e4ee-41f8-8943-267af1cc4e7b", "indicator--0cc42c73-adce-4e7d-adc3-75811a32a721", "indicator--a03d15eb-ef80-4289-9f28-ff395bce1ae9", "indicator--6067192f-78f1-415e-8451-2eba08e8cb85", "indicator--210fee6c-6b0a-42e5-ad90-093596743bb7", "indicator--b0e4c214-0417-4a93-8aef-c22a1b45aeeb", "indicator--c27accf8-25be-4792-a441-59ae3dd2ce2a", "indicator--ff26f1bb-05c5-4c23-96b5-a9446dd34c8b", "indicator--a159347e-6d3d-4c75-8e43-af074a333ac3", "indicator--46f69364-2bd5-4cf6-a18f-a2a2252f438c", "indicator--4e79f07c-45f0-45f3-ba48-173071d14813", "indicator--7a52d0c5-545e-4bad-8c65-498f6771b0e6", "indicator--cf43735d-c02d-4693-a1ed-f157b8bc7e2d", "indicator--f0c2d296-9dbf-488c-9a00-b38520bb5f98", "indicator--459ec7bd-7834-4444-821c-580ded2f5e97", "indicator--74618980-eca5-4273-bf80-fce75f3a8f35", "indicator--9c3b242a-2305-49b6-8610-d0de2d0ee00e", "indicator--39e5b553-a69b-48dd-a27c-2dc091d75a1f", "indicator--436ac200-5f2b-42c4-b3c8-8463e45214f6", "indicator--5f9e7bb9-8c89-4c39-aa7b-aa4d8a1ea9ee", "indicator--30d59d9f-6336-47cd-9df6-bd2d395085c4", "indicator--b02c8162-6132-4bc8-9e6f-a61ab7d5bf6e", "indicator--84501d8a-f6bc-4d57-bbd5-207ab863130e", "indicator--7fda1d62-2a9e-4c96-8bd2-4ceb114d9f6e", "indicator--1a632444-7589-4522-8470-15798efc2542", "indicator--1d3ad597-63eb-49f4-8932-37604e4819c3", "indicator--85f75c03-a228-4ce6-ada0-3de9108d32f9", "indicator--61af298d-30ba-4fd2-874a-dba6d48bacb6", "indicator--8357cb0a-20f5-4a4a-bac6-ba60d6f62c04", "indicator--8254746a-b4ab-43c3-9c6e-9c61095e5107", "indicator--7216c0d9-59cb-4597-8c12-af2cba504cf5", "indicator--2328a600-334b-4d95-a1bd-52ac26452cec", "indicator--4c82cb99-6487-4e6e-9d94-630d095dd72e", "indicator--63dd70e6-8471-4bcc-bb5f-3bfb596e0366", "indicator--86b7f743-5ccc-44f2-bc0c-295f576d5148", "indicator--745bd8cc-54f3-48be-b214-ec90990739c2", "indicator--d58b8a7d-0452-4251-95ee-ab9fdde99699", "indicator--7c846019-9e87-4345-ab9c-265e91826427", "indicator--b41b78c0-9b1a-470b-93f9-7797c97049fb", "indicator--e8162ccf-0e59-48bc-8d71-149d7684eede", "indicator--9c3eef43-00ea-445a-b473-c74775a173d6", "indicator--3648222d-a357-487b-9a3f-b2c2f8b6f33e", "indicator--1f40604e-4f7f-473e-9848-177921837eda", "indicator--5ebe8a21-a596-43ad-90c8-71d3f78c1612", "indicator--512473b2-5382-4a22-998b-5465f9948dd8", "indicator--3c19fac7-9c23-4392-9d2e-a6e0bdd82735", "indicator--f1eadc9a-5235-49d9-9d8f-387171e33759", "indicator--6e4cb383-0127-4e4b-bdb2-6729c8b8e2bb", "indicator--d224fc81-b085-4350-851f-1574cd037919", "indicator--dc5f5c0f-c7bc-45af-8f0f-954c4b0ca1a8", "indicator--a0c907ff-684a-42c6-9937-9aac5cbfcd95", "indicator--d6d5a3a9-bc0a-45a5-845a-473e4d77d10f", "indicator--b2085716-f624-44d7-ae19-5e0a040e2832", "indicator--ca00667c-4540-4ae2-9288-cc176ecdf988", "indicator--743c3ffd-7051-49f9-a228-4c4752436a85", "indicator--7f4a0738-55e4-4671-adb4-dbd2a0f99e7d", "indicator--f7e32f38-894c-4510-b7a4-39a3ea0c0ef6", "indicator--6bed75f9-6fba-4c4c-84e6-ae981bcbeb83", "indicator--60595d5c-485f-4ea5-9ce7-4e2e3b01cb2a", "indicator--1b4efd89-cc61-4810-be62-7f2ddfbbffe1", "indicator--6ee90560-af84-4f77-9069-811179565a63", "indicator--73d57ba9-2eb1-4bf1-8e7d-4812ef0a7c52", "indicator--59c85726-f14d-47c6-adc4-cdecfd84c6a0", "indicator--8bd6b126-ce25-47f1-ba9a-f3ec4d244f17", "indicator--ba0b53b9-1fb2-41e1-b0bd-b03f2a865d23", "indicator--8bc46589-3fe0-41df-8815-9090f880cbf8", "indicator--9b9ca3a9-c132-498c-a9df-efb6b9015914", "indicator--934540e4-de07-47f9-8bd2-f951b748e2fd", "indicator--7aafc6d7-1a56-4bbb-9144-3e143704636b", "indicator--2ddf70ce-b4ed-4896-beb4-361237bef6ba", "indicator--689fc2ed-55de-41a7-9d00-f323066a4d4f", "indicator--ed1131df-1af4-41d4-8616-f03a3de4b3ea", "indicator--c22d132a-0639-4720-a82b-21e69d198577", "indicator--c53fa464-7726-4aa4-9f86-b78f314c905a", "indicator--aa5995af-1116-4d99-8ce7-a7c3bbe6b344", "indicator--34ac4c93-b8e7-45dd-8402-93585e9d970b", "indicator--5e7a70d9-ebca-4b1e-90ab-38e27a00f5ed", "indicator--bf02a708-4270-426e-b348-24fbb9dc6c65", "indicator--abe961b3-ee57-4142-b08f-f197b7af97d0", "indicator--d98ac766-a734-485e-b908-a3fc5ba90aa9", "indicator--4b791a9d-e2ff-4b9a-85fe-5abd0043feca", "indicator--b48d8e4b-84c0-4adf-bf12-0537ce85251f", "indicator--c22edfb1-053b-49ba-9c98-e6477b0d5eb2", "indicator--6ad7ef10-e9f7-480d-98e6-3b4b609d1612", "indicator--4b139a0e-3b35-433b-841a-3e8ba8db946a", "indicator--2efc9f81-3c2e-42ef-86c3-5a2489374d9f", "indicator--af728bd2-4a57-4e2c-957a-4a308b9e95e2", "indicator--395d357d-4280-4739-94e8-052b00f29afa", "indicator--f58367f8-c84d-45c4-8e93-4de49bb4b72e", "indicator--77184692-1dc6-467a-a4a8-b561fc937e2e", "indicator--8b4401e9-bbd1-4f09-814f-24ee70a2d1b5", "indicator--c03c4563-f259-40e8-bf80-55d69259e131", "indicator--0f67d89b-48a9-4859-9024-776cb52b8b52", "indicator--3072025f-173d-48e8-865a-6a8e25667cf5", "indicator--08e5a944-dfc4-4df3-9704-c9b9491139c8", "indicator--b00bed1b-35d1-474b-8339-342b657ae952", "indicator--f69bfd64-490d-4a6d-9787-0c6d50369ba1", "indicator--0b26a1e6-f150-4307-98b4-08e5088ac38c", "indicator--cfcfe9b3-1bea-461c-b783-d77ab6721809", "indicator--9f55e5ee-533c-41eb-aeef-d673e963e5af", "indicator--60d54fc3-5872-4d6a-ab9b-793a43d16d81", "indicator--fc5b8b14-0727-41e5-8e52-37dc0476e737", "indicator--3e88692d-4c32-4dc7-8a06-1dda78b27470", "indicator--ab5131a1-be4b-4025-a599-9d90d9e338be", "indicator--b63f287c-173c-47ca-aadc-8353862a5450", "indicator--77ef169e-77ef-49a4-bb92-c7d0f42d42ed", "indicator--fa442020-fe6f-41ae-b442-5805ebbd3588", "indicator--59e2b259-f08e-4a9d-a21d-b0d5ce9b7a64", "indicator--bfcbd133-df14-45fe-b890-ffce290525fc", "indicator--913b2b6d-bf52-4068-ade4-9433e563d194", "indicator--9da135a8-0b71-4648-869c-9a6b6fd293e7", "indicator--2a7a47b8-9b7c-4b0a-9a37-66441a013fe1", "indicator--e9577355-1151-4b80-8c49-93ba11568c89", "indicator--5a4bed08-ac2f-4154-81ad-2c6c9ad1878f", "indicator--5417574e-826d-468c-88f7-31cc5d8e6056", "indicator--4cf9fc20-296e-45e5-8ff4-8641bade1b94", "indicator--6af847fe-9985-4628-819f-bd6a15fc6958", "indicator--a07e8e12-714c-43a2-9096-c271732c7d58", "indicator--d780bc5f-6979-4729-be63-1d2cd3ea6946", "indicator--ada957a4-dc42-4dfe-8c69-e26f044d911b", "indicator--095f9c7d-b558-4d40-8b2d-08ec9729d789", "indicator--1f631c13-8374-416e-ade2-c14560c57c25", "indicator--a696eb60-f8d9-42d4-8e91-b417639b9ee8", "indicator--ac4ed0f9-8203-492b-bec8-c433fd82faee", "indicator--3ad877c0-4ce7-47df-8f88-8471b2e2d8e1", "indicator--a11b2339-f821-4c26-b9f9-ac00c7c6637c", "indicator--63b034e1-4e14-4415-9cda-2755b57618bc", "indicator--76f528e4-e498-47d4-8842-6137086004eb", "indicator--3eca8805-4ae3-4e86-957d-5764fe356c60", "indicator--d7fc3628-ac4e-44d2-86d7-73ad6b4578d4", "indicator--c511bb5c-104e-43cc-829c-d1b41383d4f4", "indicator--3cc77ce9-a7b2-407f-8c55-bc8be45a53df", "indicator--989c5dd6-5f1b-433d-b9af-59cb6b10c27c", "indicator--8a2696ec-61b2-4ce6-b0bd-bbbb4daf3fc6", "indicator--73e23b7e-b649-4cab-b7e0-1d2e5680a8bc", "indicator--c9ff1dcf-f841-4357-8ca2-ebe26b3a1d0f", "indicator--ec1bcc12-a878-40f8-aba3-8cf2c4812738", "indicator--a4067386-a6fa-4914-863f-ffab9e4cd03d", "indicator--311b11b3-7769-4b6a-8962-3fe071cc518d", "indicator--6368abac-f397-47a7-9953-469d4dc040ed", "indicator--112d5e50-3676-4ef8-8071-ad4c76165c43", "indicator--6565eac3-b2ca-46d1-a563-78e1e22b86dc", "indicator--aaaa3654-e653-4a9c-8875-b880c71aeb78", "indicator--a2a53ff2-b71d-43af-8a34-1a2ec6b1ccd1", "indicator--ab609dd5-5015-478a-bebc-951ead71ff07", "indicator--a3c30d2a-fee0-4197-b2a6-dde0bb82d6a3", "indicator--72551f7c-3786-443b-ae3b-31e25f45d346", "indicator--cefc0b48-5b29-4311-883c-9346ff1f5d64", "indicator--b91001cf-cded-44c0-ab58-ad36c5618e44", "indicator--67023ff0-e6f8-4d9d-905b-88a5386ad91e", "indicator--76c0a05b-1510-4d04-b892-a5b26bb785a6", "indicator--05a25065-fff1-492b-af98-cf300eeba334", "indicator--3e83ef4f-2e29-4a66-9d40-f114fa29f8df", "indicator--6b422dd6-2d10-48c0-961e-0f4f8ff91ccb", "indicator--83d9ad70-c7ab-4aa6-9175-c9dce6483dc5", "indicator--6b09c53f-4b4d-4238-a567-1bb87320a4ca", "indicator--6faea7b1-de30-4d58-9710-9ad88652500f", "indicator--3d4e987d-5604-430e-8192-daec0d64a04f", "indicator--a7c7698e-1f13-46bb-8543-01255c7d09e3", "indicator--1a8a4b09-fcec-4532-99a4-4f17daa6b88e", "indicator--7416cdb1-c67f-4300-bab9-837ec490c07f", "indicator--83582772-7942-486a-83eb-2259c30c2f9e", "indicator--db68339d-da8b-4949-9034-a87121ca516f", "indicator--ff56c9e0-eeb5-4bf8-99aa-075f77c2d540", "indicator--c6fa9bae-a0ef-4d02-9547-7ce114764523", "indicator--d32210c3-8ad6-4c36-9899-002803408448", "indicator--0a6fc86e-d6e3-4ec9-96d7-6711869c9e65", "indicator--27875c58-e75a-436f-bfc7-eb4b5f659a1e", "indicator--e457c1c2-64fb-40c4-845b-dbe8397e285c", "indicator--de97229c-d31e-4bb3-a029-1d6aae095543", "indicator--a504ee1e-eac1-475f-a521-f6f0e9ee803d", "indicator--b8ef94c2-02f4-4c0b-b8e6-e535bfd26655", "indicator--9b9ff483-9871-4868-94e6-2b5c2497e4e0", "indicator--4f407258-78cd-4302-817d-c38ce0e816fe", "indicator--fcaad2f1-1f2e-4893-842e-0559bc6e87c4", "indicator--c04239ea-3959-41c2-9143-238fe5a6f890", "indicator--e898e99f-76ef-471f-9912-41553a0b426b", "indicator--11a6e24a-4ee6-4fa9-ac72-c3206fb581c5", "indicator--0979a83b-2998-4dec-aed1-47f21f46e4c8", "indicator--5bc20bc5-0d2c-4355-8ea9-2956890e5cc8", "indicator--28853aaa-d6ea-453a-905d-99b3a2f8dd74", "indicator--82d4daa7-3954-4747-a8e9-25a97f0c7019", "indicator--a9ee8c96-08c7-41ec-b80c-e8cc88d986e0", "indicator--427383d7-1a00-4a37-8adc-e8adc7b9f80b", "indicator--ee0f8e95-2ed0-48aa-aaa2-2b820c431f2f", "indicator--340f3c24-c5ae-4f3f-b61c-dbc3670878c9", "indicator--f0a46f44-907d-45f0-999e-85f1b9ca4db5", "indicator--71803566-829f-4cbe-9bca-f5981bd0c78c", "indicator--2611521c-235b-4d57-99f7-d85e44228992", "indicator--2a71f3ec-e0a7-40ca-9615-0753d863c023", "indicator--42f06354-fca4-4e99-8f04-f6db65841514", "indicator--1ad94776-4844-40a5-ae36-bd91b34c123f", "indicator--21e02b5f-7ab0-41b7-bd3c-d7ff17a08c0b", "indicator--987c6b72-e197-42e4-a7e7-0ac107af60ee", "indicator--91743400-f5fc-4e50-a5dd-8a80f10fc717", "indicator--b77dfac2-20d3-4cf2-aae4-3aacb89d3164", "indicator--02978be3-3a2a-444b-970a-057f928897c8", "indicator--a1637923-1d1a-44fc-96ec-ac0be70d1859", "indicator--260e29aa-23a4-44bb-a75e-30f59a4a765f", "indicator--3581a954-0373-4004-90fd-92fabed6c199", "indicator--9480bf2f-a724-4bab-90d3-67a1cce43ae5", "indicator--3cab1fe5-e3d0-4d7b-9d3b-bc326362b479", "indicator--b728dcf7-3bac-4fa3-acad-cbec31cb5981", "indicator--f13c359b-7c1a-4943-b8a5-135adfa33206", "indicator--f32f56d8-22c1-4d0e-9aca-33fc5ef66c0d", "indicator--4d0a27a2-b6b1-4b2e-afcd-8786e75c30d0", "indicator--cb121f2e-6ee3-40e8-9981-9ab4366c5f74", "indicator--402da224-57ce-4098-ba8f-41fca920d205", "indicator--bca70345-0d05-4d67-9e3a-d32fd282dadd", "indicator--ab9270ca-424a-401b-b168-4005de73e086", "indicator--1ef74483-e2dd-4c60-bf70-22e4dc0216c3", "indicator--4af16406-2643-4099-8d94-fca4b9dffad8", "indicator--5156eb57-f553-41df-9d65-0de8b355a413", "indicator--87611628-98ea-471a-897e-1c47bf9a3d79", "indicator--9e2a760c-4a27-46b4-ad21-4bc0dd9b5d2f", "indicator--de4e823b-6dde-4b6a-8c65-aea126799233", "indicator--a440ed54-2a87-4c53-a2fd-620c00493dd9", "indicator--f181634b-5928-4d0d-9963-5cbc01d1d517", "indicator--84285a23-28ab-4bc2-a5ce-c85cff3a2dbe", "indicator--a9ea5a1f-214f-4124-97ab-5d2b99323302", "indicator--c0f2c72c-6daa-47b4-bf18-3d311b01431e", "indicator--12acb7d1-fae1-46c8-a3cb-fb7ef4313a2a", "indicator--81f0dd07-27cc-4010-ae25-aa00e9dc0d8a", "indicator--4b94cf79-ccfd-4146-86e0-48e877696492", "indicator--c32489de-e1e8-4a5b-af56-a99496db39ce", "indicator--38d51b21-1748-4cbb-abb8-13edba102577", "indicator--1abbeeea-9bae-43a7-8919-2f2613a4a7c9", "indicator--087c2216-290e-46a8-a10a-2af62cb98f5e", "indicator--c958147a-4cee-4af4-adbb-0887470e705c", "indicator--cf595099-b3ae-4cee-b3b7-e510b6961fee", "indicator--a9a3c286-9ba0-4dea-af24-340584c4e026", "indicator--e592da74-4451-490a-83d4-483eedce5798", "indicator--7c2b7cdb-2710-41c5-98e3-f1400dcf3af3", "indicator--1311d3f8-8007-4b7e-a6f4-33e011829688", "indicator--a2b405af-8092-4a2b-ba2b-af1f026dc3a8", "indicator--30219ae2-082f-44e9-b1e4-320b95b6d1fc", "indicator--5bd89026-b336-4f57-95f7-9981d0204b32", "indicator--60669b2a-5d98-48d1-b8db-f9383b3bb949", "indicator--ae685a0f-ee1c-4973-8d82-8215901e4639", "indicator--89007f9a-4da4-4030-a68c-afe5e77eb42b", "indicator--61a8cc38-fcc2-4a12-9f8c-dec95cf9b640", "indicator--fb36862a-9c81-4964-9c64-3dc1572827b1", "indicator--c5b41ca6-d1d1-441f-8a75-b4d893588d67", "indicator--76f2015d-3108-4aba-b93b-ae0bb9b9531e", "indicator--128152c8-9929-4965-86aa-0a4cdf4541f0", "indicator--3596c055-0654-4e4b-9863-bdb62f941f93", "indicator--07effc9c-0c22-46f8-95b6-85ad4dfd09f3", "indicator--e576527e-ab99-491c-91d4-ad29815b8737", "indicator--3238a9a7-835f-4771-b6b0-36a2698fc2d7", "indicator--2adc838f-e5a2-423f-b566-9686f757ce1e", "indicator--3aee1283-ad30-49b2-a485-90e54c132c88", "indicator--75670367-b9f2-4a02-b9d8-98c961828a98", "indicator--5a583880-8bca-4c57-8b62-fe2fea381d02", "indicator--7b3cb853-72fa-4ce7-ac76-41b825fcbd24", "indicator--2ec2056b-0763-4c15-8e47-0ca2ac7084e1", "indicator--5f2f7dc4-8250-4d92-bcec-88a6d9550092", "indicator--8eeae43e-0dd3-43ca-9045-2c26ae9dcf7c", "indicator--831af49e-cccc-44e1-9d7a-16bf387d1cd3", "indicator--c2474cb8-c8f0-47ae-8d83-80a8cb6b9dcd", "indicator--5090169f-5ddb-4474-a683-1ae55d1504ba", "indicator--d0c43302-5a99-4039-984a-063ff53260d5", "indicator--3b313aa1-b8ff-4122-b421-b903751180fc", "indicator--714a61ca-1ba0-456f-aaf0-85930365fae3", "indicator--a6e5441c-88e7-4d84-a19c-0ad5b8d86022", "indicator--20a6f722-596b-4da8-947a-83cce9085bf0", "indicator--d60de3cf-d007-4564-a804-8dc37f6ab762", "indicator--8a3346f4-84e8-4549-8c3a-7de0a680bdbb", "indicator--cce3779c-13d1-4d9a-82cf-4d35d9b78e58", "indicator--7d26e93a-f46a-4e4e-a7c2-528959b22d98", "indicator--7e975bdc-8d2d-4fec-9b9a-61e388369a73", "indicator--44cd2ef9-64b0-4f60-8bb6-99daec450f2a", "indicator--f848e68c-c200-4c36-89c5-714d95378f0f", "indicator--7904b0bd-69f5-4356-be69-328005ef032e", "indicator--e1d299e7-0128-4b05-9b8a-e1f83ae6ce9b", "indicator--b374e57f-097e-428a-aaf4-beccf16d69ef", "indicator--3de67f38-93f4-4580-b277-54fd8889e0c7", "indicator--171e6d0d-f9ef-4b22-89ec-f2b959c6a404", "indicator--398cf05f-df09-453e-ba49-d37adada5a52", "indicator--c4263b8e-d41c-4714-aed7-a9212126087f", "indicator--06c95a8f-f412-4b99-82db-3dc1d06f29cb", "indicator--fdf83e63-7efc-4b07-b357-d64f4cd718fe", "indicator--e1831f15-b08f-4f87-80b6-3367567dd408", "indicator--f6f16d18-34cb-4214-b8cc-128292823c58", "indicator--3e54506a-8e8b-4a7e-ae28-b302e2880dd9", "indicator--efc42342-2d4b-43d4-8159-a81027aee59b", "indicator--bf76a909-518f-4695-b734-cbd450f264d6", "indicator--0d93abaa-b97c-412e-9802-15166824bfc1", "indicator--c1dbf436-1de2-463f-9163-401cfd27da65", "indicator--51a83813-7fb8-4b85-9ada-1a38636d0947", "indicator--6307f29f-ef8c-4605-afef-9726276a887d", "indicator--1a603cea-7f68-4c87-a41e-23ae94469ed3", "indicator--9a890ca1-8d2d-45c9-929e-aa5da2883fda", "indicator--8fff0a1b-1929-45d2-b020-425e5346fad5", "indicator--ca1874e4-a343-4c36-a1d0-f04e6c280247", "indicator--43049254-41b7-45b7-9dbf-c0140208a53b", "indicator--a8bc6f3b-8316-47c1-8e01-707dd33a6366", "indicator--a7bdc5d9-b953-42c3-8269-b627fa9bc920", "indicator--6ef3e31f-84f4-4359-b8ae-e6d953049f35", "indicator--06976b01-ddaf-46c0-9bef-c661b747aff5", "indicator--2c6d603b-014e-4ba3-8f72-f33837bb3715", "indicator--cda3d521-cf7c-4c48-b190-5f6fc28fa3d1", "indicator--5ea166dc-4509-4bfa-b019-be033dca4325", "indicator--f7d73e71-ebbc-4ae1-a96e-da868ecd7929", "indicator--03612bde-7127-4aa5-b90a-b4b94431bed3", "indicator--f3bb4e01-6bc5-48e8-924c-8c7f02e4d30b", "indicator--c1fe36ec-1577-4241-b255-85bfcc534225", "indicator--10993f45-b9ca-4a34-ad74-00df5eedb515", "indicator--33766a21-99ee-4bb3-b1de-d91bc9e9d4f4", "indicator--7cb1d3da-6002-449e-b0b1-b6b7a594f356", "indicator--b06b6c6b-1434-46ab-bbc8-447ccff9b963", "indicator--d3394e97-0df1-48ed-8f53-f0ed5da37e60", "indicator--59b0d2b9-e3f1-4274-87da-7647b6381cd3", "indicator--b66b6108-68a9-4ab5-bf15-ded8418abd74", "indicator--9884e8bc-e683-4a7e-af87-07fd1228d2d5", "indicator--ab41df56-1916-44fd-9ce1-088c7821361c", "indicator--771aa79e-c7c6-4262-b152-1b9dc9db5df7", "indicator--ed10edea-047b-47a0-9fcd-2b86c5cf3048", "indicator--50dce4ed-d658-49de-b0f2-67bb1a1ccb85", "indicator--2b10e64a-a61b-468d-a363-16ea6cfcdba4", "indicator--2e24e24c-61a6-4f15-851e-6d9c8f708fbc", "indicator--3f43246f-1e6f-4213-853d-c7999a4fcbd7", "indicator--ffdf239a-6437-4de5-980c-6bbd2ca45ac4", "indicator--56de8879-dd88-4260-9948-ab25d8eb90e1", "indicator--1f8b1427-2b63-41ca-801d-598f968f4ba5", "indicator--4056c9cd-eae8-483b-9baf-62cf651baf3a", "indicator--58ee1b4d-e7b9-4d49-a991-f7a3071d1dd3", "indicator--b5209ea8-f522-4e27-8e8d-6c5c5d41448b", "indicator--786f81bd-41b2-409c-80c7-802aa1ce3c7a", "indicator--c73ea670-6141-4d96-9211-1fa25b39301c", "indicator--6166d933-c998-4e4b-8c52-321f7d0a3177", "indicator--41f5dc92-d5e3-4777-954e-3010ca003056", "indicator--dbfbdf28-7fa8-42d6-a5e1-d282d86f654e", "indicator--5d13ea7a-4fb2-490f-8447-8ab14d8f6fe9", "indicator--2d972685-8a00-4ed3-a57b-7ebfec83fd24", "indicator--e07df7ad-89e2-495c-937b-9591ffd86cf6", "indicator--a299f679-148c-4182-afd8-7591b3f26a46", "indicator--b744f474-b37b-4598-ae13-5bb0396f32d5", "indicator--0b77641a-84ee-4825-9736-ee71197b2d84", "indicator--74061785-f0fa-42f4-9b07-7dc0f7b48f64", "indicator--584e3c8b-16a3-485c-be1c-492e0e17e119", "indicator--04113260-addd-4739-900d-3acc6e9deae1", "indicator--db5b7668-3790-4b4a-b004-be30491f4205", "indicator--500d5068-4381-4fcf-ac22-04fb940224b6", "indicator--a509713c-2dd1-4ab6-a419-04dd9356c3ab", "indicator--5db8599b-4e61-47ab-b6e7-9d8303eddab7", "indicator--803a1fc6-33d7-4d0b-9706-ddfebdee5c62", "indicator--51982383-789f-4247-8e6e-0c340eaf87ec", "indicator--cf6fd4e8-5912-4b75-84d7-9d6896d8fdcb", "indicator--d942232b-9a7a-442d-b6aa-8b9fc3211c71", "indicator--bd5cdfdc-8ce8-4f17-b83b-3dac23697166", "indicator--e5faacf1-8364-4b23-9cc0-37d5ea0c45d2", "indicator--e51c2dab-5323-4e08-a457-b53d3beddb2d", "indicator--717f1e15-d31b-471b-bf24-21fd46cce57e", "indicator--921a4163-c406-4185-aa1e-a2dae67349d6", "indicator--6d7fea0b-b3fb-4b0c-9a45-f2f9249741a6", "indicator--e97292e0-3564-4be3-a572-da5044a521a5", "indicator--16120050-2650-4ea9-be57-c0ac4ef31030", "indicator--4f4f59eb-f683-4f33-82c9-5322ccb3f711", "indicator--531b985e-c647-4a9e-bcc0-1285ecb6dab9", "indicator--516aebb5-5afb-4737-8e8f-07adeb452314", "indicator--57da1b33-f86c-482b-8f38-68847caf42f7", "indicator--de6b04d2-e76e-4fdf-963b-b3ff697f2531", "indicator--9be1650f-5704-42d0-aa23-82f3771d3e00", "indicator--2b1bc053-9cb3-468b-b9ed-e8e8a523736d", "indicator--986b5a8f-a4cb-4380-b93d-f569012ab979", "indicator--3a3e6afb-9767-4d00-b1be-bdda0cb3c95e", "indicator--9496bcdc-f169-4a84-a6c1-7b3fd342a2d2", "indicator--b5c8d2fe-af81-42b1-b065-c937c64f8097", "indicator--1bcf07b4-2935-471d-a64b-d9b64007e3f9", "indicator--8fcbd320-6e59-499c-9cc8-54e3e703e209", "indicator--b5a66df3-991a-4ad9-946b-26f625786f49", "indicator--a84c2ba0-db4f-431c-bc81-207eef2d29de", "indicator--5bdcb289-ef44-4d8f-8849-b877a953b597", "indicator--a20f3970-5a63-428a-9e86-2234f8b7db11", "indicator--8b446a66-7a8d-4a54-9d6e-0eaf6eb1a53a", "indicator--5ab8e16f-c9fa-40c5-92e4-cb962ee1a0d9", "indicator--92464225-a239-4f20-926b-003a0e1c1ff8", "indicator--ab71345d-dd28-4669-a1b8-dc59b91d05d8", "indicator--a736d595-510b-4e12-b408-1c2bc927a3d0", "indicator--c36b3bf0-e59f-41b3-acf3-0127de7378db", "indicator--72da3331-7f81-4355-b070-523a6020b2be", "indicator--3d634485-849f-4445-9178-0e128d20ec54", "indicator--9685df86-7e21-4d8f-a553-ced64bdd5cc3", "indicator--ce579a74-03ca-4945-8e12-1defa647d636", "indicator--39c21b35-4950-4b9c-9dc8-73289fcc2c5d", "indicator--ee2ab2ce-197f-4821-b03c-9acbf7249891", "indicator--2c497474-7924-4d52-8b42-687dcbcd134e", "indicator--8e8457f7-a1d4-4643-900b-d7528ffa8992", "indicator--58ae4208-8a72-4b53-9d6c-bf452bef51d5", "indicator--c279b85a-0448-44d1-8e6f-0efe12e67e8b", "indicator--5d1abbd8-d663-4150-b502-6c0e67371f75", "indicator--e2751ca2-8eea-4cff-a182-c2fbe63664b7", "indicator--43f68726-39d5-40d8-93e7-6e3f75ef8fe4", "indicator--6d1c0496-14a9-49db-9dd4-1aa405b35733", "indicator--805e43e3-ed39-4779-b823-59be4d81ea27", "indicator--8d6b2cec-47bf-4d08-9749-20e950492937", "indicator--7bef02c3-011d-414e-8476-fa9e11b198ab", "indicator--e67a02b7-30ea-4d9f-9ee1-8ac8ba1b7ee7", "indicator--074c8bc0-012d-4d64-950c-ccd4229f1618", "indicator--35446d36-41e4-4dab-bb34-a9343417cd6d", "indicator--3deba548-a0d6-4daa-a02c-fefe70d0bbb7", "indicator--19f5e56b-04dc-4db3-a664-5e26149f8b65", "indicator--c0707166-0676-4826-bb48-cb6565950d32", "indicator--c50f350c-f0e4-46fa-aa04-87b333ed3b68", "indicator--c247bbb0-6246-4362-b5b5-33439aee2cff", "indicator--7fdfc20c-62a5-4e00-80f6-94f523bb6a4e", "indicator--d906f40d-d01a-49f2-b66d-e3b4a02bfdf7", "indicator--8e84a736-55bd-4fec-a945-b666b8c82a99", "indicator--fccb11cc-18df-4fe3-b115-5c90cf65106d", "indicator--989706fd-5506-454c-ad4a-7727dccf7e4e", "indicator--b245bf05-4ddf-42fa-88a5-e62ec36b3d44", "indicator--f93d21cd-4a57-4b9c-864c-b25913221cfd", "indicator--0a4c829b-12b7-4b56-94e2-e12880b91528", "indicator--2fcf247e-7553-493c-a290-4db6d3459b21", "indicator--998eac62-a513-4f1f-870d-c1bf86073b45", "indicator--e425134d-0770-4174-af5c-3ed947793df6", "indicator--2bbaee3c-36e5-4690-a047-ace298c69012", "indicator--57d38469-3a42-4c6d-912a-a1750987ad26", "indicator--9174aba9-96fd-4392-b377-f0e91a184a3e", "indicator--b0d2cfbb-99f4-4db8-9de6-266dab8039ff", "indicator--4fca11c9-2e07-4f06-b360-7e42b3921cfb", "indicator--8a46fa2e-058c-4388-bd18-9725e56a3bee", "indicator--80a2ff70-ba61-4caf-bf9c-2a418e9fb4f6", "indicator--d7587035-ed80-4a32-a9b4-904cbe7284d8", "indicator--1a950b0a-82a2-4f2a-96db-db918937b5fa", "indicator--2ec0545f-2377-404e-9423-1eaf46eaef04", "indicator--de666ec2-ac33-46fe-816d-710204d54b56", "indicator--07ec9dca-e4ed-4f99-9844-423b777b5cc8", "indicator--c3066ade-2a5f-4bce-8563-ec9486a2eec8", "indicator--66cc575d-9e26-448b-b24a-7b24f632d5ef", "indicator--b9e38b59-9429-4a8d-bd08-aeee08fdb84c", "indicator--a8e1a35a-8c01-4b60-8ad4-4558ff4e3603", "indicator--4e140825-6bad-470a-b326-edacf6a9ca7a", "indicator--838d0208-4385-4e0f-ab9a-e720fd889f8a", "indicator--dce9095f-45ca-45a0-98fb-74f28019fc1f", "indicator--ed6aa837-986f-4c0f-b77c-f093c87e958e", "indicator--bd52fea5-27e7-4879-8296-a1af2d82553e", "indicator--21e9eb78-309a-4f0a-9a26-9b9319e68e77", "indicator--c1859c0c-7abe-4c21-b22a-dbcd8c37bdbf", "indicator--e6b431c4-b34f-4249-9661-5205f787b89b", "indicator--9a150965-af02-448a-afaa-7263b8cb22a8", "indicator--104a073a-0d32-43cb-8ae5-7ee4f3d5b599", "indicator--2761eb81-19ac-492f-aaff-d1071759583e", "indicator--af6fee50-7055-4be1-87d5-b3cdf0ec9824", "indicator--e7173e41-a058-4423-aab3-ce56375bfdd4", "indicator--b4e62bce-84c4-4ae4-a3cf-d84c53d424d3", "indicator--5540ae52-fe74-49d8-b7f4-925d1d55591d", "indicator--a5f2ca97-b4c9-4cd6-939a-837980a7bfd6", "indicator--58bc079d-bc18-4618-8fed-6dec219cf92b", "indicator--3b846f23-5c05-4a85-a0e9-7c90ad38d0a9", "indicator--ea157b82-572e-48d0-8209-ff597f4da3fc", "indicator--7abf68cd-8bda-4de9-9efb-a851a2f9a97e", "indicator--997104ba-81b7-419e-bd11-aaccdb89a4b0", "indicator--83c2eb4e-fc32-4648-b52a-ab0d7a7387e6", "indicator--6e42fb83-aad1-434a-be0e-922051ba0879", "indicator--58bf37ae-69ae-42d9-86e8-31d80dda5f51", "indicator--899b6fbb-8586-443b-b7ac-94e1c59ee262", "indicator--710ef674-99ac-458e-ae1d-10968d825d73", "indicator--0c65ffdb-a193-4d15-9bde-9a8bd85e9dbc", "indicator--ec292d77-95c1-4603-88a5-0313db352d9f", "indicator--cb4f4c76-e94d-4337-99f2-0404bd19f8cd", "indicator--2bedcd9f-bf51-4823-acf4-78ed69579e0d", "indicator--a8bc2f36-030c-4d97-bfdb-94ee160d2452", "indicator--f1e4d15d-4813-4281-9040-f7c8b5897aef", "indicator--bcbae563-4754-4c12-9a72-49692317b221", "indicator--2679b5ff-1a71-49d9-8a5b-d92428b54290", "indicator--d88e4875-b490-4acd-bcd1-ea7bd78b8ce7", "indicator--58ab47f2-4a09-4849-9532-98ab5d6e6ca3", "indicator--88f16d80-eebb-41d2-bcb9-fc4b72efcb54", "indicator--caea7d86-f2e4-4c3d-8d2d-e63e91ca8b14", "indicator--7427c326-5af5-45d1-9f60-9635f7dfb597", "indicator--622fb048-307a-4464-82aa-ed0ab80a7c06", "indicator--8ee82e8f-0739-4460-951b-61306efc7a7b", "indicator--ac3c5788-584a-4acd-8c30-ffe3544f5a16", "indicator--9e01098b-4beb-431e-8333-4899c095018b", "indicator--4bb02aae-5584-4a93-8ce5-d255bbf8f692", "indicator--f1817ca2-f694-43c6-ba26-84d90da4e50b", "indicator--45fc47a1-68a6-44ec-acd7-d7a32ed5b532", "indicator--53d853b7-7682-4d27-8167-5b8845f48583", "indicator--9be85497-2753-48af-951a-972240947447", "indicator--c1482c1a-fc3f-4549-97d3-0d782ea53b3c", "indicator--521852f4-bc3c-470e-b19e-02d21fce3e00", "indicator--5a12dbc5-d8fd-4a0c-9536-bce64d8b680f", "indicator--d396962b-371e-4707-babc-225016e08310", "indicator--48918f05-6afe-41be-b590-1ba5d121451e", "indicator--41d509a4-02f4-49d5-a0dd-ef6633831457", "indicator--c71be447-117c-4fad-9b16-53217c46930c", "indicator--cd8010b8-ee0e-4c5c-80fc-f46a3458d9ea", "indicator--9561e82a-3dbf-4a4b-b333-7024e6a5a38c", "indicator--cdf80955-321d-4e39-a88b-0a2aa0d1d904", "indicator--a9c188a0-6f27-4cc1-8472-93b1a6d92c66", "indicator--51881649-91c6-469a-8562-3082c6aa4535", "indicator--24111dd5-c239-462b-82e5-77a8965c3a25", "indicator--375052fc-d5bd-40d0-a4a8-36cca3b6c7b7", "indicator--1d9ee43e-c19c-4608-a0ed-f3a23354b6d0", "indicator--9fbda079-c138-43c3-8540-bbc61e32d775", "indicator--a4ffb3e9-6f2c-49fc-81c0-4416d9db476a", "indicator--d653d441-e1c5-4d41-9682-d94f7609f4b9", "indicator--2c12e811-7bed-40f4-b8c7-c86d1cbfc40b", "indicator--455a2563-8c21-4875-a9b6-a9db6a400327", "indicator--c9b29754-371a-4739-92f2-662234097f54", "indicator--ca37e7e1-8df4-4e44-86b0-83cd8e015f3a", "indicator--0eebce23-5656-4f92-80ae-b792f4397cca", "indicator--ee83f61e-ea07-42e2-93f7-be20ede578ef", "indicator--cd32b9df-64ba-45f9-91c4-73d4ab2a0ef8", "indicator--32fe75ba-aa0e-4f3a-a68f-8a851ad6535e", "indicator--7d9cbcb6-3ce6-46ff-91b3-8f60bf16fd71", "indicator--c2e64044-ecc6-4ff0-9119-ef6a4f571f94", "indicator--ebe85e8d-3839-4210-9102-6031d33cc190", "indicator--0617c179-2229-4f52-a58b-7959860d188f", "indicator--ea64dff2-2e89-4f54-a044-7aaa28ce7337", "indicator--5d5ed46f-5042-4128-a41e-5f22c8b98901", "indicator--b1e35841-2380-443d-92f0-e1afc864545b", "indicator--7b6f87a5-8ae8-46aa-ba92-00b5b5b80ada", "indicator--2bc34cb6-9d15-4175-8280-268878781f8d", "indicator--f680fe1b-108c-4714-83d1-528187e245f9", "indicator--3c3bb384-1d71-40eb-a4e3-f2df864fdc33", "indicator--f8a0b06d-ebb1-4863-932b-1628f8e2b116", "indicator--234b64a0-8a63-413b-b2dd-79f7c4a5a542", "indicator--54ca72e9-b445-4454-8ba7-9f49909d2a4f", "indicator--74ab7e18-2b66-484a-af5b-aba1222fbd6b", "indicator--1d6bb2c0-1e9b-47bb-aace-bfe1eca44897", "indicator--dcb7442b-d10e-4b23-ab3b-9a7b16ad44ce", "indicator--2877ad39-316d-4881-a347-a62016436de0", "indicator--5702f3ff-aa65-48db-8720-f656c8ac9856", "indicator--3a194850-37c0-47cb-8826-a53b16a0eb7f", "indicator--211620c9-41cc-468d-898d-521b8d750b14", "indicator--e03365dd-b8b7-4b7b-a85e-9bf78af332d6", "indicator--52e38359-64b0-4ed4-8d32-66443bffc3e8", "indicator--95252a2f-72bb-48d7-bf9b-54d469879c91", "indicator--9ab453b0-e0a7-4b47-a684-ca2313f89154", "indicator--faee172b-2d68-4634-a411-b2fc38c74040", "indicator--806e8d01-cb0f-4328-bba4-3e5353e1c6d5", "indicator--63007125-f2bf-4124-bca4-f06d0102a48a", "indicator--d15a0bbe-a096-4de4-82af-408428eb3649", "indicator--c6a526b6-2d04-49d1-8a4b-96cd7f1c4b9a", "indicator--6da16e98-5e19-4a8a-9b9b-8f97938aa925", "indicator--bf0dd2b3-cef9-4cb0-a30b-abe9d9c6a54a", "indicator--78ca60be-780b-4570-a11b-e85f23d8515f", "indicator--7f18fd08-10ef-4416-bab8-0bb82e80d7de", "indicator--b6e4ad2c-f3b3-4efb-bc90-d32196afc2f2", "indicator--a25d8cd6-7f79-489f-8f57-91598bf9f735", "indicator--c45ffe14-cd4a-40d0-a8ea-9d30f63b6c29", "indicator--241578d2-85bf-40fb-a0ee-aaea1d732a74", "indicator--fa038561-a243-4827-ad22-b81018b8bc1c", "indicator--c52435d0-9ca9-4e1d-9a31-302e1116dff3", "indicator--0d1319da-a051-4816-8485-cfe76b4cc396", "indicator--ec1aeddf-1649-4f55-a3a6-6a9536577ed2", "indicator--4a1b3d4a-0656-4f56-999e-60c84a7e8399", "indicator--8b23158d-2c16-4fdf-9d76-8a967a39ece9", "indicator--a6c1ae33-596e-4a8b-a4ee-24d88e4f753b", "indicator--f04362c8-f0bc-4c68-80cf-92d0eb39c7ce", "indicator--05372e73-a646-4629-a882-3186ee2457e0", "indicator--623f8f6e-cd86-42ae-95f3-260c92d37231", "indicator--9ec0a43c-2b0e-478f-babb-b9b3ba6933c5", "indicator--2e6f0491-c571-4815-a186-cd25781c7acc", "indicator--c0ac1e3d-8003-460a-b8c7-cab964a6a6b6", "indicator--83a5fe62-9972-4542-92e7-b270d27886f5", "indicator--4012b281-bc2d-41a4-b802-dfaf49422649", "indicator--f152a83a-a62e-45cb-8b83-904d138299f3", "indicator--c9509c2e-ddc4-4053-912d-09d3007729f0", "indicator--d71cadbc-d4c9-42c8-8c79-de4f6987fe25", "indicator--10eeffab-5bbd-487f-af54-a64b1427a595", "indicator--ca286853-e323-482a-993a-e1eb0d9fcf5b", "indicator--b13c306b-e33e-4cce-a1a3-b74593fb0b09", "indicator--d33b0169-fedf-4868-aba1-fd695aad9783", "indicator--d270a4e5-f8cd-45dd-8b20-608000b7890f", "indicator--b9d7d38b-cac1-4226-b7d1-19e84001db86", "indicator--0bf323de-515f-4d24-9089-b743bff9d706", "indicator--81b154c0-f4e9-410f-9274-1fd15f1c0c2e", "indicator--145dd3c9-b529-4bbb-a192-357ddd114938", "indicator--60f52beb-2d1a-4a72-8183-3720ab2d5027", "indicator--57f9395a-d2c7-47a1-876b-08e8bb88929c", "indicator--b02d7854-0f94-4e0e-9478-f43c3258811b", "indicator--c23af2bd-98e9-45c5-92da-de7011b01c20", "indicator--b4f9817c-2e65-4d4b-805c-f95f907c22e0", "indicator--98f05ec4-dcbe-4492-8351-59299a6d4f65", "indicator--cfb3b885-fa7d-416e-8a48-48e3eb25604d", "indicator--8caa8661-cd7d-4bb8-858f-2596f8fe596b", "indicator--c2f60989-981f-4938-9850-db5b3f85e670", "indicator--e32d80f5-a80f-4d50-a93d-b0e72ee523c2", "indicator--1f88a557-8d8b-40c7-a017-3a524ce3aea3", "indicator--b45e5402-1624-40e8-b808-8d9517b45745", "indicator--532755a0-1f92-406d-b939-40c327934008", "indicator--c878b21f-fa8d-4253-bc41-845fb57808bf", "indicator--def1da1a-5596-48bc-817e-c0b95b1bec75", "indicator--1f51cb50-87be-4339-80e5-fab487cc5ec5", "indicator--cc68a6f4-ad9e-4c40-939b-46a951cd5ced", "indicator--fd34d288-c31e-4868-9808-c6aecb74e620", "indicator--5d11ea62-287d-49c4-8301-d98b04903443", "indicator--aad370da-1b4e-41df-967a-fb788979b60b", "indicator--6681fe21-b242-4def-b99d-3c9de6835c28", "indicator--0e7b826e-866e-4fd8-a114-02d2b13c162c", "indicator--1b1a8607-37ed-4036-b07b-c0497414c7bc", "indicator--38f0de4c-dd4d-4489-97dd-16bff6fbc153", "indicator--ccab6c42-bfcc-4d06-9ab4-8d16729c8dfd", "indicator--9ca1255c-1ce2-4963-8bcf-1a9aeef45a5a", "indicator--c47e633e-5f5d-46f8-8038-5a5fe1433f44", "indicator--7a596fe6-00a0-4075-a7e9-7add98fabf8f", "indicator--02743d2f-80e4-4c8d-b1d1-28a48556825d", "indicator--397ffd48-0565-42ad-962b-ceedc0eee07a", "indicator--9ee4240b-22ed-413a-b311-f4ce223c488e", "indicator--b5036860-882a-411c-82f8-ca8f51a62aae", "indicator--f6fd981c-ceea-4426-9f8f-24c86f366b9b", "indicator--612bcf1f-841b-4011-bdaa-34621880ce68", "indicator--aa973602-4e9b-44a6-9c32-c36acb1a67b4", "indicator--6cbad39b-3a4e-4934-9eff-406e4c249562", "indicator--a6ab5570-6716-43a1-a248-2b621a344622", "indicator--adeb5629-2b04-4fe1-9e1f-854625302293", "indicator--e798ff13-f4bc-40d8-9410-f07a6eb97e3d", "indicator--510714f4-e32b-4169-be59-c4c506ffacf9", "indicator--902d1381-5e4a-4052-be21-dcfb6da4d713", "indicator--b9ee52f7-8586-4506-9207-c0ca2464aa2a", "indicator--6792bf38-704a-437b-a6c4-f5ca901aec6d", "indicator--f342a2f0-1afc-40ef-ad7a-58ae02aa1e9e", "indicator--25d85b5b-bfff-4ca4-b35b-f31ca67e4698", "indicator--c7016301-32f1-4c56-a1b9-95efc8b7438c", "indicator--4f85c75e-91e4-4e18-922f-3e5f0a81414b", "indicator--c43a610a-34b7-4474-bb9f-be53a297dc83", "indicator--177c86bb-51a7-4be8-9aff-7862b8e79eb2", "indicator--01021f54-f40b-4283-a984-f948f12109cb", "indicator--7a90b3bd-e5dc-410f-bdb7-beffa142e672", "indicator--84260f12-2bd4-4610-b09d-6731d8e7eb78", "indicator--835a5bba-d3c4-4024-8b25-55ad43de1f74", "indicator--c09c22aa-ae98-4b72-9cd4-37199243a8a3", "indicator--aa3e2085-90a7-424c-bdd0-94a8fb4a6750", "indicator--14e74ad4-2dc7-49ee-b528-1db72c576711", "indicator--81661b31-e4e1-46a7-88bf-d0bbd3b1be4c", "indicator--0d8ed981-a9a7-46fb-bfe5-1044b27ec19c", "indicator--5c21589d-ee46-460c-9f2d-c525c197cb69", "indicator--37d01ba2-621f-4a34-9332-fcfcbce69376", "indicator--54aecf1f-7909-4940-a79c-86cf4cdaf5a8", "indicator--ca1b3baa-f7ba-45ea-bc09-8020bc3972d8", "indicator--a479694a-058c-41a9-add2-f14e7ab77383", "indicator--8fccaeef-840f-4117-b805-721f93a9adc0", "indicator--7ddfdf58-93e9-437e-ab7d-df9ffa6eb65d", "indicator--f99bb752-0fa2-42c6-92d5-1de651842376", "indicator--6ab46fc3-a070-4e3f-9f4c-ce21a00d63f4", "indicator--0e4dba8a-0d74-412c-83dc-e1baf71bf880", "indicator--c0f53a0b-c738-4bc7-b17c-3ee39f0d79b0", "indicator--34d2f8b7-a553-46ee-8e65-e9549a429989", "indicator--2227bbcd-8ffc-4dc2-ae2b-a99c4b2945ad", "indicator--f830b25c-b5c9-457b-ad21-cf3138bc70a2", "indicator--57e78af7-7111-4249-a071-2c783ac086ac", "indicator--c7395459-b590-4ffb-98ce-8360601dc72b", "indicator--901471c7-42fb-487d-82d2-d84c63f09b45", "indicator--50322c49-98f4-4e50-bfb3-35538ed4793b", "indicator--fe8d5c81-371d-470c-995b-5b678c2ab4e1", "indicator--ad4e6380-ab92-4eb2-9ec5-ddf6d424b41d", "indicator--b063e5ee-03bb-4b83-8952-8ff539300e2a", "indicator--50723827-c421-499e-aa2d-a422f706ea46", "indicator--41e4e9c9-395b-466e-90d2-a8c456adf9ae", "indicator--d5e88ee0-2ab1-44d8-87c9-581e91b668b8", "indicator--27b4f420-69c7-40b5-9134-89d8b8a1dca9", "indicator--4384d44e-a050-4277-8c68-78448e0c22f5", "indicator--474e8329-062a-4a2e-a1e3-10f467b1da7d", "indicator--cf36467f-2532-4f11-b301-281d7edad16e", "indicator--bca0916d-3143-4bb8-ad79-3bcc5aaabd0b", "indicator--361fee4f-9505-4b0f-a825-ee4a3dffc263", "indicator--9a4af871-dc6d-4192-9639-502bc5416136", "indicator--2dc6ee2f-a119-4358-8867-a0d054691f44", "indicator--043f7266-b922-4d04-84c4-d1ca08b338ca", "indicator--595a2306-9169-445e-b3c5-a86606a4a51b", "indicator--46e6d3a7-6121-4d77-b4c8-3436417131cb", "indicator--f95e5735-b2fc-46ab-9e3f-3df51aa97a87", "indicator--987e57ce-0202-4bd8-8b42-17bd04509fa0", "indicator--20e0173e-3e7d-4c47-b614-697fbfeea53d", "indicator--dd4ff049-fb29-45f2-89b8-c4d265c0cee7", "indicator--ea6320a7-14ef-4407-baee-67a1bd6c26fe", "indicator--040a89ce-7941-4789-828f-257d03c48918", "indicator--7efe93cb-b583-4cac-94b2-d7e8a408192a", "indicator--81557197-c45e-4c0b-ba03-3b7d6a3c9fe9", "indicator--81a64ae9-0aba-4aed-8657-f3b11667fe0b", "indicator--3c20a43e-7757-49f2-97a9-8c05a3ac2f74", "indicator--13c8e800-e80a-45c1-933d-b99a0bda87e0", "indicator--a293bcd6-10a7-4f7e-835b-6c682590252b", "indicator--a18b0050-2a87-4ba4-b12a-e34b1d7d458f", "indicator--18b6f7ec-230b-4004-8aa9-57c0b12e3dee", "indicator--1f784754-c2ef-4a6a-9c90-c85cdae09b8e", "indicator--4d87454a-b6a4-45c3-8e0a-146b771a6934", "indicator--a5f8a496-2dcd-4cf0-9bc4-616f9fbed7e1", "indicator--48efa0b6-418f-4caf-b510-acdbf7ec8d91", "indicator--6b220ceb-c0d1-418e-9b76-4436b2396c39", "indicator--c1b9d2dd-3fd2-45d8-ace7-93825a14fc69", "indicator--2bf2a34a-3ce8-491d-a802-c306c6805364", "indicator--a3d591df-8f06-4a9a-a783-ab0471fc663b", "indicator--3faed7be-7b0a-4c7d-88bf-2e3faf72f942", "indicator--15d4f4a1-f109-4c54-97e8-f1c6ab83abc1", "indicator--676c2a2c-cd33-4b27-8411-c2e97845de51", "indicator--87ea67fc-5d01-443d-b286-bdda6fa6b546", "indicator--78983c21-cc3b-4b84-a7c5-135d6abbaf30", "indicator--8864ba2d-0947-4add-b968-d0ae9ee84c9c", "indicator--00c7d041-79ff-4720-b2e5-2d3600fab61d", "indicator--91c62ff1-f116-42f4-bf8b-32ebf62a687a", "indicator--4177733c-371f-411e-8a80-7636ff4b5950", "indicator--987804c9-4998-416f-8368-e3cf39294395", "indicator--bb81c121-fe21-4a83-a429-4df86addb93c", "indicator--f9e2bec5-78e0-426c-8a85-abeee3302b0b", "indicator--3bedb520-42cc-481c-9867-8a86abdb30ab", "indicator--7856d518-d872-45da-9feb-36cc1708405d", "indicator--572c5413-acfa-42f4-a064-0b53fff2518c", "indicator--4994445d-15f1-4a7e-9233-3f7119784e8a", "indicator--5a2cc98a-eb63-4ac2-8b50-b00951001dee", "indicator--79582f86-da95-410b-9c85-27d3492dc9fc", "indicator--1e5eeb4d-b801-4608-a129-e5273bb2b05f", "indicator--641fad38-d989-4062-a711-115109e86aba", "indicator--0dda1108-5363-4433-bd2f-66ef39af8075", "indicator--da5d5400-7cd5-442f-b4de-9fc5d98df156", "indicator--e24d0361-5327-470f-a8eb-2995733c9b68", "indicator--909c83d8-edd0-4b48-a6f3-9ad337965dee", "indicator--9978a495-1daf-473c-8bb8-da8edc4a1c54", "indicator--6b35839b-febf-4cb9-8929-68e00812e576", "indicator--e6d82600-37b1-451e-afa6-628ce52f7443", "indicator--82146deb-2c59-463b-b21c-c9429192f928", "indicator--838bc8eb-e0b8-46b2-981c-a0c86a3f487a", "indicator--4037f5ef-c96b-4580-ab62-3177a5808dbb", "indicator--cb567cb7-a291-4a6a-953e-d1d5c84789d0", "indicator--787c9a37-cf9d-4fb2-ab89-87a5f38d1c1d", "indicator--82c7d883-1e79-4b0f-8810-f32a1a317531", "indicator--fb29d46f-8031-4066-b1cd-232cae841bfa", "indicator--e7122fe5-06b3-4a3e-9314-30e500aa6f17", "indicator--4ffb9028-ae03-4ffe-b205-2d5c30e11427", "indicator--dcebf566-6493-439f-8e09-657ab04c308d", "indicator--a1351b13-3e0d-4960-9bee-2a84416c89c6", "indicator--4be79c57-4d41-499c-9ecd-ff4d4e2a27b2", "indicator--60a451f0-577a-460a-b55e-cd6ad1623143", "indicator--77616621-b4dc-4936-bb5f-46f186eab070", "indicator--1ae0edb4-0812-46b1-b3ed-042c2590d78a", "indicator--d8b9e424-bcc5-44fd-abda-73b5c2a2beea", "indicator--e151233a-d8c7-476e-b0d4-9c56f74807cd", "indicator--0440b4e5-b7a8-4741-ae66-819f46a00775", "indicator--1545b42b-4338-470b-ba37-1c7d19e0a41e", "indicator--0b375519-a34b-436e-8bf8-5f383fae3897", "indicator--0d7743a3-7c99-47d7-87df-d468f56fe209", "indicator--95531f91-b120-47ee-9a55-14bd9ca1a2a4", "indicator--9677723d-671b-4e5b-8efe-63c05b0231dd", "indicator--d50dd296-34b0-4ea8-8cfe-37536975e3a9", "indicator--3cb72ce0-6ab3-4b37-bdf3-6dcae2a44b33", "indicator--9415d267-d8dc-45f9-8efb-4ccce558361a", "indicator--82ebec88-d9dd-4494-930a-a9ff8071d753", "indicator--4929fc01-dcf7-4784-97c4-67fc83b6bacd", "indicator--6e86378a-1bca-4282-b4f4-860930739f12", "indicator--4e3ef19b-dddf-458b-8dd3-2172956ccea5", "indicator--d4db673f-bb01-400a-aea9-760fc9f8e245", "indicator--54a84eb2-ce12-4829-8993-a8259e56d9df", "indicator--c67fd955-ab6b-454c-93fa-890d6c8716f7", "indicator--5108103f-c6b1-4f39-a9d4-e2ef15183722", "indicator--324dc7b8-8feb-4d6e-a210-194416e7bc88", "indicator--7400ba50-9e2e-4d89-890b-1ee6aa9a2ab6", "indicator--d93764c6-3240-4219-9c5a-3cbb79e2f4c6", "indicator--8aab2080-3b7b-4395-a09e-523bc6e98ea4", "indicator--9ae986c8-8258-478b-9660-b3d2142bba20", "indicator--47a9e918-c8eb-4957-a96f-1b0e9acfebf6", "indicator--76948c76-8150-4997-872a-eadd8288264d", "indicator--9bb49c79-5910-44ba-94e8-156e52f86377", "indicator--1a0eaa81-bbef-4417-9023-8245ccced0a3", "indicator--15ab33f5-1ef3-4e7c-8c69-9c679b8f4db4", "indicator--f7e6f42c-4321-459c-95f0-2bc523e76f49", "indicator--5d795b6a-8bb0-494e-b4a1-453b0033fccf", "indicator--0a305424-f907-4e92-adec-7008982ceda1", "indicator--70351704-446c-4598-babf-e2fdd03124e3", "indicator--9b2c8e33-f88a-4abe-a847-8201d1ca8036", "indicator--b3bb0fca-7f84-4444-8fd9-663968be5f49", "indicator--95d65d77-984e-46b9-98ec-8544eed0bf8c", "indicator--d13ba253-3a86-45a6-949b-a0d2df27504f", "indicator--efa6ff82-2218-4b4d-91eb-f6b0656888e6", "indicator--3f664179-408f-407b-a1fa-ccd0e91c20c5", "indicator--f859cb98-b131-4dda-bca8-bf6dfae202f8", "indicator--8eeaf9a7-7d37-461b-a9c3-1b3fb6d139f6", "indicator--3a0f16af-315f-41a1-9455-2d698569120d", "indicator--6e3ac7ce-4e77-49f8-80b9-8bf36506aecf", "indicator--803142a4-df9a-49d7-9aa3-e661a85da978", "indicator--0014ec16-9e54-408a-9d72-ba25e50bf13e", "indicator--3e5cb928-7871-443c-96c2-5393bc90cc15", "indicator--d8cae3d5-6db5-4925-a517-4914da0c6d2b", "indicator--b5696e2f-1e57-4993-8c84-846d26111d0d", "indicator--4435118a-1ab3-4d78-896e-58ca4d1ce133", "indicator--214e1fa0-371c-4e20-87e6-4230608f790c", "indicator--a125edc3-5f11-4967-8302-fd25e5f96f09", "indicator--da9e29c6-f2ae-43dc-a726-74cdf2039ac9", "indicator--4f4a6632-0ca6-4b32-af48-2cc1736cb4a3", "indicator--7bd733de-50b6-4598-8861-868b16a873db", "indicator--d05b40b5-64ad-4619-99b9-f7201f4bd49c", "indicator--9ee208ba-0439-4a32-99a5-3a722f0ca76d", "indicator--2b035f95-e849-48b7-afc6-634875901756", "indicator--0ebc3536-2faa-4b3f-8fdd-8afed029a32a", "indicator--11e30c25-6134-4fb0-8dc5-2e4c2d270943", "indicator--713297fb-382b-43b1-b6a6-e6d95b59bfaa", "indicator--f0abbd0d-c002-4895-bd1b-f75dce884cf4", "indicator--29542a04-aa09-4743-b90c-b7088f393777", "indicator--f52b0a86-ea12-4660-8fff-7cdcb8769cb1", "indicator--2f761995-1ccb-4dbd-952e-21e56c7adba1", "indicator--17a4e7ab-867b-4170-a895-b6d7755fdb5b", "indicator--22461e57-a320-4cb0-b322-c7728d118c99", "indicator--4c771e84-b0ad-4847-a021-56dffe2433d4", "indicator--51f813d8-7c71-4052-9e76-7472e744c68d", "indicator--008d35af-038f-42ea-8663-f9bee939ae5e", "indicator--7c1df4a3-ee84-4031-bb28-54061a866d06", "indicator--44f20bab-d085-4589-b50a-0beaf3c5283f", "indicator--6adb6d2d-2980-42e9-b159-78a7f5096ab4", "indicator--d33c9742-9eba-4419-ab1d-5ee5fd0c1216", "indicator--1f69c13d-4317-4fe3-9a7d-5092abf6857d", "indicator--ba651d35-b04c-418f-92d5-638261217aa1", "indicator--096d1cb6-612b-44f1-b67e-b66c99d492a0", "indicator--0abb9d55-1010-4407-9b03-7541b9c9098a", "indicator--02f1c4da-a25a-4ff8-93a9-65119009a37d", "indicator--2393a2c9-264d-45c3-ba3f-98a006a41b8a", "indicator--4a3ef951-fa75-49a0-81a1-90902605c6a8", "indicator--2994d81e-ed54-4679-a2f9-eee4bb07c422", "indicator--cd008f95-c445-48ff-b843-308b45e1992c", "indicator--a36b5f1d-cf90-45cc-b562-b880bdaac717", "indicator--98d75f94-28bf-44dc-968b-a7b1d94ccca0", "indicator--75b6a9fd-7879-4505-a13f-0e7b3794f5ea", "indicator--ccfda5a4-c988-4fae-abe8-92c3d76bd4e8", "indicator--eb9cd77e-7ebe-48a3-8601-850b834ca4d7", "indicator--c66af02c-32a7-466c-8081-3c668fc1c618", "indicator--07390320-5d6f-4b29-a4f4-61878f8431ea", "indicator--e32b98e8-6b62-4a56-97fd-80fbf8cafd37", "indicator--75cb8e5a-14e8-40e2-a7d8-cbde8f2216c6", "indicator--328cb60f-3733-4e81-bf07-0d2f649f301d", "indicator--3d03c163-0473-41f7-ac3e-c47c9e6847eb", "indicator--fd80d3b4-4123-48f6-a699-c282bd6be32c", "indicator--94f49ee9-d125-40b7-bf4a-a30f4e628664", "indicator--73e63cd9-f2ea-4d1b-a1f6-01965ecac72b", "indicator--b8fd7b3f-b11e-43d6-9ea5-5270eb43499c", "indicator--b27236a7-d9a4-4701-b989-592388b61f92", "indicator--40a7bd22-f048-4f32-8f1c-4402b442ba47", "indicator--61e62298-c1d6-4cb0-aa41-451960b14c83", "indicator--77632308-4d16-4ab4-a50b-cd43b6176d07", "indicator--030bd7e7-c099-4adb-8f7a-2f888e366f62", "indicator--16fce571-bbab-4095-9eb0-d147f1cf0a49", "indicator--1d420776-c31f-402d-9cec-ebdb145924b3", "indicator--44e60a11-a1ae-43e5-b0ad-0df1056842b0", "indicator--e3350756-20d1-42b6-9c6b-5074077f093a", "indicator--98dfa450-4366-41ae-aec8-b3ed37ce324a", "indicator--ca8d1860-1051-4156-9de3-4f99b62efd36", "indicator--9dc6defc-4206-4c6c-99de-03e45318b372", "indicator--062e93ac-65f0-49b3-939c-412f13806e29", "indicator--a7e33496-d10c-4494-9f5d-12d88916bd94", "indicator--e15b84e8-577a-4d57-873e-88d93a3023c9", "indicator--f0d3c228-f080-4e0a-8ed8-7d2855eee6b8", "indicator--41464527-af18-413c-8444-256e7f0ff6a6", "indicator--5a7b839b-6953-4585-b3d4-2b66e6d2f8d1", "indicator--6d3b98c6-693b-4209-8ea6-022f552106ed", "indicator--3a59b6f7-a0bc-4503-8d9f-c83062c715a8", "indicator--d09a25c4-3dbb-47a4-8610-30f74514704b", "indicator--8aca4cff-2448-4896-8807-620736c6c6ca", "indicator--15159569-3ada-4239-8517-f41af5ea0201", "indicator--f5e8f82d-fe9f-4d1c-bcb0-ac8fa3f4e5a1", "indicator--35a47152-1f27-40ca-b3d9-f78249418309", "indicator--4b987f72-727b-4b5b-a213-39b1483e5c21", "indicator--1f9e72e1-c3e1-4844-8168-e5bd60d013d1", "indicator--c44b203f-0b40-4028-8e3d-a899f30fc56e", "indicator--80d94667-d8ae-45f1-b49e-20d3bab3e6f4", "indicator--46321ce6-38c6-499d-ba1c-adcaaf08d9db", "indicator--4c782a14-6693-4596-a22b-b656a898c2b8", "indicator--63eeff57-0ebc-4e39-a05e-c10ba7977b68", "indicator--333564c7-fe49-4bff-8515-79763b39e59e", "indicator--de17dbec-f5ac-41f4-9d84-1d50424bfdd6", "indicator--e8a3acfb-da0c-499d-a12c-7de24a1af15e", "indicator--f7434a50-3c7d-44a2-a2bc-9dcfbec9d2b9", "indicator--409c9065-cfb8-4478-8185-766ed61d4ae7", "indicator--2516e383-284c-4a5f-afce-516c53f6e3e8", "indicator--ce11a6bb-c60f-4772-a640-35df5aba05eb", "indicator--fc89e05f-2309-43d0-9425-d3a440bc69b0", "indicator--cdf6020f-94d3-4c09-85a1-cd5a3451229a", "indicator--f3d0dd4c-864a-4ce1-b9e7-ec358b307a9e", "indicator--d9fd8227-dde7-48e3-bf70-4dc9fce30ac8", "indicator--608f0044-99d7-4bd7-92dd-c8ba3d5cd090", "indicator--77cc869e-067e-4593-932f-9ed5945d5de4", "indicator--1fb05bbb-fbc6-4d0f-a6bb-2d0846450ed1", "indicator--b66070ed-862f-4209-b3a9-637106c1cb76", "indicator--d742c901-4831-4414-bba8-f9c65ac12695", "indicator--bf8a4659-8c17-4a93-80a8-6e29309b12ff", "indicator--62da8546-24b4-4d24-aed4-d15fbeb2701d", "indicator--4ff4fce1-c360-4f74-9a4b-a76c91e80aac", "indicator--c9c6a598-9acd-48ae-8b97-1bf8c905718d", "indicator--9ecf0e86-7305-49c8-8348-7c3426de90af", "indicator--b11d461f-11b1-4a5e-88d9-06f4f5197421", "indicator--3a5c5f22-7dca-49fa-9ca6-d9db2531f695", "indicator--d46dd4f0-230f-4d8d-bd04-e9433394f896", "indicator--320dcda5-5167-4309-b1f5-402c8e67839f", "indicator--36f0214f-2f37-4777-870f-1d315f64e806", "indicator--58ca45d7-b96b-42db-8d97-009040395afc", "indicator--21f22fac-c9fa-4448-8dfc-31216bbc5f70", "indicator--0e114c9f-b4b1-4ae1-af75-8ff8ee6fb87e", "indicator--66e238b7-6e52-4d3a-a2d9-d121fdd51e77", "indicator--b24cdce4-9cce-4fa2-a463-0be6cfe41234", "indicator--49f12995-d2be-4a97-a31b-09481c348159", "indicator--22b3ec39-b51a-4cde-9e7e-2b5778876d73", "indicator--0ae0f9d8-e55b-455b-a4aa-04402ec76b08", "indicator--64088b28-2996-47a2-a01a-1eab8fbf5587", "indicator--5d8e650d-7d6a-495c-a076-5f9525b99df1", "indicator--2e1cd0ad-f489-4fb1-8c40-1b851cd49535", "indicator--07944021-8856-4c85-b2e1-68dc75fd247e", "indicator--27d7b845-ac50-4103-9342-22f08d8ce987", "indicator--722b5e67-91be-43c1-931f-8298b6bef022", "indicator--51ffdafb-dd77-4ca3-a987-cd703200ccab", "indicator--7150adc8-4995-4eb8-9407-24b8b861a764", "indicator--d8922bb5-a34d-4860-964d-f4e2355b2496", "indicator--9efcfe2b-b97b-4481-9e27-ddd5e9621a87", "indicator--1d071732-9fe4-4cf6-a44a-2f7db78091b7", "indicator--71268105-efc5-4b9c-a790-922cbe778435", "indicator--52c6b22b-c1ae-410a-ba22-a33b2b03bd3e", "indicator--fdbeb9ea-2e5c-4b2b-ab04-ce189275ccaf", "indicator--0b63ac7f-fd53-4c24-9f51-a5c6e1c31278", "indicator--62d10fda-54a4-4690-a089-4d876fd7fe58", "indicator--075c9fcc-da29-471b-a2f2-20ce21eb6b93", "indicator--502ff8ff-b7bf-48e8-b95f-c9496aa5bd29", "indicator--74133ea7-dd44-4df7-84e1-1767c51a05d8", "indicator--57cc7cf0-dd77-4229-8b92-1ae8dc8a0a47", "indicator--a480eefc-96bb-4f07-9a11-29d929325bbd", "indicator--98587a8a-e06e-4b92-b38d-fc97e7c1b475", "indicator--b88ef6f8-158c-4166-91b1-eb7182abc1e9", "indicator--3de6fa96-6087-46af-a9c4-30a7a9e12d7e", "indicator--23835c4b-1293-4028-bbc5-98959b563010", "indicator--ca111823-d006-465a-8ae7-92516b952863", "indicator--31642124-27df-47d3-bc3a-483ace4e8b38", "indicator--76d3fe17-4cea-40df-959a-d27720ea5b92", "indicator--f36ee661-8a0d-4c27-82df-7a790a4240da", "indicator--aec33d8d-01dd-48f7-b862-8ddd17a49bb6", "indicator--84d03363-360a-4d9d-819f-21d9d5e31b64", "indicator--c94f409a-de67-4474-adb2-5a5000ca68c6", "indicator--bf284502-d924-4056-b60a-66a66ddd3f12", "indicator--48daf5cb-cd1d-4ea4-9cba-e2df97480479", "indicator--e4530739-54a5-47ad-9fbb-5eb558e5b0af", "indicator--e1d6c962-8300-484f-84f6-a2e43f7d4713", "indicator--527bee71-6e7d-4c59-b43b-8c51b2cfe133", "indicator--e243d12b-deb3-4a83-a6ce-7b8f4dadc843", "indicator--5d40a53c-48b2-4372-8a8e-a66b60259b63", "indicator--7228634e-d21d-4003-869d-85dc27a7c729", "indicator--5c5339f0-be94-45d2-adb5-388488aca550", "indicator--34e8ec42-41a7-431f-91db-a6787c9e4254", "indicator--eab20ebd-7eb3-42be-9070-737f913acddb", "indicator--b2108c4b-70c4-4dd7-8499-09d8ea8a0498", "indicator--661e6f49-ea5d-4ff9-a1db-70e3e8f0c6d3", "indicator--36f092a0-e02f-47b5-9952-07a041ecab4a", "indicator--0a077102-d47f-4cad-9a15-f36f2ff3ff07", "indicator--363112ff-955b-4e51-9a4a-2bc69ec23614", "indicator--cf7de3fc-e23d-4335-9826-0b3d2bc2d726", "indicator--a3feb1a7-f6bc-47bd-9b6c-dac8f7b7dc13", "indicator--0646ef52-f1fc-453f-bc32-7f7b84588073", "indicator--79bb7d17-8a62-4d7a-84e9-d3f48784c395", "indicator--157ff39f-a14b-43c2-936f-08c540600880", "indicator--19e64e93-a0b1-404a-8883-946094ab5af3", "indicator--83c311a4-f973-4e25-905b-fd56ca82f977", "indicator--7dd70bf5-bed3-407d-adb0-9537ddb8ae04", "indicator--aa2e2e52-d558-4d52-82cd-13b5e9462ddb", "indicator--1d33beb6-cbee-4cf8-9254-09dbf022682d", "indicator--28988bd9-23b3-4f2d-b6f1-d989e2432bbc", "indicator--dcb61356-a048-452d-96e1-6f351a1c63f4", "indicator--ff5b3fc7-1817-4291-a057-b5a1ad90bb75", "indicator--59e814ca-c734-48da-bf00-d3670210de5d", "indicator--c623e3fc-5a3f-4da2-a76b-69fa436a6ba0", "indicator--893a3032-f84f-4b81-868c-c6955c118db1", "indicator--70dadda7-f2e0-4dd6-8c99-b62f3552f76d", "indicator--ac908a11-2339-4c78-ad8f-7d61709f122c", "indicator--2cbe319a-7828-4c8b-998e-f3f961ea4626", "indicator--54c06ac2-9d6f-418b-99f3-495a97b2c4e5", "indicator--4bd9eea0-45bf-49c8-b299-d15d1444125d", "indicator--79f78c57-74a9-4d2a-84cc-95451f9e0eb8", "indicator--e4172991-0801-4b03-adc9-a93cd4b5c24b", "indicator--1bb12180-ce17-4fd7-aa58-fac5893c7309", "indicator--acaa1efd-9aef-4206-9f4d-c114d02adc36", "indicator--f0e3098a-9de2-49db-baff-4b704e32248e", "indicator--e0c1fc47-b483-43e6-a0d5-f83aa250bd47", "indicator--10945570-1016-429f-a105-0b602191a2e2", "indicator--578c7118-36f3-4496-9c9e-64e99a34e623", "indicator--d860af0b-772c-494a-a780-ef6f08d43f97", "indicator--aa207c3f-c79d-44f6-886f-54c8df8e3be4", "indicator--deac50e5-eee6-4457-bad9-8fd318c9a9dd", "indicator--d00c69f1-a3a3-424c-a9d9-9416f97b280c", "indicator--6acd1591-dc7a-4424-932f-9b9c163d073e", "indicator--289d0186-b908-4c46-ae6f-892ad5485ae2", "indicator--abbd52ce-2c90-4092-b057-832e0f6bbc39", "indicator--11a790d0-d9b9-42e4-96e3-3e6e7f9509a1", "indicator--1a44b34b-455c-49aa-b36f-e8ebfe97bc34", "indicator--08d93793-b9a6-43a2-b4f6-dd189c9651d5", "indicator--01799173-308f-412f-8b06-825016d4e377", "indicator--9f441cbc-3218-4388-9c85-0ef6bab7ffaa", "indicator--9e6f0b1a-2ec1-4a6c-9c3f-26b0954ac1a3", "indicator--0efa841f-8446-4a48-9795-11bd9207d3f2", "indicator--a552e108-6f9a-41bc-8105-9e9c54734e55", "indicator--cd6fc22b-9c70-4f91-bfd0-db9403493086", "indicator--e2d49e8c-d2f5-4bbc-9a20-5a7e73478740", "indicator--4b4ade3c-c2d1-4a25-8020-64829fe694e1", "indicator--32f0342c-39a9-45d4-a016-cea82381d9a6", "indicator--042c83cf-d456-47cd-9038-58632272a940", "indicator--0d93fe93-3fc5-465c-a76f-427afbf9d34e", "indicator--acbf9346-bfde-4c81-bbb8-0df7c9c341e8", "indicator--f52653a4-2ec9-4cfb-bf02-5c4a37146c75", "indicator--9eb55941-2963-4c4b-8cec-84dfd1963ae8", "indicator--a77a2c4a-a202-4ad0-b795-a80be0736b27", "indicator--10009afe-bf47-438a-82ab-5cf707af0f57", "indicator--23c05838-b291-4427-b1f9-f9560b340424", "indicator--b692eafa-de76-4288-b632-ba789831c8c2", "indicator--390c3f4a-6f25-40be-86a2-4b3e3ab6c8ad", "indicator--7f586688-0bcf-4ba3-a3a6-ec5f6d5f9d58", "indicator--d2d5ef30-bda5-4071-82f9-0427e2111b27", "indicator--7e60b43b-3026-424c-9c80-08c791ffbe1c", "indicator--3f81e047-d94c-448d-8821-aa0d26f55f4d", "indicator--e65f1264-439b-4e7c-89f5-3016023e02a0", "indicator--b4639e8a-9889-471d-bf37-d78d2eab7cb7", "indicator--3f2cbd57-4c74-42d3-a0fc-9d5fc918e9ae", "indicator--7fbcf5ce-8c44-4440-a39e-17beec71e8d1", "indicator--1b7b7868-3beb-4373-9094-1f02e0e62d0a", "indicator--1cbc39a6-8792-4d84-88e9-df2cd39842e6", "indicator--8da08dfc-bf04-48ae-beb5-bbab6ad125c4", "indicator--f51af7ca-a556-4a6f-a86d-18f0cdedd187", "indicator--fbc67255-6954-4464-bced-5cd4cedd62d0", "indicator--fc437903-2665-48c5-8fb4-3f32e69a347a", "indicator--992d7425-f6d7-4eb9-96e2-d2c0ff1fa4ed", "indicator--5d4ff00e-9b0c-4d7c-befb-a9066582c3b0", "indicator--d20cc13b-2cad-49cc-ae7b-5c679e7ee935", "indicator--4f35ed96-f886-4574-88d4-15ff8c6f3d3a", "indicator--e0034f89-669c-4294-93e5-f3e94d959414", "indicator--f3754e11-70a3-499b-86bd-60dfeca5875f", "indicator--91d18c85-e89e-4b57-b258-1746bfd14820", "indicator--d1bababe-a003-4137-949c-0168d16229c1", "indicator--dc568a56-a68a-4f19-91d2-99267d787047", "indicator--e44ce27b-af24-4eab-bc27-7c68c4803700", "indicator--d69ffb55-a14c-4d4a-877e-04c3c9ef0382", "indicator--48d5282d-40a5-4d8a-a051-79fb7cca808a", "indicator--ff717f97-8e5e-4360-8d7d-e0b447a7a19c", "indicator--13840651-4660-4d5a-bdcb-ba3632c748b0", "indicator--c8826f98-c501-4088-809e-a8116472b3f2", "indicator--71dcc58d-aa03-44fd-a29b-2b6bbc996e94", "indicator--2930ff55-b2b7-4b3e-bc38-4d969fc13f03", "indicator--9ff6f614-7171-4617-bf7b-c588864e1725", "indicator--ebd718a1-f231-42bc-932a-1745321b3a04", "indicator--4e5a118b-0930-4caa-b5d0-a8f9d5c5277b", "indicator--4b60d629-b51b-4aa5-91e0-0c61d44dd7db", "indicator--3550353f-b113-449f-ae22-202a7face650", "indicator--d1e65c80-0d08-42c2-9d9f-39fc5dda565d", "indicator--4226f00d-940c-4e36-b5f7-33039e191574", "indicator--77b4734c-1452-40d5-bba0-e5eb785401bf", "indicator--6c8543fb-98e6-4f2d-82b3-0280570bbdc4", "indicator--a327d824-9c5b-427b-a6c4-05e9394a9c31", "indicator--03cba954-e022-4dc4-b928-5061d3c84a61", "indicator--a9c15559-ec94-4bdd-94e3-8b9d592ffb03", "indicator--2f2fbc54-d275-4b04-a731-7f631195ee2e", "indicator--f7a942d0-5a3f-4eba-bf7e-e46a398332d3", "indicator--6e1d0551-4237-4189-a1e0-1c54602f0564", "indicator--22091295-9878-45ba-91a5-8156f3774300", "indicator--43de4300-712d-4117-af3d-cc07abf3336d", "indicator--ff72137b-cf4b-4d58-a739-d5919f318f7c", "indicator--c5c93aa4-9cbc-4833-a4df-8a0c7dde1454", "indicator--2618a3cd-0425-41c0-834a-2d35bae70cbc", "indicator--2688f0db-9d91-4896-9dbb-cd9a09f4eea7", "indicator--ac73ea68-3865-4fdf-8661-3574959f1de5", "indicator--c4b126f1-96b2-4bbd-9282-b77cec131e79", "indicator--81e86533-788d-4065-8825-d80f9e486d23", "indicator--0ecc46ce-c2c3-453f-955d-ef9292cb055e", "indicator--7727c3ed-65dd-4a53-a964-48ffc0d0f939", "indicator--04d90630-9439-4e44-aa84-da0018eb29c3", "indicator--987938c3-3968-4fc8-8ccb-c51188cb8797", "indicator--36632150-c8db-4f4f-89ba-0010fe82fa7a", "indicator--fcc33e19-8936-493b-9811-8ea5d174ea17", "indicator--5514c77d-5011-4331-b0db-e57b76a621d9", "indicator--cec509cd-c669-404a-b182-eb6083f37284", "indicator--368e119f-c428-4538-b1b1-a5eff1fe80ad", "indicator--99609bca-bc0f-46a4-b027-f266cef5f722", "indicator--b4c25c2d-59ae-4c95-9390-d408259c5b2a", "indicator--411d4ccf-bb84-4dba-9f45-e71284ceed89", "indicator--fb969910-c919-4095-af0e-35aceda87162", "indicator--9e2f6418-5a36-4724-80a5-af73e06de9cc", "indicator--c768cb67-e0a0-4629-9568-d0a3c77c9ded", "indicator--ff75173a-fe5e-44e0-855e-e45f49544bff", "indicator--302e3129-20cb-44fe-b2cf-7597eebf8cbf", "indicator--67a0b347-cf6f-4468-a559-0889bb594961", "indicator--d86731bd-ab33-442a-9be0-83379d17b490", "indicator--9f64c142-2346-4a0e-9031-eacc1afa7677", "indicator--f3562284-af68-4d74-8cdf-d61702a9ce94", "indicator--a4feffda-1f15-438c-b42f-1425d146984e", "indicator--fee9669a-cc08-4377-95ea-c7a0ebe75d69", "indicator--ba986888-9d25-4c5e-b6ad-410c6d20b8a6", "indicator--7d9e37bd-ae2c-457b-abca-983eac540aa8", "indicator--d5e55cb2-c06a-4293-b18a-c1c99ae8f5ce", "indicator--18f7a05e-1b7e-43b8-82f8-a46b31058e91", "indicator--aa0644b3-eca2-4d1b-a43f-eae9a4bda0ee", "indicator--a7051157-88b6-4e23-a029-8ec3cacb1bf7", "indicator--e45b819f-b80f-46ab-898f-7517abed39ab", "indicator--ddea3a7b-3010-4fbc-8bf4-ae9a5c7b1040", "indicator--d5bbae30-ff01-4451-aadf-71f623112f9c", "indicator--d4f0cf84-ffa6-4515-b394-01043ea01949", "indicator--82ad166f-3316-4b23-aff3-076295f5efff", "indicator--2b9fcc90-8b29-4ae1-b3c5-0bc09556a3de", "indicator--a740ad2f-7e0d-4662-972e-fffa7db0b0ed", "indicator--3a1a78d9-f442-49ca-9708-3b5fd5ccbd27", "indicator--57e1a524-f2ed-42dc-a1eb-21f516cc9492", "indicator--754b7d8c-2d42-487c-971a-480401acd5e4", "indicator--4f6033bd-13b3-4e53-b1bb-a4b9216f938b", "indicator--e1d2f431-7df3-49c9-8fcf-3f2206fa3b93", "indicator--8b1b8eff-0e0f-400f-b294-486dd92d2f2b", "indicator--39866365-a031-425e-a2ef-ee52a9c6cfd2", "indicator--649c7639-b621-449c-a5b0-ce1b4659765a", "indicator--972c5d0e-55ca-40eb-a7f6-fe38349612dc", "indicator--672940b4-90a1-431e-accc-a220eb4c11ea", "indicator--ae546e00-9094-4e4f-9c1a-4919516f9711", "indicator--3fcec6a2-ee80-4754-9564-3862777482bd", "indicator--e63035f1-f36c-40f7-94be-338aa8e97255", "indicator--043a0e14-2129-4535-9d80-89f0a5b6c157", "indicator--e14882a9-dda9-4623-add4-dba6118602c8", "indicator--f5c42368-0b1b-444b-8bc1-64476a7583cc", "indicator--d2261c78-d443-4b5f-92ec-bd8a0b84af8b", "indicator--38eedbf4-2302-4147-9d95-7391eb7f2868", "indicator--fee4153e-c3a1-4351-9fbd-8b86efe0b36c", "indicator--7e6d4345-a8af-4c42-be12-f2c0301bb81d", "indicator--fe258437-50da-47f3-993c-066d2761e6cf", "indicator--fa8d7321-8aca-4ad1-b3ee-d0cd426b1b0b", "indicator--0f1d718e-e3c1-4ad6-b803-c6e593efc573", "indicator--b2ec78d5-7533-45b4-a98e-aa8376f1e942", "indicator--a9d7f7cc-c165-455e-90a4-63add0993a1d", "indicator--e094a4a2-5737-4194-b590-ac1f0d994d66", "indicator--aeaab3e5-2142-4461-bd30-83fce5db733b", "indicator--83d9b23e-be56-4ddf-9689-71f0e0d3adc8", "indicator--822b3501-4180-42ed-83cc-408cfd399550", "indicator--299c258d-a7c5-4f57-9961-8927e98fa001", "indicator--0c91c750-9400-4261-b4a0-aadb11253ce1", "indicator--374eed78-f801-48cd-8ecb-efabf1876583", "indicator--f562488d-2a86-42c3-8e21-c4394a286e19", "indicator--dec9ceed-0cda-4a6b-b165-f0460da40f8b", "indicator--1a371af4-2fe8-4383-af1f-3a9b27a60a3a", "indicator--11ebb83c-cbab-4c5b-9ab8-227368385e4e", "indicator--cd631c8b-2408-4419-8a2d-74880ea4b015", "indicator--0f0e6d1d-0ce1-4bb7-807b-343aa9271e80", "indicator--25116d2e-da33-447d-a72f-30bf9631e699", "indicator--5fbfaabe-3271-451a-b13e-e16a78c32aaf", "indicator--1f9ef763-8375-42c1-b4e2-b73ed146b84c", "indicator--57b56c68-285b-4246-ad37-9b0909966691", "indicator--89a56189-633e-491e-836f-f96206c47859", "indicator--1565cea5-bd53-4b41-a0c6-a65053d04d9e", "indicator--f890ac10-1265-4fb8-9027-fdec443e0ad8", "indicator--a16f1fce-8db4-4868-9342-1f664a074e64", "indicator--93ab19dd-d893-4b69-be75-5005bebece55", "indicator--ecc2810b-efdb-4aab-bff5-d590fbcc8aff", "indicator--b2cd471d-7851-4114-9d46-8be5d459f504", "indicator--d4edbccc-d0a0-4aea-82a9-fe85fd5a30d3", "indicator--97276cda-2035-44df-b13b-01a035316b1b", "indicator--52bfa155-bbac-490e-aae6-80fa2aac47f2", "indicator--f39d2877-62bd-4c3e-bcd8-c4d633c3dd1f", "indicator--3a5c687b-7da4-4bbc-aacb-7da777c78206", "indicator--7516bbfa-5216-4525-a50b-bd73c64dd6f2", "indicator--303c8dc7-6a93-461e-96d9-348ce926cd52", "indicator--8db5d74c-052b-4a41-a45a-b82c19b400d2", "indicator--c623c4b1-7474-423b-9933-c0a9502041f3", "indicator--8233e64f-75c8-4681-92b5-fdaaab3d2f8d", "indicator--5f18ef9b-2c15-4729-9ed2-f7e8b6f2b89c", "indicator--68588bc8-a4e7-4c11-8b06-58a54be52716", "indicator--ca5a8cf6-7f4f-4d44-960f-8e8fd8cb7631", "indicator--ab5b5faf-a553-4e56-b472-6e0fecc641bd", "indicator--4f9a79e4-62df-4a00-8af7-bc41ee600b6b", "indicator--94ca8081-e477-4b78-b06f-9016e8bee1a0", "indicator--47acf0eb-17da-4c00-87b8-be54a5bce00c", "indicator--eb88be3c-b760-4345-b9aa-5677881546f9", "indicator--a5941505-855e-47e6-a181-81220903a605", "indicator--d01cfbd0-429d-4173-a010-365ed6c838d2", "indicator--0b356bda-1d03-4e28-8685-16add6ecba53", "indicator--94949e2b-cce4-45f5-b07f-e3cac27a5f82", "indicator--3f20c013-1659-4b78-a150-b9e411661404", "indicator--2bf56184-213e-446d-a534-e99270c492dc", "indicator--981b6cc4-5792-4ecc-8570-9230aadecd2f", "indicator--d2078237-d4d5-4135-95ce-ad4ae6ff7bf9", "indicator--bda76424-d7da-45b3-a9bd-ed1a426113d4", "indicator--cd2ae292-2bbd-4ffe-af0c-48e006b39443", "indicator--4033a669-f592-4919-8249-8f907ead08dd", "indicator--19017187-e632-4ede-b5d6-b63e04d2d99d", "indicator--d9b0161e-01a3-45a2-9bf7-29596c844a5c", "indicator--56aebfca-b1a5-4d4b-b847-aa49a6a0f848", "indicator--cc4b29f9-ed19-4b17-85ed-1121d9d90dc9", "indicator--f5e52a1c-75d7-4f97-8127-3342b67f6941", "indicator--32bf9b87-ad0b-4398-ad28-0bed113a4447", "indicator--79515316-4f24-48d5-8dbe-3d008bdff942", "indicator--040bec9e-ed5a-419c-a821-73f0f0727547", "indicator--be70df81-70d7-4dd1-815a-ce7867640121", "indicator--2cfecdbc-3380-40c2-82a1-8b78b4661ed9", "indicator--a2afec4e-da16-400f-be1c-80a017b0c26e", "indicator--314b7cae-3ff4-457d-b6a9-10239cd9915d", "indicator--31c75baf-3ad2-4094-a033-6cd7456b1c5c", "indicator--2b0760ba-ee22-42e8-8089-da77cc933530", "indicator--fcd2a815-869e-4fff-91d7-22f5eb078fcb", "indicator--2b94c263-ca1b-4a7c-be2c-e5c718120635", "indicator--70b11261-da22-466d-ac4d-3aced99bf0c3", "indicator--b7795cc4-5659-4afa-8639-790a57d1a5da", "indicator--379d2215-a384-401a-97a3-058f41d0143d", "indicator--49ced253-6446-4d96-b8d8-9caeee74ff8c", "indicator--9b330fc5-72da-453f-98bf-50e433598d02", "indicator--93608522-2f58-47de-a9e2-ea2949f067af", "indicator--4da95945-3b96-4c25-9da9-6e90ed810253", "indicator--a94d5924-b802-41b4-bbff-a0cbde2f181c", "indicator--517022a5-dba7-40bb-974b-a3d573a8937d", "indicator--efb7605d-0f8f-4fbc-b89c-33792bb8aee8", "indicator--c8c1bb2a-1218-4243-9cf9-0ed29a7313fb", "indicator--e95ec99f-7496-4b9f-86eb-73a81b16a9f6", "indicator--f9b8a8f7-1988-471a-be8a-65416a59ff42", "indicator--14fd160a-5f15-4414-ade5-b46627accd86", "indicator--f2be48fb-80d4-4a43-9343-0685d025b219", "indicator--f49aa7dc-9d76-474c-99ec-39933d13e0b4", "indicator--95c3f1cd-41ad-4f10-ad13-27676503d3a1", "indicator--2e8bac6b-29bc-4c74-ac4f-0cf3ba3125a3", "indicator--5bc3f58d-de2f-479a-8b8b-898aa9f55300", "indicator--a3df88b3-95f0-4b7a-a1e1-42f86bc3f8a5", "indicator--fd96a9ab-9fcd-4ba0-b799-5f5aa90aa63a", "indicator--9953e47e-153e-49ab-9995-2193ebb23381", "indicator--3dd8ea04-7918-4e38-b45d-f7ce94716dc3", "indicator--da42162b-b522-4d45-b356-8b0abbd928bc", "indicator--96b3d8bf-8a88-4db8-a83e-99d5130657f3", "indicator--30609a63-3b69-4d40-ac85-d3c8a7edb6f6", "indicator--93c4da6e-c5c4-4867-bf3b-5575a2ef12a3", "indicator--ad763668-c090-4eb6-b782-015d9a061bbe", "indicator--02ac8323-5a99-47c4-ad63-31df53601238", "indicator--f5c42d64-6cac-4659-aaf5-ef7e60a14841", "indicator--a6ec162b-b114-47e2-a016-1445029a1b90", "indicator--421f2582-09a0-40f8-9b93-28a203fd2c4f", "indicator--490e0bb5-0611-4689-93db-a45543d8a363", "indicator--b256cfc7-3eec-41ab-9e70-5f00d87c21d8", "indicator--9566716f-4f78-44f0-8bdf-fb7f74076964", "indicator--1ec70576-565d-4e33-a317-8d4ff5adc3ff", "indicator--26db65cd-38e2-4d37-8ed6-498382b33f30", "indicator--738c5079-0411-4f86-aa47-b36c8a17c0da", "indicator--dea7c783-522a-4adf-a8fa-3b565ff39c00", "indicator--de836d18-b5fa-4bca-a4e3-ca779be5b7a6", "indicator--e568634e-2af1-4433-8563-aad0a4b6ef79", "indicator--ff339f0d-4f5f-4678-8626-705390f80ecd", "indicator--cfd0e1c7-90ac-4c3c-940f-9b39c4d527f6", "indicator--4c89cb99-d275-4ec7-bb9f-b65c763a8334", "indicator--f782c5f8-df0f-4be0-8437-5a3a2b74cb11", "indicator--6697acc8-c354-4d1b-b741-2c12d771bb64", "indicator--fa1902b6-182b-4b42-a7f7-4ba3825660ce", "indicator--b744da65-2348-4620-b667-b458a538bbfa", "indicator--e93b8fb3-98f1-4461-b1bf-d96f5eb971a1", "indicator--08bbc496-a5c5-477b-a3ca-c708781a2287", "indicator--e52a201d-26ab-4484-9a34-94a6a038dd86", "indicator--889817d5-a199-4431-b2d0-4ea9c38ed1c9", "indicator--a8ff8424-7584-4257-b1c1-9552a2c7b4cd", "indicator--35464d94-fd92-4802-b6f0-94d31631446f", "indicator--3e7f74f5-705e-4e52-bec8-f1c01fc5bd31", "indicator--b5920279-f23e-45cf-b817-a7879f3d62bf", "indicator--08839cf4-0277-4991-9544-14abba776faa", "indicator--39600432-8e27-4c76-9981-8c13f7477984", "indicator--f2f1fc87-6c65-417b-9e19-c569675c2275", "indicator--68968f49-645b-4394-90be-420c4de8e396", "indicator--79c5a2c6-ff73-4227-932c-b9b0e5edac32", "indicator--196321cd-3c31-4f7f-ad9c-23afc0acf8d5", "indicator--3ecb871b-442b-4b09-b7b1-47b8bc6a9eaa", "indicator--40113ac5-0673-445b-81b1-435e44ccdf23", "indicator--e78ec1fd-f09b-4928-b7c4-e520a86594aa", "indicator--29ab4f40-23dd-4c86-9418-73401e092929", "indicator--80093019-fdbb-48a2-bcaf-f4ca89f71784", "indicator--7d1caf38-830e-47c0-a3ad-f83fc2504fb2", "indicator--1d97b3a4-1ce4-45a5-83b9-683a161f83df", "indicator--4b949e0f-05b7-4843-90a5-b56a769114a0", "indicator--9b545a02-373d-49ed-99a3-3d39a7996c0b", "indicator--33a5c93a-df48-486e-a2f0-341faddf9483", "indicator--b06fa7e4-8fef-4a3d-b648-54c757eee8af", "indicator--1ae6b554-9b6b-4dac-9a6f-0faf65f1fa8e", "indicator--6b369994-8ac9-4ea8-9ff4-ac922198a1be", "indicator--16377d34-f4f5-4e1d-abdd-9a13e5bd4c1d", "indicator--4fea4d6e-7c7e-4df3-83e9-c333fd8e8c1f", "indicator--96687bf3-098c-41bf-9b21-512a54860aa1", "indicator--aee5293e-16d6-43dd-80e5-49c58e2edf7a", "indicator--4a4085c0-76d2-4617-b832-3ac2183fe97f", "indicator--e1652a41-1d1c-402d-a8d1-294e4aac30a8", "indicator--5e94886c-4be0-4c51-80c7-a12bd2d132f9", "indicator--d973600c-8e04-4637-94b4-d232b5faf0a0", "indicator--c16d6cac-71fe-4665-a756-2ef7a9fffc3d", "indicator--b94e742f-849e-4f20-9e6e-1b4026232538", "indicator--b7013c6d-2d0b-41bd-aaac-e0bf43c545d5", "indicator--67c75899-cbbc-44e4-8980-6d5a6f68a901", "indicator--ce64eb55-9eb3-425b-a254-f68c408655c8", "indicator--dbf64efc-4208-4ebb-adf8-839db4451891", "indicator--7b1456a4-24a0-4e6a-baae-e5a20737501f", "indicator--23037f69-0c18-4cc3-aea1-3593dd0ac138", "indicator--ff5fb57f-1235-46e1-8307-91425031740d", "indicator--ff114dd8-4d57-47b9-bca5-929a0b1bdf7c", "indicator--42dd5edb-3251-4de7-8e96-6c2cbd750cbb", "indicator--fc148b3f-3454-47b1-b0de-99d433f1c8c7", "indicator--c77ca211-3760-4947-8c1d-e76a239f29ce", "indicator--7d5a50c4-2fd1-4bec-91eb-835da2c2fdc9", "indicator--37374050-c206-44f9-b890-4bdebf4d673b", "indicator--6f03b35a-40bb-4698-b7fe-e53603db53f3", "indicator--ea5784f8-bd13-44bc-ba65-4cf4c93f73ba", "indicator--81873506-8e10-4bf3-8601-79a152272e69", "indicator--0799f3d9-7b45-4ca2-91ae-ac252712a135", "indicator--e84b0d31-e105-49c7-acde-b9dcbd4ed881", "indicator--538a821c-5a1a-41d0-88cf-1d2ef26368a9", "indicator--b83271a3-c98b-4988-8b78-6e9820ce46de", "indicator--1480865a-49ca-436f-ab4a-1755adf09de2", "indicator--2a687dc5-202b-463b-a06f-d269669133f0", "indicator--d66758f4-6e4c-47b3-a6f3-b1d1186bff74", "indicator--d9a0446a-5e9d-40d2-beec-482771d43cbd", "indicator--e1811251-8ad9-48f3-b247-cff22a368885", "indicator--054ce0aa-7ea7-4b62-9f92-e41171241f3d", "indicator--c3d1a051-d6e8-4f9e-a4d1-a9e20625a469", "indicator--f8f00382-c32a-40fe-813d-d6f10b32d3c4", "indicator--d9bd5bb0-3e3e-49fd-a494-cfa4920cfe64", "indicator--ef1e517b-c8e3-4264-9cbb-37c699a394cd", "indicator--0fa2b736-6051-481e-a98e-82d9764ae338", "indicator--0c5866a4-e2c9-4850-bdc2-aa55666aa540", "indicator--880d743d-e4b1-4228-a6e0-d11e01fbc1d0", "indicator--028cf5b8-a271-4647-87da-da483dec885f", "indicator--24521c56-d628-49c8-acb6-5e222c2bfa42", "indicator--9ff0ee79-4f7e-4402-b0ac-878392c43ebb", "indicator--c354ff25-3bb7-4eae-b99f-4da62118ccbd", "indicator--1fcb25a5-81ae-431c-8045-811f71d1b9c0", "indicator--0feddb58-e6ac-4568-803f-62f3cd9a7989", "indicator--db50b451-375c-4614-aa01-fe35670ed85d", "indicator--4c00efb2-d33f-4047-9530-cb69f1142217", "indicator--e4bea2af-9fe8-4510-93af-59a518b12a1b", "indicator--4f3ed462-a402-4773-9bef-ba809bf2753d", "indicator--359fb03d-9ab1-402c-b166-da90a584ea69", "indicator--4d687f38-4d2e-428a-a944-c03903bde233", "indicator--46383ed0-e482-427e-a26c-50a8223260db", "indicator--f03185da-1c43-477d-b015-11b519a18ea6", "indicator--960f3e25-d41c-4825-940a-f4c3872382a0", "indicator--7cc1518a-fea7-44c4-8c0e-24e9c4dedddf", "indicator--5bae6ee8-73d0-4760-8554-7d8b3b53f523", "indicator--7017742b-9c3c-4e5d-b76c-28dfe15d8fd4", "indicator--67068066-0678-4043-bc19-0ddf23285bd3", "indicator--36c17d6b-c4fe-49be-beb7-b0888ff4e927", "indicator--d0d97b01-dc17-4553-92af-e8fd98b39de2", "indicator--118b5f93-df17-4bcd-9e81-9429bb6cdad7", "indicator--e349ffb4-9da5-4b81-adc6-27696f22e607", "indicator--38c266b7-b40d-44e7-94eb-47df46eca99c", "indicator--b2b40267-ed4e-44cc-9f38-1ec50f280af3", "indicator--d2b2620d-04cf-4e78-8a87-571ce5be54c1", "indicator--894abefb-9b5e-4f8c-9d5f-289a4a02a335", "indicator--0274ded7-018b-4662-8b81-6804fca982d7", "indicator--da8a0d82-d49b-46cf-bc80-64f0e692e291", "indicator--1f579e3e-2dcb-40f3-aca2-87d8a470af27", "indicator--cff723e2-a881-45f3-b2d7-d8a591a1ed05", "indicator--4ae02c0b-5611-4d45-981c-56ae0fd3d229", "indicator--e67df876-ec4b-4a87-9299-eaa8dda0d59d", "indicator--8437ebb9-c80c-4d2e-af54-6634457a80fe", "indicator--9993d98d-28c1-4329-aac1-fbdcb4feaaf5", "indicator--6640f025-3892-425b-9169-2ba3d2fc4d73", "indicator--5cb865b4-82ed-47c7-9f65-938d74b12ef7", "indicator--c3ce9c80-f95c-4493-a1d0-00196cdb91dd", "indicator--c101f2a3-9197-4a7d-97d5-87181cd31631", "indicator--565eef76-abd4-45a0-b3a4-64ccaedc88c7", "indicator--cfc1f366-4b43-4f05-84d0-39597c62ceee", "indicator--e327003e-6a6d-4079-941d-782a2837e87d", "indicator--62b6213b-be7e-4508-843b-d76001850263", "indicator--0c0564ff-e880-4896-a12c-d9a114e14ccd", "indicator--2b404a55-9241-4b7d-bdcf-d055ed604e87", "indicator--590a5823-b584-4a1b-bfc2-6b626b087445", "indicator--f54b25b5-2ea0-465d-9b5e-a01dd02d0f4c", "indicator--39d7123c-787f-44e0-aa13-8cf8e1fe4eab", "indicator--9930c230-e2c1-44a2-8c25-1f332df87282", "indicator--d8fa82d7-a588-4734-a845-99e9ed872345", "indicator--f95e7181-4980-48a9-8834-6c23e5936577", "indicator--11cf61c3-ddaa-42a7-8504-ec0e4d404df6", "indicator--0bc4678f-a70a-444b-9cc6-d1f87c5046fc", "indicator--ff971ce0-9cda-4249-a7f3-d84a81d8f0ca", "indicator--5619d1b2-7941-45a9-a7cf-c017a046faaa", "indicator--ce535fb1-24cf-41bf-a1e5-cf4726979139", "indicator--0fedcfca-5a91-4359-a2a1-bde6dd40aed1", "indicator--18da73af-0de2-4022-b4f8-4bede7ada095", "indicator--3ac13990-a71a-4a8f-b343-8df58ae31ef9", "indicator--bd7a4177-d500-4c64-9563-d96e6a96fa62", "indicator--382ceee5-4a6e-4dba-a74a-02b486fe4232", "indicator--e95cf03c-4ca7-4943-ad89-a7a0acb3fca7", "indicator--37ea0837-74f0-4ab7-9a6b-ac86b3178353", "indicator--97e252cc-b2be-4c10-9f52-471c6dd81c5a", "indicator--77d353f9-8bc5-4d64-be43-65b928f6a3d5", "indicator--365571e9-d61b-4897-b833-d4faa5dcf641", "indicator--16673043-c6a0-4fd0-b6ef-f49ad8866efb", "indicator--0d94a133-6c11-46ad-b993-0e050397c1ed", "indicator--1fee917f-b87b-48a7-8a63-8c4911fc40a7", "indicator--1c7562cc-0521-448b-8b57-d0cfcd6bacb6", "indicator--704fccca-8aa9-4e2f-9e46-83142ed89993", "indicator--868056e4-1bce-44fc-88b3-607bf6c7ff3b", "indicator--a9b76a44-4c89-4c16-b708-421fc20680e9", "indicator--d8041d40-fdf2-4cb9-90d2-33f1ef75346d", "indicator--ecb0fbd8-f05c-4528-8ba3-08328135b4c2", "indicator--1a7cc57e-bfd1-42ea-b1e2-7f253a636b23", "indicator--fe45076f-6f86-42b7-a255-66dd338acf70", "indicator--1b5ee78f-d611-47b4-ad3d-f5594bab8bda", "indicator--984b62f6-5195-4a3c-b552-93d20020cd50", "indicator--d98b9bd3-6cc0-4dcf-a81c-3c1ae29434df", "indicator--123b47e3-0dd3-472a-be66-f30127954d9e", "indicator--07e39fc3-4fb7-4db0-939c-db14fb22de21", "indicator--6609f072-17b1-46a7-bf57-b23a7fb713db", "indicator--9f2332c2-f859-4f24-81f3-5120050bc0df", "indicator--33e42342-7c7f-4d28-bf95-5b57053d986c", "indicator--c08924f4-2199-4b60-bea9-b4426ce145c3", "indicator--1056bf13-5dff-4ffb-8229-0ea68a3e3843", "indicator--aa55f1fb-9716-44ae-9a30-43aaf4e67733", "indicator--b06a4936-e215-408a-908c-2f74bc9171ed", "indicator--5cfb3542-611f-4e72-90ea-0b49d6b0da39", "indicator--dc7e79fd-c2f8-48d3-9da4-51cbb5662238", "indicator--bbd77689-c003-4522-98d0-29757db284c8", "indicator--21fd44fb-af5d-4ec9-8efc-ff020c7cbcb8", "indicator--52508fe0-e536-4d58-98a8-444dd76406b5", "indicator--22ff088c-0bb6-430c-837f-c4b390adc0f1", "indicator--9f719c60-c428-47c6-8b93-d11ce61ecca5", "indicator--4c68769b-6e38-457a-b8a3-ad403b0d8bc7", "indicator--c9bd97af-0988-4356-9231-720691b958e2", "indicator--f0a8e04c-681b-49a7-90e5-b125be3165ff", "indicator--74fa5613-0262-4e32-875e-204372dc2bb3", "indicator--201ace46-ba6f-45ce-a7dd-3686c563203e", "indicator--243b14cd-ced8-4970-8569-0fc8ae92566c", "indicator--76cd0936-377c-4ddd-84d3-8b31b2f6a20f", "indicator--a06ce51c-0959-42a5-b420-a395dba3301d", "indicator--4c5d634c-c5b2-44fb-9d2d-6b039d1ea90f", "indicator--c2d25b40-2e8b-4cd9-ba03-779f08f5281e", "indicator--bfbb7aba-e659-41b5-84f1-76495bee2231", "indicator--707a0dee-c99c-4b6e-8f5a-dae90021095e", "indicator--c51b9dec-57d7-4f94-a14d-a46917a2f229", "indicator--5c864d58-9a2f-4be4-9cb8-4ef328922c3c", "indicator--9aef95df-35dd-412c-aff3-e97d5af4417b", "indicator--818824a2-f297-489e-9248-19de9a06c97a", "indicator--9d6fdfbb-7aa1-49e1-8055-4dace65c6b46", "indicator--c2cd18e7-942f-4ad6-b40c-83b100ef5098", "indicator--41a0649b-a000-46c8-9816-e49cb716c0d7", "indicator--cb37842c-538e-4097-a417-aef165b81889", "indicator--7fbc49de-0434-4795-984b-d91e139231c8", "indicator--6b4b90e0-e825-4ecb-9d79-7647d104e4a8", "indicator--45e6369e-3593-4dd0-941b-5838efff0432", "indicator--fcf126a5-90c1-414e-8a53-121e22738546", "indicator--14a16618-b968-489a-a869-06146b76e05a", "indicator--1a6283e9-4d41-4a7f-9be0-5ee07d7ed58e", "indicator--5f8dd368-76e6-4e88-bf30-e0c7205b1e6f", "indicator--2df2ada0-ae56-4ecc-9a33-ba9f6e4dbc81", "indicator--16225648-5d1c-4fa3-a67c-a7a0da6321aa", "indicator--6305dd0c-1513-4251-96cc-0abe088c45ac", "indicator--4713f319-c6ed-43d2-b05b-9a02e1a17f07", "indicator--3567c505-4e5e-4d37-983d-09ff4c92c84a", "indicator--8ddb017a-d799-4042-a444-23806f2ba220", "indicator--a65c5575-5812-484d-88b0-a4f380262e7f", "indicator--c70af74e-5c2c-4e6f-8008-4db0d066f7ec", "indicator--23c7fc87-ce79-40ba-8d6d-38e0f3e0b006", "indicator--eae8405c-e587-4a15-990e-7162d05496a3", "indicator--813bfb5c-fb7c-45da-be4e-3fb7c171622a", "indicator--91371ed3-e2b5-4695-bf2b-e591ce5773b4", "indicator--a68f32ca-31b2-4426-a541-6a976913bfb7", "indicator--363c244f-0228-4695-b449-a30be128ef13", "indicator--7d81373a-e4ab-4dd1-98cc-75e7d2fccfe8", "indicator--79b65120-2ced-4eb8-9ab8-66b75c95ac65", "indicator--70ef3b15-88b2-4e15-865b-779a027518a6", "indicator--cfd07073-9e96-4e12-95b7-71bf2ae46a50", "indicator--4bb3c1ad-6d88-4ebc-bf37-4c8fd5eea102", "indicator--8e343708-9f77-4ca6-87f7-aeb028f330fb", "indicator--126f47ba-25c8-4fcc-87fd-abf5308e3a9e", "indicator--46690dbb-d208-43e3-b76a-62c19f2d91a5", "indicator--2f052db1-a829-49c8-9869-52eca3159508", "indicator--bce5619b-70f3-45db-a01f-c09c083dda89", "indicator--56bdba51-a22b-4f64-9d8f-274a00b30ae7", "indicator--c0ad67df-6a18-4478-b065-5c4e0c7930cc", "indicator--7612b896-8700-4d9f-83af-2243f243f5b1", "indicator--86a22852-0a5c-4653-b4d7-7d6c80f11916", "indicator--f66a60e7-c22b-4058-9505-f4018088e048", "indicator--81acd9e3-db02-4f8f-8a42-a86cd4522e61", "indicator--af871911-ae9e-4d21-880e-d4cf764a1248", "indicator--d70913f3-42ff-405e-9a7f-f340933c9dfb", "indicator--d32db5ea-d82a-4ebd-b585-42d4b8f111e3", "indicator--a31071c4-660f-4d3d-95d7-6e3ca5a823e3", "indicator--9dd69e3a-dd62-47b3-970b-ce142b0f64b2", "indicator--008d2b44-7aaa-4d9d-b8e9-83b07cec5f74", "indicator--4c74f4dc-edf6-4aa2-baab-64fa64e5a9d3", "indicator--b7a6fb49-da5c-42a9-83ab-f66484a41756", "indicator--18d4a007-8f3b-4220-b32c-1722b5a234bd", "indicator--3140bad8-6a84-4410-b4e4-7cf5a6e2042e", "indicator--e0364ae9-7406-4f4d-9dfb-95b630f80bd6", "indicator--681dfcb8-4fe3-48de-9c5e-ef0553b55542", "indicator--ea05977d-6aa9-4020-ae92-fda2db30da06", "indicator--cdd18f83-de1e-484f-9dc0-7f64f66fb8de", "indicator--15334acc-5e31-4977-ab17-41179be48fde", "indicator--94ce9041-cecc-4921-bd09-803295ffaa09", "indicator--eab33c2f-3540-4cb8-ad75-400c6f4f3618", "indicator--5efc440a-bb70-46d4-9e1c-b04cb6a6603a", "indicator--30161ad5-84a2-4137-990e-3da5b98b0bcc", "indicator--466c17db-9512-43c8-90ea-e7da14705c69", "indicator--a3b9ddaf-5327-4c9b-a794-76870069a410", "indicator--63878617-a7c4-40ea-b91c-705ff1776e2c", "indicator--e77b4d38-b8d2-4082-8b48-b19417ce1eec", "indicator--8171eb1a-0a57-453a-8325-1080262d9900", "indicator--9fc56b3a-d66e-43b3-815b-68561ac2cc64", "indicator--4daf3176-84d6-45ea-9804-bd681493b40b", "indicator--59bac86f-474d-44a6-ae5a-c0a766ecdb46", "indicator--7b5f474a-9da7-49ca-85ee-920a7a0c80d5", "indicator--f35bfd41-67c7-4295-953c-4ab197b3353c", "indicator--8a405b2a-dd5a-475c-8ed0-a6c168e3095f", "indicator--fd87af29-bc02-4872-b8d1-0eb4d6340ddc", "indicator--f680585d-2559-4c7c-8654-0b5f26cb68d7", "indicator--3696cfeb-6eee-4c9a-bce0-1a08484bde42", "indicator--bc969591-13ec-440c-813f-e00f11c520ae", "indicator--f15c6d72-dd39-48d8-b247-f28a5e4b1253", "indicator--18b0fb89-2a67-4b55-b512-31b589fd8263", "indicator--7b9d50dd-4834-466a-a358-276671cee3ca", "indicator--5cef37a0-b4d6-44bc-87d1-2397ff41a3ee", "indicator--989e11e6-ed1c-4792-ad12-5de438698f66", "indicator--1c113b6d-a758-4d97-9547-3b1dd03930e6", "indicator--f054f327-cf92-40d3-9d4c-23275ce43e55", "indicator--c8559b77-7f9b-4c10-9d04-e03028b10335", "indicator--1e4386c9-b487-4ecf-b604-aa99dc46e4f0", "indicator--27048840-326d-482f-be90-de2e1df24855", "indicator--0e47d89c-135d-4b1f-b87a-9dd685a77b21", "indicator--73e3b641-5f7e-4b0f-8d16-d9851bec35b8", "indicator--9ce040b0-9307-4c4c-9b62-b3c7beae183c", "indicator--883ffd6f-f369-4f0b-90d7-6a1ded2064a2", "indicator--77503e78-95ea-4c3d-9e15-a6776202ce3b", "indicator--2789ac76-0576-420e-86ce-efdf0a21fdc6", "indicator--542de637-3821-4269-a413-5c3ed8ea7fa0", "indicator--ff1dfbc3-a6ca-444c-8d1d-a7e36a5be773", "indicator--29d8ff7d-4f03-4d49-9055-1c5da2711007", "indicator--01314e04-6d0f-4deb-b8ef-5ea9d48492a2", "indicator--5d891703-5f2c-473b-b5a0-153afc0ffb1c", "indicator--27edb68a-8916-466e-9a35-abf9898a17cc", "indicator--23d4e6c8-08ed-41e7-945c-6ced19667653", "indicator--12cd3bba-46a4-4fc6-a2ad-bbf28e573d38", "indicator--89af85cd-d878-4b5e-ac5c-02639348884d", "indicator--cbe58a00-b0db-4d1b-b19f-13191a6d28b5", "indicator--39560db6-2ac9-4234-a9fb-f7c567df9d68", "indicator--7253c685-6ece-44ca-8599-499fe8292422", "indicator--9987f076-02e6-4ce3-9c94-6c5a5222c53f", "indicator--929882bf-200f-4912-9c66-6b0638d55627", "indicator--c90834b8-6618-4dab-af3f-520429a621f5", "indicator--cf53860a-50cf-453b-9367-c247546ff1ae", "indicator--a7a56754-bece-4ed6-b948-35be570fff5a", "indicator--cf399dbe-bd52-45bf-a943-5b647ab02728", "indicator--9befff1c-2b6d-4397-9680-ace27420f337", "indicator--e409fc39-c336-4b6d-bf56-086b6d1a95bb", "indicator--78c1f684-7704-44fd-af91-8b8909aa2419", "indicator--ff0b0f18-9a18-406b-8d64-3dac3a75a33d", "indicator--a1093ff6-c601-4413-bcbc-b771e89ce92f", "indicator--056286e4-fc90-4321-96af-1cd3d6b14d53", "indicator--9de67f16-33c0-4c3b-b4ee-349c70d35ddb", "indicator--bf1316f8-99ea-4bce-9297-5b929034baaf", "indicator--a08fa70a-5cb9-468e-8385-6c42bbbd007d", "indicator--4454a062-0a82-474a-baeb-7ffaa584a746", "indicator--4f0a4ab4-64fe-468e-a5b9-515306430d62", "indicator--2c5050d4-c236-408e-9144-bbfa08c932b4", "indicator--d2733bb1-d0af-4706-9adf-200b66dbfaca", "indicator--ea848770-8745-4d37-a560-e1a188d7590a", "indicator--887f6ad6-6b8c-4515-8faa-d250290ca186", "indicator--afa4fe04-e6f3-4562-9915-6fc1de527301", "indicator--b23bef7e-2d87-47a7-a5f4-9e4a8c8bb0ca", "indicator--69514775-46ba-4ed9-aa27-a40413a3b0b0", "indicator--d2fe4604-386e-479b-8085-5e77d7ae732f", "indicator--8a181ab7-935c-4595-82f1-c6c194e99c78", "indicator--3174533d-2ac1-4d41-b948-493bae981008", "indicator--12656ae7-eab8-43e4-975f-077afa600e5c", "indicator--a6a4d69e-871b-492c-87e5-a370dde75d46", "indicator--022bda89-2d6e-4997-993a-2b4023bce568", "indicator--65d5cba5-d0ef-4532-9364-9b38e5c86427", "indicator--9a4a1598-27f7-4c61-a3aa-a21588b66f62", "indicator--8ff94a13-6da3-4b59-872e-572a8956b2b9", "indicator--d5f36dfa-454a-412c-8688-6ecaaed70a15", "indicator--bbf2d418-e0b7-4ec0-827b-f76209f5fa10", "indicator--474a30b4-6d35-4afc-b162-ed93e2414f74", "indicator--be6be0b9-6ec1-41d2-a41d-91ec0748e3e0", "indicator--76c81708-4c4f-4be0-90a7-f91aaa6a25f8", "indicator--7cbfb4c8-ac4d-42c7-9590-3762950e119a", "indicator--99e81286-6cdb-4db6-9313-3b698515a280", "indicator--0442dd1c-5c6d-4a6c-a113-a3924db7eeff", "indicator--9e6cdb08-2ace-43e7-b37c-e879cae4c551", "indicator--28da1404-46b9-4fef-9e21-234b2cbccf15", "indicator--a0bbc465-9435-424e-b0c6-d0e2174de39f", "indicator--731266b4-02be-4495-9dd6-033a0a6071b9", "indicator--3802c25f-b3ac-452c-b012-68e631bd7bb7", "indicator--af5570ac-463f-408b-b8ee-85a343ae5a77", "indicator--47d2374e-927d-4347-ab8c-f4e1f6b84bf2", "indicator--2f779e95-cfcc-4fcf-b86e-93dbc8411b8e", "indicator--c340299a-75da-4554-a7e2-6e3027d35349", "indicator--b60c17db-32de-4c62-ab1c-e04accaab7f2", "indicator--0d62ea25-f59a-4ee4-a7ed-9af55d807a8d", "indicator--858c0129-cd64-4d94-9652-f3c5ce872d97", "indicator--29b452b3-39da-4a9e-8d65-e1e099a31c81", "indicator--6fc3edb4-f052-4e48-a539-d258db1539a9", "indicator--ed502f64-5758-4823-9d9f-cdd242c22f1a", "indicator--f465148a-449c-4dcb-b67e-2c76176b049f", "indicator--749516c8-9251-49c1-87aa-296e3f881ff9", "indicator--1e4f5bb7-1ffd-4eaf-bb66-5bbedd95e339", "indicator--d87a696b-0cde-451d-9e2e-c9003508357e", "indicator--e6ef08c9-d485-45f9-89d7-dcb7c383542f", "indicator--9bcb1698-893a-48c4-acd4-2e178c0039b7", "indicator--602a21e9-cec9-4a06-ab63-55edf32461fa", "indicator--4d2a4282-1b81-4d0c-a33f-d6e4cfd64f29", "indicator--084edd09-9d26-4e78-b8de-57a2aa9e1eb6", "indicator--26b187e4-423a-416e-83ed-16af6f0d3737", "indicator--773e4572-333a-41d4-a9f8-45bca371e4ba", "indicator--b9274907-aac0-4bd9-bbd9-5b3a97b63e90", "indicator--7ace19e5-efd4-4abc-9aa2-e484c937710b", "indicator--9f4d261b-d579-40eb-b3da-ea0d3f8c1d5b", "indicator--5d870494-1005-48ec-8be3-c832fe4f71e6", "indicator--68675eb0-7eca-4799-9a39-b0a424b06931", "indicator--5b3d135f-126c-457c-a8ac-8d91ca00a2dc", "indicator--fa446bc6-bda9-4f79-b9ff-9fdd594680b0", "indicator--bf418052-53f0-4f75-9ee8-05b93389177c", "indicator--16850b98-28e3-481d-b422-9cc5cdb5b8f2", "indicator--25407b08-381b-453b-856b-ce1de14f1965", "indicator--f3c3e289-8b9f-411c-8303-a13c35217127", "indicator--71788eaa-0744-4adc-9d6b-681a6470832b", "indicator--6ed80b33-f126-45be-8565-eaf20c2e8dc7", "indicator--d322fecd-f220-4a35-8a2b-8d2d7bb70339", "indicator--02f50231-6623-4a47-be13-615d92b4cb94", "indicator--766328a5-b3cd-4bd4-a00d-df249c4585d5", "indicator--6d472baa-7eae-4ec7-8078-81a100d7baf7", "indicator--2a903777-eddc-452a-9622-3b51f5eba257", "indicator--a51febf9-d4c9-4168-bbd1-39b2f3c995e8", "indicator--65491e17-e58d-4e32-962d-b9e38a2f773d", "indicator--749c4a87-6fc6-43bf-9ce8-c4bd26a16141", "indicator--9e16906d-c47a-4a63-857f-8749656e5b62", "indicator--f8dfed5e-34fb-4038-b24a-0cfabe942f1b", "indicator--2abfa4ae-d58b-4308-863b-f5397d86cbd3", "indicator--7431b8cc-8392-45e3-a5ba-9ed55feb65a8", "indicator--63bb379f-5a8e-45f7-9fcf-fc45dd6e91e6", "indicator--1c71011b-9b87-4892-9eda-175c7227a56c", "indicator--43ebd8f4-1efb-46b8-bd73-140cec380152", "indicator--145e0ef2-e196-4bbf-bd27-705eed4212ff", "indicator--3d2fe83e-6a9b-4fda-b76c-b893139b94b2", "indicator--33e4dfa0-65e0-4862-9f99-4407ef1bbe48", "indicator--eabe35b2-3647-4b13-aad3-af62874be7fc", "indicator--beeaa2b3-52ef-49b7-9c24-3ac88517550f", "indicator--dc3e6152-7058-40cb-812e-333590c1ee19", "indicator--74076a6e-7ffc-4c47-818f-3a8c470c7e55", "indicator--a45da1d5-101d-4055-a3b4-245937bd0353", "indicator--6996e710-0ec5-4eb8-8032-e0552031ef65", "indicator--94a3a5a6-e94d-4068-b83e-0ad75c608826", "indicator--a23baf62-25ae-45f0-a5bd-9754c7d994ba", "indicator--ee1b5b59-93cd-446b-8768-9b2e315d484c", "indicator--678fe282-d83e-44fe-b87d-6f46fe5b002e", "indicator--a7f292aa-f7fa-4c03-96ea-0086e3debc4c", "indicator--b51d8a08-a268-45ac-8e06-a67380ad7dac", "indicator--a0172788-f2ce-452d-b568-6094e0e31f36", "indicator--eea6ac00-d44c-4e73-baed-d0ef1beccd9d", "indicator--6a124cb5-dc8a-4271-9c6b-5a61dc90563c", "indicator--949f743c-47d4-4eed-b672-a5cb51ed9fb7", "indicator--7fefc1e8-29d1-44d9-8882-52df4c3d71fa", "indicator--94460b10-1a7e-496d-96b8-5848ecf75cab", "indicator--a2617cd2-adbf-460f-9993-27719c262110", "indicator--e864b365-eeb6-48e1-9106-f56513689e4c", "indicator--036ab9ff-840d-4a6b-825f-299109e3ffad", "indicator--48ac7f93-7c56-4f7e-82ef-3f6a578432cd", "indicator--4b82a367-30d9-4801-8be8-da8d5d1c0298", "indicator--d8e71408-57a5-40f4-b434-972fbaef4a43", "indicator--ee1edcfe-ba4f-4b3b-8ee3-bc7cc92fa1d5", "indicator--6916eb74-0f16-421f-a68b-0fe5b2a9f621", "indicator--60b69470-c09f-43a1-9887-9d1a7c61d7b4", "indicator--df25591d-604e-45f7-a8c3-4038a50a5190", "indicator--2c71ab66-6a6a-4b47-8c51-f99467298d6c", "indicator--ee15f46c-eea7-4615-b9de-e5ada94106bf", "indicator--7aa56b4d-a1fb-4993-a759-f1de8e669f01", "indicator--23f0bffa-503c-4469-8b48-5ae9fc07dd62", "indicator--bc39d28c-1d41-470c-9425-418856dd36db", "indicator--d5675713-d6e4-4b00-93ed-c1b28afc74bb", "indicator--d4ae32d7-22e1-4ffc-ad00-e2ca76dae95b", "indicator--89f9ca1a-b4b6-4423-ba25-d7d929d9a082", "indicator--b905a5be-280c-4757-8b8d-6822b700d017", "indicator--a211a62a-9a18-46e9-a4d9-fe4995a9e2d8", "indicator--e92680ef-7128-49b6-8dfd-0306434790df", "indicator--a56f856c-bc23-409b-b0c6-92c2f93a9509", "indicator--456cbb48-399a-4235-b994-0805710d429f", "indicator--c5ca7684-809b-4e5f-8944-45d419e4af35", "indicator--c74fb3db-0170-4407-90ee-0ba2df15bc0b", "indicator--478e68c1-bc78-40af-8418-f3ed7f90021b", "indicator--69508988-2022-4c70-bcb0-e36198cbd45b", "indicator--d327ca93-94d7-4d65-bee7-4fde3ba55a35", "indicator--8977c812-2da3-4f52-a052-54e4adc6c26a", "indicator--5f2e37a1-fb3b-43df-bd26-caa8d7bd519d", "indicator--214b644e-38fd-42e9-a847-ca18d556c27c", "indicator--46563a5d-9c94-4b9a-9155-ccde73725fbf", "indicator--aa02b003-1dc5-4b66-8b92-7abf4c629466", "indicator--9147ca1a-467f-40e9-a402-974a63dc2163", "indicator--33d846f9-c6f2-4a39-a51e-9059daffe00e", "indicator--48c467b2-593d-4c85-8df6-5bc2d67acd8a", "indicator--8094b576-4053-48da-b871-869d66f7de1e", "indicator--ba6914cd-b7a4-40dc-b448-8557fbfdecb6", "indicator--a556d56a-f0f5-4a7a-b5cd-cc5f762ccac4", "indicator--fa4eb715-4ba4-4e83-9ce0-296a0eff1d99", "indicator--a37ab392-e271-4c46-b303-62321467ae36", "indicator--64e2c1bc-bcbf-46fe-8b79-7350b011c363", "indicator--8bea213d-b6d9-4b77-b0da-576b956bc796", "indicator--16d7816b-38e2-4879-bd76-98d7183155c2", "indicator--225a7500-f3a3-43aa-b834-d05e77123c4f", "indicator--b4fdafdc-eb59-48e4-bd12-424b1f049119", "indicator--c3054f55-1c1f-4138-86bc-05f401171ecf", "indicator--1c614bf1-6db3-4c6e-9a4d-fb6d083279b2", "indicator--d7a10384-e6b4-40d7-a194-4503e6d698a5", "indicator--1db30b41-404e-4335-a2cd-cb8662b41c8a", "indicator--f9d070c0-59a3-44a4-9844-353b638753e1", "indicator--0e9259ea-0255-431a-a239-2fc0a7bc6605", "indicator--32bcc771-138f-4418-a764-913f1a95d0db", "indicator--ad04a567-cf08-4fb9-a794-4d92c3d31d59", "indicator--0554b5fb-3edc-48cb-876c-a7a1cadc7ad7", "indicator--d121346e-5b3b-4294-ba71-3c6955c27555", "indicator--0c202a0b-9881-45ff-9756-fbcf99b9ed54", "indicator--60b66840-1b3f-4e8c-98cd-1afea83c6413", "indicator--f10ede10-5594-4ac7-aa1f-a43d0ab0715f", "indicator--3c2de383-c489-443d-9e03-52af5839ba05", "indicator--b6e9c68a-dcb8-47d3-8139-90871c3410ca", "indicator--c47551c2-3c3b-491c-8735-dd29b997c912", "indicator--a77891c0-5a5b-4207-a3ab-25707c66b4bf", "indicator--1c27850c-69ce-4785-b4dc-baf17d85548c", "indicator--3efb134b-4139-40fa-b0f6-5a2903d96418", "indicator--45da8b93-764e-47ef-bf04-311bd3d087e6", "indicator--0f72ee47-6f90-4308-bc27-c3d41b48bb9a", "indicator--79feb076-d28e-463a-90e5-193f8a645b0c", "indicator--d1718197-ce61-46b7-ac19-27703b40429c", "indicator--3f0393da-3a41-45e9-a7b5-acea80a2563b", "indicator--eae44399-d54a-4e43-b4c7-ac259926e1fa", "indicator--dd0c3ab5-6071-4a6e-adb2-86456529a0ca", "indicator--bcb936ee-7a85-4468-aeed-259554735fab", "indicator--4ea1a347-c7c7-458d-8936-6870795f38a4", "indicator--3d3340b1-4ba2-4206-9a0f-aec03636c63c", "indicator--9f66ad66-5dda-4abe-bd27-d7801110a20a", "indicator--b25d25e2-062b-4750-9440-7b3e531de61e", "indicator--b8bd5c74-d4ec-421a-be05-cdd07d3cfee4", "indicator--5b524f62-bf18-4384-850d-e878e80cd2a3", "indicator--0af81fdf-736e-4107-989d-7f4bf2516f61", "indicator--b27ceccf-92fd-49c8-a6e5-4e94600e030e", "indicator--b2a16cbe-3364-404c-84d2-fd922c28ea54", "indicator--3acb1e28-712a-4cec-930e-0601eabb4405", "indicator--12deddcf-68e0-4d18-acb8-2722712d9d11", "indicator--22f63db0-00e0-4b7c-9cd8-a0c05f62679b", "indicator--3fb74ae8-cde7-4712-8235-f6e7bc383d4b", "indicator--3a01f253-b0ec-4d69-bba9-41362767c501", "indicator--a5c4203f-df19-47b4-a21d-edf538b299a5", "indicator--29328ecb-0c96-4b37-a0c3-d1c7e054020c", "indicator--02a5b2bb-2712-4395-bfe1-dd5475751745", "indicator--a2effdd1-a8bc-48f7-9b31-1db26f660201", "indicator--6145f9b8-7cda-4ec4-9438-49e125725f85", "indicator--aba45152-4f65-42c4-866b-8edd1f733560", "indicator--05d40fb1-62d5-45c2-b1b1-caed1278da61", "indicator--0636b4db-8650-4504-a786-ca3e9a531873", "indicator--dd4db18e-a806-4d52-b37d-04035e67bdac", "indicator--03814162-d51b-4d97-8c7c-0300ab2a001c", "indicator--7bf0f9ac-36d4-42cb-8c47-804af2aa8efe", "indicator--2c59262c-ef07-4fc6-bfc0-f3872a88c9fe", "indicator--a747a0c1-72cb-44ef-b738-55fe4bdc901b", "indicator--c3aec95e-7b24-4c81-aa27-50188e826c1a", "indicator--d29fb63a-a365-440e-a386-3f41be448482", "indicator--8aec2f37-39cc-4dbb-8591-85763202dc9c", "indicator--77f45bcc-83f9-49ce-afbb-756915e6633c", "indicator--f21c34f5-cf3b-49af-bad0-5dc46701910d", "indicator--10e61a92-fb74-4d84-8c32-7b08d0505fb3", "indicator--3af0bd75-57bd-487d-9f7e-56e2013733fa", "indicator--e88cdb6f-cb79-4a2a-9688-1fa820e37fc4", "indicator--66d92ed1-dcc0-4316-aaf1-f6225a78655e", "indicator--b37a7426-6e38-4f27-906f-a804703e659c", "indicator--0fa64066-853f-4907-a081-7cb38ae1e045", "indicator--b8499062-4f4e-459e-bf7a-b017cb0fac99", "indicator--f6446631-20e4-4edf-bd24-3f8b7d22803a", "indicator--d6186b9a-49c6-4d34-9a62-ca312ceccc88", "indicator--cd27a153-de31-4410-97f3-7b9b3b59b132", "indicator--44c111f4-fe21-48ff-a057-f45a4faa1216", "indicator--7edb72ba-e94e-4212-9962-216b99e3e672", "indicator--c176fe27-11c4-4fa8-960f-2923dc4f8e92", "indicator--2bc1d756-5779-4e0e-9936-5f1a6bdfa7d8", "indicator--c8facca9-25b4-4e79-9bb3-c65362c7d51d", "indicator--65c26fd6-d2ba-47e2-982a-f94e109c5e96", "indicator--d1ab32c0-ab22-4c4a-a48f-39c529491748", "indicator--f3d0638b-eb7e-49f0-b833-6dd95584041d", "relationship--1756c39c-31a4-49dc-a846-66004140a662", "relationship--871e6d8b-f634-4d7c-b8a2-2a73aefb6993", "relationship--76078fd1-35f5-41fe-858a-82633a43432a", "indicator--2417844e-f723-469e-ab5a-df7ed29b05c7", "indicator--a964d57c-2117-4856-9587-28abc6d86e7e", "indicator--44faf073-f5a8-4b69-a97c-745ab0b7eb5d", "indicator--2def8846-fc53-45fe-9e28-7819ec3158d9", "indicator--5da20eca-bfdd-4ea5-a7f3-9d5476ea2f94", "indicator--a8ae8ec4-83cf-41f3-9f3a-b5078d292589", "indicator--3a316ceb-62a1-46b4-a422-ae3cf7905cfa", "indicator--7646f842-a0ff-46df-8968-3cbf133ed439", "indicator--61d63a5e-2c03-42a9-94d4-536fc39bebf2", "indicator--1b45a4a0-5027-48bf-b03a-8dd29ce92efe", "indicator--c45ae855-1cae-4375-928e-78e1539895a3", "indicator--4b845a97-e972-4194-8d9b-0b0421c856c6", "indicator--b855dafa-f55e-4dfa-b146-485290a7523c", "indicator--34f973ed-7fe8-4cb4-a543-f76ef90c52e9", "indicator--f8cdd589-8573-4752-884e-dbd01096c792", "indicator--017840e2-9f6e-4514-8176-3bc31803f876", "indicator--ae83ef44-59f9-4b6b-8474-43da6a30c108", "indicator--e36b5db7-811a-4b26-b8e6-e68b9f53da3c", "indicator--a0b7a282-db6f-4a18-87ef-4b03fdf5a9d1", "indicator--5b59052e-45cd-4511-881c-08e15cc0628b", "indicator--52d20bb0-05cb-4194-935f-a81573f82e7a", "indicator--5ad7dcb2-1996-45fe-aa46-da78e061494b", "indicator--1e47747f-d89e-44f1-91ae-54e3a651e35d", "indicator--6b7991bd-3832-4fd4-923c-1b6fe2a229bf", "indicator--479f887e-9bbf-4e61-b86d-072d23a6c777", "indicator--9eaee264-cc75-40ef-9409-3800713cdf87", "indicator--d55d1353-ac8e-42aa-8562-19ac80b3a353", "indicator--6baa151c-59a6-4147-b467-27f72e6fa2a7", "indicator--d3d25b05-a34c-428f-a06f-83fb62e75456", "indicator--57f7d6e4-b428-4216-b7f0-15aec36eb737", "indicator--ac4aff37-97c7-46cb-a712-2cf058934d54", "indicator--eb447249-2189-4f9a-9d83-91c8ff868227", "indicator--78c1b1d8-ca5a-47f5-9960-697a4698bd92", "indicator--d78d7b79-53b0-4deb-b68b-0c82fe8c4a77", "indicator--95b1dff8-e0d7-43cf-84e6-237e3b58c61f", "indicator--58748277-1fa9-4e69-b4a0-89503f41285e", "indicator--683d3b61-6dd5-4da8-9d30-ec3b9caf3c09", "indicator--6b7921c4-55b3-43ce-a404-daf8a1288a81", "indicator--4445be3b-db96-4a9c-9a84-a53cadfb8121", "indicator--b1754be7-e559-42bf-be02-a5a9bca6bfcc", "indicator--4b14964d-ab8c-40f5-8a81-e43fe666cf3c", "indicator--7002b882-b1e4-4c47-a9ab-88224990d6a4", "indicator--9bdf551a-90f3-4ef9-9c37-da2f5215c846", "indicator--3d3cbca6-1300-46b8-ac15-b918b182b1b9", "indicator--1af7fc70-dee8-4410-86ec-d19e2d6d17f8", "indicator--b8bd2219-98ae-4345-a236-95dbede1db55", "indicator--4a10b943-5e4f-42c5-93bf-306f9e17f3e8", "indicator--bcbf4105-c04e-4ae7-94e1-5184f84dae8c", "indicator--a108df15-9a61-49c4-9398-d238002e01ee", "indicator--b64c228f-eb40-4280-a510-ac0938a7bbb7", "indicator--14e86305-bda9-4b7c-9dfa-3991335c5a5b", "indicator--84ae29ef-a08b-4998-81e2-3e8d3ea2db47", "indicator--a6c24845-d4fe-49b5-a31f-e361d29bd91e", "indicator--92954292-defe-4533-bf1b-2a29f5c8b583", "indicator--956abe5d-9f9a-4d32-871f-d12d123203dc", "indicator--d0188c69-25a0-4e96-a230-da03e6c7cb2b", "indicator--accec11a-0d21-4062-86be-3bb46bb083e9", "indicator--1c80e0d5-9418-43c2-8b7a-5d8118a19048", "indicator--3c8be2ce-4908-42ac-9f85-5f5aa211fab5", "indicator--a7aadd7c-344e-47c5-9f5b-558c1e12e223", "indicator--10c5d21d-b4bd-43c3-b614-7f06b75939fb", "indicator--67a7f4a3-35ea-475c-8420-16003c22405e", "indicator--c94536fb-11dc-4494-9a65-2fa821f2805c", "indicator--39b0ca52-b2d1-4a76-9069-6e68572d323e", "indicator--26293e8c-29df-4629-9324-5cfdff319a4a", "indicator--1bb67acb-9a49-4ee2-9d77-563d1de5573e", "indicator--a96872f2-c58d-4bf2-a78a-b83ca2d89f42", "indicator--107808b6-aa4d-4241-abf3-640a6c05a090", "indicator--f0c3e975-1d15-4b7c-85ee-fb79d61005ef", "indicator--331322e3-6897-41e0-8695-1a1dae1d9918", "indicator--a8418cd2-fe68-4e95-9de6-f97110690eaf", "indicator--cd7f8005-e6bc-4816-bc09-8749c723bec1", "indicator--7fa6e7c3-fae6-4ce4-b51f-9a3de8279b15", "indicator--cba80295-bff1-4821-b7f1-8e54084abc1c", "indicator--6e3aed03-3fa0-4245-bc12-745e0e5c0e82", "indicator--b63e4258-d1f0-4c7d-ab9d-222187d45673", "indicator--0997596d-a2d8-401e-b6e1-5a7e51fa4350", "indicator--8a0b4e95-4d29-4801-aba3-d3348178eda6", "indicator--0bd33aef-a248-4483-b2d7-ebfaef034dda", "indicator--56f5681c-2790-482e-9aa2-3f9395973704", "indicator--08774937-7be1-40ce-8429-707f9d1d5505", "indicator--25118bd6-e677-4795-9e67-d431e2f53d6b", "indicator--ab93c89e-b066-4370-b50e-71936b1e5cd9", "indicator--16a5b35f-b687-4b0f-ab93-2d825186f4fd", "indicator--e3fcde37-d058-4100-bb69-88abc23a9890", "indicator--a6c0bd75-da7d-43c3-a188-2344dfbff696", "indicator--7f205b25-1c3e-4f03-8a26-9ea56400aa47", "indicator--c6a1ba47-016d-4879-8222-83f05b31274d", "indicator--15c41b1c-2927-46d9-b9eb-6ba96d335e9a", "indicator--5ea1abd0-5dd5-497a-a693-f80cec373f3f", "indicator--072998fb-1088-445b-b72e-d4f7e184418d", "indicator--3adefd3e-3f4e-496e-af5a-fdd8aefaf7c5", "indicator--ea3229b0-b57d-44e3-ae80-4dad2b11f3f4", "indicator--bdc999b3-867c-4238-9cc0-06d62d3cccda", "indicator--651cf60d-bd5f-467e-8524-50f98d154ef1", "indicator--71b7fc0b-c76b-4fa1-8d70-b2ee31c452b5", "indicator--bdf208a6-767e-4759-b6c9-aabb24e27745", "indicator--aea43a22-75a7-49aa-bfc3-a7d33efa31c3", "indicator--33410a70-237e-4342-82c0-bbee81289b77", "indicator--bfcbaa9d-c048-4dba-ac05-62f4bd405ae5", "indicator--246fc43e-18c8-4fc8-b0b4-160bdd5d4755", "indicator--1828c1ae-caf6-49ae-a4eb-f95a1ec7fc7e", "indicator--0060a841-689b-460c-901c-3c781fbe6ffe", "indicator--ad48938e-2f4d-4e43-9b7b-441827e38453", "indicator--e281b6dc-69b3-46f4-a668-4bb2dfbfd50c", "indicator--e0c0becd-73c0-4a59-9e92-ca933fd7b4a4", "indicator--618329a4-351a-47ca-ac32-9ef62decb11c", "indicator--96d14502-06df-45da-af4d-002e4d4f4df4", "indicator--a5ea534c-b203-415c-b689-32a73a8081fe", "indicator--c879b389-fe8e-4b58-9a2d-8fb76ed83248", "indicator--a4e98568-0ced-48b4-9276-0eb621e6f0be", "indicator--a938d8a4-37f7-4505-8382-d03cc6cc63f7", "indicator--7250e3af-cb7e-49cd-a7c8-e40fe497c710", "indicator--f8da1620-f236-47ff-ad1a-7244b7d0e202", "indicator--2a261d19-bee3-424c-96c0-a16c77deb580", "indicator--dffbbbf2-e55e-4f45-9aa9-fb9b822ae5b5", "indicator--93b38421-a083-4111-8c15-c6d23f037434", "indicator--3278be4d-40a2-4df5-9dea-ba3b68108922", "indicator--6b65a98e-23df-4f1f-b754-614e95e721ad", "indicator--bc8b2e38-d1a1-488e-ac7d-c02f3ce60fa1", "indicator--0c06f116-56d2-422d-a7a2-a848a427c70a", "indicator--5a84bf81-f3c4-4714-995c-fc802e3128d1", "indicator--49bfab22-2958-410b-9135-dd3341f1e6cd", "indicator--be169abd-327e-4bcd-9a04-274d4d8edb5a", "indicator--21cff134-6684-4b27-854e-8e13c8a7fdd6", "indicator--ebeca444-2196-4c48-877f-5d125312f5c8", "indicator--400626f1-86f8-4f11-bed7-7ff1940a2d3f", "indicator--ae75f753-fdbe-4de2-bc20-15f7ced79d8d", "indicator--37f08166-3f1e-4e38-8924-d6e488a93524", "indicator--4284dee2-0372-40a9-9c4c-a7c7d4b56be6", "indicator--662ec107-53fa-4edd-9885-4b8f655d7e54", "indicator--71cbb76c-79e3-4f1b-b197-288296b7183f", "indicator--c61b8f93-8c1c-4d14-a00d-0b081d450989", "indicator--f5a3539e-4cd3-4554-bce0-ea75eeb59ea9", "indicator--826f40dd-6ab8-4f13-bebe-59f40d2299ad", "indicator--3198847d-ac4c-4d5b-adf3-e19eb148b72e", "indicator--bad0927c-d87b-475a-85e6-44cfdd1b466f", "indicator--9016c250-cebf-4647-a199-85a8ce90a1ad", "indicator--0aa4e3f5-aec1-475d-9458-d53dd1dde5a3", "indicator--d176a472-532b-45ab-9e26-788e5f9a71dc", "indicator--1f2c3878-051b-433d-9400-b111803dfdca", "indicator--e52d7794-ae8f-488b-935c-f414472bdd1f", "indicator--529acb29-d870-448f-84fd-da58696498ea", "indicator--34590f06-065e-4433-a4b6-6a603dbbbf2d", "indicator--1d65ef06-0e4e-4297-9a41-01384b62c127", "indicator--a8e8f3ef-a184-40d2-8017-3fa52066f02f", "indicator--7e30185d-729d-4c2f-ad6d-603cb7ec20ed", "indicator--b4db17da-db69-4de6-90c9-c3018d435881", "indicator--3975c072-0854-4887-b918-98bd4f5f92d7", "indicator--0c8039c4-b17d-438e-88f6-6ab25d131954", "indicator--51a846fc-9ed4-4ae4-9e77-06c4d2f34389", "indicator--dca85dcf-94b0-4cf7-99e8-8d41aefc0064", "indicator--e96a7258-73e7-4e87-9ef2-3ebb6deae7da", "indicator--200983b7-2793-4fdf-ac93-53d3deae271b", "indicator--3f58a03c-db7d-4b0d-b241-a20ef0a34923", "indicator--40629577-a551-4303-ad6b-9b968d6ef053", "indicator--a9141abf-b446-48dc-86d3-7d3a03dc9265", "indicator--66341079-6299-44d5-b878-395da8dfb591", "indicator--f55a5f24-1f7e-4898-8647-12a2f676192c", "indicator--fc7bfa5e-b82e-4e23-9608-e95cbe425827", "indicator--eff53aba-c802-48c1-8116-4311aa6ddc91", "indicator--bc0cc14f-2269-406b-8082-ca1f4dbb864c", "indicator--8fae6142-d7ae-47a0-aab6-53fc99b50d71", "indicator--58346d69-685e-40d6-bc49-acd9f783240b", "indicator--79cfe46a-ae54-4fab-a0ef-ef53430095e8", "indicator--03ba5bc8-1aa8-41a2-987a-8581832400b3", "indicator--3ac08269-8ba2-43e4-91e6-573c05dbe8ad", "indicator--66e00792-59c5-4bf0-ac0e-de0d3703f0a2", "indicator--00c11563-4be3-4ff4-be08-50d26a16319e", "indicator--3fbed7d5-021d-48da-8bab-c39996c3bfbc", "indicator--85371240-be68-47e7-87df-c5ca751d3df3", "indicator--3a8f77ab-86be-4c65-9408-63faf225306f", "indicator--f283abba-50f0-43e2-b2c8-809a79e9c7bb", "indicator--f8c3e104-1319-451a-9a89-7881007d59ca", "indicator--f92f3dce-1128-4e54-97c0-8835a3c112fd", "indicator--2a47b737-bb75-440e-8317-5b7b901ff668", "indicator--593910c7-fa8c-482d-9692-a1951bbf3b12", "indicator--2d2e2475-7617-458c-8b2b-5a05b0a43272", "indicator--c92e6e24-f2a4-4dff-8340-a0b0f2dbea4a", "indicator--438dc732-cd61-409e-a39e-c4db23a8cf53", "indicator--c587452f-d1ac-4ab5-9bf5-3f54a0db3989", "indicator--e3db6cec-46f0-4051-a14e-dfd6519a95ee", "indicator--5e5c6905-d69d-41f4-87e0-83213b4830c4", "indicator--ac66ce49-a51d-40d3-b7b5-95bdb39c497a", "indicator--c598172c-89ec-4c34-a309-0ca43a0e80a5", "indicator--eeefcb2b-ac11-4571-9efa-11782cfe24b2", "indicator--1f17b93c-d13a-40a2-be08-f2e16bc9cac1", "indicator--ef97e7f1-1a35-4a71-9f7a-27c41284325c", "indicator--fad3c586-420c-4ba0-a0b5-16027ff7e47b", "indicator--60ec31f2-1aec-4478-abed-1f928ad7c581", "indicator--076a6f53-fb4d-46bd-8433-420d31e778d5", "indicator--c9c28ca7-22f2-4452-9a06-563f87eaf5c9", "indicator--516c1ca0-92fb-4f17-8dc4-28a19ae8ab95", "indicator--8ebfa237-3a1b-45eb-a155-608d305b8c8c", "indicator--d20cc093-1a93-4029-bef2-0c309f7f7920", "indicator--3ccfeb27-2324-4705-b874-c1a6d236b117", "indicator--28a106c1-609f-4cd8-b015-d2fce387c0c6", "indicator--78f6edfd-43e1-4eee-895c-138f48bfedad", "indicator--8aeab028-a01e-4577-8a99-64cf4c4476a3", "indicator--b46ac2cb-284e-48bb-8399-812ee974043c", "indicator--c9664ced-bab3-4992-b02f-e29d109aa25b", "indicator--1c3c57bd-d678-4d6a-aa80-f6a4dafc765e", "indicator--ba12d1f8-6e38-4151-aaa5-7a4253086423", "indicator--d85f66d7-8999-4280-9e30-524120589559", "indicator--a84537e1-e729-482d-8b9d-f160a3f71e69", "indicator--e62e30a4-b6bd-4088-a109-8d25c13ec406", "indicator--e52d54f6-5a34-4a10-9385-10ce69ff6cf9", "indicator--7ca5f948-11cb-4c67-9980-26da908224a8", "indicator--f79cfdd1-c758-4085-bf44-f8c8f4b37884", "indicator--e89d7a6a-c1c1-46d7-bf3d-7e0efd87345a", "indicator--a55b60ff-c31a-4324-91aa-60e590c8b8c2", "indicator--1cc5346e-ed92-4d11-8d97-654cf8a9b0fb", "indicator--066e1047-48f7-48fe-8511-0f8b6935ee44", "indicator--3aab5e56-677f-4520-a855-c152bd632e0e", "indicator--dde55056-3370-44cb-ab6e-4e5eb985c7d2", "indicator--ede2c707-b4ed-41c7-be97-3f27ebb39ad7", "indicator--7efed1f3-b2e3-47da-ab63-6b7d66534b67", "indicator--fa9f4c29-d23a-4d1a-9c65-ae42c11d4ebf", "indicator--e967271a-cc95-4ba9-949a-83588da9985c", "indicator--8a2e206a-ff07-4f60-ac6a-be3b503a9014", "indicator--910c7034-507b-431c-b8c2-ab7ced057caf", "indicator--55cd94ce-4326-4ad7-afda-0d2d35e9648d", "indicator--4e5b1271-ef00-4fb9-af84-9d56a98b6638", "indicator--8c9e3521-9117-44c1-831d-f7c49a3756ba", "indicator--3b7d070d-763d-4850-8673-3dbc472273ba", "indicator--767b68de-4479-4c57-8188-16d14d208e19", "indicator--f7eb304d-893d-4813-8859-47d00263d122", "indicator--38800637-4edd-4994-bfb8-7cd229c360d3", "indicator--aa7be442-8bbb-4059-ba36-f5049e45cc60", "indicator--b25a2a6b-b4cb-43d0-9047-0272b94746e0", "indicator--97c38d02-213d-47b9-845d-bef0aedc5c96", "indicator--4628331f-4441-4e8f-8045-dbab4678b057", "indicator--37a968fc-dbcc-4c39-8f8c-ce7673d79044", "relationship--3c06e592-8756-445a-8d0d-845913544f3f", "indicator--e6713250-da14-4ecf-96ba-865069bf3894", "indicator--e28815ab-ef24-4f2a-b064-b1baccf44a03", "indicator--e7380dc7-3cb2-4fe5-a5a6-351f7384796b", "indicator--61ef5f33-7e80-441d-add3-83e234eed694", "indicator--900e470a-ea32-4ef0-b041-9f02a4d23293", "indicator--55d962fa-de90-4838-b7db-403fa677ce94", "indicator--cc0f9f1e-49c6-4d73-817f-e57b3ad65363", "indicator--ca58cf14-e6dd-4874-9bcd-465345404a9c", "indicator--fa9a3cc9-3174-4579-9567-b2be0605a9df", "indicator--796ffc67-90d0-4f8f-aab5-81f5fb089ca5", "indicator--047fc85b-7e63-4ecc-b7cf-96f78112659f", "indicator--5bc482f3-c861-4ab5-93c4-5d7afbeee218", "indicator--53cef285-862a-449d-845d-7fe897ff38b3", "indicator--7cf10b2a-235a-4957-b4aa-bee0b4b63041", "indicator--9d9cefb6-5963-4f8b-ac0f-87b07fe279ab", "indicator--f876a927-4d7d-497d-b175-5bedc295f2b7", "indicator--4c8699ec-be10-498e-bbc0-3107898beb8a", "indicator--83e3aa27-dcc2-4afd-ac5d-024c1b54548a", "indicator--717e54d2-c2c0-49ac-935f-fa5d81894a96", "indicator--3bab961c-0f0f-4883-a020-2e09ff556371", "indicator--b663dc5a-9aa5-4444-b5bf-e1044f0699a0", "indicator--c193838c-9f38-4956-9846-96c13e59fb56", "indicator--ba68ed24-4cd2-4ae1-a339-9c1ea393485a", "indicator--fc7b28d6-3551-4323-a010-284ab86caf1c", "indicator--5637748b-0788-4902-b213-13b0f5c106a0", "indicator--39a1e4bf-cc89-463b-bc32-f5432ca2fad2", "indicator--9d1d0d03-7f7c-4575-b01f-ebf18a0d548c", "indicator--6169cdf8-446f-47de-b47c-f95800b0ec56", "indicator--b2587156-58f4-49e7-9b0d-5448b2fbb9e1", "indicator--0ecce0d0-a3c9-4292-89bd-ebd25769ab34", "indicator--30196508-d27d-470c-b9c2-bb30d6b49d8a", "indicator--9cf0005a-73c3-4ec6-9588-ccc489a3f7b6", "indicator--6b092aa9-9b85-49cb-9e55-49777094652e", "indicator--e6151344-c96c-4230-924a-d8c5cebfa86b", "indicator--670bb525-8bba-49e2-a6ec-63ecec1e763c", "indicator--8b53c538-bfc1-4d1c-8b26-22af022df6cd", "indicator--6d257b2c-d89d-4624-bea7-7c8e7deb2afc", "indicator--b43789d1-3e8a-472a-8ff8-de0367e16325", "indicator--6f6ec43d-1730-4033-b21c-3a561124a2e5", "indicator--d9f6abc0-52a0-4e04-a2e9-5f55de6b9bac", "indicator--851c632c-06e1-45f1-b6cf-cff16440f5ac", "indicator--ee779a33-bf7c-4342-94b4-3c884328ea2b", "indicator--6ac701e7-54cd-4db4-8b0b-9ff4496b6999", "indicator--c7004a21-8567-474f-9096-8517c87e533d", "indicator--925b1f92-bb6f-4a6e-9040-3a27ad3b4c61", "indicator--90925cae-53d9-46e9-b22d-15d631fc6a94", "indicator--7f16c332-0e49-4ed3-90ef-0922d19544b5", "indicator--3923174f-cfc6-4b7e-b663-a8a39fc92edb", "indicator--14fd6b4b-e4a7-491e-9040-d14af70217b8", "indicator--8c29e66f-e11b-4f29-9ad8-bc97d1ea10d1", "indicator--57327cf4-0c12-4720-8a28-71c8c4e4c5f2", "indicator--77974f4a-1afc-424d-a6ba-91af04e5619a", "indicator--6a137678-5caf-4bc6-ab74-b8ea3f4d96b7", "indicator--53f4bb52-429c-4feb-9aa8-35d590686fad", "indicator--638e395b-b5c5-4699-8bb0-e6b8fe42120b", "indicator--6ac4e98f-eb97-48cf-8ea0-9455da4b06eb", "indicator--336e918a-0611-4f27-9df8-9a224e7e8915", "indicator--cf1d5970-7d35-4f8e-a792-6a9b7e8bcf0c", "indicator--91ea5b2e-ee71-4506-9c8b-efb00d493a41", "indicator--5ce4fe5d-46bc-4da2-bb02-762cded3ee13", "indicator--953af4a4-0ba0-465e-bfc0-701a6b223da6", "indicator--2350b707-0d63-4960-856c-2fe9ee89d3db", "indicator--472c7375-0806-47f7-868c-81491f22d311", "indicator--bf4ef6a5-454c-4f31-a2f9-ef062350da26", "indicator--e4ac2bac-23df-408d-ac13-d77870f8fb5c", "indicator--b556dee4-01cb-4667-9313-78783e397517", "indicator--28b86bde-41d9-46da-a5b8-a643457ebd02", "indicator--0a8c8e0b-e5be-44cf-94af-20c554781235", "indicator--fe312329-74d6-454c-a6f8-8d883a68f17a", "indicator--6ac4f2fd-50e1-4c4e-81af-e5a40c4c9f08", "indicator--3cf9e48c-cb7a-465a-b44d-472c549f3abf", "indicator--ab5badb0-db13-4d8c-aa21-2f2718cff533", "indicator--691d26b8-2e27-48fd-85ba-6b39f1402874", "indicator--6fe7ae77-266e-411d-8123-8e230a0e8956", "indicator--3aa572c8-f03d-459c-8c06-7566ed320b30", "indicator--5804e321-31ba-47dc-b972-485f16ac9a3e", "indicator--237e5e23-aed6-4a8f-94bc-47c700f5ebde", "indicator--3714a272-95de-4f7f-805c-003b58aee991", "indicator--7dffae69-50ab-42ec-a160-cc7dd2d0a6d9", "indicator--967b47b3-73a6-4d5f-afc8-b8f6eee1f719", "indicator--c5242ce2-2922-4741-9c30-794de0b7de8d", "indicator--73dff096-5976-4cab-abc8-6b002ae9bd13", "indicator--8cd3e799-f7bb-48a5-bbb2-39fe15187b29", "indicator--7cf83e5d-af07-4edc-ad1a-5a1b6355d5bc", "indicator--caa85306-0632-4a6c-812e-95e4c6c6fc8c", "indicator--1d61ae17-86dd-4517-9d3d-a5a2f8c365ba", "indicator--765a5ccd-adc9-4564-a919-6a83db2ee369", "indicator--a03421b8-6002-41c8-b966-40e00f120579", "indicator--c5302631-709e-4e95-a2e9-1d41d46da395", "indicator--02996b40-a46b-4377-b5fc-7434921aaa37", "indicator--c7786c6a-a76e-4be1-91ca-aa5266ae0729", "indicator--3de7c493-8b81-4772-a77a-52f477178cca", "indicator--5c3687b2-2b16-4591-b740-66ef9ddc3a6e", "indicator--74bd546a-fadf-40a5-9499-b8b88ea5ad59", "indicator--399f737a-0967-4990-aa0f-868d52f7b784", "indicator--6d071200-00e9-401a-824c-ffee15bb86a9", "indicator--931d5045-8672-4330-8076-9300f8236987", "indicator--8f3453ac-5262-4794-b975-51ec1440a703", "indicator--3b2029e2-ad3b-43e1-8c20-4242086544bd", "indicator--896cc8e2-f9ac-4384-a3f5-236853c479dc", "indicator--3b2acceb-7b0a-46c1-82cb-2279be9f9949", "indicator--b2c615fa-9c9a-485c-be9f-8418c3ffda0f", "indicator--3a69de37-2173-45de-828d-5759a510a9c2", "indicator--ce766c23-7cac-41f6-9f80-add7c079c4d5", "indicator--1abe9f36-8fc0-4f27-a9b2-68e65163889f", "indicator--5c0fc02f-da6e-4b08-a6db-453dfd7beed1", "indicator--40aee8f0-b983-463f-a661-8d145f4d98d8", "indicator--7f7f3ed3-c24c-454f-92d4-e74146f9a87d", "indicator--4147abb6-1212-4653-83b7-caa89315ef8e", "indicator--43c83e16-331e-42b1-9259-13d1118700e6", "indicator--2572dbc9-2263-4cc3-837c-509daece09c9", "indicator--4d5f044e-7e74-4d77-a780-8f50ff001507", "indicator--daae5f61-8caf-4417-b285-8a19e7714cfc", "indicator--3b75720c-7f66-455e-b7af-3659cf04902c", "indicator--0de358bb-49ab-4a78-8cd8-64a798c0e3e2", "indicator--4e1d2b8c-7ced-4782-814d-c7bddf698166", "indicator--83c91375-3be0-4e0a-8755-45cdc00fef21", "indicator--ead3a228-30fb-457b-990b-757b301d4256", "indicator--67d680e4-9524-4ea9-9d3d-4a32a71b126c", "indicator--d1d95cb4-fe27-412f-a415-93062c04ed47", "indicator--25ccf41f-9bf4-481d-b235-a0c570554617", "indicator--9a3eb82a-c944-4346-9934-1a56be7049d4", "indicator--157719d3-c466-49ca-9dbe-7d5eef1e43f0", "indicator--08728229-432f-410d-b26c-9a6dbbccb242", "indicator--fa0ec63b-03a3-49bc-8fb6-ae0e4b1b0718", "indicator--e6084549-b13c-4ac9-9dcc-70fdd878ee76", "indicator--69835e05-7a28-4413-ae46-bbb6cd3f479a", "indicator--5b7f1460-f52c-47b8-8137-f2f35588bc52", "indicator--bf44b236-a2ac-4a1c-bffb-a8432486fbf0", "indicator--327e9a58-dead-4929-b3b2-5bbf88ffc991", "indicator--9acf407d-83f2-4676-ad63-ab29f0a74875", "indicator--cd10c49b-dc89-4a63-8879-fe34ef3062b0", "indicator--5a35b8cf-40b5-4e2b-9331-9c69012b1717", "indicator--651e5ee6-9007-474f-99b4-fa14409f4a2d", "indicator--dbae2673-9932-4cbb-9da5-ef0250910b3c", "indicator--a06d65bd-b3e3-4820-a5dc-477e96bcfcd3", "indicator--b31b5e3e-4789-4443-8d96-e475cc0c1355", "indicator--d622bdd7-96cf-4a07-905a-65c7acb0b52b", "indicator--83f0ada3-8913-465f-ac77-08fb5b7054b8", "indicator--9ca1fe2c-c8ca-4ba0-afb7-a6f32e270811", "indicator--a312bead-6c18-4dff-8c54-2b9e11a88f48", "indicator--d156cd87-7f8a-4606-ac8f-f2013faf5beb", "indicator--39e3af5e-af7a-4c10-88ee-474da904fdba", "indicator--d7ef0169-0ac5-477a-b3da-7af4d6d89cea", "indicator--4f2b2c30-f426-4ebb-ba05-7ab1bb9279bb", "indicator--cf0ebdc9-7a4e-4f9d-9c84-cda432fa3cde", "indicator--33f75121-2c3e-4c7f-b802-6b55fbb1c720", "indicator--8a2c0b59-07ac-4644-b3ac-bc861199e86d", "indicator--73ba5026-e97e-4f33-bc33-90d15e6ca285", "indicator--93f6c0d4-258b-429b-b6dd-f588eb2c8489", "indicator--47aad0bf-9a54-4d83-bc06-4241775ca649", "indicator--8b8eb3de-ccb1-46c0-861d-a415cf311e54", "indicator--f052a224-e56c-420f-9271-f91e262744bd", "indicator--1c3c48a5-bcd2-476b-9c44-739722858f0e", "indicator--f9be4115-dc95-42d3-a3d0-08689115879f", "indicator--a6f13d26-ca21-417c-8f25-c56babb7557e", "indicator--fceb17db-5b3d-4a59-96de-285d0db9c8f7", "indicator--dc3dd1f6-a245-4b67-8670-56a5f46bd22c", "indicator--5c1852c2-cbc9-4650-869b-ea5b20f8d588", "indicator--b6f511ad-e0a8-48a6-8e2e-fa6994a863fd", "indicator--6e10ee35-0417-4c8f-bea2-eff3085111f4", "indicator--e56f646e-8960-43cb-b8b0-1aac26abeee4", "indicator--6a71ac8e-8987-497e-a191-2578c4b1ee42", "indicator--c365234b-310c-4e4d-a07a-22f955c15ea3", "indicator--d93c5d5b-06f1-45a8-8b66-bea9d2d3f425", "indicator--661b7356-8d0a-481c-b15a-ae2bda44f3f3", "indicator--c5cf938e-a2be-458b-a338-92e241a8e167", "indicator--34ee5092-2547-4a48-bf0a-4e6795eb27c2", "indicator--4a1e762d-5c82-44c6-98de-489b8bbcc0f4", "indicator--397d8376-31ac-453a-97a8-f4a06cef8e82", "indicator--837d425d-7b75-47f0-afa3-af40273ee55c", "indicator--8aef47f7-8c1d-4bc6-a661-4ced714494a3", "indicator--b7c585e5-4aa9-44ac-8af9-c9d8582205d4", "indicator--f3b691a6-d66e-401a-8d9d-62cc747dde20", "indicator--a078e777-ec0a-43c1-957f-ddba94f79b9f", "indicator--38e44162-52ba-40d2-bc9e-e20a3332a31e", "indicator--24f8fadc-2e17-48d6-9f85-f316f5db7b28", "indicator--f023be70-9e67-444c-88b6-3d78a164c947", "indicator--023ca6b9-b050-4748-9aea-dbebb4171616", "indicator--11298def-8e7f-4983-a5b0-b3c8a92f4ba1", "indicator--7439c0bb-0e9b-4c63-92b9-c22209e2ca72", "indicator--8d8a6f6c-c4d2-41d5-a2af-254b43e632e4", "indicator--e155e4b1-9b93-4256-988a-2d5ca568ada9", "indicator--3df8a298-8455-4461-b3d1-b374cbd135f9", "indicator--5272e33f-f435-454d-97ae-1112f0c62639", "indicator--f3da3ea9-9981-4c8d-8a62-fbe409d0185d", "indicator--af171af6-28b2-4aa2-8606-4aa908f14f0a", "indicator--154699ed-23bb-443c-b1c1-fe55da244fa1", "indicator--a0364e96-b59e-4398-9d93-31a0e8b6c1b2", "indicator--1ac9e26d-4e89-439a-8f2f-5c3513ddfc17", "indicator--54120873-2045-478b-9cc6-527095788042", "indicator--5994044d-9790-4caa-b082-fec28c7c7e66", "indicator--a41a2369-55ec-4589-9409-2b08e3de0585", "indicator--bae5c21d-14b7-4e4b-8f61-6e43ea933dc8", "indicator--161c1913-486d-4a3b-85e9-093a97aa4104", "indicator--90850897-504f-420b-91b2-cd659be19aa5", "indicator--d745b820-2aa5-46b5-93b5-9beec8fccc3c", "indicator--756e10af-7830-40cb-a693-8799b4bb1a2d", "indicator--bb486315-cc3c-4ff5-8f37-039a91ebb8e5", "indicator--47cd8be5-0c9c-424c-8a33-d95a8ebfb1e1", "indicator--47a41bb4-0afe-4939-8d4e-c24cbcdb855c", "indicator--10d65db8-5c87-40fe-8696-942946a3ce3e", "indicator--3789ca14-e1f8-4149-9a28-7d235c650224", "indicator--617e2202-6322-479d-94d0-8d906c77b5b4", "indicator--03f731c8-9f7b-4cc4-b684-21c551667083", "indicator--a610b407-aa56-4801-9bce-cc9eba2b8ae1", "indicator--de64053a-a97e-4044-ada8-f80684a2c42e", "indicator--2042b810-badc-429a-9095-ce39353dcb68", "indicator--e837bf30-91cf-43c0-9a3b-ad42d9a9eaf3", "indicator--9a0b81f0-35b6-463c-b7a5-91ef7193827b", "indicator--0ec7ab79-a31b-4d55-ade4-196ece930e1c", "indicator--b37f3ec2-7f02-4c0a-92ac-005560b99d90", "indicator--05d9d08b-903a-4edb-96b6-0f1e38de13a3", "indicator--7e069724-da9b-44a5-b660-bcc92940a66b", "indicator--7af2d43d-de37-40ee-8343-784d3ac62038", "indicator--c1a5186f-e1bf-451a-8d53-40f69eebe133", "indicator--80401436-7a66-46fc-810f-bb5c6e345b56", "indicator--851f31b8-8876-4538-8063-260f54786e78", "indicator--ac474cf8-64bd-49c4-a887-7c4d9f4e16c8", "indicator--545905b8-5d1c-48f7-ac92-7aa436484331", "indicator--b0e75a2a-c900-413e-9feb-a1525aa37cf7", "indicator--c461fca9-50f3-42d1-b887-8e417ec9d5be", "indicator--f42d73cd-da3f-49f2-83be-ca06cfa6a014", "indicator--5a55f3a4-964b-43b4-a59d-85acd03f6c9c", "indicator--ea93ce86-15e8-4a67-9871-5b128a98ab39", "indicator--0897f61e-4df6-4fa6-a899-02c6811bf13d", "indicator--85ae1984-dafa-4a21-9fed-2c13b0712411", "indicator--f3e180cf-8b72-4ab7-a0f8-140a148a72fe", "indicator--42fc1f6a-171c-418a-8faa-10bfccd62781", "indicator--02c49800-72c8-4681-8dc4-23fffaf9c104", "indicator--fd31f9ab-5988-4ece-963f-032fa8207f11", "indicator--4229a094-52ea-4232-9e19-082de9550530", "indicator--45d3c7f8-ff38-412f-a401-6565c09b2499", "indicator--c86330a2-640b-4f94-a803-af93f48f77d2", "indicator--b5cf0782-1d0c-4df4-b634-99b091d83faf", "indicator--f7b69b96-86af-4b76-be0c-08270cf36a2d", "indicator--d851aa1d-e93e-4f1e-80ee-72403316b911", "indicator--63c926e4-6c98-411e-81ed-95de7628ceac", "indicator--01df18ba-95c5-4b1e-829f-480477cfe930", "indicator--2b67b5e3-845a-49d3-8993-767d58cfa338", "indicator--9111a985-2cd8-4d50-a652-75ecec9ab6c7", "indicator--f44c5cb8-18d0-495f-8f85-b4ff10dd303d", "indicator--56db1b80-8bde-4ba8-a5fb-1fe74abc5574", "indicator--3f96f504-5ed3-40ed-8963-ff205d1980b8", "indicator--1d28a048-4202-4f38-b5b4-99b18ffd4a3c", "indicator--874620b5-a00d-4605-a1fb-8f8f9b103434", "indicator--523575c5-4042-4585-ba91-f87c53dd38fe", "indicator--d72da078-9167-4b6a-9f98-1f005122d1b3", "indicator--b559d984-02e9-41a6-a4f3-e35945427cfc", "indicator--cc94211a-33cd-4886-a41f-e62427587725", "indicator--c1eaa0bb-1fd1-476a-acb8-e7c3e5ae0ea3", "indicator--656b4739-8ed4-42c4-b64f-c3cd840f2e70", "indicator--b9242f8a-7ae2-40c8-95ac-0aec34a9db8b", "indicator--93800650-8453-42d3-b70f-60357b713adb", "indicator--8c0af190-9037-45b9-94e8-4e3341faa825", "indicator--e829c41b-a8d7-4512-9f0e-f44a81ce8545", "indicator--99faa288-4459-45f3-a765-3840345404f4", "indicator--a94d85b3-b7cc-47ad-8677-537d48dd40f8", "indicator--38fac105-00f7-4948-a587-47b2672b25f8", "indicator--a131e4a1-9e7d-4ccb-8019-1b9594d34c42", "indicator--5cf973b2-77d0-4801-9170-17779eddce6a", "indicator--71bb9cdd-a9cb-49ff-87c0-3387f81d1a7e", "indicator--101254cd-5d0b-4ef4-b69c-a5bc29bbd63f", "indicator--1f888ae0-b647-4cd5-bae8-2159aca3314b", "indicator--ce331a9c-368b-4fb0-94d3-3f75b537e5fa", "indicator--eb92371f-fd2f-47b9-95d5-f39b86b443b4", "indicator--f6095c4c-09c9-4631-868b-a59475ad8e82", "indicator--6b2b2d1f-f896-4b79-bdb6-9725dd8adfce", "indicator--e528bcbb-bf52-43a1-99de-89f16dde8892", "indicator--bb1d3a46-9b7b-4cfd-b02b-b8bd5f165a21", "indicator--c346b6ae-9ca9-4c99-9762-0b669f636df3", "indicator--2be7f2b9-3610-471f-b342-5a09cb329477", "indicator--ebbfd2b2-f887-407c-8146-e8d3fb7ad0c5", "indicator--d168a2af-275f-4743-b1e0-9834cf712461", "indicator--8202b241-d6c4-4941-9e33-c5e68d35a228", "indicator--cb817fa3-d420-49a0-a1ef-a5f0d82bd4bc", "indicator--4150d4a5-7733-4404-994c-53b0faa07d75", "indicator--5ab68422-ba5b-4e5b-a987-f2e8d7c5755a", "indicator--57f684c4-5020-4300-bc1d-689486fea0a6", "indicator--c9e83c6b-fe38-4a97-8d00-3c13d30e2c70", "indicator--fd8eb413-5c00-4ba6-bdae-62e8d3c36f09", "indicator--302b5c77-f609-40c5-80e6-c19b5ff11305", "indicator--fccea0a7-7edc-44ca-b83d-4556f7fbb388", "indicator--ea290cba-1bbd-4110-a738-2e791320d79b", "indicator--c435640a-bdb6-49a9-9e11-eb6f343b08b6", "indicator--f411d563-6608-4480-9ecd-3614a1289285", "indicator--f797c751-00b8-4da4-9349-e18d5b4e287a", "indicator--734288fd-aca1-4cb6-8e17-7c39010e4b41", "indicator--8fbbcc37-6b40-4e57-bec9-6503def46f98", "indicator--5b81bf67-e655-4662-8820-db065ac7e84f", "indicator--ef8183ae-eefb-41c5-a280-8e8b852dea6e", "indicator--100e7404-9988-4f25-b785-ed9bdcde3f44", "indicator--7a5e5096-b9b5-4042-aaf6-66f5564cd826", "indicator--7cf15a9e-b5e0-4ba0-8b16-e3e216f1e0c7", "indicator--9451f80e-71cf-43cd-9881-4946957712ab", "indicator--f4670f18-4638-4130-878f-b61b7c7ceccf", "indicator--e766dfc4-3609-4988-9e2f-72e2357a5ea7", "indicator--45dec433-3a11-47d1-986c-2a101f564167", "indicator--1f377e43-f7a8-4471-b522-6fe0303eb470", "indicator--66448f31-0961-49a4-af8c-29dc9024cadc", "indicator--abd09ad5-fab8-403b-b82c-236cda40eab7", "indicator--5831fbbf-9603-461d-881d-3a186ddf918e", "indicator--b8903911-223f-412d-a647-a03481704cb2", "indicator--18f570a7-2587-41f1-8cd5-00dff03c2d52", "indicator--3b46d946-1667-40ea-a6cb-e68c3a60efaf", "indicator--c5fc1d6a-92d7-498c-8ab7-b77a4c430f27", "indicator--695bcea9-9ff1-43dc-ab4a-c4b632543eb1", "indicator--b578de1c-2782-433b-bb96-c7a469014ddf", "indicator--3b36e385-3881-40f7-a777-89d0db5dcd17", "indicator--ccb16ca9-3587-4903-a16c-9ab53e6fdf14", "indicator--d5cf38b4-130b-4c98-b716-4d9a076f14fc", "indicator--08e6b661-8718-4ee3-bdb8-cd5512a6144c", "indicator--b55675fe-e55e-49f1-b577-cfd2f04a7059", "indicator--6273789a-c2d9-448a-8343-6e7dafb6944b", "indicator--47b5b579-7786-4456-9fcc-951541646fc9", "indicator--277d5f39-35a5-4c6e-bda4-4324efb23ec1", "indicator--7cbe279c-4358-4b1d-bd33-e69d85457f79", "indicator--945dcc14-5086-4df9-bde8-60ec8bf73f08", "indicator--e7507288-1c21-4b5b-ba9f-41e1fbecf274", "indicator--6485b4f2-da8a-4597-b238-26f0a7b2ca66", "indicator--d0e3376a-6a0a-493b-8a89-1e83d2492211", "indicator--ff5bc412-e93a-4758-bbe9-55d9f7b53997", "indicator--30cffba6-91cc-43b2-937e-17d21360f51b", "indicator--ed9d8759-8d99-47a7-9310-4bc4560bcbf7", "indicator--027f72a7-cea8-4dbf-a9f6-043a2acc2541", "indicator--cb099208-4fc2-4272-9744-6d1f92176889", "indicator--07232d79-d91d-4f00-81c5-df5eb00b8983", "indicator--b637e382-f76d-4d69-a885-c9e19c0d2de0", "indicator--acd3a998-9b6c-445a-9df4-864576687966", "indicator--be5a8643-f03c-44ce-a70d-8b5df81173af", "indicator--7d26e5d9-de04-4e55-981a-7892a73351ce", "indicator--9dbc4b85-21a6-4672-bba3-80fe2860ca7b", "indicator--4b771169-62e5-4f21-86e3-fcdaff61f405", "indicator--35e3d1b0-2548-4265-86e1-e54268fea07f", "indicator--7077f0be-165a-4e7d-b494-ee7c4a838dba", "indicator--1742cc4e-d8fc-49ce-8361-932a3363e1a1", "indicator--c0a4984c-d772-4177-a59c-3c57200683c8", "indicator--a4f6bd9d-befe-406c-94f0-9539cfe519de", "indicator--9a39f820-de5e-43dd-950c-2f8ddda8d91c", "indicator--e38453f7-2a6b-4c91-ad55-07bed13eaeab", "indicator--fc5d7f6c-860a-439c-b778-c3200bdfd8e3", "indicator--ef9a9108-395f-4eb6-8876-65be9da4bf15", "indicator--6b8f0983-045c-4200-9be6-adc997fe08fb", "indicator--ced9bbc9-477c-43dc-955b-fc5780b9776b", "indicator--8def4fa1-8af8-45ce-952d-b7e81f141306", "indicator--5010a714-0fc0-45b6-be88-63c9bfba462d", "indicator--a742b856-89f8-44b1-99d3-f06f8df64e9d", "indicator--8dbddea0-6f7c-4f25-ba9e-320d04ff1237", "indicator--9b4277bf-2a8a-4e9b-878c-f12c1490da80", "indicator--855d7cf3-f815-458d-a171-2c79c92eefdd", "indicator--3037015e-ccaf-4497-af89-bbbd0fdbd319", "indicator--c8f167d4-1bec-462f-8f50-5912a53ae957", "indicator--d90ddf9d-49dd-485f-a3b5-fb57ae4ec8f5", "indicator--4d97c805-c206-4bcc-be6c-86be27d93a2d", "indicator--006ab97c-43f8-43ea-9759-ff0e1e30a219", "indicator--56911052-9112-481d-8854-f0b223033c9d", "indicator--0354bd64-14a9-4fc8-a0e9-abff0daf4898", "indicator--7fd15384-0f5c-42cb-9f39-c14395de7c1e", "indicator--334bc5ba-99fa-413d-bfd4-93f4f801bd1d", "indicator--01680210-4171-4f82-a3e1-d78397fc81b3", "indicator--f94fd334-28e0-4ab5-bab1-b36d5545ddd4", "indicator--ab790c8e-a79e-48d7-9d47-b91735e8e2be", "indicator--30d3cf4b-bebd-49eb-a544-819701754632", "indicator--944deb2f-396c-498f-99b8-0ad43d3bb13a", "indicator--4714bde1-fa75-4371-b45c-399e5f52e769", "indicator--814a20b0-d257-4c02-bba7-ecfe679d26a6", "indicator--b6338dc9-2b86-40bb-a934-6e7023ad53b5", "indicator--a410271c-9f85-40c7-b9a5-924e5cd06449", "indicator--ba599de2-7218-4438-88b7-6e94c575e937", "indicator--c43518d3-c4e9-4ea6-9479-3559ae85d4af", "indicator--aec84e3e-4c6b-4971-b418-cd742d5a7cc4", "indicator--816c6a83-a6b0-4fc5-bd37-51e77c5e4435", "indicator--a7bb6d36-8517-4035-86c7-7f997b28327c", "indicator--9edf7308-5210-42b1-993f-accbcc4322b6", "indicator--29d0a117-e75c-4627-a407-133270796465", "indicator--30d36118-6b84-4676-8604-f6f896ad29c4", "indicator--baf897ed-7fdb-46ff-a4e1-0c37abb1d35d", "indicator--6f39df9d-565a-4827-b58e-6198f6e70fe6", "indicator--bfc51d13-a4e7-4416-8b25-b35b2a3834dc", "indicator--9d2d5eeb-c987-46dc-969c-d87989edb5cf", "indicator--b083a6ec-c0e0-4a73-a3c9-56010e99935f", "indicator--57fb54ff-62c2-4593-ac69-8be20403743c", "indicator--5ac557e5-a6c1-4ccb-b77e-1466f7e6a2be", "indicator--a623c488-5bbf-41f1-9500-0ec12f4e0b77", "indicator--ba7db95f-25ef-4f85-9517-1be7737e5653", "indicator--2bcbe2b0-1076-49f3-ba6d-f44d02654ed3", "indicator--cfdee360-5a3f-423f-99c8-89abd6756de3", "indicator--08b8e461-f3ce-44e4-b6be-6a01ef80b859", "indicator--18fa559b-94ab-4f7e-b572-d52730c590b3", "indicator--a3fdeb27-56cf-4db6-83ba-42f1ec28463a", "indicator--32c28516-5301-433f-8373-029555c14aa7", "indicator--19953847-52f3-4be0-a829-6dc0a1ec8fec", "indicator--3f606a06-42a4-4846-af52-1a1e169b4422", "indicator--7a9a2c9f-8cdf-4292-bfda-837f66884631", "indicator--c8fd749b-3da3-4e33-9442-f5668314fb60", "indicator--36690255-6460-4607-947f-9ce2c91a9bd1", "indicator--29370e44-2e50-4b46-86b5-37aa79974e2c", "indicator--9293ff0a-6586-4577-80e3-462fc0114ecf", "indicator--c73c6f5a-2e4e-42bb-9c41-57f85e233099", "indicator--5b6b95da-221c-4f99-9895-cc0f6d2d9147", "indicator--7aa5993d-ead6-4657-8fa1-ac8b440750a7", "indicator--6c7deee1-a256-4f82-9f95-cdbdccbf36a6", "indicator--38e682eb-8f1c-4a14-a5a2-7d7d24cb01c8", "indicator--84e23816-a1c8-48be-9964-c88ecfcb9647", "indicator--72014b4f-cde0-4716-a9af-111993ef176e", "indicator--9baced00-56f0-4624-b069-72c3da16ad74", "indicator--6f521580-21fc-4fdd-8010-73955c1374fd", "indicator--cafa2d88-a33d-4cec-8688-0d6b8a326056", "indicator--76a94b6f-fd9f-418e-8728-92c401cf7bbc", "indicator--aca4993a-5268-4935-968b-4cb8b18070f0", "indicator--5628ee77-fe30-4d15-82b0-2fc77b51e843", "indicator--6423de68-babb-45e2-9148-6dda138bde75", "indicator--ec53c4a8-0653-4ff3-b89f-e768a526e14f", "indicator--f6bac4ae-a5ef-47b2-ab02-5a0f86de2023", "indicator--e26760ee-4dc6-49b0-ad9a-0fcfda62e083", "indicator--647059f6-e717-4bdc-85c9-ec236194aac2", "indicator--91d10682-88dc-4c22-8129-27f34b4ed0ac", "indicator--dd30abae-5368-4bc7-b985-8106e5dc3402", "indicator--298c1a96-e7c2-44d3-af19-31805711ce06", "indicator--4426adac-155e-4914-bd1e-1f6f0c698a07", "indicator--22aae9af-5bcf-47ab-ad79-36ddb616437c", "indicator--3bd4b003-36b2-45df-b962-52ca95636e99", "indicator--f299017e-8cb2-45d5-8f6b-fcf20c863353", "indicator--37b6a7c5-5f16-489e-9900-7aa47ec4c4da", "indicator--4e414f9c-eb9e-4710-9123-512799b42ed6", "indicator--7b70d19f-2c76-408a-9672-2e7e476c1a51", "indicator--e3cc5d37-f8ef-475c-bae6-060706c92502", "indicator--0cf88c42-c0fd-49f6-ad4e-3c28424157a4", "indicator--b24169a0-1554-428b-8c3a-c091886d281d", "indicator--bee22ffc-7e15-441d-876d-4e4509872d1b", "indicator--95dd677b-2fcd-4707-9b2a-fa8c8c043aa6", "indicator--86c39b82-ae62-4c3c-8013-2e283802c741", "indicator--ba02cb2f-ffe3-44f6-8af1-dd4268d630e6", "indicator--e83e882f-27be-4b64-9357-d35d4ee95d24", "indicator--e903b712-b4b8-4ebb-96cc-940ff1ed4eb4", "indicator--14893755-2c7c-47ff-91bf-bb7e9ea371bd", "indicator--10d80ea8-114a-4627-be92-034651e49cb2", "indicator--c0329525-6514-4ca9-995a-a54526f4cf99", "indicator--8a17fe52-acdd-4491-b859-e9fb7950fb9f", "indicator--ec7b6c75-6b93-4d5e-9f27-9f70501cf854", "indicator--2586a38c-8756-403f-86ee-fa9b00197697", "indicator--f03dcf49-4271-44f9-ab7d-64bdb13a9a04", "indicator--dc95a15c-68cf-474a-918a-86550d3a31e5", "indicator--17a2520c-a7a1-47ba-885c-6722c83d3d9f", "indicator--99adfec1-2643-41f0-8692-db97cb8352d4", "indicator--34250479-33f3-437e-b932-5c72c65b778d", "indicator--1e63db43-b5ad-488f-a8d2-990b481020a3", "indicator--98f6933b-f11e-4fe2-aa08-31c819047b21", "indicator--ff850ec1-f130-4d07-bbf3-c2b1ff29f7ad", "indicator--2454a83a-ad23-48d4-af4f-273ef2baf24f", "indicator--4ba9e511-9df5-42cb-9bcd-462ff49fef59", "indicator--64a9bdb3-119b-42e3-9811-38660485ddd8", "indicator--a57296cd-2c23-4118-ad33-206043bfeeb4", "indicator--3f85eda9-008d-4648-9743-20d67177bc44", "indicator--cd16eea6-6120-43cb-95f0-35ceb8fa6e5d", "indicator--820b37a7-432a-4063-abfb-2525628338d4", "indicator--b35bc141-42ce-4bdf-8b47-9592eba1378e", "indicator--9ef2d977-92e5-4c6d-9f2e-5b33308e5a08", "indicator--4734af09-969e-4f52-8cb3-f2fe90df142e", "indicator--65df40e5-6171-441b-a7a7-6ea5e38fd196", "indicator--4f0931cb-cc59-4d1c-add8-6798c3c2aabf", "indicator--a547adbd-b1b7-4310-9329-21ee7fe6983b", "indicator--3118270d-f5fc-4caf-9bfb-02aa00a56716", "indicator--bfe058b2-557c-41a2-ae56-2d5ddb700484", "indicator--600a585b-03c3-463b-af0a-8abb19a0e08f", "indicator--c5e977e6-55f5-421c-b5a4-00401dde24a3", "indicator--1d06fe40-a019-44cf-ba19-62f209301d33", "indicator--1ac08c81-552b-4a77-a036-cb50716c6baa", "indicator--f3528352-bc37-4140-a720-74ee10234507", "indicator--f733be69-b112-422c-9695-ca50bf911d65", "indicator--c2b6501d-b20b-42d4-8a1f-b051658838e4", "indicator--847fea8e-8333-4b60-ada0-6aa8827a4ac8", "indicator--42fd0b79-d3aa-4066-b4f8-2a65d2c2228c", "indicator--33f632e6-4f18-49d5-9d90-62ccfb38a3db", "indicator--6a0feb5d-090a-4921-b87f-b0c9899e24d4", "indicator--ab200e55-8e31-4ce9-af1b-a6af172b00f5", "indicator--f730c0ba-8e10-45bd-8611-f80b4efbf145", "indicator--13e1d229-584d-4317-9856-22f33815932b", "indicator--18fe7a71-3030-4bfa-b52e-ec2007aed4eb", "indicator--bec36fb6-f607-46d2-8bfb-1b1e9314b00f", "indicator--75cdc824-7a40-4cf9-ac2e-8c66634ac6d5", "indicator--8a5568f8-3e59-4ee1-98d0-013b9cd6e56c", "indicator--264b030f-8cc2-495e-8433-231533efb8b4", "indicator--5118f8a6-f513-4ed6-a127-8b1dfb801d58", "indicator--9d9b162a-0d43-471b-94fd-a7fcfb806959", "indicator--fc622db3-a6d4-4616-9f45-d91bc2e50242", "indicator--bdd82456-e3a8-4851-85d1-6a9ba6d7cf6b", "indicator--090b3d1c-c53d-40d9-ba1d-eaad3ca707f4", "indicator--5dace645-0ea9-4a7e-88c5-ac4262733461", "indicator--8f6de653-bf30-40f6-95d1-48c42ded17a3", "indicator--d5d8b497-df18-48d2-845e-4fbb1520aa21", "indicator--07b7e85b-675e-4350-919a-31a7911c20a0", "indicator--dfb95823-aff3-47b0-a31b-2fbe36c866d9", "indicator--10db85b8-27b6-478a-ad78-3ad8b10010e6", "indicator--1adf3835-f75e-4f96-9599-6226c42ed3db", "indicator--3b0ae1e8-e963-4f69-9d9f-e628850739fb", "indicator--8ca07866-1735-40a3-9c8a-d2c31baba56c", "indicator--2abfa51a-ff6a-4990-859a-df4d0f7b79f8", "indicator--87547c90-6f52-4a81-82c4-b17a5ec789b5", "indicator--c5f6a357-50ec-46b3-b842-7c47151502e6", "indicator--a21c6f9a-318f-45d4-92c2-697632d779c4", "indicator--d505ce13-38ea-4be6-abca-d5fe0c464292", "indicator--d92f4f9d-47cd-48f4-955f-76d712eaa7c2", "indicator--42ad5a31-9b95-4404-8e1d-d6a6c12de06b", "indicator--b6cef408-85e1-4644-ac4d-3c35cf150a25", "indicator--2a753fa9-a22f-4357-a4ab-ec34ec364d04", "indicator--fd872799-09a7-4dd3-b8f3-ee5c1617aa10", "indicator--0e4a6b94-a50f-4226-9489-f539f65d6c26", "indicator--ea958bb4-b505-49d4-9f75-17f541e2c7bf", "indicator--cfdbf71e-5e72-4641-9ca1-deb150e01321", "indicator--1095fee5-4ba2-4d75-a3ca-520271d81523", "indicator--e5c3a841-c572-4491-ac31-1aeb6080d44a", "indicator--5530298d-5b2a-47a9-9399-adee28ffed81", "indicator--f9da4dad-e299-4f7d-9e9b-b49a859965d4", "indicator--eef2c739-37fd-426d-aae2-9c8843ba6ffa", "indicator--cc1fd826-4a4d-4c01-8257-35760ab3a40f", "indicator--5daf84c5-1c8b-416b-81f9-2273245c2c9e", "indicator--c4cc1007-0c3a-4dc3-a2de-83cee13375cd", "indicator--8960db21-2591-4773-905f-7c7f2ba52c74", "indicator--1c095a00-d419-46cd-af59-64977d5e5540", "indicator--0145bd9e-b5a0-4880-a20d-6f496d5644d7", "indicator--115feda9-0927-4b30-bb80-c5f65e78b43a", "indicator--a74205d5-f8ab-4814-b9b1-3cc58e2153db", "indicator--6cbc5980-06ca-4a52-b548-771840175e80", "indicator--3a291a59-3ae6-4d28-acb8-9594d5d123a6", "indicator--fc425343-ad57-412c-8197-1d4b568a6dfa", "indicator--9a12425c-4e50-4298-b7c5-d981b81dad24", "indicator--020a8f6f-2a76-43c5-be44-a225141759e5", "indicator--242e9188-ad90-4a75-964b-20532ad3a750", "indicator--3c19c80a-ffe5-4354-aec1-351fa9f2ba3b", "indicator--a4f615c3-1512-4f45-a2e9-893026d3e7c7", "indicator--19943faf-661c-427a-9802-07a616768a36", "indicator--fb60d6ff-0c90-46f2-980c-1c83c5b56509", "indicator--ef3e0862-79b9-4ed0-807a-5c107167f601", "indicator--ff5faa6a-a467-4e0e-adae-bba6758417ee", "indicator--6171861b-b6db-40f4-86f1-9f134c5b9602", "indicator--493cc193-7924-4a3c-91b2-56580f7a23c1", "indicator--e65da87e-88c5-4c09-9d8e-08993335dfd7", "indicator--ee809e67-f0d9-4bb1-bd0a-fb1131048e8d", "indicator--c1bc5ca9-e144-4fc4-8f0c-587747d49157", "indicator--f19fdbe6-e824-4690-9621-8d91850cee35", "indicator--e8cfbb76-1650-4f92-9b02-ca99759ae1f5", "indicator--007f51f1-d003-4173-b171-f12f4d956615", "indicator--7797f2f6-811c-4e6e-bcc7-49d894dcf561", "indicator--2f3dbdd3-7262-40da-9bd9-31d5ed7090b2", "indicator--e0e093ed-604a-450e-a6b7-3905fd9c5dc8", "indicator--5d128a1c-18ca-46f7-be2f-0f63cc732173", "indicator--5d759420-9a39-456b-9ab1-1759a6294bad", "indicator--8c62b402-2663-4008-8deb-ddf421cb53d1", "indicator--ea615c89-0555-4c27-a046-5423a5043d99", "indicator--04162e39-e38b-4b3a-ad8e-9cefb27d99c9", "indicator--c1fff5ba-e16e-416c-b78e-80dddaf9a518", "indicator--b30f83b6-66cf-48e3-81d0-43ea619c62ce", "indicator--1a094394-802c-4347-94c3-552e419f9a45", "indicator--3f5d897a-718d-4eb2-ae29-fe5fbe611db4", "indicator--45ca05e0-7457-4fa4-bef7-0097cda21b49", "indicator--5416852a-6821-4db2-9621-8aa0b4043a26", "indicator--52a4d9b5-6122-435f-9898-3bcdd791dd06", "indicator--b10bcc5b-07c5-43de-9b9e-abb997205960", "indicator--9c47c6a9-a6b5-4d4c-8bd8-243baeb2ea5e", "indicator--2186fe7b-5640-4798-b826-e13149d9ce1d", "indicator--562a73dd-ccfd-48f3-8f33-73a52ab4bafd", "indicator--e1a806b9-eff2-4c67-8b0b-bee5c69dd149", "indicator--75b58445-502b-42dd-a2c7-29d78668e94d", "indicator--06bbd4d6-b124-422f-ac89-7633af0e9fe5", "indicator--019b1ed0-6b55-462f-bc95-6324aa4124e9", "indicator--e32e879e-feb8-41b4-b935-28fd6b45477e", "indicator--c65e549f-9b1e-456c-a3f5-2a22d4cc13f4", "indicator--db1a5fa8-72df-4e93-8761-81ff27aea4fc", "indicator--27b07948-5814-41c4-9bff-ceadaa4ec48c", "indicator--b1d45c1d-156d-4d04-bcab-d4f4796dc26d", "indicator--2a273fb7-39c3-482e-807c-dbd896f5e75d", "indicator--308819e4-b017-4984-b943-40c51298753c", "indicator--7969aee2-5729-43e5-b282-e218f5eafac8", "indicator--2c0c870a-e37c-4d95-9663-b2c8d28ac03c", "indicator--a3d90210-92b2-491b-a233-3413ff4df6df", "indicator--bde0c3f6-f756-4320-a96e-d6b45c88b8f8", "indicator--c86a8c0c-82de-41f3-be3b-eac5e2212e39", "indicator--0e992331-9802-4e96-aed5-926607326674", "indicator--01df9dfd-d553-4835-9f31-7b0388eba9be", "indicator--d36d3506-91ac-41f2-a33f-247e8c45cc6f", "indicator--45eb723f-037f-4e32-9baa-98b3ff40b604", "indicator--db6590e1-ac75-440a-9dd1-a26993478ce5", "indicator--fb5d88b4-9f41-4805-81a9-5ec8c87fec48", "indicator--f2eb50a3-5b05-43b6-86eb-4819613226d5", "indicator--fe8bf1ec-70a8-4f59-8b35-12f39260a385", "indicator--b5ca9014-a4be-46d3-a219-f2f0be08182d", "indicator--c23ee479-541f-4c1d-ac01-f7d1bbd7c45a", "indicator--19fd4604-77ed-4da9-bbca-d5b9e9177e45", "indicator--fe3459f6-503a-4128-98de-e5a16691b1ea", "indicator--89725a1c-6b44-4938-a683-484dcd060d7b", "indicator--e1d421b7-4a28-472c-bb94-4c478b025e27", "indicator--77b0c909-cee4-4f00-b26d-7ca2c90b01bf", "indicator--08cc29f9-3e84-42fe-9be2-6c288561d47d", "indicator--fd134224-a536-4350-852d-f04c6cd98eed", "indicator--52d7d184-4c18-4e5b-b7a7-a0bd8cf58ebc", "indicator--392581de-1c77-4f40-ada3-74de3b88ee65", "indicator--0287b90b-7e8b-4a6a-afe2-cdfef5ba2aae", "indicator--7dec825e-984f-44dc-bd90-b4b9b17ae7b4", "indicator--45b3177d-589a-48ac-adf0-b17149324059", "indicator--e34f0245-9def-41a7-93da-dd07411ddf8e", "indicator--2b609c87-aa81-4e49-81c4-447dd9f841bd", "indicator--47529e45-6d56-407d-90e9-092d889809e6", "indicator--5665727b-38ae-40b6-a541-3b556c2d69e9", "indicator--fdaaa445-6f72-49de-9f7d-cebadd9b1f68", "indicator--4100db09-c114-485f-85ec-658ab32e43d5", "indicator--2dfa5383-be16-4cb4-9c3c-3b522d8ca785", "indicator--80fa24ae-758d-4d15-be46-f37d891366e5", "indicator--48cc4910-25f7-4eec-9a46-587862cffd16", "indicator--e3926f1c-f2c8-4e47-b6e4-73543acdd713", "indicator--897f2f78-c6ad-4810-aea0-3ef6a56c9647", "indicator--7b751cf4-25e9-40c1-9fc6-deefd219abaa", "indicator--40c97c4f-fddf-4512-896c-cfa0bdd62686", "indicator--2c8c51b4-35d0-4b9b-a9f8-9ca862c487f2", "indicator--bbc3a231-62f0-4955-ba23-db8fc0840a92", "indicator--b1c3bcf5-a10c-493f-a71b-d00c6b8dd39e", "indicator--2f1aaa0c-aaba-48ff-9e84-620c73431d7b", "indicator--86e02e7a-6bb8-4eff-9d40-651182a01aa7", "indicator--d9686a27-8aa3-441f-a50e-428c80b598ed", "indicator--a11f0de9-5da8-45ea-b4f2-099c41091928", "indicator--c8cf1e35-3613-4acc-85c0-215134bf30ae", "indicator--0d22ed1f-4913-4cea-a8aa-0f7f06a1e1eb", "indicator--68e1a3f4-6db1-4357-bda0-6cfe3eeab923", "indicator--29511463-adf7-42e8-8c7b-b7f8b61861c7", "indicator--24ea71f7-fcfa-4709-94c4-c38f2d6f66f8", "indicator--2c374a67-f7bc-4f6e-8e4d-1f0d5f8da28a", "indicator--53cd7a7d-2bcc-4429-a788-c41f8fad2840", "indicator--992613c4-6047-47ec-96ad-76faf148e57b", "indicator--8a683946-fb3b-41fd-8f5e-1aebf2bd6794", "indicator--3b518fb9-7287-458b-90c3-b02ce669b7d2", "indicator--e000e82f-369d-4913-8bbc-e7fd08603ecb", "indicator--76f22686-a8dd-44c2-885b-cf7bd4de985e", "indicator--1b3d3dc5-f16e-4326-b46e-609da5331d14", "indicator--65b98baa-0ed5-425b-bebf-bb1e4d09b7dc", "indicator--6f279cb0-d364-47dc-8280-d2a3940946fe", "indicator--4764e2bb-c37f-4dd1-8dc8-bc600b58064c", "indicator--e5d7c76d-3705-4cca-b92c-5c1729cf9e60", "indicator--d2274e6e-6d81-495e-8f6f-2538594a6b10", "indicator--d0a6da96-8bab-4cbe-be8c-10cc3d4201d8", "indicator--93ce688b-f3ad-46b1-bade-0aaefd8920dc", "indicator--085a08f4-e165-4e21-872e-0b47550ef086", "indicator--39ed5008-eaaa-443b-80bf-e4da3aed42c7", "indicator--b9bb7cf9-6579-4c48-896e-b7bf057aad02", "indicator--fece1531-b500-44d2-b9bf-3e26e5c915b7", "indicator--7299d9b4-a858-4f0e-b809-eb452fbfb36c", "indicator--b8fac093-765c-4463-a1af-f00ed6ecfc4a", "indicator--9512fb56-5736-495f-957b-91ecca0c8ed2", "indicator--4e7c2a26-3f53-4697-8271-42b8b8efd4dd", "indicator--c2673dff-ae07-4ffb-b8e1-c76b87f2e171", "indicator--3609b875-7e5d-4a19-a0d0-47f21a0dc36d", "indicator--1d7c32de-50ad-4f81-a6d6-4b539c12297e", "indicator--cf1218f6-fcac-46ae-a69f-a0c7f481a8f7", "indicator--6d6598e1-9c8e-47b7-bd89-0cd8afc8f4d8", "indicator--3b433016-2030-4925-91c8-1c9c423ebd0d", "indicator--ef5a4e5e-b1b5-4bb1-aa97-07acb566edcd", "indicator--2c403e7c-78a8-48e2-89ab-46c3df0e87c9", "indicator--24442c76-bc06-43d9-9961-640f4876dee2", "indicator--f6cdb8a7-1aca-41c0-9fe1-5078d91306fc", "indicator--f99749a7-7e2d-41d9-8dd6-5b3178d92be0", "indicator--85f24a2e-d4f6-4850-967f-35297096f229", "indicator--eef15f2b-b5eb-4c8d-934c-ecc8704e40bd", "indicator--e2d24845-ad5c-4a71-8b08-20b97b633961", "indicator--91748ec5-a7f8-4a1e-b011-cc4e95aec679", "indicator--cebb1293-011e-4154-9a2f-a6454d8f9fe5", "indicator--5eed52ed-725f-4101-b753-3dfe0d9bab14", "indicator--915e6103-18e5-4440-8812-45a76c491b94", "indicator--e1f098ae-0a09-4745-bf76-54d0d921ae39", "indicator--b91f51a8-d763-40bd-b9f5-b804e1218055", "indicator--b339e55c-2213-487c-b538-0ab64f84f667", "indicator--166bd9f1-5d96-4f44-8ae8-ca860b6b082f", "indicator--91975c2c-4481-4d29-a566-56cc5bdb715c", "indicator--346c3057-53a4-4716-bed7-270e00740a6f", "indicator--39e24d10-275c-4ae6-80ec-44b85acbfd4b", "indicator--6975e8ad-9cc9-4aa2-a739-14a5224a737f", "indicator--f2858cd0-dd0c-48b4-8bc0-1abea689a726", "indicator--096b31c8-5d7f-4583-8b53-a96fece02a27", "indicator--28377605-3517-41cf-ae9f-1108bc9ac52f", "indicator--ff543301-f602-4550-84e5-1565dc6aa3b3", "indicator--5356d99a-9651-4d7f-8fdd-e39ada86a688", "indicator--000f8c2c-5c2c-42f7-8151-a43176870c83", "indicator--02c3e1d7-36f4-4066-9695-beba66796936", "indicator--f48be459-d2b3-4fcf-aae8-df1541b3316d", "indicator--73c80a64-5226-4538-b827-d4d43b605f34", "indicator--18ac7a7f-e885-4bda-9772-f5e20ff8ba5c", "indicator--2d8d074f-e974-43ff-b866-1ab9ede7ed6c", "indicator--941a7857-4293-48c4-a503-c6e8b5c3b006", "indicator--27463416-3948-4c67-911c-936916febc60", "indicator--876e50b8-d182-4081-80b2-7ae6ba9a75bc", "indicator--467126b5-ea39-4089-9ec6-703a19671631", "indicator--637934ae-b99b-4113-b16f-b75d90988ccb", "indicator--08554609-5080-4579-ae8c-846140fc59ee", "indicator--115879cc-4e63-4c97-9d1c-29900d3d5825", "indicator--5ed07f81-3686-430b-874c-ef5ae6f76eae", "indicator--32b09c00-9ec8-454b-8fdd-582a97b37a7c", "indicator--4c9aabc8-5671-4e7f-a3e1-7419330c07b3", "indicator--db80ae0e-8349-4689-a533-d95a53e09c6d", "indicator--bbaea51e-30d5-40ad-8b43-088192c9e16b", "indicator--1e1cd6ec-b8f0-449f-900c-539712921960", "indicator--ba49e0df-76fc-4e6a-a9aa-05a3e24e4e90", "indicator--943c7762-8a97-4abd-94cd-d5c194a3e180", "indicator--a545d226-5b36-48fd-a651-f593bfe4b925", "indicator--d2cd7cfc-0707-4971-8f15-620be67124cf", "indicator--25d9ac25-2ab9-4265-98d3-78e2767536d6", "indicator--1870d596-83b5-47ac-a389-4697c2b41718", "indicator--9be19773-b203-432b-9c0a-cecdc21e3826", "indicator--bb811291-afd6-4c43-8949-93429d48bbb5", "indicator--d8d1f957-9eb2-43e0-bb1a-098b774ec1c8", "indicator--2f523e05-d572-4fdf-b56e-2aae3b074381", "indicator--4c5da0a4-03c1-4679-b221-88eaac854639", "indicator--d7bbb216-5a74-4e3f-8bef-a4234ee73e63", "indicator--ff1ac7dd-9a80-40fc-b4fc-2bf05ca1bda6", "indicator--7ee98fb7-e149-4e12-89f0-22edb2a01115", "indicator--1aa282b9-cb53-42f2-b347-903c6b65d0ee", "indicator--1c8925ba-8efe-4e3c-8fc1-6214c8c7c769", "indicator--9231c991-53aa-46f2-95d7-f724ba381389", "indicator--7a94042a-b15d-455b-a64d-2a004ec44b9e", "indicator--53f6f45e-12e1-44b7-be11-0a3ee6960599", "indicator--40c9b14b-e598-484a-850f-0a85120598bc", "indicator--fb5f42fc-d7ee-4b5f-9916-727c000397cf", "indicator--7aaff957-e6d0-4572-9514-fc9b2a847bf6", "indicator--50f9ba6d-b816-46ea-b196-b4d834189590", "indicator--e13c482f-c864-4fab-a3d5-a17b00443b71", "indicator--fd40f3a6-c92f-4504-a6ca-b059f7902100", "indicator--d818d7d1-7858-42cb-a64c-ebb7e733e5d0", "indicator--ad442cd8-72aa-4726-84ad-b53ca674f1bc", "indicator--2b21c68b-24fb-4cde-a3d7-a56f4fbae298", "indicator--5d299291-c62c-414c-9298-0df93e7a3973", "indicator--847a6e10-041e-4d40-8f45-d770cdd906a4", "indicator--52ab9d34-8f4f-4b6a-811d-5341233af033", "indicator--87935c43-b12f-41b0-8d95-ef247f60463a", "indicator--e5dd2b16-5921-415b-95f3-13be11e42c91", "indicator--8dea19e5-eb41-4020-8f51-92c33c867306", "indicator--079d852c-5dcb-48b0-84f4-390e1f55af5a", "indicator--f6812438-9875-4881-a369-3bc8b77a2b24", "indicator--3d391a4f-31ac-4352-afa5-7274be46504a", "indicator--389b917d-6b07-448b-9bbd-83c655e89df4", "indicator--8af097c1-c972-4b9f-9be5-e86e0e60c8e8", "indicator--cb594238-4fc3-4bf0-a666-0dc5275a6b6f", "indicator--487e9212-296b-48f2-a661-837ba993a94b", "indicator--004fcdf1-d0da-4607-b7d5-b0897378193d", "indicator--3fdd886b-c477-4a24-8963-ad10f23f5625", "indicator--95eab6f8-eea2-46d3-a28a-32a45a5aa963", "indicator--3cc5d39f-698e-45fa-81c2-f573ea47d7bf", "indicator--6c62cc20-22a5-4a43-ade3-957b7ee0f33a", "indicator--55ace87b-83b8-4744-b9f9-17480fe4880e", "indicator--d3ca24a6-312d-4de5-a1d0-5cca810e7abc", "indicator--ed925b0c-a6d4-430e-9edf-794d7d86cdce", "indicator--ea3f7d8b-37bc-46e4-977f-6ace7fd96201", "indicator--fab9e3eb-1145-44d8-b4b3-e1aa8471317a", "indicator--3a49432b-bcdb-4b75-b3bc-515788dbf469", "indicator--5d83148c-c17f-489d-b11b-44183d49a126", "indicator--266f2be1-3f64-4ad9-bc83-bc6a342e30d3", "indicator--70e40a8d-ca13-4c56-a9f5-e470b5d52ceb", "indicator--f6557fa8-9f49-46c1-ac61-be5148b774cc", "indicator--a3898494-1607-4615-850a-25feaa529d92", "indicator--e48d3672-87dd-4f3d-aec8-7a6ec02a5fef", "indicator--c48db5ab-214c-4516-98b8-b183929cef21", "indicator--c7b194f1-32b1-464a-b925-43ebc8242eb3", "indicator--6be809ee-4836-4d93-b38b-5abf00a2bee9", "indicator--493cb018-5e7d-4d85-b6ac-4d6d5911ca8c", "indicator--02aa7113-ea5e-47d5-9019-161f2b1b386b", "indicator--51136ce4-7116-427f-9416-5af860b9e449", "indicator--80cb3fee-0de5-4ef6-9b91-2acb0f0386eb", "indicator--7b0b33b7-e628-4085-9635-a6113b549aa8", "indicator--866bd892-2f09-42fe-9e98-e81ba4e43beb", "indicator--5bf4e83b-d11f-4341-9d24-0144dbf82e5f", "indicator--8b45dec3-88e5-4667-82df-01b386dfe617", "indicator--b235dee1-033e-4c69-b3d4-19a87e45dc84", "indicator--7a767b76-0aa4-4555-a852-f6ce238c8b0e", "indicator--7f847e19-8ca8-4bac-9e09-e91c97444b59", "indicator--78cd614a-e5fc-47e5-bda2-77ee2c994595", "indicator--63f59180-9c05-4de1-a4c5-846092dbdae3", "indicator--e451520c-526c-4a09-9f40-6edc2618de3c", "indicator--adfeb6f8-01cf-4681-8ed6-8df40b297217", "indicator--ac83621a-a655-49bf-b897-b52b13ff6f02", "indicator--343e9a47-18af-4bf3-aec2-d189cbfc95fd", "indicator--39261fa3-c9f6-4428-a5ae-c9354eb93627", "indicator--28a42480-d790-4534-9c45-36233b9a26cc", "indicator--1f750009-0af9-4d2b-a4da-3e829fbf8543", "indicator--93b69e71-7486-4a9c-a1c6-b26b0a23f666", "indicator--fa263cbd-f8ae-4861-919d-39075141bf3d", "indicator--a05d99c2-c6fa-4346-9377-a6c67dec46c4", "indicator--a701ee4a-19b4-44f4-bd76-558a56a51119", "indicator--12519b18-633d-4a88-89f7-fb5fbd779c76", "indicator--816b33e2-39b0-4616-81c8-bc9b10534706", "indicator--1076d315-9327-487a-9517-e887371bdb22", "indicator--3bfebe6d-bdad-4190-973d-04178972105c", "indicator--be862988-8401-4ad9-a81a-72328f9c566e", "indicator--fae2d315-da9d-48c1-9d28-9b062725e705", "indicator--3cd1e493-503b-4cd2-bcaa-cc47fc8fdb5a", "indicator--bfe05750-5c26-401f-a8b6-500e113acfd3", "indicator--189b3c6b-a8e9-4136-81fd-631da161a89f", "indicator--9a4364a9-a769-42fe-9700-d1a7778820ac", "indicator--d6ec8423-1fe5-4dcc-98e0-559b6f90769e", "indicator--5821020e-4a16-4919-8396-ee7ab28dcac4", "indicator--b3d11759-a662-4b3a-b646-446c3d27bc5f", "indicator--82e49af2-e7df-463f-a9e1-a1247fe5fd83", "indicator--4f8fb557-2b6f-4084-9534-a0dbede0231b", "indicator--76faec61-fa3e-4912-b462-511050ccae39", "indicator--090bfc87-a1bb-4730-8d1a-fe0f74376d7c", "indicator--74f0acb8-9ff2-492a-aba2-c788d55a77c5", "indicator--0638e391-7717-4fa9-841b-fed5c649cffc", "indicator--89b4b161-6e21-4e7b-bd63-18e280d344b3", "indicator--d4a5b814-d721-449d-9a97-13076bfe8c2a", "indicator--7c8baa83-60ab-4c6a-8c88-2f5681e07f5b", "indicator--be471553-2970-4d3d-84a1-eb3717ed0a2d", "indicator--ba1df08f-e75b-415c-bec5-ae47108232cd", "indicator--2c751fcc-99f1-478f-9581-8350aa62f734", "indicator--8b71ca1a-36be-4fbd-ad8d-17afb585ac4f", "indicator--2bf7f3aa-8870-40ec-97df-6e6ee1eef05c", "indicator--1a07e7de-dff0-4d90-a7f2-8e3b3f4acff3", "indicator--88e0b0b8-940a-4405-9f70-c0117828f66d", "relationship--2b8c02f7-c811-4812-b6d1-19fd87d876d5", "indicator--1105e524-6326-488b-a950-a1a3a72a0891", "indicator--d56f8fc5-5de0-4a83-af86-4067639c3f41", "indicator--7b6e4bcf-326c-444c-bdc2-0dfe8bb065c8", "indicator--2b08e1fa-f190-43b0-bb04-80136a2683c6", "indicator--5761a529-e3e1-4779-a333-2232b65e0dd4", "indicator--ee1502be-3fef-4393-9791-11dba872fa74", "indicator--c31c76a9-1d28-4a2d-ad9e-bfb9a45e1d46", "indicator--997106e3-2ee7-4831-98ec-445d5868c8c3", "indicator--cb453aec-5372-462e-ad14-3447d4fc0bfe", "indicator--fb31c910-44d1-453c-8b76-19ecb6876c95", "indicator--c1dd4625-229f-4780-8615-ee70f04caa73", "indicator--9fb3b3fa-d844-42df-9c14-033166d77ec9", "indicator--8acae12d-5b5d-4216-afb0-a307a1578527", "indicator--8b688106-61ff-40c5-825d-444aaf79b0ae", "indicator--9c912c80-5208-4d80-81e8-61149710c9c0", "indicator--24540111-0f39-41bd-baff-0a184ecf30a3", "indicator--0189cbbf-e3d6-41f6-b872-02bc9777b409", "indicator--21dd5c0b-5114-4a28-88ba-f85199a73045", "indicator--f4aee4ad-4419-4477-8522-bb2ed4e079af", "indicator--c1530892-0f8a-4f26-aba8-4e397197f57a", "indicator--66b7a4c9-442d-4e90-bed7-f69c95e04b2a", "indicator--f907a7bd-4b08-4904-af10-4b15f17a2649", "indicator--34949990-db42-4cff-ae73-29047701c62f", "indicator--f2bd76f5-73c6-44bd-bf42-a2aeb9f9633f", "indicator--521147de-21c2-42cf-a2e8-d2f1c6250fe5", "indicator--0586ffd6-46f2-4d7a-96ef-f6b748bf23bd", "indicator--459ce06f-257b-4617-85be-9b6dec4d8c33", "indicator--33d8650a-a7f7-409b-8fb7-9e756d927fb9", "indicator--c78b5f1d-c9c2-46ea-8c04-9778b2d34cde", "indicator--1f449464-56bb-4b75-8165-ab0ad1920678", "indicator--ff76a632-0b12-4d6f-8dc5-fd1bf2ecd50c", "indicator--a0731f45-6913-4501-847b-d3076120da64", "indicator--483c49c1-72f9-456d-9dfa-902e3d6d86a8", "indicator--59f1b12e-53ab-496a-8a4b-94a0518ec34b", "indicator--d14ba0bb-319c-46a6-b102-669ab232a9bc", "indicator--349452f4-0968-4d00-aa85-2ec1c0083838", "indicator--4373d277-a77d-4771-b1b0-796bfc7dacba", "indicator--92a18977-5087-467c-84cc-0590979d50a7", "indicator--e99dc3d7-870b-4f3a-8f2a-77708654dc9b", "indicator--6af0f3bd-20a1-465b-871d-fa2e26fc2553", "indicator--77c24f84-c960-4fa3-a468-f811ab34b0ca", "indicator--3019650b-1a9a-4455-a714-ad871dfea579", "indicator--b25cbcad-2984-4a12-bfb8-e3291a9b7cc8", "indicator--0b350ff2-eabe-4679-ba0c-b5339bbd59b4", "indicator--c9e329c3-8e5c-4712-9f3e-9af5ece41d75", "indicator--2f7f966b-dbbe-4c14-b0d5-72f9352d027f", "indicator--5bd2a2fc-f754-4d33-aa25-07910227383c", "indicator--0d7e3147-bdb6-4264-85ab-5d6a160a5d03", "indicator--cbc7c2f9-1d49-48ba-9b89-7be56b543669", "indicator--2e9e3b20-af55-405a-99b3-9b7274b6686a", "indicator--da40d94f-8637-4e12-b1c0-50eec9c242b7", "indicator--c0a00791-81dd-42d3-840e-b6d891b6d573", "indicator--b5ab152a-cf53-402e-8094-605b853ba43e", "indicator--bcba4adb-34c2-4557-9abd-117ce028a4af", "indicator--ee81e719-2113-4608-bcbb-2e207f533bf7", "indicator--92c7c507-da88-46b4-ba7f-ff4749c5ad5d", "indicator--87119b9e-0c4a-4112-8731-ccb3a13802ef", "indicator--d8b12e04-916a-40f2-a7ff-c142cb2ee50b", "indicator--39fb6fa1-bc67-488a-b137-2c250f2cf75c", "indicator--3a85b3b2-d5d4-4993-b8da-21d0b15f3fad", "indicator--b464e97b-f941-4f2f-b6e1-e592a3ae2276", "indicator--e4b94e2f-9e64-44ab-929c-c4e58e464d05", "indicator--2fa455bf-a549-43d9-aaa4-bf1b254fbf4d", "indicator--82de1e2a-27de-4b2a-a42f-cee5d22c9005", "indicator--b4e004c7-825a-448f-ad3d-fc0f9dbf4f6e", "indicator--c30d7f8e-ad84-4834-a5db-137a5b7cff9c", "indicator--536f4227-c122-49b6-8e5e-544aa7b2ea8c", "indicator--42517f7b-e1a4-42cb-87f5-a209410f2174", "indicator--9e013209-5718-48f4-b6ad-543a3c41f555", "indicator--14a12ee8-6174-4713-ad9b-3514dce54d94", "indicator--3856196c-ae2a-4a0d-acad-d63b5621f143", "indicator--0dfde107-3ef8-40a2-8025-72274561f3a3", "indicator--32e560fa-df4e-49fd-8ad2-d7745ef3500e", "indicator--a1c7dd4f-e006-40c3-a9cd-956aec04da0e", "indicator--207ba79a-37e7-4b2f-9d4b-db75447c3b00", "indicator--6677a35a-1afe-40d1-ad10-fb62fb552ace", "indicator--26d2425f-f686-4e6a-bf69-3d4b1753c0bf", "indicator--902e304d-ed65-4e06-a56d-e2c686166d05", "indicator--1c24cc51-a91e-4576-aaf0-4da2d2abb59e", "indicator--4ef51187-cc9c-4464-ad64-bd110c85da85", "indicator--e76c55a8-eb18-4301-878f-796214f28d00", "indicator--4304251a-2c46-4e9d-b299-945060eb8de5", "indicator--47174c00-95c1-4368-a42b-9301ad129805", "indicator--d700a054-7459-467e-893e-9f9b9ebdaef4", "indicator--c55d9929-3b0b-402b-9634-52c73b36f47c", "indicator--88fca430-62b4-4b47-831b-dd5bd9d2b7a1", "indicator--f3e007b2-02e4-43d5-86a8-da2660cf988a", "indicator--bda3965e-3a76-4692-9bcd-d4d4897a051c", "indicator--7f15e44f-504b-4bc7-893a-f7ea993811c4", "indicator--701cc31a-2363-4803-9f12-0264cf10535a", "indicator--3f42d373-eca6-4d34-b2e3-722746b7be10", "indicator--39124915-2486-4e89-9b50-2044d11bb6b7", "indicator--fd70234e-576d-4afa-ab6f-39ca6fe9c619", "indicator--aff9645c-550d-454a-8081-11cc6efa9455", "indicator--70e92643-e984-4330-97f3-9290ebfac7b2", "indicator--ce0ddeae-7ebd-4721-9ce1-30bd19e1630a", "indicator--a3ad460d-d546-47a8-95be-69deb08cf556", "indicator--69f22dc9-d79d-41fa-a367-fda0caebb742", "indicator--8371c514-527b-47c2-9ad3-14bb5b2f2787", "indicator--64335b8c-6f67-4303-b0b2-212d4cc5573a", "indicator--c5ecf6ce-f43b-4014-8355-b360a04705ba", "indicator--b0203c77-325c-4b3b-b9c8-cd71a44b3f13", "indicator--a630a1c9-e722-428a-b317-76d2416ba479", "indicator--62b8e149-2857-48c8-a6c1-5c99aaac35cb", "indicator--d0706f3d-e160-4794-9e1d-dcd9a501cd09", "indicator--a574fe99-daa6-45d7-892b-070abf2919b9", "indicator--d460a69b-96a4-4d18-8c01-fba4bf0abad0", "indicator--7f2ae5ca-5495-4b71-a4aa-7a1b7c5f5d06", "indicator--4bc76634-8a82-43c4-9159-9df2402358ce", "indicator--dae8e225-62e2-4e97-9754-96cfc8e6bff2", "indicator--b09ad00f-d156-4940-afd7-43035af76fda", "indicator--e83bb77a-c083-4678-a5af-ff9d84ed57b8", "indicator--17fb051d-2c82-4ef8-a2c4-564b6b741a79", "indicator--418d6ad0-b4eb-4eba-af61-964406e70ee7", "indicator--df5eadbf-0929-4770-8c11-349c21b27742", "indicator--3e9614ad-550c-4afa-bde4-9f5dec53700d", "indicator--47e9109a-8f36-4cdb-843b-fd4c27571df6", "indicator--b6672bfb-4560-402d-9d34-95992940d663", "indicator--3028ce10-4332-4dfa-a1b6-6bb97f28e756", "indicator--bfaad11e-af30-4d47-ac1f-a6462b692b9b", "indicator--f923ed15-11cc-453d-993f-65ea8a6b299b", "indicator--15619a55-2207-45eb-8292-c2a3d334cfda", "indicator--25dda1e8-5844-4a7a-a8c3-86ec4f359c88", "indicator--a792f550-e60b-42a4-9893-6b3d73e9f125", "indicator--390a5c90-601c-4730-8c0c-0c1b27fb1a94", "indicator--ea5f350d-688f-413b-87ef-627e3fe56fcd", "indicator--a0a47fa2-a826-4754-9c18-2d9ff791ff34", "indicator--4e9f7a6d-b90b-4f16-a069-4a2c84d382b0", "indicator--17aea85a-6689-41a8-a602-9d86982865b8", "indicator--0844c466-bd54-45a0-bafb-fe4287fa2f02", "indicator--b071e028-1dac-4d3b-8be6-d5dc5ad6fc44", "indicator--7c77658a-79d9-4a76-b2b5-ba2c74ff2bf7", "indicator--e840446d-4711-4a8a-9ff4-8d7ddca7f464", "indicator--305b004a-cca9-4e5a-8430-dabbd3bcc7a5", "indicator--b1a1790b-017a-4580-a2df-4bc7cdb762b6", "indicator--9475c56e-ef3f-4494-a5c0-9726ab59cd06", "indicator--e69e5457-7223-45bb-8368-bd21020939de", "indicator--68f37b52-43de-4441-a206-e7c7c8385a4e", "indicator--ee6233c9-521c-403a-9874-350025a233d5", "indicator--9e7ce598-7ee2-4c00-a60d-8dd5555c8257", "indicator--70484c8c-a9ce-426f-b29f-10ca5b8dbc25", "indicator--f7edb92e-3755-460f-810a-c574bae74950", "indicator--30e9a648-9567-483e-bc19-e141a76fd0c5", "indicator--99add0ff-f198-4b66-a0e5-bbbb13ac5e0d", "indicator--cfcaf1ce-2cd7-442e-8cd9-1f31bef4dd86", "indicator--df09dcf0-d95c-4d2a-8c0d-1fe20dc6e270", "indicator--38ebbac0-99e2-40c6-ab9f-162656ad5215", "indicator--04e05896-1551-4ebd-8e43-034dda6348a0", "indicator--fdd49732-f062-49e7-a3e5-9baaa11519fd", "indicator--333d7b24-1144-49fb-9b99-1a34c74b0ea6", "indicator--4b88d944-be22-45e1-a538-2673e25f8c42", "indicator--449da0e1-b9e0-40d9-b2d9-1a8d24302c0e", "indicator--9073421f-d8f6-4aee-b2cb-ef8acc24d207", "indicator--fd7086e9-2420-41fd-adb4-2cc52e53026e", "indicator--ca11cd8d-167b-494a-aec9-0568de73399b", "indicator--4fd44fa1-fe2f-4d7b-9459-cde4180af54c", "indicator--d38000f1-3225-4cb0-9c71-bb932c7c9f44", "indicator--3a3896f2-1769-41c4-a744-b28da15f08d4", "indicator--917abd7b-c0f1-487b-a3cb-d59bf73b65c8", "indicator--ed8fb800-f3d5-4149-ae21-29414cc63fcf", "indicator--54542fc4-152b-4fd0-ad79-e03a6b79be37", "indicator--fbd49c17-0a6a-4abe-8627-146510c012e1", "indicator--fdf65c9c-8e00-4359-8ef0-1e11b761de6b", "indicator--2cafc7c3-4d35-413b-a04e-a0546124e935", "indicator--2fc8fece-cb92-4732-9447-7fa4ab6a2884", "indicator--f97c7bdd-f9c5-4994-984a-2f3b999236f4", "indicator--280c0b68-9b3a-4d4d-8d74-7ffe2f75e3c0", "indicator--8717c67b-49cb-41cd-9ef6-1b390983f346", "indicator--2e5f42e9-e2a1-407e-9981-1c1d8f25c7e7", "indicator--d0c1d431-18b0-4633-94d9-6e1b3685bca4", "indicator--49ccfd09-966a-4830-953f-d9fbd7305a26", "indicator--eb0e4ad2-7284-4b1e-b579-b5bc12ce50ca", "indicator--3e868c98-1824-4626-b1fe-1b32c673792f", "indicator--9cb86b8e-06e2-48ff-8ac6-3366b9f4436b", "indicator--b2a57e83-c4b9-4140-9f1d-db1e17b9eace", "indicator--8fb5ee10-16c5-4888-86ba-2505c0be232c", "indicator--db4b46b4-7433-463f-b55c-069cfbdc675f", "indicator--87e2f73c-bb87-42df-af98-85ae70704994", "indicator--fb7826ca-3166-42b6-a37d-d89d5f2e3542", "indicator--47e3a4f5-d386-4ac3-8e15-d1e34346081b", "indicator--625b9ee8-2f87-4e08-bda8-a95c319808e1", "indicator--540a7c4d-8564-44eb-8b92-4a814d4f147a", "indicator--a2393c87-0568-41ae-b4db-e1abe0b02ff3", "indicator--13eb3f78-7f11-4189-88b4-4a4e934ac364", "indicator--17aab756-57d8-4f22-88eb-d86304523b43", "indicator--8003da03-9b30-470b-bd90-43d7e5bf33b7", "indicator--c96c33b5-9d05-49ea-ae37-a2354243a315", "indicator--49b86930-0642-4671-ba32-d3170f3d3a31", "indicator--8a93f119-b551-4a06-8fb6-00041371f353", "indicator--b0c09d44-fe34-4126-bf54-aa27f09142bc", "indicator--9b1deb86-f2b4-4d08-9e8e-2d76e01c9b2a", "indicator--45b1b857-e809-4c1c-b71e-1787ebf9cf62", "indicator--a3b876ba-f337-4ca2-ab97-c5ddb28f750b", "indicator--c530d6da-f82d-4cb6-9bf5-86b396558c33", "indicator--2e07efb9-99ee-4caa-a0af-86d1d8b5e3c4", "indicator--6cab28e2-d7d6-4c94-ad98-57989d6f88eb", "indicator--25922ecf-1073-47b1-bf9c-1f6e1accc0cb", "indicator--1b5077f1-d482-42b8-9e5c-0f564ad9fdb5", "indicator--d4ff982e-a516-4f6d-9d60-fd693b95760d", "indicator--f29b3b0a-a0ce-43b4-b557-8565bd4f7dab", "indicator--482a5b85-5e43-4511-a566-ab088796177f", "indicator--7835f6f3-63b1-4e48-a4b2-0634fc432ae5", "indicator--d0582941-f4dc-4275-a6ab-522285ddc378", "indicator--5386fe49-2763-41a4-854a-7e2476d16941", "indicator--5a837a62-27a3-4a7c-bfc0-a09aadbdb907", "indicator--8741862d-1537-4113-90d1-41b26d33bf8d", "indicator--6f955174-3c9e-4cf9-b937-d08938edb6fc", "indicator--8369991a-beca-44e7-abdb-6c2c188f142b", "indicator--eaa73352-a618-428b-9e15-d57a989f18bb", "indicator--2f4d8109-8f46-4998-adf0-3f29881558f6", "indicator--9e499c06-739a-455f-9bad-12b4322cb066", "indicator--f5f72d3d-8a2e-4902-aa00-f052817b1d7b", "indicator--8d63b715-ffa9-4ad9-96ab-790a420357d9", "indicator--c36276d1-f84a-427f-9a79-2666da398c90", "indicator--513b090e-d28a-45b0-a330-56fe58520687", "indicator--220d65b3-73a1-4b37-bda9-803ea19b2239", "indicator--b4a9d4a3-ee22-4d51-b777-fa73e53ca730", "indicator--11f15ca5-3c15-4c20-b64b-c2a424dc542a", "indicator--2e4d2deb-0968-4c25-8bb6-c3128b8622c1", "indicator--abab4a2e-e77c-45f2-bd86-2f39b62e4b85", "indicator--b47ca686-1a7b-4794-99d4-368871de5035", "indicator--9cf5295d-510b-4bed-a328-b35de60c1638", "indicator--c2356c05-8899-47c4-841b-3edb40c28a6b", "indicator--67f9a9b6-b9f6-4eeb-91f4-97cab80bdf4f", "indicator--7b902188-a4a2-4aa6-be59-7fe3dab5961d", "indicator--8635f14b-7c85-447b-a807-28c05803e443", "indicator--5eb2c7b3-c217-43bc-9c79-26a51216e28e", "indicator--53eb36e7-c637-4410-b118-126129499ca0", "indicator--3dd2fe20-add9-46e6-a377-5dda20fc4a4d", "indicator--5a07c52d-f0c2-405f-88ad-cdc8dc4a3219", "indicator--de629029-7fa4-4079-b5bd-2218f68a8c38", "indicator--37fb13a7-46be-4ae0-97af-5b848246ef9a", "indicator--14b96965-dde1-42f6-8d41-85946e3593df", "indicator--c2c93532-977d-43be-b701-04d88cbabb38", "indicator--5e480c62-07b4-4000-8950-8c37083c1bd3", "indicator--5d394b23-fefe-41f1-8580-27999cd71242", "indicator--25072600-ce53-4222-b1f5-3ba0c618ece2", "indicator--02c0165d-bdc7-48c7-85e0-522c52c269af", "indicator--02d142e4-b21f-4d7b-b339-5a128417bff2", "indicator--d700f3a8-c30a-4bbf-a0a9-e8122720d7b7", "indicator--53e7a160-f7ba-4de7-83b4-0772b5b3f678", "indicator--9b135555-bcd4-4acf-b208-36e8cbcbce25", "indicator--734a3536-230c-4e32-b6e3-555b3be99c65", "indicator--ad929492-2c2a-43ea-b123-f2cf8c7cbce2", "indicator--81f81393-22ab-406d-a1ee-aef49a2638c6", "indicator--716299c7-08ad-465b-8a13-e47facc5b83a", "indicator--b419e992-b274-4889-b5e6-a11d69fa3c2d", "indicator--7c3f298b-b7cf-4ca1-9f28-2d787ae9a851", "indicator--1ddafc39-37fb-4387-b02b-597c5326a708", "indicator--f92fd1e2-f353-4b3a-90ed-fae1bc7b558d", "indicator--4f5dc57c-42df-49b2-acfc-19577421df12", "indicator--64bd001a-6da3-4107-a847-0501a96152ff", "indicator--c4311864-8475-491f-bc86-f46fff99519f", "indicator--d21e0b3c-cdef-46a7-958b-5d3d5d2cfd69", "indicator--6e18d751-e94a-4407-ac7d-00c13d374581", "indicator--ac68013d-b0c9-418d-aab0-36e8062d2603", "indicator--2e57c4d4-cd55-492a-b5b7-975c1f308791", "indicator--b91e55e9-ef01-4ae3-8ee3-1a635eb0a9f3", "indicator--24954c21-17e9-4266-be07-c6b187b5fd16", "indicator--5150283f-17cf-4e5e-a834-ef24a3a38a63", "indicator--403ace91-0b60-4021-9feb-e102ca5c95be", "indicator--a314ca5c-7235-40e8-8b1e-29a6e49d2c09", "indicator--d4f1f39f-5477-4f3d-b6b0-1e090d38abd1", "indicator--982abc8c-a1a1-4096-893c-8276011d8ffa", "indicator--b7164c53-3cf4-4cdd-8019-ab25a1cc1425", "indicator--8784c267-a04e-4a5a-9224-7accb888bdc8", "indicator--04505fdf-5af0-4529-a6f8-012a245f8e1c", "indicator--9f900fb8-388c-425a-ba45-a8eae591fc91", "indicator--005eda6b-2e57-443c-ac63-f68c60d03431", "indicator--2c4e6d44-14be-4843-b78a-1aa256b0a20c", "indicator--b4c36c54-b4ae-49eb-955e-98647594c4aa", "indicator--c47766e6-0192-4fbb-8388-606749a19248", "indicator--c6b99cf2-c409-4fa7-85e0-b42c37ee6785", "indicator--2f1ccc37-8c76-46de-a7ef-840ead5dd82b", "indicator--2b17deb9-470e-4166-ac45-c69bd9900c7e", "indicator--79d2a6ab-0f1c-41e7-a396-30c57397220c", "indicator--f8f73d0f-1571-48ea-afdd-cd8f7e79f38c", "indicator--eb01c051-878b-4b09-8c06-c8a748b31e62", "indicator--dfed305f-02bd-46d1-a973-555ef0ac48b7", "indicator--150f5572-3c59-41b0-9c67-57e7a84c4e4d", "indicator--da5a4240-de69-413f-9a2d-275015322955", "indicator--35c5d703-46a3-493d-b5d7-fcad3a6fded6", "indicator--b891663a-4aa7-44cd-8c36-031078be6e66", "indicator--a91b95bd-f9c2-4b8b-800e-827b8eb2aaa9", "indicator--8744fb7d-0f12-43f2-98e5-3705a8622269", "indicator--062595d8-e043-430c-a582-b4536770d89d", "indicator--71ab360d-8c05-49d3-a51a-b6c0791ff39f", "indicator--6399d041-0c13-4c9b-b1db-68c7505ad1b2", "indicator--1d65a1ea-9973-40da-b2bf-d8e32fa68487", "indicator--e63e2709-c79c-4516-8909-0632566317b7", "indicator--922db5e2-ebd7-4200-a6a5-25256a0ddc61", "indicator--dbc6bded-d679-466a-8fc5-8054085412cc", "indicator--7611d23c-2a58-4950-8d1e-1a3a0a064ec2", "indicator--3a893597-1a4e-4245-99b9-b5b59ce38656", "indicator--4e0fb628-2e22-497b-a2f5-bb1637d368a5", "indicator--2a57fa4d-b3ff-4286-8413-cf7e7845539a", "indicator--0d3f9e3c-2b75-422a-a721-043df45addbd", "indicator--24639494-4ac7-4632-af6c-cec55db20412", "indicator--9539b171-b8e1-4820-a4b3-10125d0b48e4", "indicator--646b3b73-67ac-41c4-803a-50891d32d427", "indicator--9dfa15cf-bbd7-4cb4-aac9-fac472f7a31e", "indicator--f903443a-949d-4a0b-827f-e8c4d56d8384", "indicator--c039c073-ce44-4fd9-bb66-c31e3dda1d65", "indicator--6af458b1-e47b-4a93-9826-a8186e694f8a", "indicator--00e59c66-8c4b-4528-921a-cc11cb234610", "indicator--ac1e4c2f-b709-4f63-837c-f651c3966076", "indicator--106c01a7-0836-42fc-bfa9-e53bb99128e6", "indicator--d33aabf5-e3b5-43d4-997f-59f1a3be13ec", "indicator--eda5872e-fdc3-4d7e-bc2d-0d391c0793c6", "indicator--64b39cf7-e7ae-4067-8804-bcbdcf64d0ff", "indicator--1113ade9-3af8-4de1-9d5b-b9febc16f85f", "indicator--6da0c423-e9fe-4615-9baa-f2a268346406", "indicator--02057009-3811-47f9-bd83-1969074abb46", "indicator--964a1663-e3e4-4461-af14-45200c953f64", "indicator--f92b6cee-8688-475f-a8e4-a7e09cbe24cd", "indicator--6fc8cd75-be15-4735-8675-d68800c78ca2", "indicator--c756925e-dcca-4ec1-88b2-5f8a6acf4611", "indicator--5edd8083-8549-4d8c-817b-abc7b60a7db3", "indicator--d9ed83ae-1e0d-4416-9261-8c8f8ecfe640", "indicator--84ee8cd1-96e5-4f60-b1f1-8524afc3b00f", "indicator--75d27cef-1048-4dee-a879-8618d628ebcb", "indicator--31f658e2-b8ab-4d49-8d80-558edeb14c51", "indicator--6671583f-c0cf-4bca-b546-27bf906b5a12", "indicator--8c3bdcfc-f0f5-48fe-a7c8-1520d5851f35", "indicator--7acb3540-d489-473c-809c-6320b506a471", "indicator--63331faf-9123-49bc-a39f-7066c8922e3f", "indicator--6cee6e71-cfa3-43cf-b7d4-94666acd42ec", "indicator--94198f51-0b47-49fa-99ab-96fde73e78c4", "indicator--eb42338a-fbfc-49c1-a7b5-667d94f1dc08", "indicator--56ca9280-7310-41c7-ab34-371eabf9c343", "indicator--1be9d5c0-b90a-4a8e-b7f3-0149ea39cb63", "indicator--cdc88505-cffd-405c-ac74-4975df3e8fae", "indicator--34d20b12-d168-479d-9e55-657aeeae7543", "indicator--64925969-4611-4bd6-9218-023a680ae591", "indicator--6e19f64d-41a2-4b39-989d-349f2b9e15ad", "indicator--a9323d68-6f30-4c2a-8eef-50f54914ad1e", "indicator--2f6c2930-2bc5-48c8-89f4-101329877dcf", "indicator--ae40c381-e94a-42d6-a6b1-1f83c46e3055", "indicator--bd7a09cd-6623-4701-84b8-3a087aa7b1ed", "indicator--d67b5d7d-2bc5-4053-b873-21710c84140a", "indicator--370768c4-b892-4cea-9c02-893c51d5f61c", "indicator--781a6cbb-a828-4e1f-a683-30c109a37deb", "indicator--d2dc31c2-81d0-4227-8e71-846a13f81e79", "indicator--3c151cb0-0125-44e0-9374-222e783ff4c4", "indicator--5e295a31-08eb-4480-9040-5500998d501b", "indicator--a19e5892-edce-46f1-ae4d-66cbd548d6ba", "indicator--8efd091b-b619-4003-836f-e8fe59d38212", "indicator--0bff954a-45ef-4a1b-919d-c0ea87ff001c", "indicator--34fd7f8d-9c79-4580-9625-040f5254c1bd", "indicator--1a5e3e4c-75c7-432b-8ee0-a6bdf41ac7ce", "indicator--a69ab220-4777-43ab-9f87-c52bd61718fc", "indicator--5bb31125-5697-4ef8-9ab8-4926d3f2cc5b", "indicator--b28ab077-e725-4ada-9a49-390f5055a7e1", "indicator--3c58ea7e-fa88-454d-a710-5f7ef6a51f7b", "indicator--2860136b-a889-4fb1-870a-07b5a156795d", "indicator--a3f7ff25-ec6b-49d5-9f44-9a820714d57e", "indicator--da155c92-5dfe-4c4d-9621-2895656e59d6", "indicator--b89a9580-c0b3-4e34-ac0c-a8ae430fad7a", "indicator--dc6582e9-7b2e-434f-8c12-8d4b9afd49ed", "indicator--77eedd47-86d6-41ff-95a3-cdc18b5af06f", "indicator--e3233af2-a1bc-41d6-a967-d88383cd172e", "indicator--08f34cc1-e453-45d7-b386-35fcca7a9552", "indicator--db0cad1a-09ee-40f2-9c82-44edfa69438f", "indicator--61021056-ebf7-4974-9772-e44a47e588c8", "indicator--53795e83-844d-43d7-b637-e8cfbf3f6e41", "indicator--eeeec5b7-2a50-4821-8ce0-aaf428cd705a", "indicator--9821c950-6c91-4dfb-bc10-637d57de8aa6", "indicator--8a21dacb-ec4b-473a-975c-02d6a5e4720b", "indicator--89c18922-ecce-448f-b398-63372e27d398", "indicator--d0ceca26-95bf-4366-bba8-5a6154bf3147", "indicator--bbddaca0-7a9f-4e81-9738-c58a8b29b877", "indicator--d425f658-1da8-4c4d-93d2-70dfe87ba206", "indicator--fd0497d3-c490-40f1-91ec-9a400a92381c", "indicator--33f2ff6a-f496-42b1-9bb7-9ecf2845db5d", "indicator--c5223a4a-fd83-440d-8603-495839c4edf5", "indicator--3a55dbe9-c9ef-4821-bbf7-6bd1c869965e", "indicator--50ae40c7-6275-4975-a75f-51db3f2ec395", "indicator--72172e99-cc49-4420-8fd2-91dfbd1495a6", "indicator--3563b691-e3e3-4767-b4e8-17511c542e40", "indicator--a736b879-b282-4bba-b677-891b4055e4e9", "indicator--55aa67cc-7834-4ec0-a3ff-fad06d4fbdbb", "indicator--acfffe8f-7b09-48c1-8cd5-371fd1eb30eb", "indicator--4c631934-f737-4a2c-8382-e27c650584ef", "indicator--a0ce4769-85ec-4fbd-9ae7-52e1ab614724", "indicator--cf065dc4-91c6-4ca3-912b-712e4dc3dade", "indicator--d687b17e-53d6-4116-be42-cae18a9bf82a", "indicator--0aa1893f-2658-43ba-9824-43221d3ccca0", "indicator--0172b44e-558d-4697-8659-cef253e8de1b", "indicator--22fa5d55-0b3b-4e17-a87b-890e137e6a92", "indicator--2732af55-053e-414b-9ef0-c22681667b82", "indicator--21f82b0f-bb52-4cdc-8577-0966beab6081", "indicator--b44d0760-d822-4e9c-8c11-e96b16135099", "indicator--2e6ab2be-2a77-4fa8-9a1d-05d32d1612e1", "indicator--f75388f3-ba71-42b3-b811-258e1fd406e6", "indicator--791b41a2-79bc-494b-84eb-474275b3416c", "indicator--d827237f-f552-4b0d-be88-9e035964b699", "indicator--d002f798-3659-4155-aff4-7ca687fa3847", "indicator--7e092b26-54a2-4d4f-be81-4c17bbb7426e", "indicator--2a7f3f1e-f66e-41f3-bb09-ccacf7d8190d", "indicator--bd1510e9-6d98-4aa9-a488-80d0914ccc23", "indicator--3ed499df-37f4-4fd1-8313-eee65724129c", "indicator--130596ee-e995-4760-90f6-6f70659d9ced", "indicator--429fda61-dbf5-4df5-8777-5d9e5d8315e4", "indicator--a5ac7240-7d25-4739-bfd6-6093e0c9746e", "indicator--f72bd232-8017-474e-9aec-ba0ea72bc6a1", "indicator--12d726db-de08-487d-a4e4-d4c48006a232", "indicator--676bf678-afdf-4398-be3c-38e221408b88", "indicator--2663beed-5ea0-4494-a889-a30b2dd7f607", "indicator--a3686710-fc4b-4e14-8fc0-75137fd2eadc", "indicator--fca3fadc-8c16-48e7-97ba-d7077e3ce76e", "indicator--0c82bc2e-df65-4904-bab5-050ac66a708a", "indicator--3926f9b9-7264-4d5d-87b6-58b1eed4cef9", "indicator--984d99ee-9f25-4da7-b460-73b539105317", "indicator--5acf9ec4-786f-4c21-a472-4aca2592212c", "indicator--9ef85b2c-253d-431e-91fe-3235ba3022d0", "indicator--5f2b5eca-94c6-415d-84e2-2354f2e63967", "indicator--8a272e10-2fc9-443f-ae85-100c4985025d", "indicator--360e8285-c933-4603-96fa-f8e88384da02", "indicator--ddc81938-5989-4b4c-997a-245fdedfbd59", "indicator--aa392e99-a02f-4b50-88d8-14c129f6b892", "indicator--c94fed39-9569-4882-a8a6-70fb9734f9f7", "indicator--590e6179-7f8a-4559-9a1a-72dd85f005f2", "indicator--291b7206-42fb-4e90-b449-0addf4aaac59", "indicator--2edf93f3-db96-4a92-b05e-b08b64ad5fba", "indicator--72aa3a47-71f7-48da-8a57-0ed3dfa4fa64", "indicator--b6c83cde-770d-48b6-852b-551fb0044c11", "indicator--f4cca2b0-4ec3-4fbf-ad6a-5a98af2e8e8e", "indicator--17801bc1-bb2d-44e2-8da5-4b73fb32efc9", "indicator--4b37358c-4c21-4449-aa3e-54413e6ee103", "indicator--195bb90a-c727-4cdc-bbef-996b006ba7d8", "indicator--55e04524-5d21-4863-9c42-3b3fbfb7fded", "indicator--a6adf6a4-0bb6-41af-9eec-844cd593629d", "indicator--26fef014-4ea5-4142-bdec-cd7e91bc00ef", "indicator--7b41db6e-e9a2-48af-a797-642dfc0ff50f", "indicator--967be9b2-5e88-4de8-afb6-53321daefe47", "indicator--c0031c16-f4a5-4b3a-aa92-5416e511a147", "indicator--2386af7b-5d17-42de-9d01-9f4d93f1e911", "indicator--60ae34d6-d9ef-47dd-9b43-e29ce8f06a30", "indicator--9ffb7023-aa92-4e24-a82c-53a2d4657280", "indicator--eb48cf97-5aa6-46e9-8886-7791600e8e3f", "indicator--34ecd1d3-80b5-4c13-8153-6a559c4a86f6", "indicator--65b6f9e5-1535-47f8-9211-9c8537da1101", "indicator--ee973669-f142-49dc-94f9-487706e70ad6", "indicator--cbc28eba-2ebf-4bf6-a0d9-fb7cc7f14bd3", "indicator--ca06b684-17fc-488d-9782-8b02d2dc55e5", "indicator--8f6ff616-e966-47d8-a4f5-efc3c51a8f70", "indicator--7dc6830b-4990-457b-9686-ba6b5d3552d9", "indicator--d856b3c0-2fb2-4737-92b6-d747641e08c1", "indicator--66a0b090-5e3f-4faf-af17-2c41100b51fa", "indicator--62fd15fc-f3f2-4166-87da-b6ac6e8eb44a", "indicator--c652cdf0-26c9-4cac-be76-0111fa9d728a", "indicator--b3286b28-52d8-4f7c-bb12-05d31706d6a4", "indicator--83540dbf-b7ed-4e40-a7ca-90bedab6f55e", "indicator--5c09f26c-8cb9-414b-ad0f-cb602058d832", "indicator--5ca6d04c-1950-4f99-a4a2-2311f62ee036", "indicator--2526a15b-7301-40c4-95c5-05495ab7a142", "indicator--38d9b3cb-d95a-4576-8be4-0436bdf70e48", "indicator--8d5c5ca0-528d-4e1b-a5c9-aa2ade213a15", "indicator--513c9d63-56ff-41f3-8512-d14ce8cbc696", "indicator--f6ac7889-9d40-4080-a226-7d6c1b5d750b", "indicator--d467e046-18f2-4374-852c-b04d93e27fe5", "indicator--d7696040-8a6f-4082-9364-b4310dd54b7b", "indicator--f4ebdb45-c661-46b3-84d6-9a81d757b396", "indicator--b590b6d8-73a1-4450-97ce-07295d965848", "indicator--7565103b-be39-4664-b7c9-51eb2d81891f", "indicator--9dab2d0e-64c5-4586-a903-d872ef767c42", "indicator--cd9637a3-fe26-44c2-9b67-3171a4a7aff3", "indicator--cd980cb4-acc7-4fe7-8040-2b3f47d000f9", "indicator--f16f3583-f6ba-4bf1-9bbf-c7b9776e4f12", "indicator--db986644-263a-48c4-83b0-9d3c47ecad4b", "indicator--49c58c01-072d-4148-86c5-4bab16bba421", "indicator--16960135-1dc2-4742-8525-5406b15b3015", "indicator--3a0c7743-9d49-49b4-9989-0481d30911ab", "indicator--8722167a-7379-4f2d-bf0d-f708e20012f0", "indicator--68fde0e5-829c-4400-8407-148fe387cd80", "indicator--f12c0f15-59e5-4804-be9f-994dd774478b", "indicator--14b39ec4-78f3-4c83-93ae-27b6e4c69ac5", "indicator--bc2c2eee-9fd7-4e89-9102-52990cda4561", "indicator--fe1bb66a-d108-4e59-9214-13963aef63f1", "indicator--793b2461-3625-44d5-851d-95659330383a", "indicator--121fa2d3-3635-40a9-a5a5-31797a80d4a3", "indicator--49556619-127a-4ed5-b0b9-5315f5a5209c", "indicator--71445b0e-8c2a-4f08-81e3-ee4d32c084c6", "indicator--ce2e0af8-86ac-4359-891b-d5007f8eca74", "indicator--9155890c-6f3f-4337-b8cd-8a0932af32f6", "indicator--ed858186-1878-4a3d-96e6-81a1467959a4", "indicator--f80a11c2-b20f-4674-b3f2-5d5d980b7d65", "indicator--5767730f-6a1d-4f62-926b-2ad234b7508d", "indicator--621b6c7d-6e95-45cf-99d9-f459861a679d", "indicator--b2286776-df2e-4eb4-a828-16d8c8d44db7", "indicator--9aa272b9-712b-49fe-851e-4ebc83a77772", "indicator--18a5f9aa-1974-4280-9c75-70e927c2dbe7", "indicator--1c0a76f7-07cb-4e56-a303-f67107793f2a", "indicator--efdeca8c-a2c7-406b-a483-9d7b14069a62", "indicator--3861f4b5-2967-456c-b828-b407bba80a2e", "indicator--dd8c0816-4ea8-4d7e-b577-5c7b8b11148a", "indicator--7fcaf25a-6c3a-4fa1-ad7c-a91c4231cc52", "indicator--8a0d3e4c-51c4-4fe4-be67-46eeee42f341", "indicator--a94b97f3-2661-48cf-bc1b-e2f1e401ab8d", "indicator--63ad7571-d11c-46d5-9357-a275207844cd", "indicator--0b2f5ef0-134b-4acc-b851-bc2ca7514f95", "indicator--23978307-6774-4956-ac58-a53d9ea659f2", "indicator--d326d857-79f0-4d8f-9643-2afd3e4ee714", "indicator--d0857a40-9194-4f04-ae26-c99310d15fa5", "indicator--1d3e1494-d58f-416a-935a-b15c174b8314", "indicator--272d795c-31e2-4b37-9f95-f7c0a0ae2a5f", "indicator--8c6bb94d-28c4-4760-9b3d-6fe55c2c252d", "indicator--f1d14569-a6f9-472b-8066-3f300105fcf3", "indicator--d5744647-4556-48f0-8bfb-1e76f3bcb199", "indicator--945f73e2-bf55-4cb3-a89e-87feac25f6c8", "indicator--88cf3992-e4cb-42a9-95df-12ff4c51fc46", "indicator--edd1c2ee-9506-4582-a993-b8fc051c4dc0", "indicator--ea5d4274-74dd-474a-bc1a-2bb1d7732fbc", "indicator--6b1c5d47-6b51-449a-9239-04b8a720c1e5", "indicator--c59f809c-3188-4f86-b5d9-650269dfcbca", "indicator--2f420466-b0e3-41ab-bb46-f3d4bb700393", "indicator--ef7fad66-5f4f-46e6-9d7f-0de3107e46b9", "indicator--e4a163b0-85c3-4816-8bde-c4796534699f", "indicator--5eab834b-917f-45d6-bb3e-183207e2cb16", "indicator--d2119e2d-816e-404a-a592-0646fdbfc6dc", "indicator--3f2e0fab-22d4-43a9-a76d-63663d7286c4", "indicator--8479a0d5-0fbf-4759-a2f7-e8e29804d9c4", "indicator--9007b54c-4388-4b66-95cc-ce3ca98ed397", "indicator--eaa0fbda-bbfb-4aa4-a154-72fd2568ef36", "indicator--3b95275e-504e-4b40-94e2-d55e6bd303ec", "indicator--f20e88a8-34d9-49bd-8d7e-3d319df00acd", "indicator--e406e722-ea75-4f90-88aa-d33518495001", "indicator--0b8d1665-6703-4fca-864d-cea91d0b2c71", "indicator--bc0bbafa-7ed8-45d0-b849-606ae4554cbd", "indicator--de566091-9839-4a3f-87a6-58e3f645100b", "indicator--7f3e2de6-f632-4a17-a8b6-2227320c4ca6", "indicator--7a466a30-17dd-485e-95a1-8ef860ec1110", "indicator--49e20f5d-91d9-4beb-8e02-3ece1e3d9d0e", "indicator--116b35e5-e327-489c-9d31-1ad7c37fb88e", "indicator--4d491862-c6b2-4366-9b6f-9f199f6c03d4", "indicator--32c8e998-cf03-4e5d-a224-d28c671eee26", "indicator--8d6ecd58-bde2-48c2-806f-21756845297b", "indicator--029d9c6a-0085-4f1e-bda7-0f3da874a245", "indicator--c7f90631-ee66-4320-afe2-b9b44aab7221", "indicator--2da8671a-4fa4-48c6-a68b-8f61bf062764", "indicator--75932051-0db6-486d-9d00-8c4dee5d591c", "indicator--5e2162cb-9a57-4959-9189-a10308556874", "indicator--cc204a6f-9402-4cf8-9839-e495b95bd890", "indicator--bae9c489-6786-4599-8d59-acf3bee1b7e9", "indicator--fa535a98-5d10-4bad-9752-4fd85d454f71", "indicator--d7007715-2745-4849-92b6-e8a98e116621", "indicator--afb28c41-fd22-40db-86af-0dd7672404c8", "indicator--10d86634-ef05-43ef-86d3-d401c20e506c", "indicator--6a38abf5-5e4d-4e60-b306-0a20832e91ff", "indicator--ebf87d46-a4c8-41f6-adff-f1157f7dd2af", "indicator--dff08788-4d9d-42b6-be12-4ca1f6661f69", "indicator--0ab406b4-0a4a-4df2-8b01-1606b45cde67", "indicator--3f0ee21a-5bda-4ceb-bbb9-d2395ec9b22d", "indicator--ad9e3a0f-c065-483e-919a-02d91556c9d9", "indicator--af13af05-76f2-47f0-b067-ab7aaca5eb65", "indicator--18372171-3821-4f31-800c-c278f0de8add", "indicator--00b82801-4f5a-4d9f-8df0-7024755e134e", "indicator--885cb943-b76e-4a0e-8b8a-1637a692a01b", "indicator--e7a2638d-1942-416a-b454-927f912b0a04", "indicator--4bda0f6e-43ed-4383-9cf5-043711a9ec8a", "indicator--4ee8a8d1-da76-47bd-b726-2fe575bc147e", "indicator--ed59aee0-943e-4f8a-8912-1996c0441dd7", "indicator--c9eaa6aa-72c8-4c9d-b1ba-4fd52365237d", "indicator--4af91407-5c78-4d64-b1a9-559ca3ed458f", "indicator--949d7132-dd88-4f45-90ab-a842c918cb05", "indicator--50d59243-cc13-490b-98da-0c2f70dfbf06", "indicator--e4a6f56b-75c1-4e16-b8c5-821f2f2debc9", "indicator--8c267bc1-a345-47c5-aa9b-5f8f0e6fe198", "indicator--9c0ac838-62e8-4bea-b70e-d679942c6965", "indicator--f373d22d-b792-4749-8619-fa885b08b3e4", "indicator--a16a0996-c213-45d1-a32e-6feea57f31a8", "indicator--a3709fc0-3bab-47f7-b82c-b2e3498e2d7b", "indicator--af669f39-f900-4ffa-b32c-b2555a47a9f3", "indicator--e06d61d2-fbca-4329-8232-579d981b1d07", "indicator--07e3abc9-cc33-4b62-83e5-ac188cbffa68", "indicator--2da554b0-28dd-412c-bccb-996147f9ce3f", "indicator--cf37286d-06fe-4388-a8ed-cf100d13aae1", "indicator--6e438588-75f9-4701-bb1d-17a22ea01327", "indicator--b73dcc84-3ab6-4eb5-a6f8-5ead8ccf5994", "indicator--0b14aa68-888d-4a6a-95ee-00a7a18e2c17", "indicator--5400059f-9e22-45cf-aa50-15cfb8a2c7c2", "indicator--acdf09e7-4bb3-4e4c-8c96-8f33416329bb", "indicator--4b715ecb-1f32-4daf-80b1-6f81229e9ef3", "indicator--197dd034-2629-4bed-94e6-bb22b7429e0c", "indicator--d078f9b9-fa0f-4ec4-8cef-e20c10e2bbeb", "indicator--e2248682-1943-46ba-bee3-19a5220fb0ca", "indicator--5fff430e-c650-4dc8-a5f3-fc94adf476c5", "indicator--4b4bd60c-1a2c-45e7-9c9b-58ba65093382", "indicator--09f8a688-0e6e-46eb-98ed-f382985e2f28", "indicator--edc26b84-4c94-47b5-8fc4-35241c5c2b47", "indicator--3336f5f8-be29-44f6-acc0-eddfb3fae9af", "indicator--127dccbb-156e-4352-a3e7-931688d2a15b", "indicator--71e03231-bca1-4c74-9d80-05080e9b7fff", "indicator--49d3b803-b1f8-47a8-8491-e47d82a980f7", "indicator--f77020d5-002e-4a77-adfd-8433ff214215", "indicator--593404be-fc41-48fd-81a7-41be796f8565", "indicator--77dc35db-2ef9-481d-b4d3-d58b0fa8a503", "indicator--1635da98-1f77-4fb3-8976-725bd2e37c23", "indicator--3e769200-971c-4c29-83e8-1e0676e703c4", "indicator--2b2d76dc-15cd-48c2-95d4-e3b87324292c", "indicator--466595ed-b948-4ce5-b5b3-7adbff7e2aca", "indicator--2d05a804-7b99-4800-b20a-d3d395d6b73c", "indicator--eaf34db1-3894-4ab5-8f85-d44784966d28", "indicator--eb0d90ab-b8aa-48bc-a219-f30b8e8df1be", "indicator--72255cfe-b6b7-424a-99c5-bb5670987bf3", "indicator--12bdd042-77f6-4efb-b63e-5b86966b8270", "indicator--977d86fe-5150-46e0-80e1-3a2cb5cf4d95", "indicator--476d5c8f-469b-4282-b9b8-8ccedf8a5035", "indicator--903a33b4-8fd2-4422-aed1-2055ddae132d", "indicator--b5928f47-fb31-4635-a7af-eb03b19a8ef2", "indicator--20f38c0d-097b-47b8-aeba-e86566d71e72", "indicator--98185379-351b-4047-8be7-fb4002c58d3c", "indicator--e98a7e09-7a88-4288-89d7-754b1b77f1ee", "indicator--af6b7280-2bf0-4ea0-9cf0-83e77fcb997e", "indicator--9dcdb8de-fc4b-42a5-ab78-f94408ab05f4", "indicator--1c6f9cb0-3361-4c74-a240-495ea992de6c", "indicator--f6b4e5bd-e5fe-4c61-93d0-68ea913fbed0", "indicator--7ff0f1e8-8749-481a-97f0-a1799f6d581d", "indicator--34af0233-2031-4456-8c53-be484bde51c7", "indicator--42fce9c3-1df0-450f-b7ec-c4a26ccd6d9a", "indicator--759c8cdd-f660-41b4-b3cc-b0adee0e1074", "indicator--c637523f-3c66-4e7f-a92b-37a5c6938914", "indicator--e74360b6-e28a-4bc9-856f-1aa4fffa88bd", "indicator--af4b6d48-1448-44fa-84b2-5d6c61d3b5c5", "indicator--236a0fd2-eddc-495b-bee4-e59ce904c8c7", "indicator--1370ac99-4ec3-466e-9239-aca0757a7a92", "indicator--6d63771a-3d74-4ae4-8211-93221246af54", "indicator--216f0bd7-4f4b-4f26-a9dc-5f249f93c77e", "indicator--7532c7b2-483e-43c5-963e-70bd61ad8c1c", "indicator--f488599c-2133-464d-9fd6-b0873d53b2e5", "indicator--5a9a9de1-c079-4554-925f-3884ef59b12f", "indicator--40da9562-6a98-4d3a-a3d3-ac4fa7974303", "indicator--7084b39a-4bac-445d-bfd7-1840b58ecbd0", "indicator--ec502928-c5db-42be-948a-a300eb559eef", "indicator--b5333bdf-a107-4f91-8dfb-c242253b9ce3", "indicator--e17bab9a-85b2-4577-a60b-4a1a132154aa", "indicator--f7512f62-c291-478a-88a9-4858e1f59716", "indicator--5b2fe780-6c1d-4679-9014-10b79d456c86", "indicator--80fa3c6b-1eb2-4f65-9956-cf23b81b2a55", "indicator--8fc74cd1-5f9c-4592-807f-d6a3c74dcfe1", "indicator--1687bc18-49cb-4a8d-a797-7308bbf310f7", "indicator--571fb642-c157-4af9-8548-956f585ad148", "indicator--f602ecf9-097a-46a4-be3c-497bda545826", "indicator--a874952e-0d08-489c-bcfe-718769ffef34", "indicator--827e877e-76fb-44e5-8439-76cac46b7668", "indicator--2fad5324-bb64-4344-ac18-4513336aa5c7", "indicator--1e728757-68c2-4112-bcb8-188797493263", "indicator--036b95d0-153e-4339-860d-9952dfae85a8", "indicator--43b20fab-cbbf-43d2-b553-49067b2f9ff0", "indicator--5ed5b769-8c5e-4e42-9b15-7ac552fbfdbf", "indicator--a4903375-66ba-4fdd-b5fa-c1f8b0e7e9b3", "indicator--bd3098cd-81e8-466d-910e-9b82e84eedfe", "indicator--1b7634c8-5bdc-4971-b2c0-70ec16e7854a", "indicator--a020a5b4-b6e5-4f63-a0f2-75192b766b41", "indicator--4b7f3fa9-051d-4b84-8b64-e40463f68744", "indicator--25e9ed71-e307-4a9d-9e43-a6f95ec6dfda", "indicator--cef52d6d-1126-4f73-8429-64d2db178b9d", "indicator--682752b3-d269-40df-b8a4-9563e29e6ee5", "indicator--61c76934-272b-4bed-8cf2-31d79f63fb8f", "indicator--a23d89ed-e533-4b6f-a3c4-42f9c505506e", "indicator--7ab51cb6-fcde-4838-a618-f94f3039b97b", "indicator--ff46d64d-b7d3-469d-9b80-1920b80aeebb", "indicator--61aa82a2-7785-4d7f-9fe6-fcedb1bd6665", "indicator--da1ca207-a82f-4c56-a993-7e80551d0f2a", "indicator--9abd526d-2fbd-46c7-b512-bf90212ce35b", "indicator--464e9e30-05ac-4024-8a3c-5f88e8a9fc09", "indicator--44dc23eb-1e28-468b-9c59-8048076ca151", "indicator--49950b72-89a2-4835-919b-e5b90438c241", "indicator--61bfbd31-829c-413f-9066-89733b811022", "indicator--a78e6567-7185-477c-8164-b7932a1f79d8", "indicator--85607b1d-36b4-4c7e-ae75-8e29fddf5c8e", "indicator--a0572646-216b-4181-9e01-25fca6957a69", "indicator--b2c2a36c-9981-460e-bda4-31246cc9a793", "indicator--a84cdcf0-eaa9-420d-9240-bfe227e5dd2e", "indicator--9abbbcb6-9e81-4a58-a7b6-4f6183f646f1", "indicator--2ed7dd3e-8942-4f2d-95f1-f91b154cee5f", "indicator--fd205882-a56b-4c15-8267-34706e78bd39", "indicator--ad476b22-7085-4dc5-921f-0c45aa979c7a", "indicator--c582db76-227b-42d3-97da-4fe82507d743", "indicator--cc94cc71-3a8a-4882-9266-837b0597ae32", "indicator--7d251b10-800c-462e-a70b-8b5d61c8d83a", "indicator--cf419dea-b6c7-4081-bdd8-bb0bff821c6a", "indicator--e88d2b44-e76c-4ad3-9661-4bc12ca5bb70", "indicator--b833600e-4b94-407a-9170-04d52349e17e", "indicator--78d01763-37b5-422f-976d-d93ccd99f0ad", "indicator--fa1d60b0-1ba8-408c-9269-3aa391775e50", "indicator--b0aba17e-b623-4253-9012-e65ad3160228", "indicator--138ec4d0-fd8c-4d42-a767-47a168f77aa1", "indicator--1c26f1f4-a28c-4142-8a35-488b423d5c3b", "indicator--7e564862-513b-4dcc-a273-bee4cdd6bfd5", "indicator--a2d9c30a-b21a-4a1d-9a4e-a67c2cada95f", "indicator--7c6b97cf-168f-4745-96b5-b1378e4180a5", "indicator--f110db86-9fb1-49a4-91c0-f43488aedad3", "indicator--f232ef69-fdff-441c-9429-d7864d5cbc16", "indicator--06d109f8-dcaf-4859-9651-a0543469535b", "indicator--8efa1187-8961-4526-8922-5049d99a6ffb", "indicator--4722b733-3f3c-4cf0-85c3-c6ea5d1a07ac", "indicator--d1122fdb-59e8-4fac-891d-a713cbab8de8", "indicator--8d1ecb80-7c32-48df-a1d8-78f7fa9795c2", "indicator--77501969-56cd-4dc3-841b-db9bd8aff3d4", "indicator--604a1a32-96b1-4104-bba0-70794d0b4399", "indicator--00ffd410-15ae-4325-b305-0a7aff641214", "indicator--f4958ce3-412e-455b-86aa-f1a3e33f5b61", "indicator--233260ef-f53c-44df-8bd2-cf645aee0738", "indicator--ed6ab65b-6401-4ea0-8b75-fd8dabf0638f", "indicator--eb4df753-2e1e-4e83-b4f6-a1f728fe2a4d", "indicator--16a62e3d-3348-4d02-bf09-5c63a5dd940b", "indicator--640dff9e-9846-4219-804d-825b75e0383f", "indicator--24b51ce0-60bd-4d09-abbd-efd8901c040f", "indicator--dd7d0749-5fa1-4cd6-8bb4-e9e4854f63ee", "indicator--a75e73c0-af96-43e9-bdec-c30fef02f20d", "indicator--abaad1f8-a81a-4936-8328-0b79c73005b4", "indicator--cd3b3ef3-1ad4-4e9d-92fe-5517e8a179ce", "indicator--537586b9-1e40-4fed-b25a-4d187905d7ff", "indicator--ffd22434-8c79-4f18-a6bf-64f5e5d2ec83", "indicator--6468dde2-4c83-4510-9a6d-1bc28ae1e509", "indicator--c251812c-5ba7-4d3d-8ca0-cebab85ca766", "indicator--c8d85edf-51e4-47fd-8204-3dde7b1648ac", "indicator--f845624a-36fe-4298-b3b4-e9c176f32b49", "indicator--4d82753e-c8be-4471-854a-362652badeaf", "indicator--894d3895-2731-41c2-ab82-805a19e441de", "indicator--5e07fc74-30e3-4cae-8240-9bdbfc242ef3", "indicator--8b204bca-9110-4ec8-80e9-9563b63ebf9a", "indicator--3cea319c-392d-43a4-8c1d-0ada80f463cf", "indicator--1e5b5047-bd17-48cb-98ef-58f83442f782", "indicator--da3c99de-32cc-42ad-9fec-70e5fbfffdb8", "indicator--b0711b49-3531-4ecc-85d7-c8efd90ea76e", "indicator--c788c76c-f07e-4065-9b35-e1333c7a02d6", "indicator--bc7ebc30-4fe0-4566-bb13-2bc563e6af6c", "indicator--24ed3fe5-f797-43e4-a35e-42894984f048", "indicator--a807aec4-238b-4b17-8326-d317502c8563", "indicator--558651f5-3d09-464d-8602-d34f15307152", "indicator--54cece64-1124-4851-85b1-d9e5bf7edd28", "indicator--22f48195-0e8b-480b-8deb-7455b31dc4a7", "indicator--083fc53a-7ac4-4b8a-81c0-e8bf1044fb98", "indicator--ae5a94aa-5cab-45ac-abca-a4c95eb49465", "indicator--f7585a98-33c2-4756-acdc-d1415915afba", "indicator--486be9c7-c786-4be2-9395-41a433550a90", "indicator--5d724422-e0d2-482e-a940-3613e9984aed", "indicator--bc97a2f4-1f20-4f8a-bcbf-0ee2d7604d3d", "indicator--24be00c4-40fd-4b0a-a7f5-3a26926262c6", "indicator--ce0371db-1c4c-438d-a120-24b35cb0bff2", "indicator--7b05f4c9-4702-44af-9449-60800a311bf0", "indicator--5cee64c5-079c-4e20-9be8-5fdbcafc04c3", "indicator--f8e65f39-eb35-4c7b-82a9-2b0724fe85b6", "indicator--911bce2a-f051-4e7e-bd38-2f55abb80e1b", "indicator--e358b204-54a9-4788-a79c-b943fbcd78bb", "indicator--66b66f0c-a49f-4f1d-906f-5ddde60a6d69", "indicator--3d351985-166f-405c-b8f8-df4f454f6b47", "indicator--92fcd0a8-352e-462a-bfa3-1664f19b4994", "indicator--f01525eb-732d-4d5c-b69d-9c3c61580c81", "indicator--4b85b169-a3fd-403d-b470-e120af2a021a", "indicator--0b930e57-8854-4415-8674-f148057dfb4f", "indicator--2c32d67e-05c0-4b80-8387-a388f1428f2b", "indicator--c74186e2-25b7-4b6f-9041-3f2da5abb31c", "indicator--bd5015e8-30de-484b-93eb-3e6a67619fe7", "indicator--f19a7495-0b32-485b-84dd-76c7010df7f4", "indicator--9feb95a4-eac0-44d0-b0c5-0cdc0d27d4a4", "indicator--aafcb8dc-f0d7-4f6a-b175-8a1a39d577ce", "indicator--ceedbaee-941e-425f-9fbd-d4f5f249368a", "indicator--86fda8de-3a0d-4902-a6a2-55123a128218", "indicator--106c8f6a-1ddc-4e52-81a6-9f9bca83826a", "indicator--eeb2abc7-86cb-4cf7-9f4f-e97bef3b3f5b", "indicator--1acde38f-cd4d-4573-ba6c-e30af893d7a2", "indicator--8fa1945d-4935-4c65-96d4-f87fcb900c19", "indicator--fddcbeed-6355-43b1-aa93-03cff37148df", "indicator--326f7991-2c98-43d8-95f9-8d882d353536", "indicator--e7ff41e2-62bd-415b-8e91-0aaeda3d60a3", "indicator--92b6b70e-418f-4c63-b6a6-c5f1552663df", "indicator--bc3eaca8-3b1b-4f13-9b36-1c6f77c21112", "indicator--26bb2c33-ca55-4e65-962d-1ebaba6bb5ea", "indicator--54ab6fb6-b6c6-4c2a-aec5-829b0af75e54", "indicator--09da4a77-0380-48b0-88ac-b65400a1d950", "indicator--cc0c8b8d-4e12-44a4-9d71-ccd5d75f6ec1", "indicator--1e59527b-c560-4491-94b9-1b021f1d1c49", "indicator--d7836f39-7536-46d1-b91c-1680c03eed82", "indicator--e811b24c-17eb-4197-ae1d-a6da8097dd94", "indicator--54fb689e-678d-4556-9052-b481957a9536", "indicator--04f9a865-674a-47d6-8a9a-18ed64816909", "indicator--81c06741-b480-43e8-8b5e-df5aa7f86b66", "indicator--65ce515c-33ce-4ecb-a204-866e566b6d8b", "indicator--63e9eb17-8dd5-48b3-b4ee-74cbf3373656", "indicator--78b53846-5655-4091-b2ef-8903ebfdcd93", "indicator--8d8c64ce-0b47-49bb-8f01-44448f898172", "indicator--56ef4eb9-92aa-44ea-818e-4b134440a9eb", "indicator--9609565b-caa9-43d3-92e6-64d8ea42353b", "indicator--70e33684-280b-4940-bebb-96b4e4ae51b6", "indicator--0e104725-416a-4efb-a92b-e8b423622ac7", "indicator--6ae6ba55-2c9f-44e8-a89a-184c73b3a47d", "indicator--0ae7e6d1-72b9-4429-9998-8eeceed08fd5", "indicator--f67ddc67-8ea4-4df8-8a8c-a3d102b4e324", "indicator--84a31f92-8ab0-41fd-99c3-3b275a42663a", "indicator--941ee4ea-4bca-4665-9946-c189cbe215f3", "indicator--0c728a9b-7963-46d7-a9a3-9b15650a7efe", "indicator--056a9aa6-7f90-4a0f-bee3-58c3eb150c89", "indicator--3fc1c7f5-4c67-4390-a59f-5160af6cb7c4", "indicator--9f984b95-c8e9-494d-bbe5-5c6426b43220", "indicator--7bbd2266-d8a7-49d8-8f3d-55bc2d87b129", "indicator--7e27c751-f1aa-4c1e-8316-a0a2ad107cf0", "indicator--97dafcdb-0693-46d8-ac43-9c4cc29afb7e", "indicator--ba9df6e5-4400-4444-af3f-d7da2c21e4de", "indicator--b926d1af-e4b9-4b51-80c1-7a7d724d5d21", "indicator--134c4a16-06aa-4895-b84b-703463a911a0", "indicator--6e0a89c4-8662-4f15-806a-ebfa5ca9fc5f", "indicator--5ba44c63-3b96-44f6-9b80-b37cf4711955", "indicator--3e7e1db2-29de-4aef-8f96-c860986423d8", "indicator--2bf5c442-b8be-4aad-9049-c94bcb3d150e", "indicator--4cd905d1-695c-4b2e-bd50-39727726170c", "indicator--d532f04d-cea8-4a79-b792-d9f5c1561a25", "indicator--d6bf9ba2-b27f-48fe-b19c-19ea3960f416", "indicator--eabe3730-0dc0-4711-8a49-3b8d0bdbd1bc", "indicator--19a73e67-9d62-4387-89c2-f2dc3c60be53", "indicator--6ffa1d2c-6332-40bc-9c76-0cf17359d30b", "indicator--109f327c-ce8e-4822-8ebc-4ba436210ed1", "indicator--ed314329-e22b-4b19-b24a-146048b26458", "indicator--12d2133b-c770-4329-aeb6-4b3c7c123d56", "indicator--11513bff-f473-4497-81c3-3e0c7111f6c0", "indicator--3dd9e62a-ced2-4b80-93c6-15fd6e5a033d", "indicator--a765311f-6fc8-48c7-897e-2c2c561e5745", "indicator--5144bf15-96b4-4646-bea0-06e1c5e072ed", "indicator--89d83a64-6c14-4eaa-aea7-1532739d7cd8", "indicator--7d30ca12-ff26-4b9b-a519-be8aec6da4b5", "indicator--93f96de5-3ced-4cb5-8207-6c9e15464f59", "indicator--4de01b13-13d9-464b-b593-3f9e270f69fc", "indicator--da62cfde-8dc8-4229-9275-4f1d8b0b0f28", "indicator--4fae8ffd-317b-47e2-9671-799dab16f021", "indicator--521d018c-74b4-4b0b-a121-23d3f7f6f2ce", "indicator--96c9a53a-330f-404c-91f3-931c4c553973", "indicator--93190c4b-7c52-4b8b-a648-614353c7c71c", "indicator--c218021f-4ea8-4eba-a54a-bbdf6a425e07", "indicator--deff11d3-3897-4dc4-8667-cf40b6ba5070", "indicator--069ce723-0491-427e-8e3d-ef6138e21870", "indicator--47c3c307-f215-4d0d-b551-c7e46e9e8db0", "indicator--89ff1ba9-44e4-47e9-a26f-5fda6c8a3a65", "indicator--5f5bd771-6616-4443-86ea-bd9d1d540756", "indicator--d22bba8f-92f5-499b-aff3-dc16cf8dda30", "indicator--00e942fe-1c81-4185-805b-137b043bcaad", "indicator--62c3e22a-0e7a-40c5-8c8a-e9cbd0147fe1", "indicator--9712ca69-1190-4856-850a-e68f01da56c8", "indicator--de6f70c3-3fd5-4d5e-9038-12d07a874059", "indicator--71071cd0-43a0-4a54-be4b-434da06ecc54", "indicator--3b44ea1f-b154-4cd6-9953-f2ae54712ad5", "indicator--febe2e9d-540f-4932-babe-212664edb631", "indicator--a0c4e268-e5ac-417e-9acb-a36857701304", "indicator--7477a1c0-1c86-482e-9e69-62338c2bb4f9", "indicator--1ac74847-8d5e-40d3-bff5-92ae776b9ea6", "indicator--4ddc7103-d42d-4931-8d4d-20e14b318f63", "indicator--5d3b7a24-48c2-4dc0-88af-86fc3a26987f", "indicator--8782012b-1431-4729-8672-b1b0d66cb711", "indicator--85cd870e-8171-44f6-85fe-e8cff12e2791", "indicator--dbc17903-367b-42fe-aaad-0e92685944b3", "indicator--8b1036bb-8c70-4c45-bf34-df234301270a", "indicator--91d7ea2f-3745-436f-abb7-3ff6513bdd2b", "indicator--56640d0a-64f6-4bf6-8975-edc2ad44a74a", "indicator--bc28ca8c-8f43-44bf-8b2f-9264282e9f45", "indicator--c8e4000b-196b-4c02-b3d8-fd97db649c16", "indicator--3042a303-025e-4ab4-b572-6e6cfb641d5f", "indicator--af5cc4a2-3949-4c39-94f6-e39d1aa1f770", "indicator--e30d55e8-1d53-44b6-a21e-ce4a4a75516d", "indicator--a6175fe0-5d6c-47f8-89e5-b5883bbd66dd", "indicator--3b0e63a6-3b7f-482d-a3ec-e99323ba2263", "indicator--bd1f389a-ff76-4506-83dc-ce00afb293c4", "indicator--acdc2dd9-34c9-431d-b741-d71d5f184874", "indicator--cd2ef4d9-4cd3-4a03-b149-9ab0b882cb3f", "indicator--266e9ce7-7e2f-4a3b-b82e-52083ae85f2f", "indicator--cba72b54-5132-4c35-936d-d39b15bb52cd", "indicator--017d1146-07e0-4d00-8a4c-a5c77665ad98", "indicator--5b3decca-c3e1-49e1-811a-f426f8bb1881", "indicator--0c739687-0527-48bc-a199-a0e3f9cfde4c", "indicator--01dbe088-1cb9-42b0-bf7f-07853519819a", "indicator--a47715fb-23d5-4e9e-8aad-a3e4b59395f0", "indicator--53f71082-18e2-4792-a655-08bf15719d5f", "indicator--e95e235e-21a4-4bd6-a79f-49d838969bac", "indicator--d26057d7-157e-4752-a437-126abb790d3a", "indicator--c0022022-ccf8-4bcc-9a19-68fe1611537d", "indicator--5e9e3492-e56c-4331-8b14-af49f480b3c7", "indicator--4ce9a753-13e4-4f0d-a878-78c137d666ae", "indicator--d9807621-fe9d-4ce4-91c1-6ff62f24073d", "indicator--e20b0015-5fa5-4f87-a209-8218df459142", "indicator--17096e1f-5d80-4780-958f-6b475b98303e", "indicator--2270a107-9952-40be-87f3-477cd8c309fe", "indicator--0ed1da43-6053-40e2-9b93-48a895f710ef", "indicator--089bc4be-007c-41a9-87c8-f561cd675ca8", "indicator--32a1aee7-9291-447c-8e58-0c49a0eb99b0", "indicator--901f6957-8381-448a-aa3d-a2df2b5ee36f", "indicator--bfa6ab38-47d7-4fda-863e-0e3599bf875f", "indicator--99710212-bf51-443f-aa37-2daa49ba70db", "indicator--efb094e6-9bd5-473a-8c7d-88210fbe90ee", "indicator--3b36e53f-19d0-405d-a387-b0f3bb1df8c7", "indicator--4d2707c4-7994-4100-a6f1-a41e7bb82ae0", "indicator--33e17813-923e-4024-9829-49e1ded94045", "indicator--c2352cc3-8be7-41f1-a185-869514e12f8c", "indicator--3fe8f0ee-5b42-45e4-bc61-20fa3b69426f", "indicator--13e0789b-ea70-4d0f-a456-7daaf911853f", "indicator--b1c92b3d-0037-4bfe-a7b8-118cfabaf29b", "indicator--7225cb21-ea35-4c3f-81d7-c154b41b09dd", "indicator--87984829-789b-420c-af20-4e9c189c4b05", "indicator--bba6dd85-52ec-42c2-92af-415d100321f8", "indicator--1cf7c019-6ed1-4a91-bf0c-7d9ccf997fdf", "indicator--1db42bf9-f0ea-46a5-a8bf-d010a60d137f", "indicator--ae539011-6b6f-4a94-ab89-ae8645b97014", "indicator--ce2c52c0-237a-4208-aa95-475817608e12", "indicator--c9a87034-d76e-4a0c-b7f1-b4dbf4442ee5", "indicator--0b62360b-ec81-46e0-b8d2-9da2d77a7733", "indicator--55e0a8db-c5bd-4936-8106-1797eec6aa99", "indicator--a9083abc-eb7f-428e-995c-9e9eeee6641a", "indicator--2675a78e-4ace-43a8-be69-f662943142f1", "indicator--d6569267-5da1-4241-b350-291dafcebe62", "indicator--c5d3ee26-9ff9-461b-b20d-0b069724fa7a", "indicator--ab4ef325-3b95-43fa-8245-714059c14504", "indicator--0aec74ff-bec7-431c-ad67-7fb5b9d1f614", "indicator--19d73e4e-06f8-4ecb-9739-a4483c477b70", "indicator--4cd0fa1d-244c-464b-8afa-fb1cd620e8b8", "indicator--70625730-48bf-448c-a30d-30335d5ceae4", "indicator--8d78994b-624f-475b-b9ef-fccf8e833d41", "indicator--34e901f7-8b5e-418d-9d8d-e9a06127a398", "indicator--34f639c4-52d6-4971-bf40-5aa8feda2d20", "indicator--9325ff8f-036f-48d6-8212-df2a3710c55a", "indicator--4d06a606-c55d-4ace-a361-27e87aebc4d7", "indicator--937bd598-2c5e-42ee-874f-9d8d87726100", "indicator--56f5744a-584c-4430-bf6d-eda6b4d7713b", "indicator--7ac553f1-0666-4b03-9cd3-2dbaf1238e0e", "indicator--4ae3f61c-a9b2-46fa-9f24-be46328b5d9b", "indicator--34c2f03f-1e07-41a6-a634-f709b0b39df7", "indicator--08639a45-4718-40e6-8861-e10400da3518", "indicator--fdea9999-20f9-4e50-b5ed-32c1d8c010de", "indicator--aa360ed3-a795-4146-8345-ff39cd236901", "indicator--9bcd1be5-2596-4354-a326-4ecf498ede6b", "indicator--733b2225-2b68-4a8d-816f-8e3c6b624ad7", "indicator--3b23a51d-8a33-44ad-bf26-c95ed8da89e7", "indicator--7cb386cc-c05b-4f5f-8a25-848c54b86b6a", "indicator--61b99c3c-50ff-48d1-bd22-f3d7f15ccca5", "indicator--51cac4ed-2442-447b-ae44-5918365e3a35", "indicator--c6858c07-3bb0-409f-8bbc-1c3ad0b5bc46", "indicator--2f5951ef-baf0-418b-bebb-87e5ce6d0b8f", "indicator--51b2be6b-6919-44de-80dc-39b0eaf37e20", "indicator--14be1a99-6a3c-49cf-aaea-faf735f2c83e", "indicator--c9d45e1e-3f9c-4e33-8afd-ea032d0790f3", "indicator--483977b6-d69e-4699-8eea-96d2a23020cc", "indicator--38257fbb-1a89-44eb-9db9-a2dc0419b112", "indicator--9ffc8601-d3b4-49d8-9b87-b38c925a90c3", "indicator--9be0a8b4-19dd-49f6-ad4b-53dfd0170725", "indicator--598942fb-a330-4213-a24e-447f999af228", "indicator--3ef72264-1a7d-47a9-933d-6ff2188d645d", "indicator--97362db9-6a52-4fc5-b62e-3b780cd1441f", "indicator--aca93e05-9543-4f67-95d4-8d6148146b9d", "indicator--0dc6835b-4174-4a1c-a069-d6a7f7ebe6e0", "indicator--72ba7f7e-5d83-44ea-ba4f-a96ee679d3c5", "indicator--f45f2c72-2e89-4121-a54d-6f396694b6e6", "indicator--82595f3d-0dde-4c94-b8a5-3f7dad67ee61", "indicator--666dee7e-d2b2-4a17-a643-14e26de5bcc8", "indicator--8c30d84d-1acf-49f0-81f2-931656291a59", "indicator--cf5e9163-bd75-438a-929a-dc701a63732d", "indicator--3526a62a-9e16-4cf6-b0ce-88c0f4614e23", "indicator--c6eb635a-4001-4ef4-9ca5-41a5f0c38d71", "indicator--23c5f96a-823b-4bb4-bee0-fc35c1565f50", "indicator--e53d7389-fa89-4f10-b881-1ca04673c3eb", "indicator--39b0341f-96fa-469f-918a-351b557f0805", "indicator--b2b4cc29-48e8-455c-90fb-1132400275f4", "indicator--ad57f4bd-f00b-4222-b81c-e3043134e725", "indicator--84e1d8bf-823e-44f0-bf51-a0a1e6a10c3e", "indicator--725754e9-b549-42fb-b0d6-7cf72a6544cb", "indicator--7fedc187-f886-497a-b98e-8b099b3b72f5", "indicator--70febf5d-c520-4b7d-a27d-4013f69af800", "indicator--6050d706-8d94-4861-9227-ac24679c056c", "indicator--1e515569-485c-4365-9288-380dca69bd69", "indicator--000ec3cd-b963-4dbb-90fc-7bdebc7ce0b5", "indicator--1b9f7767-8bed-4644-a40d-fe391dc577ce", "indicator--25f837bb-b2d6-455a-b50e-34c9447ca8c9", "indicator--c2752516-5488-47a0-83c1-99b3fa6c8c28", "indicator--fc208300-8489-4298-afb0-513eb1192b1e", "indicator--a5a413e6-66bf-4986-baad-020fb84b4770", "indicator--b3e14dbe-d09e-467f-b7f6-a0c281ef4b53", "indicator--6f2fe4d3-4cb1-41d6-b4f6-869779416985", "indicator--b95d2b6f-3225-4ac8-9410-95f4ee9b3d1d", "indicator--e3209e1c-fc02-4322-8814-7cfb21bc01c1", "indicator--61585536-5e17-492c-ad18-2cc7fcfbf374", "indicator--6f58c37a-7e51-40ae-8904-accab697e466", "indicator--cf55f854-17fd-486f-bc14-a02ae96747e0", "indicator--1056a097-7e05-4583-a53b-6c17b2513b57", "indicator--0be8bd0d-5b7b-4153-8edc-23bdbb6116a9", "indicator--5af874b0-1e2c-4b8a-9aff-d2adb5cd4710", "indicator--0b39eade-6807-4b8b-9149-5cf65a49ee26", "indicator--e85a0734-d943-45d5-b6ba-5d8b2622e407", "indicator--c2d173a8-2cb3-4512-a2c3-9b8a9859c003", "indicator--cd73712f-33f2-44fe-aea2-f90f6f9fb4b0", "indicator--f4563a1f-eae6-45a9-8ab2-542ecc42b5c6", "indicator--8f57b7e6-9df6-4c3a-80f2-70deb44c0582", "indicator--06d4f819-003c-4f5b-bb37-905e43465662", "indicator--327474ef-7619-438f-a87a-42021739a7e7", "indicator--17416388-6379-45bb-99b7-aa5c44f18e16", "indicator--ab74adf8-d5bc-4af3-a497-42461c352722", "indicator--9f05027c-e975-4043-9482-7dcabe4e6f48", "indicator--33ba268d-1abe-4566-b176-6a17ae733c80", "indicator--4a3031da-84df-4d4f-894f-182d39879200", "indicator--3027b322-2a36-43bd-80c3-82550cb6a3c5", "indicator--d1f0eea0-e136-4fd3-84e4-0b6b32f39306", "indicator--3d2a8a9a-349e-4ef9-83c7-6e55b6a296bd", "indicator--9204d3f3-c10f-4a81-af7d-24e8f6c670b6", "indicator--32a0bbd2-bd2c-4012-b7a4-e874bf88cd80", "indicator--57d09593-29a7-4ade-942c-c5e94ed11aa4", "indicator--526e8d59-d483-45a3-9cdc-ec7b55917591", "indicator--82657cf5-1bf8-4fc1-b66c-c3f7862f8312", "indicator--c4226264-9d24-422b-91ce-012acbe02982", "indicator--09e641dc-bddb-4d2f-9c37-d4c33174089b", "indicator--b4aba1bb-64d2-4d20-b670-b5be1f166a92", "indicator--5c4d56bd-42fd-4452-93eb-592cbdb0fb6e", "indicator--db5116e0-2768-40b3-965f-134198a87e51", "indicator--ccb8ca5e-4ddb-499f-bc02-46fe04f4609e", "indicator--02f69c20-b7d5-486e-8982-169e842097e8", "indicator--2e3b0b7f-f852-4128-8f6d-f160d10b8ff5", "indicator--a7a100e0-4dd1-43c9-90e4-3e0d24b4edba", "indicator--a859bd16-8bd1-4424-b5ad-09582666a489", "indicator--4b4b3427-ac5a-4a3a-8a0b-93662277a856", "indicator--c0684b8b-ccf5-4b0f-adf7-859d0b93bad5", "indicator--6f48801b-22fc-48b1-928e-a66a548708a5", "indicator--d92dadfa-bd1b-4b25-b915-b77aeaae6a00", "indicator--a86b6e66-fabf-49e3-9692-52f0d45076aa", "indicator--b40fdd92-2f50-44b5-91fe-e04d5da15c1b", "indicator--926eeadb-01b9-4c66-89e1-d5f95950cd76", "indicator--ce8c8bd3-c641-4e50-b6f0-fbce6bccecd6", "indicator--47851059-757f-44bc-afb0-0dff688a7c25", "indicator--4fbbbd67-ed89-466a-8526-fb9f47d7982a", "indicator--cc3abaa1-3698-4e45-9f02-d1b13740b796", "indicator--491c794b-1897-4fb1-83a7-7e0177a87fdd", "indicator--d7b2b0a2-969f-4339-923e-c50d2803738f", "indicator--1eda79e1-d0af-413c-acd8-dfa653166060", "indicator--f49aef95-d3de-4537-bb2b-c87f3158d1b8", "indicator--bb3f7960-fa02-4076-95a8-02b408152429", "indicator--3f581e8f-2ff6-44ef-909a-7014d8331781", "indicator--305264b5-ef74-4406-883a-6c45fce37fbe", "indicator--905ea8fd-0512-46df-a9ab-921b62f87a69", "indicator--1755af52-b553-4871-8060-55b892e6810f", "indicator--dbde1d5c-5a42-4320-a32a-838e6fb97011", "indicator--fd86e537-2534-4aed-9e1f-928bc8c69ded", "indicator--b9cbc41e-d74b-4f5a-a121-05c3adb779a2", "indicator--6e6041fa-8f91-4f2a-893b-17b0b75ebca8", "indicator--51e2bda3-efa9-44a1-9bb2-bb64bc9cc217", "indicator--b7a92563-1c1d-4302-9d7a-f8dc90535e58", "indicator--738d1eeb-1ee6-4032-a92f-dc3b96ad465b", "indicator--ced4a798-a6f1-4878-bdb9-da8e701e409b", "indicator--f60485b8-c8c8-42e3-a52f-259d15724960", "indicator--e5a53fa0-c248-44ad-9e87-fe2f1ee0572c", "indicator--b727677c-07dc-45ad-af60-00ee25b29848", "indicator--c56615d7-6cd0-49e6-9cac-57bbebfa83cf", "indicator--84b82a01-6b31-4d05-80bf-11b1491573ad", "indicator--fe495cb6-e6bf-45b9-b0fd-816fca7fb3e2", "indicator--197cd414-4d62-446c-b5c8-dc3912bfc40d", "indicator--e64c11d7-b334-4381-8370-506ba5686647", "indicator--527c6a02-e935-4465-93b4-0ee13eb91da5", "indicator--19fffa48-0142-43ce-b7ce-b9af79d876f0", "indicator--2ef0ea7c-82c6-487a-ad5f-ad86e3226c3d", "indicator--2f2c43df-b617-4221-acd5-d003d5d08581", "indicator--35bedabb-ef9c-420e-8df8-9bd56916f28f", "indicator--fcb3d53a-87b7-4f49-b503-cbfb82a4c9f8", "indicator--0d3d7468-c029-4b01-afba-59d00c43adfa", "indicator--66b49717-22a6-4488-8d9d-fee1d819b232", "indicator--852eff39-cd34-4609-8bec-e46104848016", "indicator--41ae01b4-2944-4e8c-981d-d76f52185ace", "indicator--b41b45a9-44b9-4530-a1b1-a2cf374a82cc", "indicator--a24e270a-3546-44cc-a178-b9648f6c5cc1", "indicator--ecaf07b2-bbc9-4c54-87d4-db799fb874de", "indicator--aa0780b1-2311-4857-9192-0eb34bcaebdb", "indicator--b97b6577-f6d2-4b3c-8ee4-cf2eac041ab1", "indicator--37c85fff-e537-44f6-b8f9-0d27c922e973", "indicator--b2364150-f133-495a-b8a9-08cc2e8a3808", "indicator--0a46b262-599d-48ea-a12a-a50fdf270ad8", "indicator--9ba70f68-9d75-4fe3-8448-5aa10df4ff30", "indicator--6d2d7d3e-c784-4c2e-8c8c-a4c8a98aa7d4", "indicator--bd26921a-f43e-4bc6-91e7-9bc5829c02a1", "indicator--c737ed6c-3d73-4030-9407-3f794e2ea815", "indicator--7d82efba-0136-4da9-9522-ab1d9707447a", "indicator--0c629bee-a21f-4b03-845a-8d3ba3ec6761", "indicator--989b1876-a680-49dc-a50f-b10659ac2df7", "indicator--b1941523-68ae-4036-83de-8cba26b50a77", "indicator--dbec103c-5c5b-4675-a038-7fccae473d57", "indicator--bcbdcb1b-1de9-430f-bd08-3a211dda48fc", "indicator--88f36891-864c-4125-b960-a9367b8fd6ce", "indicator--c39403dd-9f8b-44ad-b2a1-444e494886f1", "indicator--1d60575e-baeb-4fb5-bce5-da1184dd151b", "indicator--c704e2bc-9616-4ca3-8259-f1581f2fc4da", "indicator--9098acca-72eb-4f2f-8069-a4a0f9730559", "indicator--a13631bf-b4f9-4671-8702-a759d9b77d90", "indicator--fa613b86-d636-47a0-8bbb-55d52df4bcaa", "indicator--d658d9cd-3d87-469c-909f-e45117fb8faa", "indicator--ba1eda95-b0d8-4b47-bfce-dca370872413", "indicator--1a116d8e-5831-4583-843d-c48e713cbe7a", "indicator--14ec74db-b73c-40a6-a772-422fd4ab21a7", "indicator--b74b7a86-b062-4ccf-9901-6f61fb6bb8d3", "indicator--dd7b7e5f-82a5-47bf-889f-0cde21ff0f00", "indicator--3687cae4-86fc-4db5-8212-f990d5eee2fe", "indicator--9c1dfb58-39f2-4c01-9fa5-e36eb607c9f0", "indicator--3d5994a7-0496-4c02-b984-db2c738c8001", "indicator--29ded15a-eaaf-480a-bf4d-a82ce869e481", "indicator--f7ddf8a5-6439-4b99-b4b3-75bb12468b51", "indicator--62ba0fdf-c472-44d8-bdd5-a523e1a99e48", "indicator--232ac706-80a1-4501-8bac-8e54beacb8e6", "indicator--dd3bdf63-458f-45d8-be31-002f178e394e", "indicator--c170b3de-ad86-41c4-9522-86c3b89faf25", "indicator--2c10a383-1008-4926-b3ce-1e8006d06ef0", "indicator--968180a0-767f-4fe0-a607-419f9b9e268f", "indicator--18b24d4a-a67e-431c-8b11-a4359f437391", "indicator--cc065b7e-80d1-4f6a-ac74-e5a73efb457a", "indicator--f1fde65a-5f3b-489e-b078-69331fa0f87f", "indicator--48c0ff8c-d701-4c3a-bbe4-0ca35b5dbda7", "indicator--17037ed3-5353-404b-9136-ab7324e1600c", "indicator--df60d6fa-9954-4d2d-9a42-ac562adf2a0b", "indicator--400d20e3-76ba-440d-8808-0582ffa4449b", "indicator--b0216ad0-681c-4cfb-a180-0e5bbe2857a9", "indicator--2200c933-6e1d-472c-b5f4-0225533e085e", "indicator--7c8c0803-fc95-4f24-99ad-59cc9e38a727", "indicator--12306086-a8ea-4928-8424-f3d83b05080e", "indicator--b7173465-00dc-465b-9e4a-81c088e23a63", "indicator--ecba699e-0c6f-4c71-865a-cc59f2c89067", "indicator--99fb65c9-f20a-4753-b2ae-a5cf54f5c94b", "indicator--333166a5-420c-4447-bc3d-f3654723be16", "indicator--57ce03bd-ab7f-4376-b334-32d7edbe230f", "indicator--a0543df7-d370-464f-9a3d-4a154607bc3f", "indicator--b7d43f4c-811b-4cae-8ee8-93e9d05b769c", "indicator--6c43d73f-fc40-476b-93e3-86de5adfcee9", "indicator--bab916b7-c150-4a92-bcc3-ffb5a6fa621a", "indicator--6abe040b-dace-4c89-a89e-58ce76b35ac0", "indicator--988419a7-f1e0-4c4f-a7de-599a01be1059", "indicator--675aba7e-16e3-4b2c-80f3-22ba62c0fc9d", "indicator--0b6a71bd-7c74-46a2-ace2-3aac300aad6e", "indicator--e1abce8e-9b7f-4b84-9a44-b4bf9284df14", "indicator--bf7c0820-ba6b-49a3-a435-0349a8a8e7d2", "indicator--73dfe955-8f93-4bcc-a437-aac3835600fe", "indicator--dfdb6e58-c882-4c3d-bf7d-64ea075652ef", "indicator--af5f5a2d-87b6-4c07-8d65-523ed3535e35", "indicator--a8109f95-edce-474b-954b-00ee1b854afc", "indicator--c4a43cae-a41a-4627-9923-5796387b4aaa", "indicator--a023c6aa-2322-4409-95d0-238965c9a92e", "indicator--2f6f451f-1248-4f36-9ad3-b61207ad7621", "indicator--d4f21e01-620e-465f-bc6f-23e70d78bf0d", "indicator--a26b12ca-8f22-4709-bfad-fa01c6817454", "indicator--82ddc248-6719-4211-9c6f-1d6cd9e88bb2", "indicator--8ebd5699-776b-4b39-89ee-58c15b577191", "indicator--41859f16-8156-4155-a481-a738dba1cf04", "indicator--c4134532-deea-4983-adbb-5138c20364d7", "indicator--95b1c397-96a6-4595-a8e6-933555e05046", "indicator--de3efa04-cfe7-4e00-9493-147172f30e74", "indicator--e2896189-4163-462d-9e23-cdb596ad7791", "indicator--60a87844-64f0-41f3-9237-5031e2e5c975", "indicator--4dc7a849-fe77-4783-9add-8cbd53e2138b", "indicator--454c5137-864e-4ed5-b115-c3b640880076", "indicator--fd488747-66b5-4728-9c9a-79d76a9fb870", "indicator--4dc18917-86b3-4069-9055-54af9539abc8", "indicator--bd28a748-3982-49c8-8966-81e1faa137a7", "indicator--67cae0a2-99f9-4fd5-ad48-fec65ad1c175", "indicator--e5ee2c83-e035-4215-abb1-208a5ecc2d75", "indicator--a8715342-d7b9-4bd2-89ec-98d0b4142edc", "indicator--841d7636-8851-4f8f-bc22-8df4544c8dec", "indicator--20dad8d1-ba49-45d8-92a2-ff6e921fee70", "indicator--c9bc08c9-74c1-49b0-9fad-73c8d1bfaf30", "indicator--ee33caa2-4ef3-4b18-b309-02e865190655", "indicator--e9b27bc5-b0cb-4761-b5a1-bf8687bf7199", "indicator--7b3285b4-e777-490a-b891-389580bb0eba", "indicator--29ca86ac-ba81-4b06-bc9d-c91e4bb84ee6", "indicator--e23e3a44-d195-42eb-bce1-eabb8d16c73a", "indicator--b2e8ca2c-6a04-48cf-af4e-af25f3d498a4", "indicator--b5365e04-5f1e-4f76-aa17-252697513275", "indicator--713a5fb3-d76b-4708-911c-b21d4c8c44f1", "indicator--e0ff7f7c-97f5-40b7-ae77-1fb9e9083f9f", "indicator--89fac227-0693-489d-bbe0-e24aeed27e68", "indicator--e5274a41-6268-4b73-b295-43be26703b70", "indicator--370a9a42-76c1-476e-ae12-55b4eaaebd34", "indicator--3bec79c6-5d11-40fb-bbe5-dd6295315ab6", "indicator--536b9f2f-33ef-4fc8-9842-266de56dec2f", "indicator--b2d418a1-98ed-4273-9d93-99cb5818b256", "indicator--106f28d4-0daf-40a1-8a9d-5e77d2c217f5", "indicator--bca4da9b-9794-4229-b1cb-a4350e8c9331", "indicator--299a171c-f3a2-4b71-9129-65fc89b99fe7", "indicator--20740811-d82e-472e-a358-924fcefbc7cc", "indicator--b70398b8-590b-4e48-894e-4f47491436a1", "indicator--19bbaeed-cddc-4727-97f2-578c05bb4d4b", "indicator--2a98968f-3653-4f8d-bddd-a987c81d6d14", "indicator--6bd17e5a-53b9-433f-b697-2325e77e31db", "indicator--377a8888-4e6c-4229-bdfc-45568b878b45", "indicator--ba17105d-6250-41d9-b8b7-29e325bbcd3d", "indicator--e05fcfa4-afca-4830-abec-143d35b76af3", "indicator--da44ff27-e6ad-4931-9994-687b2dd36e80", "indicator--0dd79a8f-9038-458d-b89f-ffa0ebd5175e", "indicator--163abf36-35c2-4a62-bdcb-c3d64fb005de", "relationship--8f09bf40-5db5-4aa3-896e-5a29291c31cf", "indicator--35552cd3-746a-4493-b5dd-71b43581c616", "indicator--e86ea29f-69e3-45a0-b198-418b5569b800", "indicator--d5f27851-cb5b-462f-85ec-7ceb91948239", "indicator--09db26e7-9ab5-457c-b0c2-e4f15f262734", "indicator--bc08d896-5c21-4af5-9450-bdacfbf2dab3", "indicator--904478fc-a658-429f-8adb-cbb6f61b5457", "indicator--b698447a-1dc8-4c13-aa38-20df272e5d38", "indicator--fd6593b3-0842-4e4e-87f1-2e80d35a3fdb", "indicator--5027e082-06e8-4bea-a888-47efe321683e", "indicator--795f2826-c0b7-4282-bd90-9297f969d0d8", "indicator--2f807e02-958f-4189-960f-4f1d3a4476aa", "indicator--a6a6ec3b-b537-4f3f-b383-60bc042abc03", "indicator--c4519c3a-79cd-4d6d-ae42-8b12cbb1734a", "indicator--29bcdeb5-c678-4200-9ef2-e23bba302476", "indicator--d537dcab-dad2-408e-94d3-4ecbd656d04b", "indicator--c9185a30-8e5f-4fea-adcc-e2b5f3cb24e5", "indicator--e45307ea-deea-4797-8386-e2d28457fb5f", "indicator--b3d2c216-02bc-4dbd-be0d-9c3ed266d1c5", "indicator--0864c1bd-f35b-425e-abfc-442596c14b50", "indicator--ab2efa63-af72-42e3-8043-f1e850f15951", "indicator--7445e3cd-f220-49f1-a823-8a506c3e7a7f", "indicator--88353d9a-855f-4806-9dc8-8083cccc717e", "indicator--f0c6cf11-1dfd-487b-b49a-7336757f27f6", "indicator--423e7dd8-bc53-4fbf-87aa-f35bdce613d6", "indicator--72f3482f-d2fd-49f6-a9db-6348bc0853f8", "indicator--83226483-11c3-4d8a-b042-caf529f8fbb9", "indicator--7ce69b80-f8c2-4562-97f3-28bf7ac74cef", "indicator--45e04dde-b942-4b4e-ae00-eb636ef1eeb7", "indicator--d236c0e2-96cd-47ff-b128-407abda3503d", "indicator--1ed52ccb-7c65-4f4b-bc06-79665827ce26", "indicator--9b41037c-52bc-4559-aa92-7cc36bd8c710", "indicator--2f87faaa-e7cd-402a-8564-5a7ef50a9ab0", "indicator--8cfbcc64-09eb-46b6-b861-01c2f4631725", "indicator--5567c892-8645-4faa-920a-455c632d7b31", "indicator--29d3a32d-97e9-4fb6-b9e1-cca2ea888293", "indicator--76fbb455-58f6-40f8-a6f1-0d4b7e39e4fc", "indicator--a79af37b-143a-441a-8e73-2e54858091fe", "indicator--bb3790b3-e06c-49e6-ac27-8b47ebf89a64", "indicator--b27b6484-346a-4236-96b4-23e350f0211e", "indicator--1ca945f3-68c0-4d60-904c-b828fad78614", "indicator--003a06b4-b559-4688-bbbb-ea4838ed58ca", "indicator--8584fc51-7c0c-4c4e-91e8-e3d963aa6c3a", "indicator--de23b5c0-be9c-4aa8-a3d7-68035b3058eb", "indicator--82f4cbe1-eeee-4952-ae11-caa38cb39e35", "indicator--7f885828-d57c-4d3d-8af6-4064934b477c", "indicator--f0142696-8d4f-44a6-82de-d0d9c7f46107", "indicator--87d13192-9c8f-4c6a-bbd5-3441d13c178e", "indicator--5d6045f8-ee39-4057-bcbb-3055d5092707", "indicator--b1d04dd9-b6fe-4c1e-9ec1-5996eba322c1", "indicator--9a8c0e2c-5c0c-4af8-8794-befca1caa9fc", "indicator--ab7c1b46-c984-4147-845d-e48ab19dced5", "indicator--04fa40ae-ec95-489c-b88c-7f7a32aa9cb4", "indicator--b804a8f6-fc0a-45b0-806f-47bd2efca19e", "indicator--05901750-2f82-4653-b588-136890bbd442", "indicator--126318a7-aca7-4f12-8ddb-ef577a45941e", "indicator--306c8210-3e72-4c70-8486-2d520d4d58e7", "indicator--cc133cd3-a379-4e69-abaa-fd30a862da65", "indicator--8ea1145b-0356-45f2-9fc2-4804e8d8dfc8", "indicator--c68c3818-e85d-48f8-bc42-66363a3c2f03", "indicator--f764f7a6-ac16-4c18-96da-cdd8148533b0", "indicator--1f7705d9-ed10-4390-aec4-4e01719300dd", "indicator--c2bfa38d-b6a9-4c71-89b1-e63f4adb3193", "indicator--1512db46-d4f1-40aa-a259-0902718be7f9", "indicator--97bb8de9-8c64-4efa-8465-bd50fdb2a23f", "indicator--707775ee-8c17-4f6b-8156-11fcba69fd89", "indicator--1b3910b9-49ae-4ca8-bbee-219484c22e0f", "indicator--cef1ebf3-2b55-4c4f-a941-594f8ac0f90d", "indicator--d5c3c848-a895-4750-8b72-f7062845d3c4", "indicator--6f90d9a4-eb4e-4014-a40e-6573dca28d34", "indicator--8dcadf6c-ed57-4bb9-a41c-cda3ec3b69bf", "indicator--c004d1d6-6858-4e57-a7ff-fca9f4eef6ab", "indicator--3a32d23a-31b1-4354-a159-b6085939eb14", "indicator--ee05a76e-8d81-41e6-b703-cdf870cbfd2a", "indicator--1d822cc7-81b1-4781-ab60-e709e1c0996c", "indicator--35dd0ba0-87c0-4dda-9c04-b69d0fad3a2c", "indicator--1e0b487c-08b6-40ad-a5e2-7fe8f90ae6dd", "indicator--144133cc-123a-4bef-9c38-52287e90f29e", "indicator--e484a06f-9f48-46c0-baa5-c01c22ed643a", "indicator--dd2073cf-6bdc-48a8-93e3-a2b481d93eac", "indicator--9610723a-0810-4197-93de-a482f76709af", "indicator--bdb887b3-2cb2-4fa0-b32b-401b602914b1", "indicator--93b0c62d-7813-4a25-b63f-b24b0e170003", "indicator--09447bdb-ac7a-4165-9de1-759d07b9b422", "indicator--d2f8c8f7-6916-4729-a81f-cda071dfe036", "indicator--6fd240f6-44d4-432e-8063-7c031586233c", "indicator--5e3779b4-2bea-4779-bf11-274816daf571", "indicator--eb7b0a8f-5aae-4edc-81be-f415637dc9d7", "indicator--8fadb422-598f-47e5-b793-d9b4f385d508", "indicator--fcf5e5a9-8e07-4c7a-be55-ea2ad618c8cb", "indicator--d1f757fd-fb48-4f0b-83ed-30ea3e3a52af", "indicator--b9bd476a-8e64-4ed6-b90b-30e48ba0b9a4", "indicator--94c01040-e2cd-42d6-b09d-c4c6b5393496", "indicator--832799a7-9dfc-47ac-9e68-281cc3cf4f40", "indicator--51e1b4fc-d5a8-49b4-adc2-a7201bac475b", "indicator--ba663fee-47c3-44fd-9832-0f0fd8d140f6", "indicator--a70d6b49-b057-40fb-98ce-075b646810e1", "indicator--a7b54107-0c27-467b-9303-83586bc6dd49", "indicator--5e0134f7-4593-440d-ab4e-7b4e5a19bbfd", "indicator--776c5d83-fef8-42e5-8892-266e1b92a025", "indicator--597ec30b-40cd-440d-9dcf-7da93a804055", "indicator--2595aa01-6ac2-418a-af86-c0f3bcb7b758", "indicator--915b9566-77d1-4c56-89dd-4c9e1508be86", "indicator--a2c2c8d2-2303-478c-a218-a884c80aa6b8", "indicator--124e26b1-2e63-49e9-a736-eca10afb4a70", "indicator--c2357efb-f1a6-45b6-b7da-0bda26a441a6", "indicator--2979a73a-7f18-4414-8d59-37c84f22f9ac", "indicator--ed1c1f11-8078-4468-844b-9f0fb1646cfb", "indicator--a9733f2c-8e02-4d59-83dc-e2c55823ce49", "indicator--03f8393e-b2b8-4d32-ad2b-c49569d9e295", "indicator--aeb0d93a-9eb1-4bd6-b562-47a965b7223b", "indicator--a3aab5cf-e40b-4448-bbfb-d0d7ed7c4808", "indicator--21837e37-01d3-4ca5-9a31-1f540c08276a", "indicator--70f496ab-f288-454b-8c52-6d9f703cbb7c", "indicator--04d77e1a-bc2d-4f85-8ef1-764571cb2e1d", "indicator--dd899fc4-d82e-4571-af72-e6facb8a5ff5", "indicator--4a1a13ba-f192-46c8-b2e7-73de8b92155a", "indicator--aaf081a8-ae05-4921-8baa-a64969957036", "indicator--b2bb28c6-a52d-44b9-901c-18a4b0924f7f", "indicator--8724b139-0450-4dcd-b51f-47e5a3878338", "indicator--b2b99e9c-b3ef-42ca-8e81-8dccefb4afee", "indicator--3344eb4e-e1ce-40d3-9146-da27869c682c", "indicator--f3e52b6a-0a1c-4a5c-b9a5-266c204f4472", "indicator--f97ae12b-fba7-4760-8952-d5d77c52d7ad", "indicator--66f3a7d8-cb83-4186-bffd-826ea70ce617", "indicator--a8deca09-087f-4b2e-b7a2-00b0f6ee4e37", "indicator--a452e977-dbb3-4a92-83dd-e993b355bd61", "indicator--7d7e24ec-9ff6-460c-9c75-8797395bfb33", "indicator--8ad4fd70-4737-4da4-8eeb-76b1186bd2e2", "indicator--49c08684-ceef-4b45-82ce-7d136acd1ff5", "indicator--cb8c6e35-276f-4944-a581-16e823a7ff95", "indicator--ed02690f-f3ac-4e6e-831f-8241b2ef1c95", "indicator--4a36b673-da25-48d8-8dcc-6a4fd4251976", "indicator--1db65df9-5984-41c8-9981-fa4394eee210", "indicator--35b30e3f-290b-44c6-bbb9-e80b48892dcd", "indicator--32c07e7a-1c9e-416f-aeda-e8324065a45a", "indicator--9c18481c-ed33-441f-b131-ab5a3621e026", "indicator--b79cf85b-24fa-4706-80f7-26d0eab08e5e", "indicator--8aadc203-ad48-4e6c-95c7-9401be770098", "indicator--b952a0c5-8aec-4084-8282-82eaa530e2c2", "indicator--a6389e9e-7802-4ea3-baa8-34ce6ffb27b9", "indicator--dc59efce-2d87-4443-96fb-e9c92df3dbbf", "indicator--f1ab2cae-ac2e-497b-882b-683f4c0193c5", "indicator--71b1ec2d-d5bf-4b96-b633-a19401704b24", "indicator--78e1c69a-fd63-4578-8fa2-1229916d8158", "indicator--a06a2116-f47a-4d10-bc67-a6925c7bd9d5", "indicator--fd20d22f-1df6-4f1d-ac7c-b6a0d0ba91c1", "indicator--00b57f2c-4a36-4514-b6df-9d97cd5e4773", "indicator--62279b4c-eaff-48ba-8cc8-f5941fd3fe4c", "indicator--3b7b4b72-66bc-4990-889a-8cf0bca89974", "indicator--62e6699f-423a-48dc-bf28-9b5774996483", "indicator--104da567-8e77-4ac9-ab9f-5b7a847ec914", "indicator--88a8c9e1-68d5-4169-967a-625c3143ed9a", "indicator--b4daf531-379c-4b10-b35a-101ce7ccd427", "indicator--779c5a6c-c555-420b-a1c2-cc95d96ad4cd", "indicator--4e53e76d-e77d-4897-b133-9cb8b249663b", "indicator--edb8c687-5a47-49aa-adae-a0acf56ac817", "indicator--b2d9153d-45d5-4385-8eea-7d358ea6a72a", "indicator--fe37cf9c-7de3-43f6-ad43-c99b2cc1da41", "indicator--b63d3381-95e8-4ef4-a89f-5803d3dfd04e", "indicator--5757d4ed-a14d-43dd-83ee-3ad1caf96d8c", "indicator--43819825-ddea-4384-967b-13cce2d74cf0", "indicator--9075141b-8899-4a9e-a21b-fffad7562cbf", "indicator--4117dec3-5e81-4432-b4e7-d1dfbc7c3f68", "indicator--b780c65b-bc44-485e-ab1a-05e7efc9af05", "indicator--551cab26-ad56-4680-87e3-f72e19f85667", "indicator--965a4171-66c3-4a20-aa9a-dc780cd02944", "indicator--945eb8e3-416b-4ff7-ad45-e704f1d8556f", "indicator--a52b4a0e-5dc7-45ec-87dc-d83cc43cda36", "indicator--b7bd357a-f174-4647-a3b9-a6e2db72d0b3", "indicator--1dc09084-9032-4fb2-98d5-2a349d793741", "indicator--96f8015e-c3f0-4b7f-be69-c9f6d7f06f0f", "indicator--89a089b8-53da-4990-a4fc-7b4969ff6140", "indicator--d9992e0f-5e52-4ffd-82bd-3aef632652a6", "indicator--4a828ce3-3278-4fa3-99aa-a46a63c187f5", "indicator--7a9b89c6-60d8-424c-8e3e-43eda657975d", "indicator--942f9603-990b-4ce5-aa9d-eae3c462cf6c", "indicator--726e2f78-1a18-4673-95c2-e23b6a1655ae", "indicator--8cc1c953-2ff4-406f-8ca4-e35f9d7155fd", "indicator--a72c6142-74c4-40a4-bed6-0b35c08000b1", "indicator--a89affb4-2782-4bf1-b8f1-757d5505dba2", "indicator--5d5bfe58-fffa-4169-87e4-4cea4a050702", "indicator--f115fd6e-d1ee-4c2c-8c9e-4dafae7b26c5", "indicator--7049d8a3-8546-4c40-91f0-e19049e87809", "indicator--196acd6e-ec91-48a1-be24-1c32dd3f564e", "indicator--8e851976-216f-4da6-9767-5a684f07c2e5", "indicator--3af5bd22-0a8b-4f2f-8e00-11492de3f661", "indicator--e618a7e2-35b6-4df2-ac48-5a636d18e5d4", "indicator--a7debcf5-0f00-47bc-892b-114265204851", "indicator--a148e80b-97cc-41d9-a218-b275758631d4", "indicator--f089d8db-cf0f-442e-bf68-6239cac0829d", "indicator--b2a718d9-9ae4-4a0e-a44a-2422de8f43c7", "indicator--629d223b-af70-47ed-973f-082f016f22c5", "indicator--29f7c1d4-4ebd-4743-9478-ccc67525a0e9", "indicator--22196c87-ee70-4c95-a302-2347970b15bc", "indicator--f045689f-2df1-4c02-9345-4975c979c074", "indicator--f6d2d664-7f39-4b64-85ed-aa0d0ff44ac8", "indicator--16b5ed47-606e-433b-9a32-d54658be53ed", "indicator--40ab20fa-ddee-47f5-ab3d-557313b64e66", "indicator--e18873e7-5a56-4d35-88e9-0d8def070f54", "indicator--91bbe760-79c8-4127-a177-a53816747562", "indicator--4f6b361a-4535-4d31-8e54-7cbd29030a15", "indicator--3a2ce78e-68f6-4323-be4e-377679251129", "indicator--5f7e1fe2-f41d-404c-8353-d931e09c4380", "indicator--abdf4551-e05e-483a-b85f-d4bd7e763fde", "indicator--4bb55bdc-a4f7-495f-aa9f-c255b29450e1", "indicator--8341ccc6-7014-4bc1-b3fb-240fe498470e", "indicator--bdabec67-f41f-4875-994c-5e271956a872", "indicator--f3635818-75ad-4cf1-8f98-844f26e812e4", "indicator--eb98cdd4-768a-4d6d-9878-d8fee3782c5c", "indicator--f10c5357-31c7-40f7-ab08-7f0dbb06fac7", "indicator--fb1d9e81-8113-49ec-99ff-bf4068666082", "indicator--af3ed635-958a-411e-add8-a0e6e12a60e7", "indicator--60289143-d2dc-4107-b1db-ce85e4f69059", "indicator--7af76af4-f0c6-403c-bd78-243539dd2c3d", "indicator--f8446ab4-8e14-404c-b973-840c956f0047", "indicator--e0fe2e4b-1bc0-4a9a-bc60-dccde1ac0410", "indicator--1aceee62-2f2b-4a2e-8d2a-a8913d7e130f", "indicator--b09a71b6-e434-4e06-a57e-2b6ff8c0f4af", "indicator--5debc0e9-9f87-4ccb-973e-52d1938ac6f4", "indicator--c80508e6-174f-4654-ba47-587283c56186", "indicator--8cfc8cb1-9b3f-4c0c-84ea-faf0d27ef73c", "indicator--8cc88f34-72be-4b5c-9fa6-7cf197a5556f", "indicator--36330938-c54d-4896-a169-2c0d592598ce", "indicator--ae99f1e2-6639-436a-b2db-97a4b7be33b2", "indicator--23bceaa5-7320-4d19-86b9-020bf4ecedaa", "indicator--6658d67f-f6d4-4521-8392-4acdd30390e0", "indicator--ceeb43fb-a5f0-4d91-88dd-3a7bab309d63", "indicator--bee2dc7a-9388-4bf1-8305-bf65e9b33cb2", "indicator--7e4783d7-4a5f-4cb6-8772-d95a6d94110e", "indicator--9f90c5cb-5f5d-4ccc-b018-d47d674a0d25", "indicator--baa6a0f0-3679-44ab-b562-128a09bf242e", "indicator--673655bf-56a9-4c2a-935e-c147887fc898", "indicator--28b66ea8-8a3a-457d-b83f-01a16c962c54", "indicator--a93cccd0-0743-4037-8437-08dbe80d9827", "indicator--c9b528e1-15e1-4ee1-9690-8a37dd58419f", "indicator--5a436341-a19e-4570-931d-2ba297e2149b", "indicator--926a0f38-a5f1-4512-b637-2128fb65ac8b", "indicator--b8e0b0e8-a846-4e0a-a3d6-a6099eb4d936", "indicator--d0c2066c-310a-4cda-943a-aaf4a97d85b2", "indicator--353ec232-8967-42d8-b233-d13bcb5ad266", "indicator--ffb6da5e-c4e4-4cf0-bd71-74edf4699b54", "indicator--38819ebf-de9c-48e7-85ef-981c25a63cc9", "indicator--5980af3c-ae98-4dc6-b619-30aa3f8d1b84", "indicator--e36cc4d2-384f-444d-9154-06dfd2ed5001", "indicator--8219c3ba-826e-494d-8b60-67c2e3c6bdcb", "indicator--5369819b-1546-436f-9cd1-7b0f9d36c417", "indicator--3fa55354-6caa-4229-8284-59683a79e6ca", "indicator--a61ca343-8c1f-4ee5-8641-e18d683f48ad", "indicator--72332e1a-7bae-43f9-8755-eda2bc03fc23", "indicator--77f4f922-f56f-4ecb-9def-63ede6de79f0", "indicator--5a95802d-5f9c-4ee5-8387-43e534fbe73d", "indicator--fb120106-9f11-447c-8b58-04926926e3bd", "indicator--e0b48822-53f2-406f-83fc-8ceaf39a8856", "indicator--e345fc27-23d7-4e35-9d1c-ed8b73e2ed13", "indicator--caa109f0-2f39-4cf1-ba0b-169cc6829d6e", "indicator--22e7f331-8841-4e4e-bab6-16381469c792", "indicator--3d4a252c-7fff-445f-923b-b6bc1ab805c4", "indicator--da5dde2c-fb17-4ad8-bc78-7e36b794c413", "indicator--44fc184d-977a-4ad6-9f60-ccd53f22bf95", "indicator--d6b8d99a-c474-4b43-a167-52e09ef5065b", "indicator--36c6af87-e77a-489d-b372-b310753ab4bb", "indicator--da0f3933-8608-4123-9bac-0cf04b11cb72", "indicator--8a78fd42-63ce-4760-9095-ac7a855baf39", "indicator--e48186a9-8142-4703-bb61-1847202c86eb", "indicator--5bd75d7e-ce8d-41e7-9d72-e94d6b20ea3e", "indicator--87d63ba4-638b-4a94-bfd4-729aacea26ef", "indicator--faf7c99f-d97a-4edb-90d8-8e84a84286a9", "indicator--9ab7a35b-887f-443d-93cb-0f2ee36e1623", "indicator--d47d5360-da75-4d9d-b318-0c48dccd7a6b", "indicator--fec5dadc-fff4-409d-bfdc-94bf1a1dbce1", "indicator--e6fb3364-5231-4b5a-b3c2-450bbfa4d9b0", "indicator--e4a0c9fd-3783-4b9a-b06a-0024ee4de7fb", "indicator--b7005130-89f9-4483-bec3-ae3fd9c77afc", "indicator--0e55403b-349c-43b8-b718-439e4a1d4c7c", "indicator--e4f2f4bf-e7ef-4624-a319-c1768f64a777", "indicator--52e2514b-e447-4937-a0d4-934b7479c672", "indicator--93ddbc59-10bb-4efd-af74-3e644cd64959", "indicator--fb6773d2-0f2e-4a82-9acf-bb20eb026246", "indicator--d23a2816-d4b5-4af0-946b-f7b7aa7c1593", "indicator--8bcceee8-0740-4d86-8f96-38af7480e593", "indicator--5f3aee9a-1e74-45b1-a53c-7f2d5cf85cb0", "indicator--8aaa4db2-4896-4816-b9a6-238980d369b0", "indicator--296a4735-5c92-493d-8057-b3b1c70d38cf", "indicator--b0418d9b-3a64-42eb-9579-57b08278fad3", "indicator--1a2f3d44-756f-4f54-931c-0144de67a834", "indicator--0183bccf-84ec-492b-adb2-bb8744016434", "indicator--d75ec4cc-3934-40a0-b4b1-18e9810896b6", "indicator--a12d5915-3cc6-4967-b52e-28f5676f643a", "indicator--2d4bf307-8988-4813-85a2-5218d8973712", "indicator--1f02c242-7963-4934-a409-32e317ad900c", "indicator--c5fd9daf-ae5b-4891-ba95-467f3a29e2c8", "indicator--d687ce7b-7237-42e6-8ee8-3b4b101f40a8", "indicator--b329dfff-fb41-4641-a7e3-e604f0a3485e", "indicator--c294d984-4e66-49da-9e42-71e21ddb9ad6", "indicator--5f25c823-d836-4d90-9ecb-68993486570c", "indicator--f1a87206-83a7-4dbf-ad4a-a9e74c3fc1c9", "indicator--0d263adb-865f-4798-8c0e-3df722b731e3", "indicator--ea15503a-2b62-49b0-b039-3877a42c3300", "indicator--8079e306-0160-437b-9462-15eeec8fe508", "indicator--029cdf28-e947-4c69-a79e-483231804d23", "indicator--e1f7a74e-2e1c-45af-b046-c47a3bdef239", "indicator--5e2508d1-3b47-424a-b859-517555def67a", "indicator--29ef2fe7-1449-4506-8c67-e37bc351a7a1", "indicator--9ead690b-f98c-4cd4-817f-ba57c1f3c871", "indicator--9ae6b257-4381-46bf-8dfc-c8219637b70a", "indicator--f6742885-11be-4c01-9473-fcf094b5b570", "indicator--24ef0256-ff9c-4482-9dca-11a5dbfedb20", "indicator--87135a00-8d1a-44ee-a7d6-d24e3a3969d7", "indicator--b9ac6a7f-b5ad-4142-bf66-1670e92fdf9b", "indicator--72146d05-f24e-4106-bd47-0ff31cf35d4c", "indicator--bf00caaf-393f-4886-b5c7-44f162ee1225", "indicator--08cbec95-70f5-4c1f-9fe4-374c3484128c", "indicator--73fbe4ca-589b-4e4d-8134-0049f2a65356", "indicator--22b08b0d-90aa-4a13-9f16-d108c19f3e93", "indicator--5eb811b9-37ce-4c15-8c5e-afa0229c21dc", "indicator--b11351ef-3904-4fef-aca6-1af7e1b90b81", "indicator--2b2582dc-3f12-4bd5-bb30-8893733d55b9", "indicator--aebb7431-94c3-4c77-a160-19129bedab4e", "indicator--35028a4a-c955-4b4a-a6d4-b3795389bac6", "indicator--df8d7c3e-36eb-4e84-93c6-57ff3af3debe", "indicator--9013d15f-b4b5-4d5a-804f-a45bc91199fc", "indicator--3d94d5b4-5a2a-4a2d-9817-9bee35b619f7", "indicator--de1dc8e4-606b-46c4-85fe-564875239c9a", "indicator--a20602e7-15f0-474e-9aea-2e03c93fe99c", "indicator--79a1abc2-3f07-4032-bdef-d863eb423838", "indicator--bb14953f-2f65-4710-b511-2bb4446cbe72", "indicator--d6dd4e57-8e7f-421c-aa72-1091f92efac3", "indicator--6cff54fe-af8d-41f2-a59b-d63aaa22825f", "indicator--7743a94c-1a82-48cb-ade8-a6e1ce2ffc4a", "indicator--e01f6513-6391-4dcc-88f2-8bc1ee0bf832", "indicator--fb36fc61-9885-4299-a496-b0e1a5a1d780", "indicator--f0c60189-e1a5-4f0d-bf33-94331e271a62", "indicator--f2c27104-d21f-4c0d-ac30-3a9c42f9c141", "indicator--f1ede669-b8db-4c6e-8e69-f1bea4cc06e0", "indicator--fe43646d-5186-470e-89a4-b76f6ef44845", "indicator--f3664cbd-6179-4ace-bbe1-89013fcc1874", "indicator--1332ca1a-4659-4054-b700-f40e8bcb9b48", "indicator--70abe91d-42ae-4b03-bb8d-54adc6077232", "indicator--1608fd3b-5c81-4066-a10d-6f25cef4d3ed", "indicator--c9ad7e6d-00ae-4bd1-ab04-74520bf3e1e8", "indicator--ca941f2e-10ec-43c7-a2de-a632ac30ba86", "indicator--22d43b30-6278-401d-af48-4519baa26299", "indicator--1dbfa9ee-59e7-4192-8043-71b14cb8be7a", "indicator--29840a97-ad26-4da1-b807-a3b3a2ae8753", "indicator--1c11c1e8-a634-4e5b-8858-b14ba2d41230", "indicator--cde32c88-a26a-4fa0-95ed-d318e531e2cb", "indicator--0a71694d-3444-4069-8d6e-2868702149ec", "indicator--afc9c1e0-5162-4973-82fb-c55931972ad3", "indicator--afe94a28-934d-4eb7-b438-ecf35532d2d4", "indicator--35d92e8c-11ab-466f-b9d4-cf6a399bf4de", "indicator--1d114366-c32b-4651-9167-12fc564386c3", "indicator--c0ffb3c2-385e-4b92-ab5c-ca4e859ccb2a", "indicator--e68c4393-20a4-4e27-9f20-5151c5a5caa4", "indicator--679e6583-379b-4fc9-8e45-2316ea908852", "indicator--ddfcc0bd-40e2-45c2-923e-a799ac9f9d27", "indicator--ae06e310-be50-4663-a85b-17f4ac9ea088", "indicator--2263cfce-1d89-4e5c-ac0e-d0480f96640c", "indicator--901ee420-d665-43cf-bf9f-172e48c3e406", "indicator--5f3e64b6-2087-4565-913b-85c5f8f097ad", "indicator--28a7e778-bbc6-41f8-8373-1190a7d0a3af", "indicator--558a49e8-384c-401b-b8c0-dd1bbcbf42fc", "indicator--31e13612-bf15-418c-bf99-cbf7d9a3c0d0", "indicator--fe0d78bc-c50a-42b1-92bc-bf604a4c9dbb", "indicator--2094b12b-fafe-44bf-a0e0-f975d11fff5a", "indicator--8aa49a03-4e07-4c73-8258-1d16326c3f3c", "indicator--cefb754c-bc74-40db-84b6-c5b80d94be4b", "indicator--97ce3c49-85b9-4014-b929-02d2017d6d83", "indicator--ac8416f1-a072-4ebe-ac7b-a547e0b5fb78", "indicator--16689b5f-e13c-4fe1-8b61-3f27dea03eb9", "indicator--acdab582-070b-4f0b-9a48-e21b0b607ada", "indicator--7c6f52f8-f3ae-408f-87cb-2a95b9122404", "indicator--d639e111-6883-4148-90a7-e378813c6776", "indicator--1ed7acd3-1814-436b-91d1-d82e5d6bde50", "indicator--2c2353b2-1424-4137-851d-c38c8401b7d4", "indicator--c1d53200-07d5-4b45-bce2-0228229ff723", "indicator--10d8675f-456e-48cc-8f96-c2341af7f7eb", "indicator--10c23a39-ce2b-4d2b-9145-6d1e0b81c102", "indicator--4511d0c8-3125-476d-b8aa-3bed3ebf3955", "indicator--50d3a762-ce45-430b-8a4a-856ea2cf7b10", "indicator--5032d38f-27fe-4863-a8f7-5f3f0376c4c4", "indicator--64f4df74-8383-45e0-ab06-dcfa4594e443", "indicator--6db47f70-81dd-46d2-b277-2f5f8faea54c", "indicator--13aeeb69-93e5-44c7-960d-54385f11bf42", "indicator--cfb5cad3-106e-4be8-8961-34004bf2ff0a", "indicator--a3c5d470-d0f2-48ad-a422-f007389f3817", "indicator--5e371290-c247-4ec6-a2c5-b53d12f807eb", "indicator--d7dd4c97-1373-45b0-9bcf-c455c44af464", "indicator--aef725b3-9b57-4f79-ad91-2df1c4add262", "indicator--24225f97-4bcb-4986-b951-cc5d6e416ce8", "indicator--aa6cd378-533b-412a-b85a-edd1a01b558f", "indicator--88a36add-f9d2-45ef-905b-00bf4119a7dd", "indicator--8f2412fc-a27f-47fe-88bf-f0544e899678", "indicator--d436bb69-2b28-495e-8304-b7d91556db09", "indicator--fcdc9388-811e-4ce1-a2d8-1dab0dfe57b5", "indicator--51e446e6-79c7-43de-b63b-b632063e7ddb", "indicator--2909fd07-07c2-45bc-b75a-39d3427d9b50", "indicator--fbd53745-dc6b-4f4f-9c97-47d3bca83533", "indicator--cd14155d-2d20-4092-b25a-fca6a10d65d5", "indicator--0d998ed0-7b28-432e-914c-f1a53140a0f1", "indicator--ffa20648-db18-4fea-a5fb-9d9c0f73b4ad", "indicator--b74460c1-b489-4d25-a6a2-56c71aabe428", "indicator--413afaba-1f9b-4e18-a6d7-e185b152dda0", "indicator--7bac1374-80d6-4185-872c-8aa5914987f2", "indicator--d00b76a1-530f-43d2-b157-d65339b65d87", "indicator--35de9866-5a0c-4fc3-96f6-8ecb1b217ed5", "indicator--7e69488e-c12b-4afb-a938-03bc1e30c644", "indicator--c04eec87-aa0d-468e-9bb6-a73ebc2e5ded", "indicator--fded23a3-185c-4a1a-aea8-eb9a9724ebeb", "indicator--f5a11228-41bf-4eb8-9976-0dc1fd94757e", "indicator--c8271ccc-fb92-4068-9a12-3569e56fcf3f", "indicator--76ca6b03-e44b-46ce-88e6-2633d84f2c63", "indicator--f816e7b6-eb8d-43b9-98b5-4bf33a8bd304", "indicator--bc37a970-1ecf-4cff-80a5-5591dfbc4158", "indicator--1aa7115f-5024-4240-bb7d-88dd38011855", "indicator--f483d0be-8365-4945-b68a-dbe5f96ac4c7", "indicator--186dbd95-3089-4c3d-94a9-a88c7d147554", "indicator--e7f0ac82-6d3d-4c10-954f-28a06775d1ab", "indicator--b6e2fdb1-cb1a-4a29-9cb7-95e193d53796", "indicator--3a23e839-9883-4e5b-b2c2-fbc4c9d249a1", "indicator--074f53cb-1b4c-49ee-840b-e024bf379a0a", "indicator--92b7ae44-d01f-4faa-a408-45a674dd13cc", "indicator--070b6d98-1c1c-454f-b7a9-837d4ab556c8", "indicator--61e2853a-183f-4afc-8875-4ad124dc4c14", "indicator--96a8da85-2047-46ea-8e57-4ce3baf12fae", "indicator--09be0d66-fa6a-4c05-8d40-61a57121f0c3", "indicator--e34817ea-3fd2-4adc-9d75-23ece2886661", "indicator--0d96ed6e-a5e7-4739-b452-ef28390e82ec", "indicator--3fc8c870-5bb4-4451-9ed4-d0b54128d1e1", "indicator--162618a9-4fbb-421f-9704-fd9aedf19f62", "indicator--cda323c8-7426-4cc4-ba32-882a6ea25558", "indicator--63dba981-64b2-4985-8507-e9d217296bee", "indicator--751043fa-61fb-40b2-89e9-57507bdf53ab", "indicator--a23c41b6-9659-4247-a718-d544b73be54c", "indicator--9794d769-cc99-4d6d-83a8-1708082e8933", "indicator--4433ca3a-ab11-47b9-8222-4cd6ad4a8e88", "indicator--51e59294-8a29-48dc-bf48-4075c6dd1965", "indicator--bdb7dea5-1dbc-41c8-a1b8-9d7459df5ecb", "indicator--dc4866ec-744a-408c-8981-5f1ed5694610", "indicator--92750639-a17b-4cf0-b564-9b53c829ecd6", "indicator--c1e4eeed-c3ef-433e-b46c-d5b705c12200", "indicator--a693694d-2779-4e4f-a844-0343f017e5bd", "indicator--23dd43cf-9d8a-47a5-b14b-e4b51211db93", "indicator--8b3224ab-97f8-44f5-9304-3529093d1bb3", "indicator--417a424f-709e-485b-a21f-95346cba2ba8", "indicator--ac78a1ac-94bf-4e6c-9ea5-cafbb3eafe69", "indicator--636f0462-da22-40c1-971f-796247ebd275", "indicator--e93a91ef-e079-4333-a260-8f83467659b4", "indicator--0bebf34a-af31-4791-946d-34d1ad3f4a25", "indicator--e6918f5b-6629-45ed-9118-8520f2c13fe0", "indicator--0bfd15e1-1dee-40c0-87ab-f25dc4af0d46", "indicator--9284a18b-c843-46aa-bc00-6f96266e1fb6", "indicator--7fc63878-5da5-4405-8473-5cdd56a621f6", "indicator--9b2d2844-45fd-4f74-ac9b-af8cd84531ab", "indicator--b69fcb1a-1a1d-4b4f-ba37-d8fae0e0b1c0", "indicator--5a838149-6e1f-479c-9412-8df34b27f6d9", "indicator--413bdc43-7a26-4bda-ab98-642feceefc11", "indicator--61ee0026-f007-4601-ad5e-bbb585ced44c", "indicator--5b558765-d489-44b7-b999-e421c6c85d53", "indicator--a244abf9-9fc1-4316-8856-a1f8b539ae7c", "indicator--01806372-b61c-4cba-a52d-07021e3936f5", "indicator--c31079c4-7754-448e-ad30-9a4eb005177d", "indicator--fade19d6-87c3-45d1-ad0c-b3fa908afa2a", "indicator--57ccb1a0-5aac-44b3-ba8a-8ef7ef592e37", "indicator--345504e1-e07f-415d-bd28-7378c1810520", "indicator--c5e341c7-eb95-4c9f-a01c-0b5b9ab0d133", "indicator--26a8c232-241d-492c-ac81-a34a001212e8", "indicator--1ac5011a-d2d5-495f-9778-b36e675c83b6", "indicator--e6d7cd85-2a8b-453c-98e0-026d63f8e561", "indicator--7564e3e1-b876-478c-b9d1-bbeb703682ef", "indicator--bd13c0d0-be6c-4f35-aef2-d8cac08ebb5a", "indicator--1650c706-75bf-4846-aac1-edcafebcbc0f", "indicator--e1ce61f2-47c2-4d10-885f-034920a2de50", "indicator--f428d9ac-99e5-4dc4-a1cd-c77111606799", "indicator--fef72ec4-a833-4699-a7b5-19dcb1fcf487", "indicator--c6ed42ec-4335-4769-8725-af392b196ba4", "indicator--ab09738b-20ff-41af-a1eb-123ffbe808a6", "indicator--9fc958c5-d1f4-4f3d-9aeb-9811e01e841d", "indicator--237841a5-74d8-4fe8-9bda-5a895e91fa5b", "indicator--36f7d999-4171-451f-8b2a-806b1ad3375f", "indicator--f5348187-a173-455a-9665-d2564df4a29b", "indicator--ce375711-9aeb-405f-89d0-9e6af8029788", "indicator--ac7bae90-ab34-4b50-88c7-68bf410c23f3", "indicator--3a59e3d0-acac-4a80-957f-f8a0396d8732", "indicator--8fa796cb-6dfc-4299-a2dd-501b503f2ed2", "indicator--b9347f95-daa4-4259-8fd2-beb240ad9335", "indicator--03c1cb45-7802-4477-bc08-5d7b114c3008", "indicator--5cafc56f-d1a1-443d-a425-3415987b89eb", "indicator--4e8eeb5a-c78f-49d2-9c81-d17c64820869", "indicator--82e844c3-b3e4-4dae-a311-10e4ff977bf9", "indicator--577d2fd7-8553-490f-96c9-ffc5416895b3", "indicator--2e5acf00-446b-4276-8c89-a036e1e57460", "indicator--97588b88-a4aa-42fd-96e7-5dad404b0f37", "indicator--54a3ec34-6083-4594-89b5-a1d89abda067", "indicator--bcdccd7b-a2fe-47c3-aa48-d516435875ca", "indicator--113132fe-7040-4fa9-897e-68a626738ce8", "indicator--fd293e36-3078-4116-89c2-c654c49bce5e", "indicator--f2c6c1d9-e068-4d4e-a52c-9cddf17463ee", "indicator--298ff7e1-d96f-4bfa-98fa-87ed51fc8fb7", "indicator--33e892c9-49e7-4b49-8dc7-5465e1ae9ebc", "indicator--b2f308a3-3c8c-4262-8f3e-292ceb2536ac", "indicator--6b2338db-8dce-424d-8006-73210276680a", "indicator--6fc6cd89-8896-47b3-89fa-65423fb88054", "indicator--a91975db-af8e-41ac-beb6-f827a9027942", "indicator--731a982e-a6aa-46cb-9f0b-0f85b5d7488f", "indicator--0bc3105b-202d-47dd-a14b-01dd1632324d", "indicator--89211bf4-25dc-4825-b7ff-617bf315ab64", "indicator--8a382177-7fe0-4056-8353-8e71752840e0", "indicator--3fbd4de6-1ba0-48ee-95da-445b66cf432f", "indicator--8fb7ea08-552b-4f49-ae30-3e29c3161181", "indicator--32914dce-d9e3-42e9-a1c6-7b1554be86f6", "indicator--5f7398c4-04ed-4017-a681-a796deb6a192", "indicator--387273f0-138b-4f34-a050-91956b854ce3", "indicator--aa1063ab-2d97-4627-81b5-0ac67fed0c7b", "indicator--c0066b2e-0f6a-4d68-8679-22cca5e98d76", "indicator--2bd92041-e842-4503-ab98-7ad29034aff9", "indicator--c6996b23-01c3-407b-9609-827dcb9febe3", "indicator--bf74de46-713d-4177-b17b-936620a541a3", "indicator--c6846075-e182-4aaa-98a9-a320b45b1822", "indicator--e4fbd3ee-f8b2-41d2-b198-21f33cf5bb73", "indicator--e539a137-07fb-48fa-973a-9382f4a2c65a", "indicator--e3efd269-0c04-4696-a3a4-c21220df3173", "indicator--74715eeb-887b-4cd8-ab6a-903623c345d9", "indicator--c7a35e96-6ce0-4442-950b-8aa802da6617", "indicator--45fb69de-a6d1-46c9-bb22-1607dcd00891", "indicator--65833b6e-eaad-40ad-8262-70243a23cfdb", "indicator--1c8d6ed8-24b4-4d19-a56e-90c4385ee8b3", "indicator--c5b28a9c-93b8-4a75-bf23-e51c3cd0fd51", "indicator--34cebb32-7ec1-4ea3-bf31-449e812fc0d5", "indicator--b32f2ebc-bb71-471c-98a5-ba8066fb346f", "indicator--8cb2aa80-01d3-4cbd-b7af-4e14c7660fc5", "indicator--8fe5ecfc-ad84-4469-8c95-43fb067eaf63", "indicator--3a379acd-7522-4cd8-a5ab-15fa8cde5e99", "indicator--9c56da31-7042-4805-9d1f-64292749fd00", "indicator--3879637b-ea6b-491d-9ee7-8893a41aef2b", "indicator--6da45b95-f674-4b73-9520-a708e931d1cf", "indicator--84d95086-ee80-460b-8add-dcb2ef94cbcf", "indicator--54b586fe-4a5b-4e0c-9bcc-85134072ae83", "indicator--431c0e7d-732c-40a8-9a0c-51c75a346ba1", "indicator--d114b084-2661-454a-8196-e814f41daca0", "indicator--c0f572a5-ad5d-4e99-9821-4711610847b9", "indicator--be82854d-fba1-4ecf-97e4-c7956fca3d55", "indicator--bb13e97a-cc27-4f97-9f3f-fdc922aae498", "indicator--94e63a41-8bc2-4f5b-a666-ccb6662ec174", "indicator--6a122f8d-5a36-44ae-9de7-515746b8241c", "indicator--0796098a-0777-45b8-8a57-b4eab5e65e91", "indicator--7ea82b76-ec52-4ffe-ba8a-9e97f346ae3c", "indicator--862d2b74-f5a9-4323-922c-f2c11b3f863f", "indicator--796c61cc-0109-4aaf-a556-7daf2b9d68df", "indicator--80282cca-9ee9-47ee-9e4f-85f974daa847", "indicator--c2350529-5f84-43e9-b2e9-5fdbfc3922ca", "indicator--73340c6f-baae-4d85-8cbe-f88ee22ba18f", "indicator--c5cf41c3-d807-436e-bd9a-8db50a6a624d", "indicator--b9ac9fee-cf6f-4883-be08-4c6f2a585124", "indicator--e7422147-2964-4e4e-8ee4-a6aacb769869", "indicator--f9eef6cc-b37b-40e7-8666-ba96edc1b318", "indicator--f577ca5a-cefe-4dfb-a3f2-244ec27e5209", "indicator--06ade980-2df8-4fb2-ad77-9584acaa522d", "indicator--26170d9c-89a2-43a7-b05d-ee0fbad68bec", "indicator--b006546c-d4c4-4c18-bd3e-60d93eada953", "indicator--ad3c8edc-2ae7-41f6-a4d8-c6c5155c81ef", "indicator--bc94ee98-2190-4891-98ff-af41edcbebba", "indicator--d863e894-3023-4cb6-b0e1-3751188c0eb1", "indicator--03e5b6fe-438a-4afe-8637-181272ae7ac8", "indicator--b1229759-9acd-4509-9ef0-54fba644d081", "indicator--c53ba8ec-5c48-4d70-8abe-be87b1dcfe3f", "indicator--80f7ae09-dd20-4add-98c8-47fac17b5da5", "indicator--c335cb19-1c20-491e-a971-fb489156fdd0", "indicator--bb235426-128b-43b0-9a1f-e6725f6e3e56", "indicator--0888ec59-5c54-44d8-8ebb-3f24d62bbbd3", "indicator--052253cf-1860-4292-81c5-eb40705cbab9", "indicator--eb991ee7-d7e5-4be4-b902-a6c33c60759e", "indicator--d9fbe630-4be5-4cbc-beb8-a7449eee6da6", "indicator--f968daca-5383-4849-b08d-a76e9e9d91e1", "indicator--db94e98c-b770-4aa8-8050-e027993e235d", "indicator--d93c0ba5-6841-4c25-b441-e864110d0290", "indicator--45274724-8c1d-4e46-aef0-ebd479736b89", "indicator--34c6fa47-8252-464b-90d1-6595ae74fe38", "indicator--70059ee1-a120-491c-91a7-ad2368d16642", "indicator--b361f4f4-cbd3-4140-a831-58b38fc16153", "indicator--1f961788-4cc4-43ac-af84-a3b2f44d923d", "indicator--67ce7a92-e549-4630-a503-a121b645be5f", "indicator--919537a7-11f3-4624-8b0b-0946cd70d2d2", "indicator--cc08494a-1891-427d-b0e8-21a9ba89ce65", "indicator--5667c4ad-7390-42c4-8de6-f92a94d7cb3c", "indicator--d95b5aa6-669f-48b1-9bd2-49fd3d82abf5", "indicator--d1b21d60-7b05-47e7-aca3-a0fcdfe98abd", "indicator--06df9476-6a19-496e-8947-00f41625d661", "indicator--817f6652-694a-4d9c-8c09-d7520c083022", "indicator--b202a7a0-9008-43b3-a03a-30a158b35d32", "indicator--b3e806fa-231d-4060-a68f-f75448a51b04", "indicator--e2c48b3a-1dc4-46ed-b4a9-37a88d9a570e", "indicator--9691a2a3-1499-47f3-8212-00e5c75fbd27", "indicator--33892deb-5f6d-474e-924e-ac7c24d9d839", "indicator--0f7266a7-4543-4d40-8fce-6e220b16e671", "indicator--32ccd85e-cd1d-4d77-be22-0455df145a2d", "indicator--c2fd5d03-af77-4297-ad14-6697397c4315", "indicator--87c9d8a8-c2fc-4be1-9572-a350ba9fa56a", "indicator--c25c266d-08e7-446b-9eb5-314a53a0cd7b", "indicator--9e65381e-c0fb-4310-afa4-aa20e68eea2c", "indicator--a187b02d-69be-43b2-8867-f041231782c8", "indicator--843e3144-94e8-4ff0-9097-1f53823e0e55", "indicator--b93a8e0c-9b52-4662-8621-4be3b76c9b1c", "indicator--99ddc350-4389-4973-ae20-e820214bbec7", "indicator--453755b3-4df9-4026-a11a-640933363e2c", "indicator--da149e2a-382e-4a45-9a52-edfea5568062", "indicator--01a9b2ec-6f5c-42de-ade6-d0bba72f4923", "indicator--f859f700-3b60-4365-b500-76eb7c1e5298", "indicator--c8edba61-1111-4327-8cce-4a68c87be867", "indicator--01a4027b-b82c-43eb-8882-7e7fd3278f93", "indicator--ef525ef6-2d8c-4756-860a-2fec5f3e7966", "indicator--1ddc9aa6-5cee-4996-a7b3-6bd7a0b61020", "indicator--eb3986df-f2a5-4ad1-8ac2-721a0b16706a", "indicator--048016da-ceba-4f39-af28-37909605481e", "indicator--e4757ce4-a2fe-4a9a-8820-fde74a8cb4df", "indicator--997598e1-c6c5-44b8-9f68-4abcbb4b371c", "indicator--e7b9ceb1-3b36-446b-9de7-6fa2249585a2", "indicator--76bcd50b-3fe7-45fa-ae90-7155117bd10b", "indicator--1eed6074-eb27-4032-8656-1ca61f726f01", "indicator--f2a55272-7b02-42a5-945b-da377e616e6e", "indicator--6f3f13f9-2aa5-4498-8e97-18cad9d60c55", "indicator--54ae6289-9246-4f75-8ab4-286fd373e452", "indicator--1532bb33-4f48-4a1e-b7ba-0fbf6649991b", "indicator--82fe35d8-880d-4cd8-8605-f34e3164c804", "indicator--7b04fdaf-a571-445d-baf9-2a97a3162479", "indicator--86be0efa-d9f1-4d80-a81d-d0ede937ae11", "indicator--2b6c1463-8c98-4730-8730-9e84171e98ea", "indicator--8483edd9-e3c9-4890-829a-9922dd1fedd1", "indicator--2cc2dce3-fd6a-4765-b253-7b11d29c9a46", "indicator--5fa68f8b-f874-4dbe-b285-d52322c1ce72", "indicator--7869dff8-6d32-4df7-a8ec-81d932f71b4f", "indicator--6c53e457-b48c-4d62-a7ae-d81e464f5f67", "indicator--5271a0b7-a3b2-4fd9-8a11-40bf0fd8e3dc", "indicator--3377bb84-834f-4515-9895-9ec6ee80f4bf", "indicator--009445e9-e64e-49ba-a221-aba8d5dace38", "indicator--bbc4d9d0-10f8-4503-a340-b0a6cfe2866b", "indicator--f5acc012-f24c-4811-9396-c3b5d530ea92", "indicator--2a8bfcc1-5fde-4344-a4fc-cc23d5e3a178", "indicator--4185a516-8cc8-41f2-b300-8a46d66fcd97", "indicator--4fbdf001-0a79-4225-b772-fb26a25ca788", "indicator--96eb5899-2118-4aa7-bdd1-a7ba74ca5d88", "indicator--029abbec-daeb-47a0-b0c1-9f63e5a5cc67", "indicator--881188d1-6fe2-4fa2-8190-a9786d8dc1ee", "indicator--d2d757fe-f813-4702-9268-59e922e4f474", "indicator--98cc443b-244d-4b8d-a138-0991b0974bcf", "indicator--13a72018-161c-4e94-b94b-b1df2f206f7c", "indicator--3d432bcf-3c76-411e-8369-c2026a21f186", "indicator--e238753c-4296-4206-84e4-b3a3431284dd", "indicator--34026334-0119-461f-9009-e2d0a051fd5a", "indicator--ce826ed7-1f1e-492b-bedb-351e44c7b314", "indicator--b66031cd-b110-4c2d-8181-e766294aa055", "indicator--534fbec3-55c6-4227-88c6-090fc8f1bcf9", "indicator--904a9cbc-7808-43c1-b827-9344a3ed33f2", "indicator--79211997-bc45-489e-8e65-cecc2fee4901", "indicator--d1d3854b-3691-41d7-83a0-5930290f5b09", "indicator--63f607f3-4502-447a-a02b-fde78976c330", "indicator--78365211-85a0-4aac-a0cb-88aa72f45479", "indicator--7bfbb61e-8ee2-4648-afd3-864648918596", "indicator--90fbfa23-0c50-45cd-b80e-4c29cee5eb5f", "indicator--57cfb185-0bea-4f7b-9344-d45f473672d4", "indicator--5fd3dc90-4959-4e1d-9c87-d3fed505b036", "indicator--ef8496ab-fc0e-4414-86f8-b644d1683848", "indicator--ab7010f1-3921-474b-ba62-8d459d5928fc", "indicator--f59253f1-8450-4a6f-96e5-c9f3127558ca", "indicator--214e4054-1d55-4035-ab62-4a69b5ef0e58", "indicator--47749d94-5849-4f37-830d-7b59fb616207", "indicator--f2da7e2e-f0b2-44d5-8abe-3019b5f7a4a7", "indicator--185ed551-a52e-42d9-916e-a5a3b4906490", "indicator--21a6c8de-5a96-4018-9aa5-cab6146b7ff2", "indicator--c7c4c135-31e0-4d44-9479-3089bce5b7e5", "indicator--51e3bd32-da71-418a-b8e8-1c5be6c9f1f0", "indicator--247ab4e9-7980-4b8a-a25e-7d2d97b9ae87", "indicator--8fdd1b8f-2b45-4061-b078-a7c5ec0bd900", "indicator--b6743cc9-96ea-4a02-8646-a39b3ff6fb0d", "indicator--eed6146d-cb15-4a43-a962-785faca55e05", "indicator--abce5a4d-e663-4b97-a4bb-08deab62bb94", "indicator--3eadf0a0-0b27-4912-bff0-66651e9e6550", "indicator--3150c43f-3953-4ed9-81e8-9130cd681461", "indicator--f94a19fe-bc22-4681-a77b-ff72c1237004", "indicator--4ce36354-0644-47cc-88d4-fb79ab49bd42", "indicator--be2c0f5e-78e2-46f9-8b8f-5b163000ef4f", "indicator--f91edd59-ea93-4009-bb9e-f9a080aa0e6f", "indicator--db113301-b9e6-4364-8177-a3f27fb0ea15", "indicator--d0359155-eed9-4aaf-ba84-1edb37ab0ff3", "indicator--5ccf669f-670b-4dc3-acbf-02326cef5d42", "indicator--f6a8a7b6-6ab8-4316-a6cd-7ce249e4a85b", "indicator--2a649de8-3db6-4224-948f-6c457830222b", "indicator--f50ee09d-9062-435d-a41c-063f049d8653", "indicator--eb4acdaa-7ee9-4298-9afc-11b0df54938f", "indicator--63c7653d-d8fa-48ab-931a-f2c32b053e8f", "indicator--a4a5315c-3287-4047-b81b-857013d1eb3c", "indicator--216da3df-0ba0-4adc-b0c7-18f49e63746c", "indicator--bcc791f6-d0f2-45a3-b078-287b3e05a17c", "indicator--25b4eeb6-0051-4158-b7b1-6e80c557a0ba", "indicator--5bb690aa-033f-4f63-979f-860b79c42741", "indicator--9ac31e1a-c0e1-4996-9da7-12b721d90d27", "indicator--d79f3d1b-6d57-4be2-b7f1-8c95fbb2fd57", "indicator--2499cbac-7c83-4259-92c6-96eacbffeaf6", "indicator--16fc9459-bfa8-449f-9606-ed157907b05e", "indicator--2fbf220f-9b49-4ff6-9df1-5f81c74598bf", "indicator--5418467d-0b30-4b1e-a008-5873da2d9066", "indicator--2b716a3d-b68e-4e4d-8024-c4a81cfd5533", "indicator--3327c05f-d970-49d5-94a5-cd65b62f3004", "indicator--205e183a-bd7a-419e-ae94-bcd56605b24e", "indicator--57ba4b50-57dd-4a41-a722-5ff131c47bc4", "indicator--8f6fcc1f-8657-4ea1-9bb7-9ce1df548912", "indicator--5e20847c-6ecc-489a-8e76-8d05b184ae32", "indicator--91e4ae6e-3a78-4dda-8883-ee25b6b6d234", "indicator--218e8569-0c9f-4a68-b1fd-3e9bdcdc1c1d", "indicator--ddf41847-ada8-4a2a-9b74-38c61c9c9d14", "indicator--8b3fdd40-3c2a-42aa-bd97-f3f171118d27", "indicator--6ed5f5f2-37fa-4e4e-983f-aa29d1c2738f", "indicator--9858b187-1266-4e39-9b7c-d6d0680c0ed5", "indicator--51a4de4e-e201-4f20-a067-74f4c4362d54", "indicator--92901bf8-0032-480b-b2f9-a7ae88e9f9e8", "indicator--f3de72fa-9cdd-453e-a6f7-4faacef40096", "indicator--10baabb2-e59d-4aba-821a-dbca21eb736e", "indicator--8918565e-f040-4ec4-a084-9073814afa06", "indicator--b62bfb0a-a80e-4341-8c08-81d2988a871e", "indicator--c7fca3b9-55b0-484c-9db0-8191efdf5e8e", "indicator--c29f9527-895b-4774-a556-abc0e44aedf3", "indicator--6d3f73cd-63cd-443e-ab75-3d3bdd41c772", "indicator--e0c20e36-5f01-42ee-80e5-0e681c200aaf", "indicator--0d045792-0a88-45e2-b0cd-4b286e4a0364", "indicator--5652e1d4-e176-4554-9e2a-bbf8a87459f1", "indicator--d8697efe-4404-4272-abd6-33550609e7b2", "indicator--41e0208f-0230-41f9-8758-afbd786f3238", "indicator--2f810c29-6101-4f28-9091-d826220e8691", "indicator--09389046-048d-45b8-a25e-94e8ce6654bb", "indicator--a6c10ed7-243a-4d69-9244-c290e9368cea", "indicator--58795b5d-2477-47b1-ad93-e7262282ce35", "indicator--90e051f3-c855-4a2e-a797-47c3465ce9b2", "indicator--e672635b-35dd-4c55-81c9-053003f2ae1f", "indicator--f2b8e222-1c3e-45c3-9603-97a92d44cbf5", "indicator--b1c2a23a-3644-4853-82c5-f707822b3862", "indicator--cb7e5eaa-735a-4420-bd76-fb394ba13296", "indicator--f7fed6f7-c23c-4df1-b4d3-b007fe0d8d3e", "indicator--08511199-3f05-4954-bb93-56c605c175fe", "indicator--de74543a-0fce-42c7-beff-b0aeb5ecf49a", "indicator--14aa4d68-88e8-4002-afb2-b9f68c5bcf52", "indicator--09c0072a-4255-4110-8c2c-ffac7473f1cf", "indicator--20b4a414-3cfb-4845-9146-11b5c7b46867", "indicator--d61ba6fc-d81b-4396-bfb5-385adc626778", "indicator--9ebaa318-8a65-4c62-9b9a-a7180849b026", "indicator--bd37cbfe-2806-4dec-b826-14709fb20046", "indicator--8be2c286-91d6-4542-b83c-4383a73367c9", "indicator--9a3daa2a-a0b2-4c62-b815-ed47decd1c1d", "indicator--b378809b-5b9b-4ee2-90fe-2adfd4ce3984", "indicator--cd1db398-2742-4ed3-becb-3a62d8328e25", "indicator--88e1c66b-4331-4c98-a9bb-7537f945feff", "indicator--5f8eb676-1b56-4c6e-a35c-3e614364866b", "indicator--eb04121c-54f0-491d-9e78-5f102e2b2e95", "indicator--6fa37cc2-0f7a-4a95-9f62-99ed1a3f9f6f", "indicator--f9686622-a9a0-4357-8317-f65a8c02e9aa", "indicator--7a7ffe8a-7eb5-4f74-9310-e62a3e6d43ce", "indicator--8290b189-3181-4601-9b32-cf8b0279ef4a", "indicator--c03a9036-99ec-4ae9-baf5-7cf5adb55c3b", "indicator--00757e4b-088e-440e-bb77-ceefdc127e9e", "indicator--1ad98f66-1746-4f71-b670-e50d63b42f92", "indicator--96b5014f-4bf8-4ce7-81cf-2b91bb06a603", "indicator--c7d4daf6-88b7-48e5-9f58-83c154a863b7", "indicator--8841ba2d-1dbe-4deb-8e99-e05ca4b80be4", "indicator--3f98cfd6-7f94-40b4-b5fc-594c848144f2", "indicator--ef57ffc4-8b7c-46e5-a732-4535088e1ba8", "indicator--bfda24bb-ef50-4801-962b-d523898d219a", "indicator--bf711fec-9536-4710-9a71-1ba000b4fdb6", "indicator--b93ca9a0-b07c-4c65-baae-935632bb74fc", "indicator--40366a08-d0e7-41f9-9097-e90b51c9f2c7", "indicator--58962eb7-3310-4262-b672-dce3f247b364", "indicator--81b80b4c-bfcd-4c1d-afa2-fd1002305adb", "indicator--48b5747c-dd9d-443f-9e54-8f28185560a5", "indicator--22171dc2-4853-4ce1-bdbf-963532a106b4", "indicator--ab21d30d-a4fd-44a8-aed3-67fc2d3a90cb", "indicator--f1336731-6a35-4e49-8cd7-666474430e7e", "indicator--f76367e9-4295-444a-9175-eb8e8c6d4d18", "indicator--95f28b29-4dd6-4981-9dd6-6e738f349504", "indicator--f05f5a52-36c0-42dd-9ab1-7c467e8de526", "indicator--eae09654-6698-4390-b43c-57252c25633e", "indicator--b30bd0ae-0a70-4935-bf69-437f5d4df27f", "indicator--27436b80-f6ba-47fd-a62f-63215c63cd6e", "indicator--a4e2eb1b-d235-45c2-aad8-e1533f556526", "indicator--79742495-ec98-4bdf-bc1e-dc9ef572622c", "indicator--ec37544c-f3a8-409f-af2d-5ed6e60bfdb6", "indicator--2f4e0828-1224-45af-81f5-87ac9f7e1c4c", "indicator--58952573-3f43-4770-9b47-73cdfa1a75cb", "indicator--d0003370-be75-4420-a603-e83d749e75a0", "indicator--4feeb980-33bc-4f43-869b-69fe5fd04ee9", "indicator--974f8935-a457-4758-b17c-ad71f07842d9", "indicator--07a7aeec-7500-466d-bf8e-8d0079973922", "indicator--45d1ffb3-beb7-4d0b-a137-12ca281ce0e6", "indicator--b160e011-c004-4811-94b5-fba53ace5e18", "indicator--42370360-429b-440f-bcf9-e5387dcc76b7", "indicator--21fa79ec-63bd-4950-81d7-b2ad7117294c", "indicator--ab820854-ff6d-4757-80e5-da38387345e5", "indicator--f3d772d2-c1c0-40fc-841e-822375916458", "indicator--bced9122-0146-43c3-ac53-20d3d8fff470", "indicator--9d3a0d58-d558-411e-b03e-418cfa212908", "indicator--9db95090-d6f3-4e2e-8b2c-40ba2b6b57a9", "indicator--813724cf-63b5-4ceb-88bd-8c873d9fd5ab", "indicator--8f2e43df-e3a5-43f4-b4a0-203c11d6e346", "indicator--69a4f9dd-3917-4565-84fa-f01d921b4812", "indicator--3f9592e0-d902-4994-82b9-0f750fbc8d59", "indicator--6e90f0a2-fe01-4e88-bb42-8c565b25a666", "indicator--bc51ae8b-62f7-4956-afbf-0c1b667b7eff", "indicator--d1926eb2-24b6-4da0-b613-e44d9d1616f4", "indicator--af772dd1-7ad8-408a-b502-0491de18f805", "indicator--6d281731-46d2-4cb4-a950-0832494ee73f", "indicator--ca9ba88d-0886-4e33-b7ab-58d74f47ce9e", "indicator--8fd44eac-b9b1-47e8-8adb-b15f14b64e81", "indicator--96f46dbd-7b83-4ba8-9671-d3dfc082b692", "indicator--f57b5373-c594-4b29-823b-2b81ab838c32", "indicator--998d1edd-4d37-4b0b-8f66-6b3f152990a0", "indicator--487cc18e-04ed-45a2-a168-ea2ada605a15", "indicator--9c1bc253-4dfb-4023-a81d-bc44b1147260", "indicator--90fb8a7a-ea04-4309-a284-fa4ab6def472", "indicator--a8905737-ecb1-4bcc-95c6-33ea3e1dc97d", "indicator--81bae1b4-5376-4bb5-a30f-56438a218e85", "indicator--1b1a0f9f-dbc5-4a1f-be19-75465d7a6d0b", "indicator--6ef6018e-100d-4ee4-b481-f10b16731476", "indicator--3b129530-4f49-449f-a421-b806ffdad14b", "indicator--62842ef6-155b-4327-b07c-6f5866b1302e", "indicator--99ad6006-59da-47b9-80fa-7040ee964bed", "indicator--72c7654a-3d11-4cad-8f9c-792d9cbf081f", "indicator--c65f3bcf-4b8e-422d-9171-dc8b4c8fa210", "indicator--a8119f0e-e383-4576-a645-359e94d38778", "indicator--4800dcf5-5ddd-43fc-8558-bf4b41d679a3", "indicator--c44263d5-9091-4e26-92b0-2ab1de155128", "indicator--d1b28e18-9307-4f8c-8921-ff57aa91db44", "indicator--32d20160-be0b-4b7e-a122-4350c938af38", "indicator--1814d64e-dd3e-441a-90c7-5bcdee0a0fb2", "indicator--a62ec720-c44f-450d-9b5d-230694e92cbe", "indicator--5c8c9ebe-89bb-4f85-b98e-c28d59abad46", "indicator--e5551823-d9f6-4f45-88a5-e134fca37647", "indicator--033bdc80-5e43-4a56-a3b4-7ba01bccb93c", "indicator--a38c2e4a-7194-4f44-82d5-9d2abbc2dc3b", "indicator--2b75e7a5-65f0-49f0-a8ee-ea13bb268888", "indicator--3a197d3d-0283-4867-89fa-e4c0d5b1dedf", "indicator--a03309b2-c08f-4503-8994-17829067104b", "indicator--e851610c-4eaa-4355-a80b-2b5035fa7d39", "indicator--426f8acb-81fa-4791-9358-b797bccb8353", "indicator--a6cac02b-fb93-4697-b6f7-75722c00d86b", "indicator--c9ece2ac-42de-4260-b972-26c39fefdc26", "indicator--06e1fe8e-4d53-471f-87bf-08962a8ccf3b", "indicator--4b6a876a-b3b7-42f1-bef8-17fd1d5398e5", "indicator--9b28fced-d86d-4b4a-ba55-ae103b6dc769", "indicator--27a2d464-4381-4f94-a0b5-fc087f768f70", "indicator--e19d4505-2138-4df9-9ab0-9866135fa015", "indicator--e4498c85-6067-400c-8efc-98ace8617f21", "indicator--99726431-f1f6-4fb8-8cf5-e08c34e2c076", "indicator--810f6082-5cd6-49a6-aab2-c4f3a5dc6feb", "indicator--9a2a8250-eb18-40c0-a7cb-5b59c48d93d1", "indicator--0653bfe2-8323-45dc-90c6-1e7e8ba06cee", "indicator--5ccdd369-ff17-4a8c-8898-3ee770007f16", "indicator--312bb313-37cb-4d80-96eb-e0768f612ffe", "indicator--67377bbb-2254-4ead-b1d8-b3e6e7e0d5cb", "indicator--752ecb5a-4d4b-45ac-9725-6492ae7833d7", "indicator--3237e927-8280-43ed-8b29-2cb1022eb103", "indicator--d716cdb8-c044-4296-bf38-17594340b0de", "indicator--7102103f-da76-4049-958a-e216a36e62ac", "indicator--bf35025b-3299-40d1-a1da-f21b376cf16f", "indicator--356c452e-8dd3-4fc5-9d97-efc826829382", "indicator--252a6657-0f4a-4230-b15a-5fc1bea56c43", "indicator--c2799ca5-1be3-45db-9d54-493709c8a9c4", "indicator--87f467ea-2592-4d09-a6ca-c18da06690f1", "indicator--5acee835-b611-4994-88e1-ca7fd213d845", "indicator--d302dba5-685e-48f1-9b5c-42a72dc7861b", "indicator--4674bfeb-78b7-43b2-b63c-b7f4f6aa9c05", "indicator--4cfb25e6-cfde-4094-861e-bdc69411c6b8", "indicator--6d315457-488f-48e5-a939-e624d836cd06", "indicator--e8e54751-5110-49d8-8642-ed773f7b2ded", "indicator--94f6bd59-e724-4afc-b2f1-cacbc7d4cee1", "indicator--3f56ab8f-77e4-4e76-a5ac-0218ee2aa840", "indicator--dee06fa7-99f7-4050-9b25-6e4303f4e45c", "indicator--2335a278-921c-4f89-9a10-4729790c3178", "indicator--90b4e347-d7c5-400a-ab99-93fbd43150f2", "indicator--741d50b6-99d9-49d4-8dc9-b393ef64f916", "indicator--31210393-54ca-47e3-9089-8b045bf0955d", "indicator--b1093931-e852-45f8-94b3-b37a4ea536f7", "indicator--e049d1f3-c197-42b6-930b-75ed9d4bd666", "indicator--8307af30-6490-4a7d-946a-6e49460de545", "indicator--2f358a9e-7d81-4d2a-b004-f0038426c9d0", "indicator--90933be3-a4f4-4e7c-af40-d15bc0a9095a", "indicator--35cdc9de-213c-4bee-9dd0-2d9a05c92486", "indicator--5dce2d0a-53b4-44c5-a570-158705823dc2", "indicator--9a1a316a-8c50-4020-ae38-0b8375d542e8", "indicator--3623652d-8b1d-4e53-8c3c-1c02bf3c3bcb", "indicator--88f01a60-be20-4f92-806a-6b8c6abfb899", "indicator--c26bb370-a808-423d-abe2-c5a3f13ffaa8", "indicator--02a8558f-48cf-42ac-830e-1ba3f814b71b", "indicator--7ad7e5ab-f05a-4e2d-b2a2-eaf9dd8e39bd", "indicator--3e74719c-0270-4300-a364-f3cab85ff2c7", "indicator--380c2d1e-79db-4698-9b1f-d22bd2205831", "indicator--36e9dce9-7a3e-4130-b7d1-87a2c7a59149", "indicator--a51e64ac-3af8-4518-8beb-b0678e547c26", "indicator--c55d37ed-b137-49f7-bed5-f769d18f6532", "indicator--d988d00c-4ef7-4d02-820e-e7d16e12fec7", "indicator--69a28d1b-25b0-4dbc-8a1a-03b7703bbc6d", "indicator--b40c99c6-f295-44e5-9786-ff771e3569d9", "indicator--1c077e0c-ba66-499d-baf9-a97489ad4366", "indicator--2fe3be5d-4040-4b02-b461-9ad22a18ae62", "indicator--1539d6a0-4921-4235-bfaa-bd9d790ae4d3", "indicator--40cc24ce-c339-4457-9f71-62e4bca2ddc6", "indicator--123e6e02-2d84-4553-a80f-d6f98a0eee50", "indicator--f0ef0753-7ade-4fd5-8d6b-a889f6099003", "indicator--6c7ca858-a3ff-401c-b7df-4a0ed3e9cf34", "indicator--fca773ed-26fe-4dc6-b81f-771eedf04c02", "indicator--d708b170-16cb-47c6-a77f-9324011b930f", "indicator--c4c892ea-3949-4209-b1ca-6602139c2b64", "indicator--14888f7a-6eca-4c3b-ad33-955a61b302c8", "indicator--b97509aa-0883-406a-8fc0-a702991d3ff7", "indicator--3a062080-fa63-43b7-bf96-1fb09d0cbe91", "indicator--18e6e719-1d14-4d6d-8d6a-eac0754b521a", "indicator--7c882110-cc94-46b3-909b-9ec44ce396f8", "indicator--90e2b9e1-9232-40cf-9ce6-47ddbacf57a0", "indicator--378e79e6-eba9-4e9c-83e8-d6bf3e02fdbc", "indicator--f091de14-c323-4e99-ad78-7e69b9fe3355", "indicator--2a962cbd-0f39-4e19-9499-3b53ae33b997", "indicator--30abaa30-e1e4-486c-b25a-be415d7ecb80", "indicator--7fd93151-382a-41bd-bdaf-66a4b3f4dcaa", "indicator--f2ec6dd6-c466-4e3d-a4a0-6ad7a2c63f72", "indicator--54c4bb94-514e-4ac3-85c9-98b2c1f95055", "indicator--8e78a2fe-d2d8-412d-8c1a-f1f82664eb42", "indicator--ab808f5f-adf0-400a-9a84-0c28dd0d88f4", "indicator--6499a70f-9e32-4098-8a74-131966bcd4ad", "indicator--4dc9e9d4-15ef-4e66-8167-5fad608fbc42", "indicator--3a77d65a-30fa-467a-af5d-b0df9959e9a1", "indicator--c8bba1f6-5af7-4d87-9027-e75700873c5d", "indicator--bd3901ed-1bc4-4eb9-b17a-65f5d5076e6f", "indicator--278e2b3a-e2a0-4d77-94ab-49dabfa053bf", "indicator--51d7da02-279f-4f14-a25f-7aa54143b4ba", "indicator--551b0894-3bbe-4a13-8294-b9193e91d07f", "indicator--b7b67128-103b-4b4a-9dca-047bd1c6173a", "indicator--5a9d04a6-1a77-4117-9d0f-c716cb1942c0", "indicator--e90c2ac1-0328-486e-acae-e2a36292fc20", "indicator--7b8179b2-621a-4d60-bd7d-291e7817631d", "indicator--32ea276f-024d-46a9-89c8-12a0bf65c256", "indicator--00038b53-120b-47e5-98e5-69ddd1f06c32", "indicator--161ac8f2-92c4-4214-b435-347a98227038", "indicator--f8734c96-9556-416f-9ccd-ff89c78bafe6", "indicator--0b21d6eb-37d0-4d5b-8775-14a8bee0cc20", "indicator--92a0d05f-b4b9-454d-803b-2cc86bb1e611", "indicator--5aadec0a-17a9-49d3-858a-168bf8ffba01", "indicator--1807d0ed-5b4f-4bbb-95f7-b6e07fc57373", "indicator--2cbcd8bb-f0a2-447d-8409-3c793ba6f1f8", "indicator--9a0ae27b-6cc9-45d8-8f5f-fcacf2979466", "indicator--da3cc3e8-5262-469c-ad06-73ae1068c33b", "indicator--3f11e6f4-fd0f-42db-9d58-030d84ac98bb", "indicator--0d6104bb-969d-47a2-a4a5-f48ec6bf7a0d", "indicator--46f22341-cfd7-4beb-91bc-26cdc1ddc4c6", "indicator--c47dab48-95d5-4210-9809-895212d7bfb8", "indicator--57363de3-09df-4343-bd68-e88ad7dfd9d8", "indicator--bc83ab3b-2449-4ab6-8012-b3af94542d60", "indicator--c7c4893c-09c0-4fea-994f-8b0dbeecab55", "indicator--e368d383-c3ee-4626-810b-8f7a70ec0cc9", "indicator--0a1f474d-ae51-4f21-9c5f-3c4fb1b225da", "indicator--cfcc0e92-14e0-48ac-b6d5-9e261e020041", "indicator--d2dcacd7-647c-4218-b16a-b5dcf5d4c0a0", "indicator--dbd555a2-6f23-4c9c-a2e8-dbd4d4bc9b42", "indicator--480e12f6-5585-443b-bdfd-dc4cba61bdf0", "indicator--51248f39-74d1-44b6-84dc-8a5f1657d788", "indicator--35847cd6-e404-4ece-b30a-0f9db4cd34b6", "indicator--fc4f00cf-6a4c-4c3f-8bb1-6afe03702f97", "indicator--ffe742f8-1e0d-41bc-a6a5-b21a7cf78dc7", "indicator--eda9b813-ef81-4d17-ad3f-a963161c6a02", "indicator--fb3c9328-b6b1-42f5-ae1d-6bb544250f70", "indicator--7f349d03-fb55-4bcd-bd8d-2f1dc32dbc91", "indicator--04ba69bc-6258-4897-aaf8-21a7baca8990", "indicator--ec978c7e-4812-413d-8129-d4faa6631e60", "indicator--205dc5a1-2969-4049-bb6c-30a11510c42b", "indicator--38dffb09-af74-478d-b495-f8bac5d898ef", "indicator--ffdd44f3-d872-4daf-924c-56698eea8bc4", "indicator--78d83b66-47da-4e03-8b60-6099448fabf6", "indicator--98fea34c-069a-48ca-a14c-4ff68a31d0e5", "indicator--6b2d9c69-e672-4565-b34c-075490498552", "indicator--ed83df13-c935-4611-9ae9-07540206d042", "indicator--c12264df-66da-4322-b1ad-dafcba6b0e11", "indicator--42a24372-1d83-4bdf-97c3-78ff20466c3b", "indicator--ece9e281-d9bd-43b4-ace5-2808739915dc", "indicator--be2439a9-8168-4e45-b544-8cb717e98731", "indicator--6844cf43-1dcf-47ba-8411-e1403db58324", "indicator--743d5acf-5890-48b9-a987-0edd17673762", "indicator--86bfc79d-cf1b-4c62-84fa-bdcd07ceb66c", "indicator--142de295-7d8a-41b0-a09c-f8adc5d8050d", "indicator--615b8fd0-8eb1-43b4-8a6c-3eadf87a81aa", "indicator--be46d2c0-8b1b-4b94-a9f4-c511986ba86b", "indicator--d38b1278-048e-4f08-a27e-f5a4f846fe07", "indicator--cbbdaccc-57a2-4420-a645-f003d7e1e6f1", "indicator--0144a214-626e-4982-91c1-c30c6941df52", "indicator--91b2c456-9b05-4eec-b97b-9f610db998c1", "indicator--a25635f5-524a-483d-8349-3752554a9846", "indicator--1b99e9a2-303f-4d19-930c-dd9f305af745", "indicator--992769b2-f6f3-4d10-a10c-2e893eb2e8e9", "indicator--81399617-4a64-4264-85e9-634544b28c70", "indicator--beabce3a-a595-4d49-a156-cc884209cef9", "indicator--2677032b-9795-4f13-950a-d6b1c8160404", "indicator--797ff874-69c3-4a53-85ef-f61fe8338bd5", "indicator--c885bfd3-1f6b-4763-8906-a4ac0d953c2e", "indicator--ccbb3f40-238e-432f-b02a-8a5fa2c30459", "indicator--378ff7ca-18a9-4f7f-8ed4-580d2db517a1", "indicator--1c666a33-38ca-4bd1-a472-90e953976e58", "indicator--891eca0f-d77f-498d-b98c-199d957559fc", "indicator--de8e17b8-c332-45fd-8452-a78fdd9efe32", "indicator--08c18c7b-1511-44d6-baac-4cf0cac0402d", "indicator--68e8a1b8-8330-4cc0-b2f2-429690427b69", "indicator--41be2d29-7ee3-4828-81a1-d3945bd6ebda", "indicator--15168cbd-d203-44f9-b040-8ea9764a03bd", "indicator--4ad7c034-741b-4a15-a778-cc77ac6309a7", "indicator--71eafe3a-4ab4-4f2c-b60f-3a12680d4788", "indicator--b9572367-fc18-4e47-8a2a-82ca0b856283", "indicator--35873f61-868f-4d65-a72d-787c86f8f78a", "indicator--6b4b3354-6437-47f3-98c0-b1295038f986", "indicator--da7f768b-501b-4aff-ba44-837307bf1f6b", "indicator--0fd41caf-153c-49bc-8c3e-be774a5e48fe", "indicator--b477a5ee-6b97-4942-a4b2-c6d894b86393", "indicator--285a6c99-faac-4078-b8ab-d4e05ce6e374", "indicator--f6bef58d-ae2b-4883-8ee7-9e136db142df", "indicator--d103d06f-6c93-4b32-a467-ab556d437350", "indicator--8ce6f319-5d76-498f-ba0f-6ddf7d0b9103", "indicator--e61b89aa-dbdd-4803-92f8-f0038e728069", "indicator--77ae9043-8d80-447f-9927-05cbc083b536", "indicator--9a5ffa26-c085-4016-baa8-e6c729abaefb", "indicator--e281c8ae-cef2-4070-bb16-fcfd5862cd20", "indicator--1b1951ab-0df5-4ec8-87a1-f5687ac4f029", "indicator--b4d11725-2fd3-43cd-8654-aea63d8c34b7", "indicator--1e310a37-d94a-442a-83c9-b90996e3197e", "indicator--a7b1666d-a924-4447-a258-60160977a8bf", "indicator--6bc40036-7459-43cd-a2f9-b226be33da5b", "indicator--0679dd4b-ae51-4b12-b8db-6954905f8176", "indicator--d1b0597c-93ae-45fc-aec0-a8371c79c69d", "indicator--ef1fafc0-edda-4693-b46e-18051f955e99", "indicator--909d9e5a-2488-41a6-90ac-f9bdfb98897e", "indicator--95f98dec-1876-4800-9aa8-0a38d1723e8d", "indicator--a6d2b03b-25af-41bc-8fc7-137fcede611e", "indicator--fa5aa320-f22e-4414-8518-f7616c7428b8", "indicator--e5b3e9c2-cf4d-41c3-8d66-6b761f40a2a4", "indicator--1f44dfff-8764-40a3-8405-c46be35d410a", "indicator--440e1767-94d4-4621-b94f-0446e5b216b9", "indicator--dc05eb9c-1e26-41e7-8557-5801b769efc8", "indicator--9e48190b-473f-49b8-a8d8-a0010a693f7a", "indicator--7baaef07-2c45-40e7-85c6-0a0d7769c1e6", "indicator--4993de94-5e89-44ef-8e61-75c7df6732df", "indicator--559f9dcd-c8bc-4a60-aed8-21feb27123c5", "indicator--7930b4f8-5fe5-4c3a-a5f2-72267ff14235", "indicator--cb16ca7d-1c21-43a9-a6ce-c0140026ab62", "indicator--31389661-1840-41b8-badd-4288e756d210", "indicator--005fdaad-b788-4c88-9e54-658e03d8ae6c", "indicator--883e3714-7e29-44e3-9a4d-3e8248ad5927", "indicator--69e0b491-1ffc-4faf-9e41-d21c6dbf6bd2", "indicator--261d1983-1551-4998-8a02-518dd56e96d7", "indicator--ebb8e294-7cdf-448c-9404-ddd66bb39f00", "indicator--1c9df32a-a52a-400b-96d1-ad2a0e248469", "indicator--2d4a0f14-0866-4702-9c3e-c6df820109da", "indicator--b0b0d0e1-dc8f-4843-a2e4-226f61a096cb", "indicator--c3d4e692-f722-413c-b003-5f36bdc6e096", "indicator--fa912dd7-6e29-40be-b4f7-ddc23ded06a7", "indicator--f01ebc55-1805-4b3d-9db9-84d2ed224d78", "indicator--2278b1af-5d9e-4d1c-b7ce-911f059e296b", "indicator--96263844-3af5-44f8-94af-b1881ed2c2e0", "indicator--775e2c46-91dc-433a-8842-bb8d724601ef", "indicator--20d6cb8c-e0f4-48af-b69b-a00f9edda5d6", "indicator--8324b076-b299-4d98-a708-f007c15379f2", "indicator--ad924f1b-beff-4e34-9440-449d485ff75e", "indicator--abd889c4-818e-4278-9406-6cad3e1635b5", "indicator--abbb2324-15bc-4731-9e53-1038f421dc7e", "indicator--f2dd5e76-61df-428a-9cb5-48dd9993961f", "indicator--5cabcf0a-e192-423b-b8e0-ad75f9d9406f", "indicator--c4fdf2ae-11a3-40b7-ac5b-c1940f1bb0d4", "indicator--8eac2a9f-fcdc-4afb-819f-aa2e63ba8d43", "indicator--031dd53e-cac9-4e42-805d-cf437913f7e9", "indicator--8ba253d1-bd02-4be2-8d3e-ae193799d2a3", "indicator--4ec7284d-f877-4b9c-badb-20fdad6a8d8c", "indicator--f3c6aeb5-e6e5-4223-a824-103f17195092", "indicator--0292580a-29fb-430f-8d36-17b427b2fe17", "indicator--f24762a0-c91c-491e-9b67-cb8be97eb9e5", "indicator--2feddd80-ef61-4ddd-a7fe-99fd99d9fd53", "indicator--eabdd660-0e07-4a19-bbc1-0ec31d7a060c", "indicator--1296b6f6-4159-4589-b7ee-ca153584c382", "indicator--2b1ac0d9-df13-4c27-b907-d7ed2f91fdbb", "indicator--cc68c3ad-c61b-41dc-9ece-eef3cc88b543", "indicator--30e06b07-35b0-4929-8d10-ae3180f50bb9", "indicator--19c7d357-4f2b-4dbc-a319-837f3655a748", "indicator--8e0edf34-7f93-46f3-afde-71e37c9b4669", "indicator--3a92dea9-f655-4244-87ca-0826550a8f16", "indicator--8cd9e3f6-db35-4782-999b-153c6c51dce1", "indicator--2136f4e9-ff5b-4253-8e81-8c3e6b77a70d", "indicator--4892932c-25d8-4fda-9248-40e5fd559812", "indicator--10ac43ff-f6e0-4ead-b700-747f098a6ce4", "indicator--7c1d4f57-8b46-41dc-966f-bd698cf57372", "indicator--12d02a08-965a-4554-bfe2-02142c2f09b1", "indicator--232901e3-fa8c-4c73-ab50-a9c0646cd1e8", "indicator--c4bcc9fe-1a4a-460a-a443-224e8a35ec6d", "indicator--501ed6d9-4b17-4d2f-8171-465b45f21d3e", "indicator--f7a773fc-ce5e-46f2-895d-a11927b04631", "indicator--607f7d69-8e50-4467-8d43-92a54a13a7c9", "indicator--dd771a06-5ceb-48e3-9e53-4b1f4a9ba06c", "indicator--76d13593-8f4a-4c7b-a45e-6059ab7d1c82", "indicator--2823878f-c8ff-4e52-bf21-601403491ad4", "indicator--c44d0245-edc2-47d9-a89c-5e0bc0d896ba", "indicator--b16babf6-f6b7-4c30-962d-dada5d28961c", "indicator--aa90180d-c0b3-4970-adcc-aa173bd4dd3c", "indicator--d62077b2-9dfd-4e0a-87b8-45099e61a42e", "indicator--e56ee9db-30d1-408d-b22b-0f0bc8527589", "indicator--37965e49-cf92-4ea2-9db3-672f99048832", "indicator--bac2ff88-4625-4fcd-b201-92dd4563d0e9", "indicator--13ba21fe-71c1-478f-82be-0f5104b064d7", "indicator--006980e8-3106-4f24-b8d4-66fd7452cb5d", "indicator--7a84d93b-23cf-4718-b816-d04f42610d6c", "indicator--0d579c4f-2018-4bac-9b47-04fab4d7cc53", "indicator--3824bee7-3f38-4522-accb-3b31cc4488e7", "indicator--bcedd253-3dfa-47ae-afd2-d3ae6b4e39a7", "indicator--ee6497e5-0d7b-44cd-9b2e-58ba8abe46fb", "indicator--973f8370-d5b4-49ea-ae90-91d92d5e04b5", "indicator--f9508c1e-0c54-436f-856f-ed21107a3989", "indicator--aa98c7d3-09df-4451-8211-8a7d013ff135", "indicator--0aa012ec-f0f6-4527-8c49-cf00ddb085b1", "indicator--32fbe434-6cce-4ff4-b274-e296f048bb53", "indicator--8d594b97-8795-4fee-9dac-a8dfc6dca28f", "indicator--c52a637c-b28e-4211-8dd0-63a4f947c546", "indicator--aa2ebb51-39a0-4db4-92be-96537cd06e52", "indicator--9da66ee7-10ab-4741-a741-ab87471409eb", "indicator--9e494a88-8894-4c28-bd66-13e34f2f4a2a", "indicator--d9e3950f-1aa7-4a87-8f15-8e0363fb9d89", "indicator--68b735e3-502d-4d74-a8d9-5158e82371ce", "indicator--a82c2f47-2da0-475d-8051-42ccbe4b90f7", "indicator--3d6b7224-ae33-4e1b-a139-5fa19dfb642b", "indicator--fe63097f-d4e6-4382-952f-14abfee8f0e3", "indicator--cf9479ae-d4c2-4446-9bf2-3886711707a5", "indicator--d5e0d452-4c0e-4321-9329-2ec21e70c8ca", "indicator--8898a2b8-c364-4638-83f7-45bd71be5441", "indicator--2ca905f0-6244-4d3c-9649-334ee310b0a1", "indicator--02ecf881-26d1-4489-ac18-72a0c8d6ca20", "indicator--1fb8ef4e-f92f-4f68-ac2d-200cb9cb8ab6", "indicator--c06783fe-76d3-4b46-a22b-f62416868a12", "indicator--7c00e48d-1b97-43e5-8f58-54ecc0e69cb7", "indicator--e2f04116-44f0-4843-b632-b7cc4bb8543c", "indicator--7a8df852-8df6-4545-be25-8041adaa1b9d", "indicator--5e0d2713-5527-4aaa-8b46-d2006c90957f", "indicator--0e665806-9105-423d-9b3d-e26213d8b19d", "indicator--e4adcaaf-8357-438a-a89c-878c38205287", "indicator--ff7df147-4f4f-405b-add6-4a8be3b0cca2", "indicator--c1ec5a73-3689-4384-9aa2-99715e9b65e4", "indicator--aeb5aa49-0363-45f0-b5e5-56ad5d360865", "indicator--5bfa35ba-4d80-47a3-b6cb-0b197b65815a", "indicator--61bc7b43-db25-45ab-9d91-fbc29ba869bc", "indicator--0a89e665-a0dd-4555-bf26-7af68a37d8f1", "indicator--39336b8a-bcad-4c0f-957d-fb3977e8d370", "indicator--60eeafe9-39da-4c5d-9ceb-0c1ac4c722c3", "indicator--b462b08c-76b5-47bc-a2fe-3068de4b2812", "indicator--c0dacb63-d657-40fe-8ae9-ed954814ab6b", "indicator--80b1b451-69fc-48fc-8d71-5064df16ef79", "indicator--6158f21e-0bdd-40b5-a3a4-b06c38db9e73", "indicator--0caa7cb6-3edf-491c-900f-b4d355b635b2", "indicator--fd7a13e0-dfc1-4f40-ad60-2dc28e772ef0", "indicator--9cb53506-fccd-455b-bdbb-06105cc23aa3", "indicator--fd189907-2b08-4caa-bcf9-d3a17605baeb", "indicator--14aa2dbc-518c-4b1b-a0bd-888bbfdcc65b", "indicator--94e31f61-03af-43c3-8417-f167f5e0291f", "indicator--cda41919-bf18-4d7f-8f41-5af9470864bf", "indicator--63814ef2-eabe-41a1-9e0f-4fdb1794bce7", "indicator--7f9ad7bf-84b0-48f0-a289-5f178fd7b53f", "indicator--32abb05b-3477-455f-8e9e-4957873ebb72", "indicator--693da992-3010-4cce-b9ac-ee27b90514be", "indicator--c7d8fcbe-c8f7-45b5-a7e5-c01b2abae7b1", "indicator--561b5059-8223-4928-9e01-9fed7a47cbad", "indicator--6c7b94bd-f76e-4d4d-b3dd-196439c47dfa", "indicator--5b1cb0e8-3da5-46d7-9056-8f2d1fb50709", "indicator--a9422592-0da4-45f7-a04e-219a03e807b6", "indicator--1bf53b18-d224-4ead-be84-34beb2742dd5", "indicator--08a1c4f7-19cb-4308-8503-7a0c9bebebdb", "indicator--64d41fc4-f44a-4a3f-ba18-6feedeb5b95e", "indicator--5565829f-1936-4c4a-842a-e8a23af7275a", "indicator--85cb5de3-0eb4-4004-8010-6bfcb9a8df52", "indicator--c7a38bbe-bd19-4c7e-a411-7c883ae260b1", "indicator--cff49149-8dfd-43f4-aad5-56263f63e8bf", "indicator--afc87178-2477-43f7-b1ef-95d4b129d858", "indicator--b951ba18-28a2-4d46-a7c0-8c99d6709132", "indicator--f18e5d2e-6249-428b-b5fa-3c51c6bc3187", "indicator--140e7fbc-695e-491d-b78b-f8ff7e64d428", "indicator--a3b2d4bc-be31-4a8a-9f61-ebf9ed6c5358", "indicator--7e44be68-f618-4825-bcf7-588bc46cb446", "indicator--3402cc17-6c20-44e3-a6a0-66a18c96712f", "indicator--dd3fb164-88f8-45c7-a83c-1ebbbdf113a4", "indicator--5cf69ff9-1d7f-4601-be24-ad23b2a19b9f", "indicator--681cc874-57d7-4c52-a3c2-f47f84f7f2e1", "indicator--55859d8f-d176-4ce6-af21-27848e5f4aff", "indicator--ff37c5c8-8abc-4e7f-9de5-9d887cf28571", "indicator--e715cc3b-f79d-438f-87b7-fd5735b561d1", "indicator--1c768285-0ad8-4130-866c-24f656ef1981", "indicator--955f353a-5efa-4e5e-b7ac-ee3c000702e5", "indicator--3de8bf19-fb7f-4bda-b0c2-87f558ac2073", "indicator--45cdf9c8-1bea-4a94-bb5d-5178ba5dd016", "indicator--9ce2c18d-f537-4637-aade-ea7b4ef80c5a", "indicator--07e83a53-f99b-4fed-80bb-b7a8d34123d3", "indicator--93fc3d5c-a061-43fd-a386-308eefcf402c", "indicator--79eef428-f396-477b-adf8-1541262813cc", "indicator--b50ee870-a00a-4b2b-8398-65cdce94e8bb", "indicator--be5dac26-17ec-4d0d-9ce1-fa732210a2e1", "indicator--c3a866a3-15bc-4b83-89b5-183c5b747657", "indicator--c30e9900-2d62-4777-b066-3adbf9d53f78", "indicator--00be6424-362e-4ee6-857a-078fabd37219", "indicator--b53dcd50-bf42-4c22-a574-c487de7f09be", "indicator--d3c6fa1d-bc5d-4bff-990f-6a308c686fbe", "indicator--a7d7c3a9-53b7-44f9-99e2-ab4004c0340c", "indicator--3bf557f1-4333-4adf-b957-de77397ab3ee", "indicator--05e97902-242f-49e5-9f94-121371bf13e3", "indicator--ca43345d-bfb0-4248-ad0d-6a6733ac6fd6", "indicator--605b7bf3-6493-43cd-a8b5-693cbd417389", "indicator--3d8ee752-58f3-408b-9e83-342b95c0cab2", "indicator--cc0bb259-c36f-4419-a14b-fd139eac23c5", "indicator--d4ebe001-6485-4147-954f-b04442ccf3e6", "indicator--0ce06b35-1235-4eca-903a-e1d8b40326b7", "indicator--e17fc368-e8ea-4c34-9bcc-2a9b17a6a16e", "indicator--6e06d414-97e1-4c25-9dee-63a99006ce1f", "indicator--de86af35-4d1c-46f5-ab65-6ce5326cbd65", "indicator--a313e69f-2cf8-4308-9e8b-e738be3353ef", "indicator--9670760c-f26b-4865-a64a-18ce21d83a40", "indicator--84575b40-4ad5-4b95-8690-84a6487e545b", "indicator--85f1b5c7-8b03-4f01-842c-d93118eb363b", "indicator--39ffac6f-f836-49a4-bb43-2d0540c7338b", "indicator--27374925-4f4b-4493-834f-1954e93cc339", "indicator--6212a661-5a4e-479d-9eeb-372a9566c955", "indicator--d6e83ee5-b5e4-421c-a31d-f1e3220c8f2f", "indicator--ee7f2283-6796-4eb4-94a4-bea244165022", "indicator--802e928e-4774-41a2-bc6e-d3958b0c979b", "indicator--17fdddba-e26e-465d-8613-fc9dfe5231c1", "indicator--5b7dfe3e-e0fa-4ec8-9a81-dd93c6cbcbd6", "indicator--af9f3e04-c5b8-404e-a024-8a7215e71412", "indicator--711dfc4a-a30f-42e1-b5c3-a5aec834eb50", "indicator--47d9fd6b-ad6d-4b4a-ad0b-8f3485d94ec9", "indicator--e70063e3-6c83-4160-9062-ac21f36aa48f", "indicator--36cb8a71-f8cc-4d45-bd06-5a2ba60e2223", "indicator--122c69c5-e7b9-4e93-936a-93df6f351d6d", "indicator--0428fb92-a061-4860-9ac4-cadc7821e852", "indicator--53049226-d031-4237-886c-04cd49d90bec", "indicator--21424f82-a084-47f5-9bb6-a3590588c19a", "indicator--be73c2a7-00a4-486e-8967-0fdc4393ac61", "indicator--6659d2e2-1dac-483e-9cba-d98dc775a18e", "indicator--b79f7e03-dad5-4f03-af0c-4439ec7050c7", "indicator--b0c4e4e5-4828-4c0e-853d-615da6eb907e", "indicator--4ef56965-4037-47c4-b3b7-119617e9666f", "indicator--cd947420-e179-4b7b-a030-814e2803056f", "indicator--a9328cf9-c2d7-467a-9c2c-9c8ec7ef683d", "indicator--9677ba4a-354c-4bec-be4e-e521b200cfcb", "indicator--50007d40-477b-460b-8a2f-6ff03f94de63", "indicator--ee6a1314-c8e6-4a74-aed2-72a28142b990", "indicator--2363ddff-d785-46dd-9228-7ded5f775605", "indicator--d4c73cf3-f721-455b-92cb-bdee9cb08c4e", "indicator--ea2bbea5-5f7c-489f-bc2d-7de65d6d8336", "indicator--5a696cee-d02f-47d1-8849-1b0a115e5eb5", "indicator--c017bf04-24d4-4e8a-ba66-fc8cbbb61968", "indicator--a85ad4e7-74cd-4201-b167-e6e7075e1d6c", "indicator--25031020-81a9-4fed-a5c4-d7660c7dff8b", "indicator--2318ba96-7273-427c-abe1-d5765000f89f", "indicator--6f017aad-a0a0-43f3-8174-1e4783706627", "indicator--38f029ce-43bb-48a4-b65b-d9987f2b7e8c", "indicator--3ba07494-a4d6-4a9b-8c81-d3d93c13209b", "indicator--7d14f8f8-243e-4698-bc10-ec00569cce68", "indicator--646c61c1-0e53-44ff-bd4f-5088a363cbfc", "indicator--3f414cbb-18ce-4939-b8a7-56d9dc5216b6", "indicator--3e590fb6-b6ab-485a-8551-8d487f63e99d", "indicator--ef539707-1a48-49b0-bfff-ac573a9abc53", "indicator--adfb0488-3aa8-4808-a80a-aa68a6ad1ac0", "indicator--070b7366-8e38-4c7c-9c87-d8074d3a28b0", "indicator--6cbf2566-df44-43cd-b177-dc1e3acaa847", "indicator--e39beac3-7b22-4afc-ac82-972019ff563e", "indicator--e3210cc9-8625-44e5-914d-3041d3d83984", "indicator--a70cb4f5-8f71-4694-9479-51b899562da6", "indicator--c405ce07-6f80-43ce-80c7-ba6eee521a50", "indicator--d3bf5cbb-b7a8-4dda-a30d-b35d5174a19c", "indicator--ad9ee11d-3c5b-4c0f-b32f-cd5811ab3e38", "indicator--7f0cd0cb-2e1e-4c65-867a-6cb3511260c6", "indicator--e2ebe4a9-b89f-483e-9d43-60968f64c8ea", "indicator--f2e069ed-a18c-46e7-a948-04e9914d7e31", "indicator--125653dd-cec6-4dd3-8d25-141eaf7ba64b", "indicator--648565cb-e8d6-4ae5-af4a-2bbaeaf5b8e2", "indicator--2f09a3b7-057d-4e11-86eb-55067686ccc8", "indicator--316617b9-917c-4291-8d55-b10270acc19b", "indicator--04054f61-4cb4-4ca0-ad9a-1d2beea5c6db", "indicator--dcd9532a-0492-4116-bcaa-0e87d4abf9d1", "indicator--77d47b68-6938-4992-b90a-b13a0dcf1b2d", "indicator--98505eba-300c-4bf7-b0c3-ba5ce41ceb9f", "indicator--2fbcf445-4991-411c-993f-7a7e4c317af0", "indicator--a2d6cf5e-ec52-4064-99a5-6dfa1f0e359c", "indicator--8c454865-3190-43ce-8644-3b4d10c21da5", "indicator--0b082c67-9def-413b-9bb7-4eda1c9a3414", "indicator--8c5332a7-1d06-4da2-ba2f-c064c3d2ecdb", "indicator--4b089926-dced-4e53-84f2-f3c3079a8560", "indicator--960d1820-2da8-48b1-bc0a-8901d4f78695", "indicator--05703e9a-b512-42f5-b9ab-d04027da9075", "indicator--a74e530c-98d1-4c9e-bd8d-cabfb2d6d2e6", "indicator--fee26335-deaf-47ee-a1c3-2d971d437860", "indicator--dcbe77ed-6e71-4373-81b0-84ec42f29c76", "indicator--615df441-20d7-4183-8b43-85b18200ec32", "indicator--cf6c490b-37af-4bda-914c-a3db0621f471", "indicator--68b649cb-e8e9-4597-8b24-b40ed17449a8", "indicator--e354c246-f810-475e-87e3-940673401268", "indicator--32393f7b-8731-4936-96a5-e76f4aa33f8c", "indicator--69771391-1f6a-4fba-88ba-90fa5bb7c4ee", "indicator--cc0fad1c-f5c3-476a-ab70-96700bc4104e", "indicator--72da00e4-6697-4b54-acde-245942133830", "indicator--aef49109-3f7b-4499-bac0-0aaa35612301", "indicator--9e356e3f-c527-41d0-b294-c2fa513add6a", "indicator--18f82831-84b8-427d-9f89-aaa78877a450", "indicator--55f6f1f9-0d93-4784-9dbd-d987ca6658e1", "indicator--5806ecf0-e6f2-42b0-a98e-35f5e0d2616e", "indicator--2cea379f-54ad-48e7-b462-a7ca3879479c", "indicator--abdca0c5-299b-40fd-b8b2-52ebdce86211", "indicator--458d5dab-ca9f-4528-b1b3-80f51a89e037", "indicator--b18b4b12-6017-481e-ab5a-7d97602e31bd", "indicator--a1764a16-fea9-44b0-a0f8-15cd17fad8dc", "indicator--d9fdbf4f-96af-4194-a76f-d71a1235f784", "indicator--fd947f9a-aea4-42b9-b07e-f0439550090b", "indicator--fe145a0f-1d7f-491a-800c-dcc88838b08d", "indicator--4c23d512-02e0-4888-99a9-9fb3fa1ad9e1", "indicator--fa80f9a8-ed39-4814-9dcd-71f219a6ca7d", "indicator--d726bdba-09cc-4d3b-8a02-1a607bd9af1c", "indicator--d416635e-5bf9-4711-92e4-38c24fc1fabf", "indicator--d4c02240-be15-48b7-affe-ab9ca67a6add", "indicator--ae30c4cc-4f4b-4e31-8a36-fb406f3b9bd5", "indicator--fed4a0da-1b07-4cf2-979b-de2d61044fe5", "indicator--d62954c8-6091-4627-8520-a61022621df1", "indicator--571e4e05-7c6a-4f2d-9544-f13035a61550", "indicator--1efc4ef3-c0e4-46bc-ae4b-3a93e5fefd7b", "indicator--3ebcf0d9-b15e-4dff-9dfd-22d6426bd2ca", "indicator--2f87c5d3-15b5-465b-bffc-e04628a983ee", "indicator--271bf5c9-8e63-4076-8314-a8cc2fdcae3e", "indicator--a9503bde-88e6-45e5-abf4-7fb42bbeb103", "indicator--353a6182-6d17-4d82-85ed-21a2b0f6c76a", "indicator--2a7ddc4f-6aee-48e2-8f0a-17339dd508fa", "indicator--e65b34fe-1e8f-46a2-9ed5-5120eaae26f6", "indicator--22a437a2-543e-41b2-97fa-d0406a2ce458", "indicator--e36524ad-9f02-4cb8-a0d9-7eff5b9de384", "indicator--a9602243-0378-4086-b420-d2a1b3bbbae4", "indicator--6e74365d-5842-450c-b33a-82bf9f8c5502", "indicator--69cce76d-93f7-4bc5-a9e5-29e5b772b785", "indicator--4f8e4f7c-7d62-4e47-9b91-3ecadedf9ba7", "indicator--c86a7d1e-1f50-4a44-a348-477257d89560", "indicator--a2f994c0-fe7e-4b1f-9558-28ad6d18d89c", "indicator--f9e0e482-7481-40b2-a8b5-a37d7f0da811", "indicator--4c12c98c-d8be-45d3-a9c1-b9adc0909316", "indicator--a8a3e4c0-bc4f-4022-a098-fb462520ae14", "indicator--7c739e28-c9c7-4e5b-8e3e-70b0c54ca0f2", "indicator--0e2aa480-833b-4c61-9271-158857b8088e", "indicator--9a39d87a-29a5-4bb4-92d6-95b9e9e3b516", "indicator--609b580e-45d9-4ba1-b073-6525243e4407", "indicator--ae2b6da2-8a3c-4a06-b17a-68657c72422e", "indicator--331fc7ab-1832-4c16-9af9-9c3cd986e817", "indicator--75124b22-deb0-44fd-9109-3635112acae9", "indicator--8de9b7aa-960a-48d0-9475-eb416089d72d", "indicator--cf58d92e-19fa-4d08-b5a1-bad5914f646c", "indicator--c0b60ddc-0873-43a0-ab74-c7a7e41357c5", "indicator--3a72626e-3737-4918-9a8e-93d55bc7c807", "indicator--c2a214ea-cbe4-4404-82d0-618849210cf2", "indicator--a1af8c86-ca1c-4552-a07c-8a7733cac7ed", "indicator--0d2397ff-b5c2-4db7-b18a-053a99eec5c2", "indicator--2277db09-2ef0-4ff1-b888-fd56ac79842c", "indicator--bd3a2cb3-c25b-4861-8df1-95c718b205c6", "indicator--f8a0ae1e-d98a-4881-a559-59be688548f9", "indicator--df9f727b-ee9f-4f34-8f48-0aa9a8317004", "indicator--e5de2f24-eff3-4c0a-852c-8ddffd1dfd82", "indicator--5143d54b-bef5-4eaf-b036-2cf8d39ffbd8", "indicator--8ea1c77e-7f48-4199-b0c4-485421de06ba", "indicator--4c013673-903e-4b21-b789-effb8f353c12", "indicator--e05d839d-d146-41f7-98b9-578009b0cd29", "indicator--743153eb-049a-4b1b-a2aa-ac887c2531c2", "indicator--cdec8fc6-b26f-4fb0-8024-598d7babbc3d", "indicator--143b5896-2ef5-4050-8c73-a45b9e34d37e", "indicator--448aadc1-0990-4fc7-b2e5-6603d11b6644", "indicator--5a50d602-bf46-4b90-beee-b52250fd27ef", "indicator--fc9e58e6-cab2-4a7c-8427-b81bdbbe7074", "indicator--c5290ccf-9144-4c07-8933-83ea491df785", "indicator--99301cd4-7683-47c6-b280-519711317133", "indicator--d9d581ba-39a9-4a94-9800-25a2f560b426", "indicator--0b1322f0-8b21-4b6d-bb52-e1f4d0633920", "indicator--2e595d89-ad55-40bc-a531-a271bbc639b4", "indicator--ef758f28-de4f-4c52-8dc9-f6d9e4481849", "indicator--1c7e07e8-7e5c-4ec9-94c2-cd9ca0bbaeea", "indicator--803f289a-b4e5-4fd8-8359-d24bf7e082a6", "indicator--d9511443-78a4-42a0-bad1-396f566342e0", "indicator--ec45e979-3f9b-40a8-8ffe-dcf024335e42", "indicator--ab024892-5be8-4ef2-882b-06652f5a4fca", "indicator--33265739-1d26-45d5-9321-da50d68771b0", "indicator--56e4678f-0dda-4ddc-9cdc-bf914d671860", "indicator--216ff71c-8901-4450-a4ad-1a56adb6d902", "indicator--07dcc9a1-5eb9-4789-a7c6-1d4e25f98c6c", "indicator--677f157e-e8c4-4d3e-83ee-73d4d48c28eb", "indicator--d9537bc2-1143-401c-8ee9-ed7dd946f1c9", "indicator--f15af9ed-5e8f-4a76-a410-ad1a339db222", "indicator--ee42dc34-5e80-4f27-b14e-252aaba9406e", "indicator--ffa78736-df07-446e-9369-3da281d526a5", "indicator--ee2f90d9-05b8-4c2c-884d-1182c858f5b7", "indicator--bffc63e4-92e3-458d-9fea-3d6a5ff0abab", "indicator--63354a76-1c70-4477-8d6e-8a42ad642daa", "indicator--b6c70154-7f6b-4dcc-9c87-83355c35267d", "indicator--c1638f1d-c5b8-4d60-b7c8-21c9b4825c5d", "indicator--307ad346-ee1e-426f-bff4-7cacef68c196", "indicator--1437f6f9-38e5-46f0-ade5-c5d558137be4", "indicator--ddb8f43f-3929-454d-ab13-2308446e4271", "indicator--f81ee463-af03-4ca6-be33-d7ab81ae9fd6", "indicator--dc681aff-5563-4e2a-8a73-e7bbd9d1fcaa", "indicator--f07258d7-9fb8-42d7-b282-8fe34e532505", "indicator--334b7751-7aa0-4d9f-aec5-3823f324d134", "indicator--8648d8dd-a223-4d53-b59d-5ee57bfe7a69", "indicator--a06dab67-f9fe-48c9-b302-67094ca5f4e9", "indicator--a29b92e8-2ac0-41bd-8898-b525f28f7fb7", "indicator--61b305b6-ed7a-4c24-b7fb-214ec045eab0", "indicator--78486e97-ea3c-4588-9b50-a612149f5722", "indicator--f1d0eb73-863b-4ab5-a9fb-f2870a035538", "indicator--f6250056-c7bb-42e3-b4d3-eddd263a792d", "indicator--87702c69-907e-4357-a8d0-d404a885e0ce", "indicator--c8d1ca98-6e22-4940-b4e6-19ad58a44b29", "indicator--58f48f6c-94ce-4d86-aa19-87310a856a7e", "indicator--14938a46-85b5-49ed-a95d-5427d2d995f6", "indicator--a325f2b8-6212-4637-b856-c174937fb3a4", "indicator--411cb5f7-3ac5-4c67-8005-585f2f77b973", "indicator--7f971d22-2567-403c-884f-fd8956b6e31e", "indicator--b646974e-fd44-4966-8124-c2d7261a612a", "indicator--89add66b-065c-4835-8075-3194e28141b5", "indicator--723359b4-f398-4d83-a908-62a1357ecac0", "indicator--292d0a4f-f346-47ff-8788-14df81a719ae", "indicator--93577ea7-5870-4e3f-afda-71dbbec594d8", "indicator--690b02bd-d70a-49e9-b122-834dfc07d3c0", "indicator--e53da959-2e39-4dab-b512-76f6ba58d9eb", "indicator--7279d099-369c-4071-a738-5570b257a6f8", "indicator--1e608d1a-4411-4505-9e40-96462dacf391", "indicator--bf30fbed-ee2f-44ad-9c36-1fdeecac2996", "indicator--675fbcc9-3a03-42d1-bc9e-5a06327c82ee", "indicator--6d547954-ffe8-4d65-80f4-fb0add0896ee", "indicator--afe5708c-7566-4fb8-8046-5a0ad15cc095", "indicator--59788c03-9d2b-42e4-8e08-bd24ee408566", "indicator--6322d9c6-156e-493c-8b9c-3f06ca8dd374", "indicator--7b6b67f6-c1cb-421a-8a6f-facacf005cb2", "indicator--3e8d3e99-bbaf-4641-8636-7d56e0a65a36", "indicator--6141e6a7-55d6-4d92-9504-367a7b287192", "indicator--76683142-08eb-45cc-a916-91056d93d237", "indicator--bd84082f-fd95-4214-867d-22acc867665d", "indicator--f795c6ac-5c65-411b-aa6c-adbf5aa51aee", "indicator--caf995f0-27ad-4311-ad9d-02d06b120757", "indicator--30ebdd49-35ac-482d-80cf-c22caa7a3c66", "indicator--65d1c5a5-3b6d-4e98-b42e-39e279057dad", "indicator--8b1104fc-0472-482f-898c-3bf06bb25139", "indicator--dbb0c955-995c-43c7-83f3-b672ba554a9f", "indicator--8170f0c7-e1a0-4419-aab0-0bb4d2b4b631", "indicator--d94cf907-786b-43d6-bfd1-d8f3f06fffe1", "indicator--110d0b9b-5c7c-4459-99b6-ba3cb6bf5437", "indicator--c7ea86a2-7eda-49f5-8fbb-f36305926cc6", "indicator--55defe78-f405-48a6-a756-88cc5ceb8537", "indicator--4bc5d85e-a1e7-4c73-a420-4999b8131aae", "indicator--e3f58816-abb2-4c43-9486-f111eacf3aec", "indicator--5c8591a7-3de8-4027-8977-7330c2cf1ad4", "indicator--5ad67404-53f6-4b8b-9fa2-2d0d76bb1605", "indicator--2b9b60be-7477-4b0d-af1b-ea54b6287b3b", "indicator--c7d251d6-2300-403c-8f35-ac1edf785da4", "indicator--e97833f9-9a5a-44d5-b8f5-8649889295bb", "indicator--69e13565-02e6-4bdd-bd84-923d86f51061", "indicator--b2879ff5-dbe7-41e6-876c-30c182ff312a", "indicator--2c4b8a58-080a-4510-a3b4-9752d199ba51", "indicator--4a1b10a0-2817-4250-9ffc-3e2e47545d13", "indicator--47d7bad0-2cfb-4bdd-ac7d-b187728fcfa0", "indicator--e81c22d0-e16a-4ae8-be0f-6ee778ce738b", "indicator--628a7eae-d2e2-4c76-978c-3d1c5254e37e", "indicator--eb466c66-52c0-4cb5-853e-931bf418641e", "indicator--8fb4a9ad-0329-43bc-8605-0cd3fec264df", "indicator--3a69ca7e-4a68-45cb-94be-cac3e6994586", "indicator--dbe01863-1d1d-4673-93aa-11d6976ac5f1", "indicator--f4b52a67-5fbf-4bd8-baac-244c7dcc9299", "sighting--3334ca2a-955a-46b3-99ff-55a1ad1bb836", "sighting--1ceb6082-9fd8-436b-abb6-85adf7b1bf96", "sighting--092a6441-3c06-4c44-8f42-455d3c043230", "sighting--45af88a4-77b4-49e4-b556-4b76ea9ffbc5", "sighting--f453c382-91b3-4275-80fe-7d2e9885f4fb", "sighting--ce3e846a-d834-4df5-8c4c-a8887d09b888", "sighting--9f810cf4-583e-4df0-9975-884cdfae83bb", "sighting--87a76356-bf02-4298-80da-9209e2676a6c", "sighting--09c4909a-88de-40b7-80c7-451e0ba1cc21", "sighting--4ccc9fb9-f58b-4c8b-a0c2-b941a7dae4ba", "sighting--0144378e-8bd1-4256-accb-160bc27069cc", "sighting--24d558c5-bb15-4bf2-b1b6-aed9cf56437a", "sighting--2ef66a13-cd3f-4f73-a6b2-2556ca15753e", "sighting--407abe84-1a17-458f-a1e5-dc1d3aefb1ba", "sighting--024bbc59-5ee6-42bb-84c9-02786e3fc97f", "sighting--0a0f38ea-45d6-417e-8988-3d5d38621835", "sighting--679ef7af-6231-4ff2-8a99-e70b26a15fda", "sighting--075e48c6-9c76-4366-8b9b-6c767a970a48", "sighting--99793ee8-905e-4b7a-9c89-3d1569088512", "sighting--c538b71f-768f-4c57-936b-cac671c0f359", "sighting--e1963f22-8f60-4ed0-a77e-70917a7ef2d8", "sighting--7ce362f3-052e-49ea-b7a0-6e7feb9ea388", "sighting--d72f1739-2683-4061-89c4-3ac64018c57a", "sighting--0994327b-618c-4273-8763-3da8b6dd9de3", "sighting--4dd80acb-bc52-4bc2-9de2-14df35f32c5d", "sighting--48cddbc5-ea8b-45c6-97e9-f8ad94bbcbdf", "sighting--6fd00766-e8dc-4062-a442-0d2bba18a2e2", "sighting--fab7902e-e584-4701-9b16-4e04a52c15f6", "sighting--81d78162-0ee4-4633-94b0-34ede2042823", "sighting--3948e49e-7b85-456d-b206-c247e2090723", "sighting--4512160d-b034-407a-9270-1f9afcae83e9", "sighting--7fd0039d-6edd-4f09-baaa-5bd5aadb71dd", "sighting--215766ce-9fae-46f3-8c73-33ff40e73ff8", "sighting--9cfdfcf5-96ad-4d02-857f-c89525ad265c", "sighting--73024656-ea54-440e-bf69-758268692bd0", "sighting--acc0d3c7-8aa4-4b30-a262-106c091f6c6c", "sighting--c21e2b27-02e4-4a5b-9518-740884861024", "sighting--0838bae3-3b85-421f-892c-062b65ecda3a", "sighting--6d214e3e-4915-4ee9-a7e2-4e50ca10b3c6", "sighting--6f1b300b-4d0d-4ef8-ba49-e3abf883d9b5", "sighting--45561d60-872f-4785-82ac-c300fb271cf1", "sighting--c8008fa2-5699-4650-a562-c1b18a8528cb", "sighting--a54d1bac-eb0f-4069-8db5-3cc2aefbfc04", "sighting--becdbb78-120b-40b5-ab35-d324c8cb37a5", "sighting--0a8d016c-e2a7-46d3-96c6-ad3d6efb799b", "sighting--90a4a5e8-8773-4f26-a165-9b27912fd7a0", "sighting--093d0f4a-6d5a-4de0-b02c-2d6985cc2178", "sighting--7827b8c1-0b79-42b8-aa2a-473b2f75c33a", "sighting--c6562651-88d1-48f8-b28a-f1bd28faa3fb", "sighting--081485b1-97c8-42e1-bd3d-ed43ae78a914", "sighting--0b76b0aa-ed66-45f6-b0c3-ec2979ba8374", "sighting--3ca817ae-89d0-4dc6-add0-d5986e2b169c", "sighting--eb66fe27-74d0-44d9-8157-c32cac57a78e", "sighting--00fd7119-7f8f-4dd4-a21f-2317888adb1b", "sighting--cb7a41ff-3612-412c-8dfc-72b04db1f8a0", "sighting--0da0e33b-af40-4cca-ab91-d31797b2840b", "sighting--b49a5572-e4d8-4bc2-a42a-dfbcc2876ccb", "sighting--036c8aea-8592-4b3a-aab2-9652d56cd0d7", "sighting--a13c331d-f977-4621-ad87-070ec8bc3972", "sighting--01d2df7b-e6c4-40e0-b5c4-917c1eed7af1", "sighting--ddda2b5e-bacc-47bc-8f33-4bf0ebfb0fce", "sighting--2c3d4ee0-1785-4f49-8ce8-3f3130737d1c", "sighting--c6c9d678-bda3-4669-a85b-625eed5f6f06", "sighting--7051db4f-a280-4e33-aa2b-6ff2a5f58d74", "sighting--9906dd6d-6788-4a04-9a31-d24f8a1c9396", "sighting--88185878-3e1b-4d8b-ad30-aa314ffcd307", "sighting--5f4b7218-117c-41db-adcf-79489cd7f89a", "sighting--34a7f2e6-b3ef-41a5-8ac7-1893fa221339", "sighting--0ceea576-f9fb-499d-b2ff-88cf58ea6d4a", "sighting--858468c8-b314-4190-9a56-7bac16eda5c8", "sighting--82016b96-c741-496b-b4ca-03dfb459495e", "sighting--1a6995cf-51f7-4bfd-8f2f-02f6781d8714", "sighting--73202923-d002-40b1-af0b-51614650141e", "sighting--4da59916-62b2-4011-be83-f64ee5e2caa5", "sighting--3de8e4f9-2a2e-47a1-902b-6f4aa38400d1", "sighting--ba45d9a4-1106-42a7-807d-24b17a2a3fbe", "sighting--525e86d3-a5d4-4254-9752-ceed7918b1bc", "sighting--b65fc759-e313-4f1a-9f39-fc27e29e4e23", "sighting--75d114e5-c351-48f0-93e2-c44c768a5101", "sighting--18cdbfc6-b6a3-4287-8f8e-33f1df78f54d", "sighting--68c7678d-ef54-44bb-94e0-166af4e12c11", "sighting--e2d1fd9b-5438-48e8-a7b2-35447188863c", "sighting--b5c13b07-da9e-4083-b52d-bea398fac661", "sighting--49ab2553-f092-4906-b000-a3b921fadffc", "sighting--31f55d1d-7f3c-4446-b116-d3e15aa362fd", "sighting--f681fc00-74b1-4165-a1ba-e31928e63b6e", "sighting--6f0a95ac-c7f8-4c80-8b3e-5ded7d6d2444", "sighting--0bfaeec3-4e0f-4156-942f-e6416f2c6c6a", "sighting--c98b4997-8803-4986-9940-ddf5a6241ef6", "sighting--efbb1fe9-ea71-4d98-bdfd-3c2d6c4221c7", "sighting--9b2f348d-0559-4c96-aac1-684c2a459be0", "sighting--18df9dda-d8de-4f5f-a089-18a3e7dd2ddb", "sighting--fb91d248-455c-42c5-873a-4bb84250cb55", "sighting--2186a593-2a96-4dfc-a425-2d71b7b737db", "sighting--15603d63-c736-454d-9063-3c65f9362bb7", "sighting--11ecac83-6b0d-4a17-a536-ec46a5aa90e9", "sighting--fe95fadb-393b-48fa-8c28-3454ae128f34", "sighting--e101469e-7953-4f2f-8bfc-1e8829c24429", "sighting--5773ba9f-f861-4fd5-9b71-ff804eedda33", "sighting--027db129-8913-42b8-9d46-43c1a26fcd83", "sighting--d2eac0c8-44ae-4403-a9c1-d8b9f5e9b7ec", "sighting--f7e14ee1-8e6c-449c-80c5-c4f78da03880", "sighting--9df0316b-0464-4d06-bb26-efe454e95c28", "sighting--3d49d00f-a62c-4f4c-afac-b29cc891a478", "sighting--26eeea57-78fe-4eae-b354-d92438e3c591", "sighting--bb46343d-b7d2-4297-b6db-e387bb5e1d0b", "sighting--8d52ce73-ec87-4657-8f50-b63466eaae2f", "sighting--7ce98047-1e37-4adc-bf27-f7b0cc232b67", "sighting--6e5bc96d-6987-492d-b401-e6edea622cb1", "sighting--c6f6379f-b76a-41e7-895d-f25b280ed5a0", "sighting--8acffb9b-2430-43bf-9668-43c6ef4f4d24", "sighting--a7b1562e-8ceb-4b8b-b51a-f95f200d1fe0", "sighting--5b34bf92-5982-4374-a1b2-b2fbdc021060", "sighting--1ff074db-d4e9-4e11-bf61-af4946cf3ad8", "sighting--1f297bb0-b239-4065-9f8b-9ded522c8578", "sighting--17252b89-79b4-4ca2-b8a2-c77d68c1281b", "sighting--9b34ef81-4d31-48e0-ac1d-ae7899831fc6", "sighting--1b431fae-b4d2-4028-87f1-a41142d3905f", "sighting--dfd54a6a-f96d-4f48-967d-e49b9afe72a3", "sighting--871bcbef-abee-43f2-90f9-1ea9431d839b", "sighting--57a0ec23-fcf0-4ad7-a659-402bd1a0f5d5", "sighting--93553c1e-916c-4892-b399-d55ebefb8765", "sighting--35f9eefd-6e27-45aa-b02b-65442fbfd79e", "sighting--d308ac0e-b24b-4802-9c27-90b12e5cf093", "sighting--44d858df-2f9d-4986-8b48-6d44c429e83d", "sighting--84f21482-95de-44ef-b30d-71f5c82d3dda", "sighting--a11df759-3944-4755-9fdd-a00eb3dcc8e9", "sighting--413ec165-d3e2-49b6-884b-7ccb9171e56d", "sighting--25547d66-5458-47b7-97c9-6789793272a5", "sighting--f6114f5d-db2d-4c68-b79d-f36d5b0f6d5e", "sighting--d946e229-1618-4b6f-85e2-77097d1a6810", "sighting--4c0f479d-2839-4108-b73b-f5d43e1475b3", "sighting--c07d77aa-015b-4718-b08c-f2bcef65cd5c", "sighting--4a93c230-e4f4-4f3b-9222-bd2cf1aa1072", "sighting--fafd5d03-49e2-49e5-b72e-959fa95c7873", "sighting--f645a09d-47d4-48f4-bf98-4e5e5d55c1fd", "sighting--021a3fc3-be49-4d34-b803-8797919bf099", "sighting--5a18f703-2f95-4545-a00f-405947e3c7a7", "sighting--bc71783b-63d6-4e79-a3b0-bc3c754af87d", "sighting--f923da18-240e-4dae-b766-1b92ca610d62", "sighting--c5821020-8ac8-412c-83df-9880c783f280", "sighting--9ebc8950-1d4f-4f78-8e8c-18874c9dd699", "sighting--76a7410f-5510-46fb-823c-68a4fce937a6", "sighting--b4f0e4d0-64c5-4fb9-a6d6-54e90f84ba9e", "sighting--da6cd731-f777-46e9-a4db-fbba97fcb7ac", "sighting--04ee56d5-5522-4ff3-8e86-8abdf9d4009d", "sighting--37f21fd3-23e1-4da1-99bf-aa8ee9c2681a", "sighting--f4495f26-8638-4246-84d5-166d928df588", "sighting--d8ee75e9-13dd-4521-8907-96e6c831c7e4", "sighting--77aa698d-9c1e-445e-a1ca-0275cb7b66f8", "sighting--3c0e8235-bb63-444d-bcad-5bf60b1bf182", "sighting--e54fb353-23c3-4179-8bd3-96b099bda240", "sighting--e33d7357-e040-46e2-87de-9fd072dffb02", "sighting--70f25c6d-42ce-4fb1-a394-e6918d6d16e5", "sighting--1c8dee5e-396e-43b9-81ee-8f331c32d480", "sighting--6e0135c7-fe3e-4719-ab53-d01a594d0574", "sighting--3e852250-6200-4756-9c4e-5cfd97ab5161", "sighting--083a3b19-c6b3-4a2f-9886-9e0a8d1d91dd", "sighting--1ff1636b-a2fd-41e8-b646-b74c06f08914", "sighting--5437a6e3-3e86-4c68-9afe-43a75d9be1b6", "sighting--511c2988-598b-46eb-8fb1-d98c115b7ca4", "sighting--1cbdf45f-1024-4272-8e57-a126bd2715d0", "sighting--3d0ccd87-0b15-43f9-87ed-2e4e1633121a", "sighting--9842d8c3-6ebd-467d-8038-2c0dc8e91e09", "sighting--b18104fe-64cf-4043-8ee5-90f30b1f292e", "sighting--93b478c7-b062-42f6-be3e-cc65f6562327", "sighting--cd97a736-7b10-4820-9de7-375145348586", "sighting--40e0a104-7e71-4b0c-ac44-f7933cab97b0", "sighting--8d02e9ed-83ba-4523-81bc-8705b0b06200", "sighting--57143583-a3b8-4ef8-af03-aef28f70c330", "sighting--21d11952-4eb0-43b9-84b6-c837e370786f", "sighting--7f220af6-bb6e-4a97-93fc-b3af8bfe02fc", "sighting--c7142921-2343-4f0a-ad11-75847030a81b", "sighting--11a9f154-5040-45c6-a796-0959e39e1804", "sighting--48528f62-eac4-4c22-854c-c82ce5592fa5", "sighting--860b9089-b6aa-42c4-9e0f-37623eaac7b7", "sighting--f8eacc20-fcb4-4000-862e-b691890c63e7", "sighting--6d1f6289-4255-4d10-85c6-00197c816f2c", "sighting--a2e5f771-0cff-4ec8-82cd-acdfa81e1963", "sighting--1d4e033c-180b-4d0c-aeb9-68de87ab721f", "sighting--615e76e3-8fcb-4a6b-a849-640d780f1c03", "sighting--192600fa-ea3f-4123-be3a-51f319c6bb18", "sighting--37e881b9-909e-47b4-abbe-ac4ef775fc53", "sighting--def4e9e1-40b2-4951-bd7a-a6ac3db2070f", "sighting--53c82079-6109-41a6-b527-ef5873e0b5f8", "sighting--a7ad506a-488d-44a6-a737-f3f4b44edafe", "sighting--9fd025dc-264e-456d-8a8f-3ce5eb9ea3f5", "sighting--d83af703-e921-4e10-9d85-aeb4df84cf7a", "sighting--16b01d32-9d91-4efc-9f4e-ee4e2ea859d2", "sighting--d2cd726e-9164-4bbe-a339-ab7060f3f10e", "sighting--a2cdbe85-5fde-47a4-a877-eb7de178cba8", "sighting--a487aedc-86e0-4c08-9372-2484c0005fd5", "sighting--fbf70304-ee12-4ad5-b1de-db53cb5caace", "sighting--eb165e66-b1ef-4106-a33e-73f406294b5c", "sighting--a915fc98-16fe-4368-9f89-6cd6c6ed6cb5", "sighting--b3f21d09-acfc-4a43-b314-1e17d06566a0", "sighting--620c28a7-203a-4560-83c9-add263695508", "sighting--36351047-a86c-45d9-be46-e51407efd765", "sighting--8fb422f3-ace4-4048-8ed6-0bb28b246f30", "sighting--2b863e71-960a-4541-bedc-1b5bf328cc68", "sighting--c8bdfb87-3f03-46b4-815a-ddcae5108c37", "sighting--487e8d7f-0819-4603-9db9-c1622c53a236", "sighting--e5dc8e9b-f57f-45a5-87c8-4095c9d59df3", "sighting--4ab05311-17ce-48e2-b8fb-91e10ee62357", "sighting--b8fc580a-6a5c-4dc1-970b-af7cac6867c6", "sighting--cf8740fc-8b66-4c9d-912d-1ebfc2baef59", "sighting--4e0034a1-cc39-419e-8f2d-ae1532f41ca6", "sighting--b76b2615-87c4-48cd-84bb-278267eea193", "sighting--08faf6ba-2517-4619-a8f5-8bec90c797dd", "sighting--89058cd9-2366-4b30-a377-7f45631a65c2", "sighting--fae6338f-8ef3-4b9b-b9f3-86854e43d314", "sighting--3ea0816a-eb33-438a-b7dd-e647af856294", "sighting--47564b46-a0ad-4ceb-92dc-e5caa136d1ee", "sighting--3e8efe1b-bb1d-4d6a-898b-5e6a88370819", "sighting--65e45aa6-c134-4c4c-b23c-4e06f5c3e260", "sighting--7ed96b5a-16f3-4fd6-af47-180ff60e60d7", "sighting--aaa1585e-f429-4f80-9f41-628570ad788a", "sighting--15574820-392f-4075-b543-a355a793d08f", "sighting--4b36439c-2b41-4213-83f8-d9e686ab5d6e", "sighting--933dfee5-3d73-4eb8-8b92-b062d490b458", "sighting--6090e1f8-f5ba-4ee5-9fd6-123a7b73cf17", "sighting--7cdf715c-8e70-45a9-8ab6-aa3fdd64a775", "sighting--9fbc3438-0f35-4c87-8755-6f2bf4cd45c8", "sighting--5dfbc154-bc0d-4fdc-858d-9e3d0d873d86", "sighting--7d31f9e5-7e45-4cde-a166-cb6989453dfb", "sighting--25deec84-cd70-4ffe-a15f-24a24324ba38", "sighting--9c56460e-ddbd-445b-b3a2-4a08eab29f1b", "sighting--d4f3aa56-9261-419b-b3fd-4d64a8da00f3", "sighting--16b188c9-efbe-484f-8e5a-3a764a2f00c2", "sighting--6d064bd7-abd9-410e-8c89-b25211fdf21c", "sighting--97a93436-09dc-4d26-a01e-b502e6df417d", "sighting--4aa8c965-9588-43bc-b712-af39a660f3f3", "sighting--79335f25-f1f3-4a83-8710-6f46b2e0fe9f", "sighting--1d9b7759-05d7-4adf-b7d3-382e8eb3c5cb", "sighting--f2401101-de21-4f92-8518-90674c677993", "sighting--d389f78a-26c9-4c0c-bb8f-a9a18e4101ba", "sighting--0583becc-6ce4-47ea-b3a5-b46d7868c8b1", "sighting--7f69930d-6427-4b63-9e42-94d1baa41d2c", "sighting--3abd8340-e7d7-485d-8bd9-3c89195fe364", "sighting--2ab83158-d740-4407-87dc-d74224ec1e9d", "sighting--ffa94887-a858-46c4-826a-31fdbc5ecd42", "sighting--f34fad4b-fd6a-43cd-b2e9-48e495c2b5f4", "sighting--a870b9b7-eaac-4391-a9f9-c9b931a13476", "sighting--1995f60d-864e-4cd7-890a-862d54cc830d", "sighting--a12f5c68-3ed1-417d-b1f8-93ee78d3b60b", "sighting--fbab8751-1dcd-4e4f-98a6-0d7eb10a91d9", "sighting--47117e6a-4cb1-40a1-bb46-793f1af27e6a", "sighting--11aa57d5-865c-4c7f-9d19-c083ce6f9b8c", "sighting--b53bc00e-7c41-438a-a45b-2037eda0365e", "sighting--197185b5-d752-4b69-a11a-a89e5c6148cf", "sighting--9eb9d425-e1c6-492b-8f36-24469448d1f2", "sighting--3414c3df-2290-4b0d-9b20-028a1ff49f42", "sighting--2903dfea-f5b8-4c26-b58b-7b47b3363bd4", "sighting--71c3b53b-2cb3-4593-b07e-7bc9bf710e07", "sighting--7c4db30b-4f83-428d-89f3-4045af24e6e9", "sighting--60f18245-f12c-4cd4-9b4e-6ad8af4c61f5", "sighting--04de61df-f007-4633-b53f-b3c347c2d759", "sighting--151b6d13-9687-4867-845b-a63d46a38874", "sighting--3109f4dd-33d9-4cf9-b313-824eae9537a7", "sighting--ae4cdeca-37d1-4b73-bc66-5b1db792bb42", "sighting--4efb0ebc-c5ea-4e66-ae9f-912e89d88d29", "sighting--b086dfed-b327-456e-89bf-09ddfa537722", "sighting--f6f28505-c05a-490c-ab9c-945a1a30d79a", "sighting--a7a776cb-506d-4376-8c33-98e74385cecd", "sighting--6b093892-8912-47e4-bd8d-d1aa0265339a", "sighting--a4022291-b75a-4bbe-a32b-aeb1d16ea585", "sighting--da11c3d4-a29f-46cd-8683-82a9bbc77a1c", "sighting--1a2c8f17-9ede-412c-9c5e-c5dff01b505e", "sighting--252f7373-7c41-48e6-a497-a25e2bb01daa", "sighting--9ab632de-33b7-43ea-b83d-548a2578fe12", "sighting--7d340ed9-8e4b-4448-b375-37d890b62976", "sighting--885debbd-bb96-4249-8dc7-95e99857b7e2", "sighting--edf2c4aa-b858-4428-a470-9f0c8b0c167e", "sighting--282ec86a-0bd0-42f4-b19b-5fe6b0a17961", "sighting--454ab1aa-b317-478e-8f6d-f6d4bee40fe7", "sighting--7185c353-500c-43ae-9509-b370d9a6a356", "sighting--947c8ea5-a848-4c78-ac42-5e1f75a98b7a", "sighting--d61daf73-9152-472a-b351-160b59150f9d", "sighting--63453020-02ed-4ae9-95c6-35ca61681b21", "sighting--62bab076-fd1e-453e-bb98-6b45b1947f06", "sighting--c8ce1695-b69e-46f8-a7ea-9b6a07eeea57", "sighting--12a95688-45bb-43b1-af56-daf8bb261e20", "sighting--dc70b0e9-6899-42f5-a29a-b025e190bf72", "sighting--f194b7ff-3a16-420e-ba3b-40eceeba4034", "sighting--f5bad16c-e79d-4ebe-b1ea-c1e94413a83d", "sighting--410fd61d-bb4b-4c5c-8d42-3fc5e47b2f92", "sighting--6a93bce7-6e31-4d1f-b583-f1190a3fa6c9", "sighting--7d9a0b10-d794-45ce-8b0a-bda5fd15d12b", "sighting--e6d556c2-784c-492b-a279-f8802336b6e6", "sighting--134b3398-5d6f-4f62-8c08-1acd962da7bb", "sighting--2d3c92d7-3f99-42fc-98ad-421d816a0f42", "sighting--103ff804-3cf7-4887-9c34-dad72e59f9f4", "sighting--83a6e244-d318-47a9-852c-d502786df48d", "sighting--dce472a4-adfe-48d8-a02a-605e62e7bfd2", "sighting--4ca61624-080f-4602-bd0e-261d070bd8cb", "sighting--12bf731c-69c3-44e6-a905-79bb47734b65", "sighting--3e24afbf-d107-44b9-81e4-47a26ab76a0f", "sighting--bfe68fae-cd21-4ff3-8915-9c192a9ecc16", "sighting--9b70c44c-b316-431f-8b9a-1ce0e29a9d32", "sighting--fd5df84c-f4e9-465a-966f-7dd830d60393", "sighting--ab0d8a0a-ea06-4362-ac5d-f79ea5897b69", "sighting--db94bc2f-2fb4-482e-b4a6-464ddef4e347", "sighting--d7aeb0c0-3ab9-49fa-8b70-900a9c16bfa2", "sighting--690b0f7c-b13a-481f-9a7e-adb43af35e6a", "sighting--47faeb66-47d4-4c33-981f-792fc70a9cc1", "sighting--ae6e2613-442c-42e7-898f-a4465f6ab5e0", "sighting--cce47d05-234c-4432-a0ab-ab26092e4c0f", "sighting--ff84d85d-bb14-4809-b086-f9fd04109dfc", "sighting--2332a934-031b-41cb-a769-22e6b555ff80", "sighting--41a9a3a9-0ade-4c83-a3ea-cdd0baa33646", "sighting--09c6c2ad-bda4-463c-b591-90db1ba2ee56", "sighting--c747ea2d-221a-469a-9e4a-cbee17079a68", "sighting--694a1aeb-1952-4828-ae44-bf56dc6dcb25", "sighting--ae5204bf-595e-4a51-8c5e-d1046738e2b0", "sighting--72217600-9886-4698-a41a-94fa02159419", "sighting--cadc9e4e-9ad2-43d6-912e-0873726d0954", "sighting--c42d94bf-d891-4fe8-80ad-4d3bb7cd2354", "sighting--5c3851a7-418c-4508-be2f-523e948bbf72", "sighting--dc51332e-8cb3-4168-9953-36ab0e9740af", "sighting--a3269b5e-f814-4b3f-bf3c-3321eb624d21", "sighting--04f763dc-31e8-4712-b572-5d44f6411e15", "sighting--3c02f8b1-6632-4613-9bb8-ad293b41c69d", "sighting--6a18d7db-5b40-4537-ac12-93f6fb3ba1fe", "sighting--1f1f29fa-86d6-464e-8577-924d54a8ad62", "sighting--4ff7a9b0-9219-4d1c-816b-e26814836834", "sighting--54c83c7f-b483-4919-b0ae-c9f22da5d15a", "sighting--caf56bda-276e-4b83-812e-dc99f66e824e", "sighting--9fb34624-fb58-4bb6-ba7a-24201a84f551", "sighting--847db710-afd6-4d59-a721-4b275796eda4", "sighting--36a0bc06-6921-4273-bd62-13dd8ff39cf6", "sighting--31290677-bb1b-41ed-b53f-ba8eaa0ce409", "sighting--15b1889c-3f3d-422d-8cb1-1170e69fb5b9", "sighting--a2dc03b8-5973-4d84-af5d-67d5a6dfa62e", "sighting--8d00215d-c93f-46ea-8fc5-39eff08c1f14", "sighting--54209cc3-8fb5-4139-890b-90f33d66c2ef", "sighting--b92f423f-5576-4483-b7ed-019709897a1f", "sighting--9f0425cf-49bc-4039-95c1-2ad2f3bbce31", "sighting--966a71de-42b3-4014-a900-34e285234f0d", "sighting--128134c9-0009-4e51-9fb4-489559c7480e", "sighting--de413962-905f-4e73-bf6c-522790f48d54", "sighting--53c98e4e-0fa0-4c5a-abf0-ee40fb38f981", "sighting--761c2541-d154-4dd7-a917-9daa1633acc2", "sighting--3b0cb918-2a08-4bc6-b224-fa251e066dbe", "sighting--df457e4a-a9ce-45c2-a564-f5ebcfc02934", "sighting--1486cbbf-3431-4cba-ac90-284072d6dde3", "sighting--cceb0f76-f988-409f-adc8-bc1cc877f854", "sighting--eccf23d4-44fc-433f-b610-ac5f47f3aff6", "sighting--811ded65-f82c-4895-a319-d4615834c6da", "sighting--7928cf7a-c1e6-4a76-98ed-c5df7154e40d", "sighting--56b0077e-5c3c-4d48-81c5-0e0b1019b043", "sighting--e0567676-a66f-4662-8b4e-4e6c1ced787f", "sighting--0961071d-bbdb-46ea-a937-f7cecc0f9b00", "sighting--2f26e83f-6a92-479a-94ef-3f4bb9f18e9a", "sighting--30424b07-87e1-4e90-a0d6-1340524d5785", "sighting--c400a949-4dd7-40d2-bc1b-782e0b07ca30", "sighting--f1cbab6a-b694-49d1-b285-ce7ac1cab19e", "sighting--906069dc-2532-41c9-a721-4ec26b240ab3", "sighting--444ed3c6-0fc2-4853-b4ba-b30ce2aaf8f8", "sighting--dc9fba47-93e9-45d0-80df-bb5f656a2c0f", "sighting--0f52eefa-3c00-45cb-b98f-b6adeca385a4", "sighting--c7121356-0b4b-427b-b8e7-3a48a0161f0a", "sighting--aa996e68-27d1-4223-8b3f-326df51989b2", "sighting--bc35947d-1e1b-411f-8a08-ffa6326d08ff", "sighting--bd6e2a9e-702d-4a22-8ecc-a7598eed5eb5", "sighting--87589e84-f880-4f83-8f4b-25b822edfe73", "sighting--cd3bcf3d-f572-4d1b-9b75-be38750d1df0", "sighting--b2fbcc4e-8602-4951-8e26-ee628b21d3ad", "sighting--a1b98d9d-7371-4ebc-a939-5bbd7bbae16b", "sighting--29e100e3-0467-4fc1-9476-3eb92b15522f", "sighting--a201cfe0-722b-413c-a558-56f755d3d83b", "sighting--8ffff3ae-91f4-4c75-8389-9a212c31da41", "sighting--635e8883-1378-41ab-8a6c-6d331e3ed6e2", "sighting--f9589676-0935-4ae2-802d-3acd7f792ef3", "sighting--996b2a93-6112-42bd-9505-72f7cdc847fa", "sighting--2c462c31-1fbc-4622-b448-707821e97b30", "sighting--47db3164-6e9a-49d7-b9a0-2201ced214a6", "sighting--629b9156-5daa-40da-8ae2-cf90fb92b0f9", "sighting--9db2f49d-0842-46f9-ae85-18415d94d887", "sighting--eb598ad5-5e7c-4f1f-80d3-0861e4a2c46a", "sighting--6179d30f-e3ff-4593-b74b-e0e4e3d82cb7", "sighting--ec62d2ae-cdc8-445c-bee7-76fd81216774", "sighting--ef7fcb36-d539-425a-b88b-d90140a2c2cb", "sighting--d7ecdb15-d04b-4bad-8973-dedc46ad7d0c", "sighting--6ca6de2f-0af8-46e6-a1fa-dc2d5a5f7f32", "sighting--b8caaaa7-265e-4a96-b1bf-039e91b7446f", "sighting--99f7a6e6-ceb2-47d7-bdf8-8c34f1b28bc8", "sighting--e2e2f47f-5016-481d-994d-66e7482d80e6", "sighting--d39d7577-cd29-4899-ae77-8076a7cbc53b", "sighting--5e29105c-1f59-4a2a-9c77-9825c28d4bfb", "sighting--6d905590-55a3-430e-a5d0-c45a54633880", "sighting--f2c1380a-eb7e-46fa-954f-49d5c9ae47d5", "sighting--a99faf3a-d551-42f0-942b-2e733add7941", "sighting--a6e960d7-4999-4c13-bfb7-53c93bf0d0fd", "sighting--ee00116c-643d-4a3f-b315-29dfe7d1e9d4", "sighting--7d15682c-1fd7-4c21-9753-cf1eaa4eee17", "sighting--8d3b7c91-9621-4c6b-883a-1938f2910b25", "sighting--3d03f25e-62f4-4a84-bf19-db8498e06640", "sighting--ce6cb5ed-fc3d-4e09-8ea3-252815ac5a4d", "sighting--afef8c90-c02c-4e17-9bc9-e36429d3b0a5", "sighting--0e774ef7-e5af-4b2f-a5e7-bcfc40df92f0", "sighting--40fe28a5-aa01-4420-aa40-1a2a48e832cd", "sighting--4d62489f-0ea5-46b6-b280-6e433e0f144a", "sighting--e1fd8a94-36f7-4f93-acb6-4c6860f5d31d", "sighting--91aa61e1-1617-4aff-8962-9d112544cec8", "sighting--e1346d4f-0312-4514-882f-ddb955809a06", "sighting--da5349cf-926e-4a43-8a87-e59bd49dd6f0", "sighting--341d1d55-9b46-4f07-9e38-fb2ef86e4037", "sighting--78eeb425-b1b3-4568-a0d7-0ae39e9308dc", "sighting--d8852f23-942b-4968-b427-d45990ae9d27", "sighting--37639a60-64d7-4130-a27d-0c03c2e93148", "sighting--664bfed5-21af-4ae4-9985-e5c34a571941", "sighting--bd29ec64-7760-4982-a8d8-7b2f6c7c75b6", "sighting--c28a530b-d61a-49fc-8369-e11693ffcdf0", "sighting--a8046cd6-d230-4f3a-97ae-a1c922087fb6", "sighting--084acccf-9b16-4a37-81ec-343c3cb1c449", "sighting--0ada3e7e-b9a6-46ab-b5b6-02e3cf5e8539", "sighting--b87a2502-16f2-43a3-b2b6-0916cc5aade7", "sighting--dd67d4d4-a55f-44f8-90ae-cb11c9ee349f", "sighting--7415e13b-c099-4ff3-8722-951dd99e27e9", "sighting--be35e1a5-2387-436b-ba5d-966d010d8a1b", "sighting--c96858d3-f17a-4780-bb67-d0e9d1fbe7ad", "sighting--c860067c-d94b-40f0-8353-ebde14543eaa", "sighting--afda5544-5190-4692-ac2f-71136fb981e3", "sighting--7ecc9bb9-8ef4-4b27-9e47-0a2929c0bff2", "sighting--07cb2135-7ae5-402e-8431-83ea554640ed", "sighting--f7d6d4c3-a2ad-444e-80f9-9120d570e941", "sighting--1b5bfb99-f0f6-44cf-aa65-118a0dd9005a", "sighting--edaced25-4c8f-4537-a665-188bc552fcf0", "sighting--e2b4850e-a45a-4bdb-9aed-0243e01d53a4", "sighting--680c0113-9c38-4eef-924f-40c614a40a00", "sighting--5ab2325a-184e-42e2-84f1-b1e9f76a2013", "sighting--388ef3a6-bc02-475d-9aa1-e87399c49a90", "sighting--87f29924-921a-4f74-9274-4ddff1918336", "sighting--554ab04d-68fe-4a1d-a95b-14373192332b", "sighting--c9ff14df-5dc4-454f-adb8-f5f35ba5f079", "sighting--f6be78ed-03a5-4f12-ae45-3aef10ce7519", "sighting--e661af2a-52fd-44c5-8e1d-48f4ab0ed8dd", "sighting--97a8b072-39a5-426f-9cda-cabe49e1ab08", "sighting--28d8660c-f67b-4a58-9e7f-25c7844c8b6c", "sighting--e82744d7-22cf-4726-87ae-b8e54df4fa47", "sighting--e30fbe42-f782-4683-9606-76efeed4d323", "sighting--c507758f-ba61-4ea8-82f3-1511bf87472c", "sighting--238c12c4-cfe0-4941-b5fd-b9500b7d4252", "sighting--0e60d423-53ef-4680-9af6-bb7d3da0d617", "sighting--75561a93-1c45-4f5b-a629-c7bedeaa0b06", "sighting--ebc10629-e699-4ea8-b0e9-a4e17bb97788", "sighting--42bda94b-afa1-4440-8fb7-84fe4e84ca38", "sighting--2c771477-de15-47f8-86ee-b56e52743335", "sighting--e88f73bb-0e1e-48ea-9b4e-022b4d1cfb9f", "sighting--fd99ff5e-3c3c-4f5f-b62b-acc7d3c591db", "sighting--75e4a054-f31f-4b37-83e4-b99b9aeaa38f", "sighting--89904965-6347-4ce6-9391-060f7d321201", "sighting--4b953410-27c2-4062-b58b-289ee86685d1", "sighting--c3f89b65-9ea5-4f86-9d5d-83a82b85858f", "sighting--5b17c36e-ade2-40df-a970-dfcf34a9fc4c", "sighting--cd9e50e3-de0e-40f6-87dc-821604b9a789", "sighting--53dcbd00-e63b-4cdd-ac0f-72d125340300", "sighting--38795f68-ca94-4340-bf79-18b692c15277", "sighting--af230a35-d8cd-4173-ad77-843e08f364d1", "sighting--2642341d-ce3f-4626-9536-6f4573e67635", "sighting--eb0f5792-0c6b-410d-9fd4-1bfbbf3ba937", "sighting--d9e72ee0-2683-4bf4-a778-cd3e782941de", "sighting--4e2df315-77b7-4515-959f-fdc14ad86054", "sighting--af30be7f-170f-4d0b-bbfa-10c905f6239e", "sighting--59dfd7aa-9092-46e9-8858-65744f452561", "sighting--3242f6dc-8c7f-481e-ad55-2512fd5e5852", "sighting--5f8ee83b-f269-40f1-9d7f-b5e518c0758c", "sighting--0f96ecee-7a10-4ba2-bf3c-57e2a5592b7b", "sighting--55380d29-c048-46be-a33a-091fe3b3e9d7", "sighting--4a025666-21db-4e15-a83c-859f7ccababb", "sighting--06511030-1de1-4790-84a8-a47916750763", "sighting--b56cecfe-86b6-489c-8829-69bfdd045f0b", "sighting--29f92cc3-1db1-4ac6-b0fe-1a025d64111c", "sighting--048e019c-b534-46ca-b278-f3a5e6be35b9", "sighting--d4f42613-7555-4427-9a93-798660682163", "sighting--e13546c1-c3c7-4bb2-b246-fe07617c80c2", "sighting--434d1617-615f-4aa7-8f0f-96e2e1dc4ea0", "sighting--b00c4633-f234-4124-8007-47575702ac78", "sighting--c7607f6a-421e-448f-b860-c0439371aa77", "sighting--9cc6c2f3-0223-42db-8337-06b5093b41b9", "sighting--5b02da7d-85e8-4e0d-9581-ad89729b30fb", "sighting--0796a8ad-7357-4b8d-8ec2-3b1133bb7360", "sighting--ff5fc6b4-e1ee-4db6-b6bb-380db91f8080", "sighting--38445287-4757-4f6b-b17f-73965f645f09", "sighting--80e7122e-fdd4-4dae-b5f7-71eaeff8c844", "sighting--862b2ab1-671b-44eb-bce2-f183b3d738ea", "sighting--f4eda27a-4792-46cb-8393-853280d8600e", "sighting--b47899f2-6580-4197-8799-5a6b7f09c70c", "sighting--31416330-41b5-4cd2-8087-dcdd6bf40b9d", "sighting--eaf5821b-e7c8-4fb4-8d2b-7f989f6eb247", "sighting--84ebe37d-7e76-4752-950d-38bdf280105e", "sighting--9dadf7fc-07a0-4a25-9b21-eb3b5f11715d", "sighting--2d8aef94-ce32-4e22-bd14-f4b15d760f6e", "sighting--5200615a-1ad6-4770-94bd-544d31560ee0", "sighting--01796218-d047-48cd-bbb9-7d8e82c07227", "sighting--c356fc45-2cf1-4cc7-afd2-6b50f6af813b", "sighting--b001c124-6307-4024-95a6-21caf3b00cc6", "sighting--d375f661-e4f3-4706-aef3-55bf070b5762", "sighting--884e8091-146b-4b28-86d0-29925947c993", "sighting--0a25a3c3-c7c3-4727-8038-2aa13c3e4b19", "sighting--b39231c6-c35d-4b5b-9ec5-6948970ca8d3", "sighting--aed5ed50-c2dc-4bb9-98bc-f81137aabd38", "sighting--409baac3-7e3c-451d-9714-3c61a4facd4f", "sighting--87c10c5e-8825-47b8-b1b4-f3f50e426519", "sighting--5d8195fb-f79b-46ad-885c-d3c7cc4e0945", "sighting--5169aabd-aae8-4a12-bd1c-56217667e5b0", "sighting--c829ec33-1ae5-4239-8ea0-6dbda68e1bb8", "sighting--d2835c50-359e-4b6a-bdcc-584543aeca56", "sighting--f4e86d34-9529-478a-b921-adf7a54c6b20", "sighting--58424767-fb36-4fb4-8edd-43a1fa5015bf", "sighting--5ceb5b4e-b7d1-476b-9eca-4aeae7790f5c", "sighting--577bf2e5-c4fe-4e8f-8df3-e9be38cac097", "sighting--11075773-a628-4390-8b22-d84c32a2f6d1", "sighting--770e3ead-71e0-4a67-8ae1-0ad26a70dc33", "sighting--9ab219e7-b951-4a42-b235-1092caa8b511", "sighting--e57b2fe3-c5b1-4589-98da-db77055910d4", "sighting--fcd3aaec-6846-4cc0-9037-4b7e3bab5894", "sighting--fdba40f5-eb3f-49a9-8e75-e82ea3393eb4", "sighting--601dd65f-19c4-4a8d-be6d-b28517e8b531", "sighting--c0f4b3a8-b2f3-454e-a745-65d1aea91263", "sighting--f1f6d667-c756-4f13-8cba-32448be0b3c3", "sighting--86079c11-f99f-4c8b-8303-397df69978e4", "sighting--e8e674b5-767a-4465-b69a-b3e0fede91e7", "sighting--72b8c860-5428-41b4-8b5d-2b04db4b259c", "sighting--7418693f-e2a6-4159-b7a8-b7756e1f6890", "sighting--1101966d-3466-4a73-ab93-264b2a8a6644", "sighting--3218aeb4-4477-435e-b86d-cf20705355af", "sighting--4388b3cd-61c4-4c5f-861f-d22a2d795f3b", "sighting--4a529b64-2850-4f67-a952-b389f37b3d57", "sighting--840b092e-f6f8-42d4-817e-abe877480923", "sighting--0f7e917e-b16d-41b8-83fd-7aac2fec6c9f", "sighting--d17560da-3188-4814-96b4-0f9db5a7c9e2", "sighting--1ad6ad69-00c0-4f2c-bab4-c6e95e277842", "sighting--5a0d2d74-088a-43cb-bcb2-6aa6f2a2dc33", "sighting--0a3892cf-18a2-45b5-aaa7-af7f1dcc9514", "sighting--2a5ff098-f637-41b9-ad08-d26c00a4b6c2", "sighting--77ea0b2b-5bb2-4982-b346-9e70a78fe628", "sighting--4defe8b0-1ff5-48b3-bf04-fac7ea951d9c", "sighting--7560ac14-23fe-49fc-a92e-2d917e1b1c6f", "sighting--593c4542-3869-4518-94fb-83a960b6c993", "sighting--d7effc46-1bc9-4623-acac-354e8b4fa56a", "sighting--7ecf89be-535b-4767-affb-aeb206be2663", "sighting--b15cb5c8-9c7d-408b-ac22-488e9da22256", "sighting--70cc44d3-de2b-4149-82e6-5d47a5cc5af7", "sighting--e8c5b6f9-ac60-441a-ac57-18b74cab1987", "sighting--a1be3400-73fb-407e-8dce-0e10baabe9c4", "sighting--5c4c4152-eeb3-4734-b6ec-b1c4b2effa42", "sighting--60a89bda-2a7e-44da-a008-bbb552ce9367", "sighting--af652381-8149-4e80-af37-3c5d6979e85f", "sighting--31d9c48b-0be9-47b8-8537-7ec22952bc98", "sighting--6fc2b020-3a7c-433d-9b05-0dceb0d727ec", "sighting--5b0368f0-b381-4a43-9543-51a4c75b52b4", "sighting--75c934de-1b11-4c93-abbf-b6d1e900c2e8", "sighting--bfa3b27c-b8b5-4202-94de-a3e62d65784d", "sighting--80656377-e627-450f-ab4b-a3ebb6ee9175", "sighting--abda8c59-ff0a-459a-a6be-94f0b164df37", "sighting--3c2784da-bd8d-4c2c-aa8b-28f0b87d5d09", "sighting--204aa321-19ea-448e-8573-7b7eb202e106", "sighting--68689945-ee24-4050-8cdc-d33790b96881", "sighting--4fbeb026-8a02-4139-97a5-53a9e8376c77", "sighting--de0a0da0-86b7-4f57-b123-a8e1bd023a48", "sighting--af91f298-6381-4ca5-aa0c-cb42545d8ab8", "sighting--02f74887-7cf8-4df2-80dd-f37eda3efb37", "sighting--93f65615-3c88-467b-bc97-3165176f4af8", "sighting--1e057ed4-0172-471a-83bf-0d904dd43bc5", "sighting--80336f8e-7325-4ee8-87c6-a478afef2485", "sighting--31d4b01f-dcc0-41d4-ba45-1ccee8e5af86", "sighting--86488f09-0d7e-4339-8278-3c4bafc5205b", "sighting--d226c7b1-ba2a-444e-9449-169076717420", "sighting--c6945cd0-1b9d-4c4f-b2b3-7bd2cf1731ca", "sighting--765aea9b-dccb-427e-9bfd-9fce321d396b", "sighting--c9873e77-3e19-4deb-bf86-2e9a45973d4c", "sighting--1e038047-0862-4ec2-8415-b830d72f9ca9", "sighting--005b563d-a0e3-41ee-b143-0b6e77868bb8", "sighting--08964e3b-453e-4fa1-bc2a-ce07b29873b4", "sighting--620977d8-6302-463e-9e1f-7681d3cf3087", "sighting--561df4ae-528e-4270-82eb-19a57d94cb95", "sighting--d2225d36-c527-4e24-8255-b587cb4076ec", "sighting--9c099c00-a4ab-4774-8d65-8ef371cf8bed", "sighting--eb0a6907-1a77-4d46-aecc-cd6684744abf", "sighting--2aae5c19-9be0-43d4-bd97-b248b80fe21f", "sighting--59c47930-090f-489b-a5be-de2a2e0104d2", "sighting--2ab28213-ef30-4b35-8dba-693642d6c16a", "sighting--d9b857cc-f9ae-455f-a3fe-6d91f1421fcc", "sighting--2282dab1-96b4-47e7-ba4d-ba530c21a37a", "sighting--ca3d5fed-c40e-4c41-9add-060af29b6efe", "sighting--54609989-8cf8-4eeb-8b19-8e11f3c3a835", "sighting--5b9b70af-99e8-43c2-a059-b9df57139982", "sighting--300a7bba-0add-49ba-89bc-1c29a9984726", "sighting--8f30b84f-e062-4b1a-8e42-fbb7018e8da8", "sighting--9de730bd-2026-4645-b7e2-5ae526223bf2", "sighting--7547b976-1cc6-430f-a7cd-b182195f10c4", "sighting--4a2c8e68-64f1-41c3-a70a-0712c071f958", "sighting--aa97e494-04aa-4a85-b40e-c5ac7fe3b705", "sighting--96ef63de-85f9-45ab-8871-45f0c904b8b5", "sighting--ea3ec446-2168-4955-846e-d91de3c12587", "sighting--2d4683aa-d0d3-4885-8ab4-0233b7b2ae69", "sighting--235d7317-5a3e-49f2-ba66-bd09e806d9a0", "sighting--f9d5e505-0bbe-4141-9672-0429b7feb367", "sighting--eb16e94d-3ab9-4c0d-bc86-282cb34cb4f4", "sighting--d6a1a4ae-2126-4ff9-a45c-6d8992e5ab1c", "sighting--907017d0-c9cb-4aa3-b674-6a2674cfbc69", "sighting--de8e1b79-e6be-4c12-9daa-e3980796a564", "sighting--c0364167-c27c-4f89-a09d-fa76c9a83621", "sighting--545369b9-b481-475f-a64f-d26e7424a731", "sighting--d06db5a8-d365-42bf-b5eb-52bf57f86186", "sighting--493fa2dc-9f16-4849-b596-5afb43932b0e", "sighting--0a69b3b7-9f39-43e5-a35c-3aba6f02bb66", "sighting--9cc9ff96-1429-4a0b-9975-78d4872711c7", "sighting--0179410b-c574-426f-bc47-d8b416f8a084", "sighting--568a1d69-723c-4a0c-b1fc-f03881e18297", "sighting--2efc36cd-7f39-4c9c-b64d-040eb1dd7d1d", "sighting--b09b571f-1263-41e1-a9be-a6eea0e1d230", "sighting--2e9bb0aa-a011-46a1-b632-944bf1027f90", "sighting--bbd832e7-6b5f-4b38-8892-861a1b20413a", "sighting--9c0e60fa-4220-4926-be6c-66fda21fd223", "sighting--7f69ceaa-c534-4011-b532-a05cc56b6382", "sighting--993ea08e-8552-4c95-87f3-09635cf29fb7", "sighting--9804788d-ca05-4bd5-a0db-fa93bb63e541", "sighting--f7020f1b-f442-4ad5-aea5-c2b73fafa7b5", "sighting--20524e58-5045-40ae-b269-1cc8657078a1", "sighting--fd8346eb-0fd8-4257-89e8-804242b7caaa", "sighting--2b6d3aeb-0b64-47fa-9a59-e51a189088bc", "sighting--fa5cefd9-6e2e-4d89-804e-82c1bb552c45", "sighting--9ed88d5c-db46-43e1-ae68-fe71aac52f7f", "sighting--a4b0d716-9437-4280-b8a6-4ecd83b7ed9b", "sighting--442cdfa6-94d4-4602-b3fd-ff331c9bfe55", "sighting--7aedd0ce-794a-41fe-9324-4c42b8a41565", "sighting--2e7f985a-13b5-4ed7-b293-ae3c5fbb7ff4", "sighting--ec4abadc-005f-49f1-8839-15871fe18416", "sighting--41191836-a144-4c38-a645-5de76594258b", "sighting--41175bbc-cd06-460c-a923-69e533c15311", "sighting--35c73bc5-68e0-4c1a-8612-f77ebb49436e", "sighting--b6c657cb-b5be-4518-b635-584f543df1ef", "sighting--8dcf709a-63bf-4398-96c8-d913afe9ca8d", "sighting--b3a9699f-3ff4-46e9-8f0d-f89fc95b1dc6", "sighting--9550d6e0-bf15-4b24-a2ea-a9a1fc6543a9", "sighting--a28b7803-13a7-4a9e-993f-6758a6eb95c1", "sighting--561a34c9-aae4-423f-a1f3-5c630128482f", "sighting--38d43a27-58e5-43b8-94b7-6e5fbd1afd4e", "sighting--6deff77d-ac44-4986-a562-aa9957488c83", "sighting--05bd8fb3-06d6-451d-a191-1fb73eeaa1fc", "sighting--48a06327-e1d9-4083-b115-a81d6c9ad5ca", "sighting--9b280d65-e091-4192-a46f-ca1809c7f66b", "sighting--58137345-5c75-4a1b-a9af-1e1faeeb5efe", "sighting--38ba3d04-1d33-4dd9-a016-81023456f6fb", "sighting--b71f4523-7480-4c34-b928-432e116503c4", "sighting--47b40b49-5fdb-435f-888a-07c2d81f53e0", "sighting--7667fde7-abe1-4801-8a3c-f1d4b4a0c74f", "sighting--334e5ff2-bfef-4efe-a832-f7a15464be14", "sighting--0677eae4-7cb4-4dac-9d8f-fb6baa0b4803", "sighting--7bb49b79-50b1-444b-a2a1-7f1a91372b06", "sighting--dde55ece-984e-4906-afb9-4d7535c4470a", "sighting--7aee4364-e78b-459c-8652-b5816855c38b", "sighting--f012026a-e009-41ec-a1ea-a2af24d0efa9", "sighting--05a63091-9171-47f3-842f-d2c088fe69c6", "sighting--f169b780-6698-47a8-b309-ccfc225af271", "sighting--9871fb6d-92b3-4841-829b-de57aa2f85f9", "sighting--f91e8d7c-1e6a-4c7f-b7e9-b2597d9ace20", "sighting--e8da9120-a859-4c0e-a3fb-a4bdfdc9e57c", "sighting--ad348d36-abb5-4d60-9559-90a1c64b0159", "sighting--dfb54acf-cb70-4054-9926-b628f00b587c", "sighting--d91ff3d3-eedd-40c7-94d1-67714ebb8d88", "sighting--3807b784-ca11-4134-9033-c040a9cab3cb", "sighting--e24850d6-258f-41c6-bed1-4c19859e0f2f", "sighting--a7d5e7ec-29e5-48a0-9278-5c06ff510438", "sighting--d612cc3d-f669-4517-b4a5-42f160abd0a1", "sighting--1875caf1-3bff-48fc-a5f7-050607e184f7", "sighting--17ec3f58-c703-4983-9e2e-f32eb59f0327", "sighting--fdcec280-4c74-4568-86b8-7a3019e17678", "sighting--eb4de2bd-93f2-4543-8e20-0c67d9cce357", "sighting--42f7df0e-3f65-4a32-9701-d886f1616b4c", "sighting--3f4aecc1-f20b-4e17-b915-e14ad4f0c13b", "sighting--17920dc8-8f23-4adc-acbc-bdc3fd019f08", "sighting--7e0fc5e1-e18d-453b-adde-fc94f716211e", "sighting--5cbb6e39-735f-46f9-8cc8-cb238d539623", "sighting--986bef1f-ae74-4406-ae02-cc01f1859f77", "sighting--58780bd3-8d97-47fd-9dd8-67138bfa1ac3", "sighting--5a8b1d34-fe8d-43ff-a252-1b135964bdd1", "sighting--e6a692f1-9f1a-4a8e-ae9d-4788516e0703", "sighting--19736b62-c9c5-42f9-ac07-5eafe64bf326", "sighting--cd5ac711-df71-4df4-a939-1c7305e7c33c", "sighting--1c5ba175-ee20-4a6e-8cc5-710f6a81c748", "sighting--0dcc9f34-c4a3-4906-adc4-a9f55ac8270a", "sighting--0e6a183d-210b-4125-ab59-60e9d5d12335", "sighting--4c6ea06c-02bc-4094-ac26-9060d739420a", "sighting--a7b0c5fe-04ee-40df-8b4e-14ccb817a6cc", "sighting--fdb332fb-43ee-4d40-9db3-01c4069064f4", "sighting--13e59265-b034-4500-9c2b-83877416d1ef", "sighting--16603021-cab3-446c-9959-480e0082530d", "sighting--4b2f6d2d-2f56-4e72-9b6c-4a658baa7896", "sighting--88ece4f2-2671-421b-91e6-b1debfe5b903", "sighting--910889ff-39d9-498f-ae7b-344152b889f3", "sighting--91bb31e8-87a5-4163-8b3e-3bf0391df3bf", "sighting--e0670eaa-4165-434c-bb58-59f204a84d33", "sighting--05eaec4f-19dc-4cdf-a977-acb9fae83492", "sighting--a50c2c49-1ce7-421f-a946-b6baac4de93c", "sighting--83fca26c-a0dc-40db-bda0-96f7e376568a", "sighting--2e5124a7-c3ab-4778-bfef-c637567949a4", "sighting--7954446a-8b08-40c0-9fbb-4a5bb38fb2a2", "sighting--76f5fc89-8a32-45bb-a799-ae6cb27dfacc", "sighting--ea62f2cb-6fcc-48c8-86a9-cded43dadadd", "sighting--7b4b482b-5969-4f37-b213-507ffda5b443", "sighting--bfdb8d6f-b4ef-4c26-96ad-9d21a8dfbf0c", "sighting--01bf3be9-30d5-4861-8bbf-69877554f43e", "sighting--925b40aa-3b10-4fb1-abad-863b453f97d9", "sighting--8a2ee0e6-e982-44d4-b39f-875d34eee7ab", "sighting--6572e20b-c5a6-4be6-96b5-0c495b15c8cc", "sighting--c63960b1-1f79-4db1-930a-0f9b89816365", "sighting--66bbc1ce-bb39-4528-aceb-06a56d55bf1c", "sighting--5bb72a28-990a-426f-8ce4-e3eed9975cb2", "sighting--06b7f5d1-97a2-48c3-bda6-72132ffa9454", "sighting--7f2b9953-ee7e-4e21-8999-ec9ae2d7f54b", "sighting--6025943e-8c42-413c-89d7-f14213b4499f", "sighting--efb657fa-72b9-41f0-9a28-b981305c9100", "sighting--65c00913-dd2d-412f-b1c5-2b4a41f88d14", "sighting--e0c9abe1-7cf9-461b-a605-0cd5c64612ab", "sighting--93674e04-d0dd-4a09-b3d9-d78735431bfb", "sighting--cdf25780-b402-49ff-a0f5-06d9c9d21241", "sighting--4a2e7ac5-63f1-448a-8eec-a98e0f0e82f0", "sighting--f2871813-66db-422b-8bda-418848b8c537", "sighting--72e58d25-f4db-4d25-9959-3f50b4c360b1", "sighting--043d3b89-9b22-4d0f-822b-eab975f94e67", "sighting--b2b5be1a-f971-45cf-97da-3dee6035f11e", "sighting--3899174b-9643-4f10-b191-5d4f1c6dd0bf", "sighting--b4ea06f2-5bd2-452c-8399-57e1da7db425", "sighting--3eb64a8f-567b-4263-bd08-aa5b935a4f3e", "sighting--8d16784f-f0ee-493c-a430-50eab3655cd9", "sighting--9aaab218-8d73-4015-bdc1-7f20fbfcadf4", "sighting--bdc18f57-ad82-4395-886b-f780dd5897c3", "sighting--acfab11f-059f-4096-92ed-42c353d5fccf", "sighting--a70970e0-9bfd-4165-95b6-ce0573191684", "sighting--4835d1cd-2925-4fc0-a71d-66bffd4c26c0", "sighting--a078f994-3767-4872-a40c-92b435c02a36", "sighting--1d2880b0-dee6-437b-98d2-627932041a1c", "sighting--84d031e7-f825-4ce1-aed8-994541a4bd8d", "sighting--06804143-9667-4e8f-8871-0263d5e9c416", "sighting--fb30616e-4904-4f80-893a-84b900267a8e", "sighting--74befb47-0de4-4501-84b7-45d569baeafd", "sighting--c93910df-ef98-419c-9972-e4a7d73523fa", "sighting--ea5b04eb-1892-423e-bbfe-53baf340ede9", "sighting--038d37a7-1ff5-4888-8f37-5abda7d266a1", "sighting--e17827b0-44b5-4b31-8638-2662b333c8cb", "sighting--9fc5f24b-e46f-4bff-a79c-5cc17306030f", "sighting--1c89b44b-ff7a-461f-865e-29dc27b208ad", "sighting--9bec65e8-8304-4e35-9fe1-8eb02de2d039", "sighting--cb5854b3-0f21-4e5a-9773-6515465a8a23", "sighting--ad19aae7-c273-4277-8ac5-1c6494edc870", "sighting--e3e95d0a-97dd-4409-b844-681be6283841", "sighting--e5c31266-0bab-4387-8418-9c54a80db6c3", "sighting--9f7cb822-f91a-4e10-ab41-af53eb17deed", "sighting--3d817df7-ba1c-49de-a1fe-9926d5e251db", "sighting--e6fc3151-b3a2-4b07-adf3-ef20a8e785e1", "sighting--c0bde946-82f8-4e6c-8a9c-77a5e1ade188", "sighting--9521d19f-8289-4676-a63a-e044b3c55a4b", "sighting--9e47f1d5-3281-40d5-8295-c337e2be4f85", "sighting--23ace08b-2f62-4ab3-9d59-2bfd814fefc9", "sighting--56046b7a-ecea-4068-9a32-e9673ce40183", "sighting--bc0681c8-d970-4686-980f-2c3c4304f4b5", "sighting--7ce98530-e16e-46f1-a1ec-535a9c78d982", "sighting--c08269ed-7edf-423d-a040-acffad80fe4d", "sighting--75ca4206-69d6-4e5e-a99b-8920533c51f3", "sighting--31eaec9a-de9e-4b0d-85e6-e468a7f73e47", "sighting--1001badd-95d8-4dae-b2c1-1476d5f71258", "sighting--78091758-0122-430a-ace0-ba0c223357db", "sighting--58a77720-3082-4db7-aadf-d17da8180aa4", "sighting--c1fd7eac-7ced-4b69-bc22-e91fd068ec1c", "sighting--ddbc5a71-5010-4b8a-b6e9-aaff9d375747", "sighting--002a6005-ea76-4a98-a56e-8a3745c15e9f", "sighting--9c411a3b-b59c-408f-98c1-db05217b7f6c", "sighting--3a178a4c-5ea8-4b36-9368-e7c7f08f94d8", "sighting--9becadc8-8a13-45ae-a7c8-ce603a389f35", "sighting--99e71cb1-cb49-4430-896a-271b574cc21b", "sighting--6b0327e1-af12-4ca4-9bb3-4a110bed6686", "sighting--a4796052-f494-4b37-b0ae-db804a3e952b", "sighting--f92755d5-a126-4dbc-ad30-a577743f731e", "sighting--1649c2eb-25db-40af-9c0d-dd59593f352a", "sighting--4bd90256-7793-4a9a-a695-9ca98651c9ce", "sighting--118595f2-a234-4b1a-9c15-98d2fcd638c9", "sighting--bb2ecb29-016e-4016-b5b1-9a0e1971332c", "sighting--8b633a4c-89b6-455f-b663-f5bc889caf7d", "sighting--0bcbeb50-4ab6-47e0-9b95-459658f269ba", "sighting--e3f55086-69ff-4265-aecd-6ee25f09531e", "sighting--e5132daf-3af7-4b43-8c08-7233752a4102", "sighting--28625557-db66-4b0b-aa45-9be15158c547", "sighting--5037b0bf-b91a-469f-9b5d-89d49941bd55", "sighting--2697d438-e3de-4462-bdda-dbf7869f04e9", "sighting--bd6989ed-6f9b-434b-bf4d-db0a9f48a6ac", "sighting--62fd04a1-fcf4-4e55-ac58-056d097d70ac", "sighting--2ad667dd-c265-4aca-b4ea-c703cb22f155", "sighting--2cd604be-655c-4778-82ff-06ad92779139", "sighting--86058943-40a2-4f23-afad-f40da71d31ae", "sighting--a54cd3e4-5e18-42d3-9754-64aafa790d26", "sighting--b3b0d70f-fedf-43ff-bb3a-edfb0f0131b0", "sighting--71ca1cec-d93e-43e9-9ce4-6ef1244b763a", "sighting--df2b18b4-450f-4f2e-b4a1-4ddf1eb496d4", "sighting--34f299d5-2cce-4da9-b9e5-9d317724058e", "sighting--1d8b2b58-38d8-468b-b1c4-1ed3792584fd", "sighting--1cb6ea18-56c8-48d0-82c3-a4e95ced24ed", "sighting--b40dfe05-0343-4ea9-ad03-e923efa968bb", "sighting--9d957c48-9479-4a30-a259-486dcb402f21", "sighting--8cc56b1f-28ee-4eaf-a9a3-1ad0acb6d103", "sighting--8e7f211c-63b3-4984-b80f-c66972f61682", "sighting--29fda91d-6147-4cb7-ac90-440fa83832e7", "sighting--fd452d15-8a06-4aaf-8562-cab4ef7e10c5", "sighting--b5063014-2cff-4f40-a390-ec22adc16a9c", "sighting--180ec872-2912-45af-b6d9-a2949a94798d", "sighting--7232b370-83dc-4f05-a37b-68ef13245fbc", "sighting--dd96d4f6-a650-47c4-b770-527bb6260ae5", "sighting--81f368eb-cf7b-4ff3-8f6e-19c23b5aafe0", "sighting--a3ad3ede-b2e9-42eb-8308-ca06d5d5e9df", "sighting--93245646-b93e-471a-b0c1-5d4920ab5afe", "sighting--2e8bdf2e-bad8-448d-942e-ad38b540f43d", "sighting--be119499-b0f0-403c-bdeb-a3e4d2b9aa52", "sighting--898a1899-8e6b-475f-8b23-9f8682eeb197", "sighting--52665355-936e-4c23-958e-ff772209d533", "sighting--4eb7c785-9925-4b59-a8c3-84207b5b4b24", "sighting--dbd793c0-2ed2-41c3-b358-358b711f6e83", "sighting--d5b034b9-899b-4114-bcee-c7ffd1db0def", "sighting--d71d01f7-2456-4155-8299-4e41bf1e24b2", "sighting--46651979-55c9-4414-a0de-4808956187a5", "sighting--cf3df502-a991-4985-b651-e57653a45f91", "sighting--e0bee35b-a0ab-44fe-9b6a-ff780000e9a4", "sighting--01969cf1-f499-4a62-8c41-e564ef3fb83f", "sighting--cde79b50-75d1-4497-b880-26ed380b886d", "sighting--0a3fc346-a1fb-47a3-8c60-f6db65fe22d0", "sighting--882f12df-bdde-4b25-b63c-a525da424ba6", "sighting--f06f5e1a-a4e8-4a2f-a9ce-3e2bd8653bab", "sighting--4dc42af1-131e-455f-a7aa-1dc97d6d15a5", "sighting--7691421e-f69a-43ae-96fa-89718911c5dc", "sighting--686cfad6-2e5d-4e1b-88bf-4b2cd96edbaf", "sighting--36a3646c-3227-494d-9ed3-3a02eb986303", "sighting--fe0faed3-e667-451b-83c4-573621359225", "sighting--79df699a-95da-47a4-81a9-1529c332ce9d", "sighting--f16f8a22-70fe-496f-aaa3-e47d16503320", "sighting--0b0f270b-fabb-4022-881c-0f1925824d75", "sighting--b52f8281-88ec-4e83-a0df-1876a6fe22b3", "sighting--cdb39f49-5aa1-4eaf-916b-a126c8f5507d", "sighting--da2f8806-00ba-42b1-ac2a-5cbccd3f713a", "sighting--d51a02a5-ba17-4f18-adef-09a6b7c7dc84", "sighting--c1cfcd82-3781-4e05-a53d-5d70d4a6423f", "sighting--95f01f76-c2fe-465f-bf16-96195f22e12d", "sighting--3d123124-84d5-41e6-9048-0bcd75bac374", "sighting--3e10e827-cddc-43fb-88a6-aee9403ff036", "sighting--2a3954c4-1255-44f3-bd0c-1589ad4615fb", "sighting--0ccdc46e-bc38-4891-a44c-87ac06b13bfc", "sighting--23996c89-211c-436b-bac4-909f93c28fb5", "sighting--a265e1ae-93b1-4333-984f-8d5ee21ae0ec", "sighting--3377d344-d707-4e99-97f5-9989a1aca99d", "sighting--6f4692d3-fcfb-456f-b97d-77a1aaae6662", "sighting--405fb82d-273a-4af0-9254-9b7594beb33d", "sighting--8eed9775-facb-4fcb-bd6a-1b8e08d214ba", "sighting--c3b8bb2d-c83b-4d05-9094-286b3d293378", "sighting--76a0f21a-2318-4aff-9b32-826304de3592", "sighting--853e8e10-5dda-4e37-a44a-a7d057120100", "sighting--2667ba87-1631-4dbb-b932-58f735767210", "sighting--cdfd561f-1272-4ac5-a2ba-a77426dd61dd", "sighting--036d61c8-8514-4fbd-ba06-e9edc49de9a7", "sighting--d51170d2-9b01-4937-ae98-abc55114e718", "sighting--1c7f0f34-6678-46f3-92f9-b142d0c3693c", "sighting--89255c4f-3fcd-4d8a-b832-446344ef23cb", "sighting--e93aec91-2841-4ad8-9102-2e87d6f26bfc", "sighting--c70ccaa5-3f5a-4c7a-8522-63785a57a064", "sighting--5b1106dc-8d19-4480-8b3f-a322d83726d7", "sighting--19399749-8693-45b3-8bc7-dd8d3ac0fbbe", "sighting--d5914d54-3f58-4ffc-9d7f-c180cff8bc7d", "sighting--ad2e8429-47a3-4017-a60a-637eac6a450d", "sighting--bd1e0588-6833-45ca-a874-ec252e80f6d1", "sighting--a95acb6c-c9a2-4901-ab37-fe211549acaf", "sighting--40f93cb0-219a-4d57-91b7-d0883bff9801", "sighting--74c4b55b-ce31-4e61-ac73-71d4b22116dd", "sighting--33a26f71-9669-4c2b-9c05-81748f462588", "sighting--548b3483-d64f-42fe-ba85-2cc74d314412", "sighting--7ac753c5-e587-40b9-907e-113d526e98ea", "sighting--2ecb85a1-5975-4400-abbc-f3cc67d659d9", "sighting--81665fa2-b804-454b-aa56-4aeddcf388ed", "sighting--1c01beae-b7b9-4e74-a065-7bfa94b27f95", "sighting--79aaa4bf-49be-41f3-8ef6-d41d7169daaa", "sighting--2271efa8-e5e2-4d0e-b2e5-4d301d99e159", "sighting--80521118-dd9b-420f-b2de-79fcd3026333", "sighting--cb524bc5-e2b4-48fd-93c1-b96a6f715e0d", "sighting--f2ffce06-ef28-4a8a-ae04-dcfb570fe536", "sighting--20703829-683b-4020-bb10-cb472e7eb42b", "sighting--ed2d6ba4-9de6-4c5c-ae05-6f9af7005572", "sighting--d72f61a5-56ae-4416-84f7-c116f903415d", "sighting--9fc73e5c-dc20-4068-bb53-ab9e14d3fb16", "sighting--0e8ebdb5-ba59-4633-a8ff-b9f73b3b2701", "sighting--6160390c-596a-4604-b70f-6da54b452486", "sighting--e49cff1c-66c1-4bed-8cb3-f16a67f8e3a3", "sighting--4d2a9ed5-c607-45ed-97f2-ff8a960ec766", "sighting--2668b140-6c12-4396-a55a-933e27fc3dc8", "sighting--9367bfcf-42b9-4c0f-9622-1a70fa918fd2", "sighting--386eb3f4-feb9-4643-ac65-73731d9e85e0", "sighting--2136cf70-442a-4c82-b1b8-95eff05fa66c", "sighting--9b414510-a953-4fcf-b40a-c667d93231ec", "sighting--f5c55b60-b527-40e9-9bae-8718ca4b3972", "sighting--3fe8242a-3cd9-43f9-ae0c-733cef710c34", "sighting--b0bea569-d810-4cdb-a2fd-9b4907baea18", "sighting--78759f3e-8bc8-4043-ae0b-27180a99918f", "sighting--163d1830-e70f-400d-bde7-18aaf4964ad8", "sighting--ff1e3419-fa4c-49c1-bc49-659d8c2fc927", "sighting--0c168a66-d3f3-49cb-8cf1-c46bb3dfae2d", "sighting--8fcc265d-109d-4e58-999b-ac8a7cc9dc97", "sighting--7c24470b-41e5-4ba8-81ca-af835eaa3d71", "sighting--790d3dee-4bd5-4b0c-bae6-f99da80cb759", "sighting--45eac060-eb7a-43e5-b5e2-f5f5244e4a97", "sighting--e24b2f7a-4120-464c-9784-12cbbe915b4d", "sighting--51ce7513-0bed-4e23-8009-e09a0e48cb99", "sighting--27c528f8-cdf2-4ee0-9634-897f073bd937", "sighting--d9a2325a-63c3-4de3-a0a1-1fbccd0bcf35", "sighting--3eb76ab2-fa7a-4c12-a12f-986d348f5878", "sighting--3de94d2c-c65d-4362-b337-f35024882880", "sighting--2680c61a-3d24-49e3-b5c1-e3feccf81b6b", "sighting--6e163727-e102-41e0-abec-404271441b69", "sighting--bbb7aa22-23e4-4c92-8142-de5c9ed81dce", "sighting--8a6f9553-4977-40d4-9021-5f0274eb4ab4", "sighting--0a8fa3b6-5a14-4d47-989f-b8e4abfbf51c", "sighting--3a683867-0c16-4473-a7a3-1c235bf4ac98", "sighting--aa58931d-3fcb-40aa-9503-a14e12598bd6", "sighting--652e22a0-1455-4860-970a-5cdc0785ac11", "sighting--2ea8ab21-2a19-464c-bbae-c2c49b044b1a", "sighting--3818d12b-98e4-46b4-8a8b-7f0668ecf45a", "sighting--7a368a3d-4e5c-4fbd-b57d-c2bbab3a42a0", "sighting--623502da-49ec-482f-8ee7-a35424a73afd", "sighting--7ef6d6f2-c5bf-416b-b650-efe22e456dd8", "sighting--928a7a03-e019-4dba-84ef-af56e6dda02a", "sighting--946e60cf-59a0-4c3d-8d87-8437071fab72", "sighting--09fb159b-0b63-459f-8b93-ecc26d2a0a08", "sighting--816e0362-71ae-438a-aa05-75500fcab625", "sighting--11028876-1c13-4bc0-b48a-04c707434a64", "sighting--a86484ea-08a5-426b-89b7-e92731717d47", "sighting--23d7c64c-6395-4900-a212-b410a43a218e", "sighting--513514aa-b0d1-4d10-bebc-7dfa6c6f88c3", "sighting--f41c6c57-bc1c-42c6-870b-f81752a35057", "sighting--aa2e337e-d8d1-4a61-a366-1314605bf3b5", "sighting--14da6d5b-ddbf-47f0-8c07-32f0b98f4163", "sighting--f00bbcbe-43ad-4452-a8c2-dc0cb64bafae", "sighting--42fa902a-b21b-427f-989c-44f2e84c703e", "sighting--7f95abac-65c4-49f1-b0c9-4da73b47ffe3", "sighting--2928fa0b-5781-4b95-b1c1-75ef59d94510", "sighting--d6c01846-42a3-44ba-8ee7-10bf7cc7b309", "sighting--f573ef8d-87a7-40f4-8c58-2049dca6ba70", "sighting--38d9f07f-de75-4d1b-b01e-2e0224c5f26e", "sighting--e25e1d82-db89-4aaf-8b63-c7e8e0ee9011", "sighting--61b9803e-de68-4562-ae16-8c9c0101ac7d", "sighting--8b56f73b-afa0-4436-9773-e932e19a81c2", "sighting--fb3a6866-e246-4b2b-829c-6806f807fce8", "sighting--33da32f9-9cf0-4f8e-871e-409331937954", "sighting--a374e395-4404-42f4-bf55-635250db681b", "sighting--5e2766ae-5bc4-4d49-a0b9-fad2af4ea49d", "sighting--7d8dd11f-faed-4658-8728-a998596ecee8", "sighting--564d469f-8ebf-4009-bfe7-2591d5db0ee2", "sighting--b66f0744-6ead-4c9b-9cff-6ffd5c12f3b4", "sighting--386d2df8-7fb3-4499-9e52-35e1a7a19370", "sighting--9cdfcff5-3e8c-4c9c-b18d-9d646cf2d0d1", "sighting--0811de79-8f86-4783-9204-dfcd8e98dd12", "sighting--d1ca587e-63cf-41da-b082-f373d3c296ac", "sighting--47f8ca40-3c5f-4b71-8861-34a6e0bbb742", "sighting--9953a7fb-79e5-4412-8475-bc44d44e6cc3", "sighting--2653320e-388a-4909-8ceb-8d45e1e24918", "sighting--eda698ea-e46e-4cfc-9c7a-0090d569cf3c", "sighting--4cc54c44-41d5-468d-be1a-0a36f1e8d8d5", "sighting--148ac4cb-a445-4712-91bd-caf8854b0bea", "sighting--7e5df244-64f4-490a-85eb-d5c8407fcb23", "sighting--d72c368e-60b3-406f-9c8a-fe7d8bc3fc83", "sighting--c4cf1b26-85e6-4657-beac-96a019dbb54f", "sighting--b5a58846-5f5a-4e03-b66c-e35c63dafd90", "sighting--1f8da049-2e46-4a51-85cf-3dcc83ffb475", "sighting--530117ad-eb62-4b22-82e8-94a93a49ae56", "sighting--f982c58f-7f19-4606-8335-9ee436e17f41", "sighting--d2f3d24f-8dc1-432c-8d7f-e0ce2494cd43", "sighting--8d19c327-4308-42dd-840d-f58b2d78006c", "sighting--db34941e-7d6e-420b-bd4b-865dff70a069", "sighting--f4c555e1-f07a-4924-ae2d-701b8ebc100a", "sighting--9ce6fe89-06e2-4150-9980-20864314e0be", "sighting--dd72e182-2ce2-47d2-bd49-387d759ce29d", "sighting--5ccb05c2-4751-450b-8410-49616622ed7c", "sighting--5554f63a-9f32-42f8-83d5-f49e31db3ef9", "sighting--4aa8d1d2-ff3c-408c-bb4b-b4fcdb8bb6e7", "sighting--fdc85ace-9203-4fb1-bc74-54b2d14bfe61", "sighting--bd763f62-bb70-4310-931b-305321b55b1a", "sighting--628b32e1-2eaf-4c38-a852-b337cb4623a8", "sighting--dad21f47-feed-482e-a8ef-bd1a18cb90bb", "sighting--9be7b727-ec16-466b-a73a-8fe2a29b5d2c", "sighting--cee96f65-8f23-45df-9f82-fcf9a81d2ebc", "sighting--b2235c01-5bd1-4995-aa08-41164edd81c3", "sighting--435ac090-4129-40ac-8610-0995745b5711", "sighting--bc5a050b-09cf-4715-8ba2-aac13715bd47", "sighting--f397ea4d-9df7-4331-9bf6-4e6e98dc197e", "sighting--dafa14f7-b9c1-42ee-948c-136de365bede", "sighting--72552f6f-6fcf-47e4-9783-2ea0125c9e34", "sighting--e157b9b7-25ee-45eb-a41f-45710f8e2639", "sighting--b1256bd8-8f77-4412-a16e-db1444914444", "sighting--d1dbac51-418b-4f9a-9688-a335f2aed66c", "sighting--f1b4a87f-f076-4194-ba25-9cf00635657b", "sighting--88c9e10f-c45f-4f4a-b187-f260e3ba0123", "sighting--1230656f-daff-4b50-b2c3-fde9a7d64440", "sighting--6a594f8e-b4c4-42ae-be3a-3017e492879b", "sighting--bbbfce6f-70b1-47bc-8671-f4d429111ac1", "sighting--02d63b9f-2224-4c92-a1fd-d43e696ee072", "sighting--c6119ff4-701b-4060-a6dd-0b9bd9f84d9f", "sighting--1f5ca3c9-e9ad-46e0-8228-55bbfc77e463", "sighting--3751c575-77f4-4bd5-b00c-15ac01bea4f2", "sighting--4534f1e6-2fd3-4e58-8187-e57e0081d9bc", "sighting--e6978447-9989-47ab-b16c-a8761083fa3a", "sighting--4a8b3839-43bf-418e-95af-7f234602bcc1", "sighting--7b84fc5a-4291-4184-848e-05b7feac0f48", "sighting--3bc1d1d0-5152-4975-bb5f-a7a0d6b8825c", "sighting--26bb46fc-145a-457d-ab0c-510129afd06b", "sighting--8d5015c1-2536-4e49-ae00-b2dacd3b27e6", "sighting--3ce9afce-8363-44d5-9e91-6649153ac003", "sighting--6f7516f4-9e2b-4a3d-b140-d182853f30ea", "sighting--91063a2c-d7e9-40a5-8a33-dec360b5185d", "sighting--110fd743-8bcc-421e-9308-4c5667e83893", "sighting--02e16bd8-5bee-4594-a239-35d16af87074", "sighting--b3646875-fe80-41ad-98d1-38d819f9e047", "sighting--0dbfcf96-10bc-4877-9170-73332fdea486", "sighting--9d1d8060-4be7-44a0-90f3-174b425b8cdf", "sighting--9145504c-8184-4062-a933-9efa5289ee11", "sighting--fd49d9a6-a159-418a-9de7-ef6e6b5d2583", "sighting--c563ca7c-4d56-4e52-b77c-d4c9eaf6e54d", "sighting--3129acb6-2e0b-4c0c-961e-e114d93334e3", "sighting--fdde2114-b0f6-4937-9e3d-bc74dde41bdb", "sighting--5e7c247d-f3b0-45a4-816f-15adebd74633", "sighting--dcf0bca7-0a77-4da8-99de-0b6006d095a2", "sighting--4d37938b-b724-488b-9085-aca037eb3f6d", "sighting--e6f958b5-b54e-469f-85f9-30ded8bdaa41", "sighting--5dd6317d-2a5f-4d8d-b5fb-7575acdc0191", "sighting--bf324f22-513f-4aeb-b43d-1e46ee19e825", "sighting--3d407836-81cd-4254-aa32-7d6f813f6884", "sighting--09f5a6cf-e7cf-4b0b-8329-482158449140", "sighting--7f03b972-0de1-4715-9c3c-3e207eb62b8f", "sighting--dcf75cb6-21e0-45c7-8ea6-4e0c10a06bae", "sighting--fb866cb1-0843-4e52-8483-cf4a1eb918ea", "sighting--a7c2a7cd-b882-4e56-b449-9c359b76bf85", "sighting--fde4b3d7-077b-4851-bd45-23dfe5031380", "sighting--e007d7ff-e94a-41f0-aace-eca7bdc7f2e7", "sighting--991597dc-4473-4a82-b0ce-dd416128b004", "sighting--6b5205f6-5fdb-4c54-ab57-63d3ef847b4b", "sighting--554e643b-88b9-4341-a7c2-f52ccb825622", "sighting--21b76c83-aecc-4912-89f0-29e8d4c53843", "sighting--34fb326d-b2a6-462f-9d99-8dbd1240f67c", "sighting--5947d125-442b-49b7-b2fe-96f965c2e6d0", "sighting--881d0a76-9919-48ec-b6d5-55c4e089e7c8", "sighting--c9242a99-bec8-449e-bba2-6881fa5f5f1f", "sighting--e1285ce1-c33e-483d-892c-cbb278566db7", "sighting--0b778342-7513-4ccf-8c89-f3d86da95d95", "sighting--eefe3591-7f3e-46f3-be7b-88674f7c8a1c", "sighting--5e75abb9-ec81-4d02-8021-3d8aa40259d0", "sighting--e33adba1-225c-4ba2-9b3e-78d788c9d432", "sighting--8d20ae80-6149-48cf-a03f-1f94a4c6450c", "sighting--165fcdee-47be-4758-ada2-a33dae8f1ff6", "sighting--a58bc4cd-2f54-4d55-be96-4e73c7086ba0", "sighting--6e795dd5-e2ee-4fee-998e-a8694329e75b", "sighting--9d5ea876-ea1e-4b3e-b4d3-48c98e69be48", "sighting--1720144d-6751-46f3-b2bc-cafb53df6194", "sighting--bdc45cef-41ed-4e7f-931b-64b8c90d336b", "sighting--9005ce28-ff07-48ab-b180-d21fda997c35", "sighting--9b1dd5af-1beb-47aa-8832-f1c327a1de04", "sighting--2aea2a96-8f0d-40aa-8b30-03776dc7361f", "sighting--1c80e2a1-cb93-4414-9630-78a9386500af", "sighting--8d44f579-445d-4173-b536-564e98508045", "sighting--babde79d-9b21-4542-b25a-a650b175213f", "sighting--1f3c7ba8-be95-4851-a56c-8688ecde5238", "sighting--cdc063ab-807c-48e7-9399-a96faaa39b16", "sighting--d17790cb-1750-424e-8b24-b5099b511668", "sighting--537897a1-4fed-4d0c-a56b-cd39a1114701", "sighting--cf818823-828c-4e9c-a9e9-6f0796525b9a", "sighting--e0a2f760-933e-4c6f-bd00-675acd2b39ee", "sighting--2c5a1b08-d735-46b4-baea-137af57116d6", "sighting--4f27b7fa-6b8a-476a-9f3f-ab0988411492", "sighting--eac12d3b-f77d-4f32-bbdb-bedb1b5dd0e9", "sighting--b7ce3b31-152f-4a91-9a8f-3545724bd63b", "sighting--50252da5-3cf9-4dbb-a6f1-f86c1ed4dae4", "sighting--6da734be-41b6-4693-b0f7-90451daf1e36", "sighting--96f67b4f-b78a-4eff-ae25-6188b1758957", "sighting--bdd5ad0c-977c-468e-95b2-08e00ae803ca", "sighting--2ceecf26-0c9d-4c2f-a186-c38091a2ff41", "sighting--23253d98-8b00-4b6e-b328-5e7f42d34998", "sighting--ab06f99f-6091-42f0-9072-8224d7de6f3d", "sighting--08b1660c-0175-4dda-828f-f70e7cc700e7", "sighting--485d221b-551b-4f93-81ff-f6e780abcbe0", "sighting--d216ab76-4780-4013-a6f4-c3df40e8fac8", "sighting--64fa3408-3a3f-4d0e-9ac4-4a3575d67ed6", "sighting--901a1fc1-1b7f-41b3-85f2-bd2079599f6c", "sighting--a3bea737-5be2-4cf2-9a31-f01413148cd1", "sighting--e1cfbb9c-30a3-44b3-864b-b4501b4fd0f0", "sighting--828ad479-8aaa-4a7c-826f-0be4ea3dec96", "sighting--111f9e5f-4ca5-464d-8834-2d7d3ef59e86", "sighting--37a23b4c-e768-4d83-a5c7-da54cc4c5411", "sighting--3909e509-e1c6-4cd2-bd30-a3742e92d40c", "sighting--57501fd2-bb87-40a8-a764-4c7d8836b605", "sighting--2f92a473-c264-4bad-bfc1-8e1376c4e811", "sighting--c07694e3-2aea-4c62-a716-bd4ad440c73a", "sighting--c72c7687-00ba-4350-b83c-09e5678641cb", "sighting--2bf48420-9491-464d-ba1c-75f9f59de1ba", "sighting--9903236b-09dd-4945-a1ff-94ea1b8ece8e", "sighting--fc4ae880-547c-4cfe-9fce-7e7bf87fc6f4", "sighting--9e1c9b26-f2bb-4795-b583-0a11ef7e197a", "sighting--5658d8f8-b037-40e7-a1eb-f1ae999cb37a", "sighting--7984a677-0a98-4230-b466-ae2ff0f7f858", "sighting--0fc672da-60c1-491a-b2c1-d4f38d8edfae", "sighting--734f4c4b-46c3-41c2-88c3-19387d292f29", "sighting--44461b19-d539-46a6-8ddd-aedfbce0bf14", "sighting--7a6db6e3-890b-412f-a065-73ff86c6bfb1", "sighting--1ef8f028-8e72-474d-ad10-9bc8ea592832", "sighting--98fb3ddb-15e1-44ce-9b16-577208b487be", "sighting--93ee83fd-6667-4860-ac11-22f721010da5", "sighting--be93a894-0127-48f6-a402-a7afb20ed40f", "sighting--71f11bde-f2c3-4b6b-a639-9a5cd5ca29b4", "sighting--32620679-284a-46b6-a1c4-3dec5c823235", "sighting--861df226-8c8c-4a2d-b346-ab54a21afdc7", "sighting--0e087efd-a1c2-4562-ad2d-ae95bb21f3a2", "sighting--6da14342-a545-441d-aa2d-2e9a1a8554e7", "sighting--33709841-bd21-49ae-b85b-621958c4b27e", "sighting--211248ed-52b5-49c2-b881-2e76030dc614", "sighting--e9d7c7de-8f8a-44c3-b365-4795a450cffe", "sighting--6d4e930c-ff00-4148-b5c2-f8a7cf4b6888", "sighting--980df769-42e6-4733-b49c-caa005c78f56", "sighting--43dfc435-5413-4825-b2c7-77307cc6d0c9", "sighting--4bf87707-44ce-4f86-89e3-cf91f33342ae", "sighting--71acdba0-5818-4323-a98a-01be88a06b8a", "sighting--732bf6b2-631d-4aae-9449-32b37b976a31", "sighting--dceba6c3-e2ea-404c-bdb9-667ced5b4d05", "sighting--74d445a5-ced9-4691-8480-a0eea4916bb2", "sighting--07a306a9-daa3-47b8-b6ee-15dc77ec8eb2", "sighting--93579846-8b74-499d-a2fe-1e7e1ebaa1d0", "sighting--be334b70-7e5e-454b-aba0-05ce379ff1c0", "sighting--49d8a4f7-f915-48a2-80d7-e649f593b148", "sighting--7b1bf71c-6fd5-4413-918e-5959a28a5524", "sighting--1dcceddf-db4c-4313-ae0c-b9a2c734418e", "sighting--ab660846-f810-4071-8441-3217457fd3bb", "sighting--af9f4041-5642-48b6-b390-b0e0cb5696b1", "sighting--95f2c6f0-80c0-4bf1-920e-dffa6b2c2bb2", "sighting--ec129555-dd92-4ae0-8da5-9db7364c00f7", "sighting--7f07105a-a6f5-4a3b-b42d-7c23c8ab0b51", "sighting--5f3476d2-55c5-4484-bd56-8372f7e15d84", "sighting--0bca5234-acc1-4e3b-ab9e-9bffcba6a77b", "sighting--1aeda892-e12a-48bf-9f4f-13dafc615350", "sighting--5e85e286-71cb-414d-aff1-6762687438d0", "sighting--e942621f-e9d0-48a4-872e-08cc50d8beb8", "sighting--cf5aedc4-4548-441c-a27c-759758dc37d0", "sighting--0dc73279-a5fe-4ba0-a5af-0a7eccfb4844", "sighting--d12473ac-7e83-4862-8a0f-b225d233a2b8", "sighting--967a14d7-bda5-4664-9e8f-1f13d59e877a", "sighting--b9326200-8dd4-4415-bb11-6e66989267fe", "sighting--acc22a15-d221-4b1d-94ea-8a20dc1276ea", "sighting--3515c355-928d-42cc-8deb-240e9f77f52b", "sighting--71caf06e-edb3-4dc9-8b02-f73fdfbebbdf", "sighting--0b1c43bd-8753-4917-ab1a-e89d9545b0c3", "sighting--4f5107df-9fe2-41de-9368-522b850d8570", "sighting--4e75c6ba-7ef4-4eb5-adf2-f8f68a3b7cb7", "sighting--faa822bd-63a1-4524-b285-d4f891353122", "sighting--e6893808-18e0-48c7-a28e-a97901a7e5b0", "sighting--a9b59355-9235-4d6b-8380-19c0a17f82ba", "sighting--2fcfa232-9f50-40c4-aabb-dc80a684b122", "sighting--5f1f0e81-0ba3-44a6-a0bf-02dab128b69d", "sighting--91a49356-073d-406c-b4cf-f955ece9f95d", "sighting--538efd8c-4f8b-4733-ac48-2a6166d62276", "sighting--00065ffd-fc81-47be-9bfc-185f97318609", "sighting--41473ef4-bbbb-46ef-bf0a-bca40f640a3b", "sighting--88242c10-10af-465b-8313-f781811d5135", "sighting--c65bb354-8af3-4bfa-88f8-737cd9856138", "sighting--3a813e37-ca5f-4630-8e52-b99294c18845", "sighting--230c85f0-cc60-427b-9e2b-26c53dd2a202", "sighting--eaab886c-8915-483a-916b-219391709bd0", "sighting--01b9c394-6cfe-4b0d-848e-158d17c598f9", "sighting--df08f3f3-eb7f-41a6-b8d4-685b23eb4369", "sighting--5940659c-3341-4486-8c06-891a40748896", "sighting--18039533-7447-43a5-8cd3-1b2f82770d5a", "sighting--0fded732-6d8f-4296-b7cc-e8865b7c5009", "sighting--81cf1b11-e9cb-4521-a4d8-8c4f55e1075b", "sighting--0505462e-55ab-42f4-8e9f-789006658c34", "sighting--42055af3-bb47-403b-a1b7-a432e096c2a3", "sighting--dba373ce-1784-400e-a188-cceb775f8b87", "sighting--6cc6076c-003f-451e-96c0-1018c972737e", "sighting--22ddde2e-b584-485f-89d5-6404dee977e6", "sighting--0afd003f-a07c-41ce-b87a-ff3dcc35c5f5", "sighting--7571342d-37b5-4843-b84d-ba3c43abfa11", "sighting--61b36990-96b4-492f-824f-361ca7dc113e", "sighting--e861f3d8-9f61-4e4d-bc05-196a66c74a27", "sighting--99debc24-dac6-42b4-a5ea-142cc6d6db31", "sighting--65e9a388-0153-42ed-964e-999ac981d29d", "sighting--805ea2fd-2011-4636-9e51-db7154c9311c", "sighting--1294362f-b696-4248-8e9a-438410748c8b", "sighting--2293dcaf-c47c-4578-bfa2-99ff47a991f7", "sighting--44a0f79a-440e-4e5b-9b0b-2e09c5d5993d", "sighting--d9f22179-9d12-47ef-bf40-d7f01451a041", "sighting--ca073b0e-5131-4110-826b-e5a7d0d4ab9b", "sighting--19926a79-035e-4d7b-addc-ccf3e9a06978", "sighting--86a21858-87c7-4f72-9cc3-a0423a7ead71", "sighting--07bae002-5531-4c66-bd88-ce02756b5266", "sighting--d4d821cb-adee-4595-8a38-39938e10cb65", "sighting--978bb180-fa30-432d-8313-c39cb51c872f", "sighting--6037a801-1199-420e-a8eb-2fe5e9ce17a8", "sighting--a936fe18-0941-442d-a8d9-c298ab92faf4", "sighting--f04f6d78-dbd5-4c27-aa6f-6a40e17121ea", "sighting--60ef4f1d-2117-45b0-81b6-a905c752b670", "sighting--0056245a-ea73-4566-bc40-2b9bdbf0460a", "sighting--d0670dab-ec40-4c7e-8c9c-28101e3b4e62", "sighting--45eaba6c-9906-40ac-8222-e321e1a4ae48", "sighting--80aa40b2-3c21-4895-83b7-57eeef8c2075", "sighting--83d7e4bd-bbf9-43cb-93d5-0b5c41b1141e", "sighting--d233d835-0063-49ac-b165-c8ae3c530230", "sighting--da5c72b7-b2ea-4946-813d-38a5f56b5c10", "sighting--a5bf571d-1882-4fbe-ae65-ece6b2304a31", "sighting--a59ca435-4ec4-40f5-9948-ae954191bb97", "sighting--62dc4f53-f14a-4f7d-8f8f-2041dc83a964", "sighting--2d0e49c0-f0e9-4a9c-930d-bd2ed5260196", "sighting--4c63b34c-2362-4136-a528-f8304ef0f28a", "sighting--5aa2218f-5b68-4a78-a4c0-9a6940c00a83", "sighting--b3160ada-8e9f-44e0-8741-6a4705dc8abd", "sighting--5458da22-16f5-4958-b04d-5a03727c975e", "sighting--8325e894-dfc8-4c5d-ae31-fd819022d83b", "sighting--80351fc1-ef02-429e-9f84-8b4b60134823", "sighting--ec5d141a-41c6-4b3e-b416-43a16d950547", "sighting--2dbc41cc-5f22-4b50-9ce9-17679cdbf754", "sighting--5c5d833a-b077-48ce-8ec3-02cc7709e964", "sighting--6f850e00-9989-4658-be1b-b85d06fb61ed", "sighting--0c26899c-7a3c-44cf-ba09-30f35ab316d2", "sighting--8dcb22a1-81bf-4bff-8f64-0dd9fb758839", "sighting--970bc195-31f5-4ce0-b374-aed541eadf5f", "sighting--79fd08e4-b228-4952-9903-407096a2e249", "sighting--1134e30d-d1a5-4c54-8107-68d260fc2ff3", "sighting--72c7ed66-ed34-45bb-ade8-1f8b6e94e1e7", "sighting--c7cb6f1a-6e02-40ad-9f15-e8094b7c27a1", "sighting--7fb8a924-655f-45f2-b116-fa3dc737f44d", "sighting--719f1926-b839-4d1b-847b-06a50ba6309e", "sighting--2ac5f610-c702-40ec-be11-d3b4bac65234", "sighting--4701eb15-03c7-47a0-a169-9cc94132cdf4", "sighting--b02ed016-dbe6-4ad7-b933-ef2d25f5c705", "sighting--d5fb1afd-9d91-4a3f-a8d8-4469234e5724", "sighting--36a22b8b-b1e5-4798-8a36-8320322b86a8", "sighting--ee261391-a8d1-4f3a-8eca-f43bdbff5fdf", "sighting--311a3edc-a6f1-483d-b4bf-b363f609182a", "sighting--1ceaf242-d578-43b5-8246-ed8fc7d9e174", "sighting--582460ae-3f0e-4e72-a0f6-1e5a3cb833a3", "sighting--5e38ab1a-facb-42f2-aa96-6a197dbb29d8", "sighting--17a21f5c-ae2e-46e1-8cef-0a15b154e9b1", "sighting--64c5fe00-c809-4c11-9dbd-a0f17590924b", "sighting--e78a1ff4-fc2c-4708-9417-e6dce5c5fe66", "sighting--8efe7e30-77fc-48cf-9250-7faf0aac5617", "sighting--1a029a2a-f617-434d-80e6-fd9a07e93dfb", "sighting--7470187f-51fa-4729-bccf-19b0bcef9171", "sighting--32c513f7-9302-4e6d-9a17-588791001cd0", "sighting--b4a8e04f-c720-47a0-8906-d75c089e9bae", "sighting--0eca3bcd-66e3-4563-8290-0e00580feb1f", "sighting--d9dbe268-12c1-4a11-aee7-7a9f8cd339e4", "sighting--f21ee561-c879-4f31-b06d-c4ee070894c5", "sighting--5ebf2ece-51be-4279-813b-701688ae9ec1", "sighting--50e032d0-0e06-49c9-b554-e13be74de4d4", "sighting--d4b09e42-6ea9-475b-9e02-7cd14f4c0f3f", "sighting--d1237d26-065a-4592-bdb5-c131cd909c44", "sighting--692413c0-8fef-47bb-abfb-453cb861b7c3", "sighting--47c65133-47f7-4031-a531-03d0bf7450e0", "sighting--f2d809d0-393f-4993-b621-5a0c7c6b24fc", "sighting--25d2259e-7027-4cf9-b5f2-c0e45d9106ab", "sighting--bff1cc42-cef2-4947-bff5-5fa41d5e5568", "sighting--a02e3b39-b548-4e00-816f-58b57ca790a2", "sighting--11a910ae-2984-4739-bf10-5b11af0b3c66", "sighting--73631f24-70b2-46cb-8370-26bce2f3bc0d", "sighting--d02b70fd-2ecb-4a72-ac24-1a8f39bb4580", "sighting--1f62292f-e443-44ee-906c-d9a5c7278d89", "sighting--32be64f1-41a3-45a2-a961-ed927eaf824c", "sighting--725a989a-6c76-431a-bfc6-063d7915bb8a", "sighting--14e46b21-cbc8-468c-91c2-9c9d5ec56b56", "sighting--9ac74481-bf1c-426f-9b1a-1158f9d5f067", "sighting--d2c46aeb-fc78-45e8-af4f-3f8eabbe6cfd", "sighting--52944477-02d9-40b3-ab0d-70c602ab1bac", "sighting--dd1f6ad8-7032-402d-abe0-b76e03916647", "sighting--7d5cfb68-9264-4acf-8acd-d0e4e3127ab5", "sighting--09d55b29-2c4f-421c-ad01-087106b9bcce", "sighting--8c6f8227-6dc4-471b-8561-0f2044bce257", "sighting--753e4ef3-7bb0-4245-b2e8-ff9c41ffbd64", "sighting--5fa4079d-3af7-4789-84bc-1ca48f9f630d", "sighting--e6cb6022-572f-4780-886d-6e2785074184", "sighting--c3f1fed5-5386-48a0-b71c-1de913eb43da", "sighting--3c1bbd49-6f6a-4320-8fbf-3d0c23cdb73d", "sighting--8c49d685-ca3d-4ccf-bed1-cf819c950675", "sighting--3d42d0ac-ef96-4c24-8f9f-e9d06d4eaa80", "sighting--cc19bd72-62d8-4a60-9d02-e4d2dda42802", "sighting--4527d0d0-2f80-478c-b930-0063fac73528", "sighting--9016e095-9893-4cbd-8a8f-0d5da8518e97", "sighting--2b6f2127-a7d9-4b34-ad9f-3e1a9766a54b", "sighting--2beae3b1-820d-428a-9dd0-bd5340875f83", "sighting--03e28353-0c17-47f4-bd32-a3d4a4d6b31c", "sighting--a4651ab7-5f89-4123-943b-d1d034df6466", "sighting--35cc001e-b100-4fb7-969e-8a0a8e459202", "sighting--ffe3a259-d7ee-41a6-b667-c76047655e50", "sighting--681791da-58ab-49e5-b1e3-078e155124a5", "sighting--13645563-60c1-4f69-83b5-3771c27143c1", "sighting--bdc07d6f-da18-4d7d-8d04-08f487642d2e", "sighting--fc5d27b6-5e5b-4e92-866b-724d6c767c1c", "sighting--5422daa4-f85c-48bc-bb07-3d99e8dc4a04", "sighting--62e07a01-1879-47be-ab4b-cb21e1a77397", "sighting--be1ea961-d2c6-48dc-a7db-6c1e74550f36", "sighting--19d9a53d-0428-4d8c-a51f-15b063ed45fc", "sighting--ccd9e3c5-94c1-4248-9c23-9d12ce0c3c9b", "sighting--a03a557d-f28e-49a6-9f2e-9135297eb4d6", "sighting--19f4332f-d2f1-4cd3-9c68-35bc57db6fa6", "sighting--8e31abcd-b080-431a-ae9c-41866b098c87", "sighting--d07d3231-b3d6-4ac2-bf52-785f9dd1e39d", "sighting--a828d3b6-c564-41ac-b06e-65140fc1f642", "sighting--9b24b839-75b0-402f-996f-1e51b77baf12", "sighting--543300b8-9afa-4804-a1dd-e43833b6f75e", "sighting--db796d7c-0feb-4919-b6db-365b1446c899", "sighting--f9a50661-a5b6-4d2a-b5db-8d5f5bf5a3c3", "sighting--f99b9e91-984d-4977-bd89-18a599fe99ed", "sighting--515a7de1-683b-4f3e-be5b-424ae0d1cef5", "sighting--923574b4-3e08-4031-ba17-ba7ac80d7cdc", "sighting--dcd00e3f-a5eb-4887-9f72-363973bcc4d3", "sighting--651cefe4-b119-4179-ba8b-0c3586c202fd", "sighting--46d06a73-cc39-4e67-bd87-30ddcb6d0d53", "sighting--763e2f83-02df-4cfc-828f-2c5666078ec9", "sighting--9f2de1ee-c270-4742-af6e-4b91300eb6ca", "sighting--cf8559ae-f530-4c50-a76b-2ca78d6d294b", "sighting--e608909c-b102-4674-9bac-9df21c289338", "sighting--f3323847-040c-4ad3-bdd3-0c42522ffd4b", "sighting--bc956d29-9e2e-4de0-8101-5e2eb20d9a6b", "sighting--3c54c63c-54b6-4a7e-a3ec-5e140c1f555b", "sighting--408bbaae-a170-4e02-9634-87d695185367", "sighting--b9e5c4b8-777e-45a1-8b4c-bf0d1a6ac54b", "sighting--e0fd1a4f-7a2e-421b-b996-53e030fc0ef5", "sighting--2e2c61de-b9db-4cbe-86d7-5833cfbec163", "sighting--0f7ba904-acc9-422b-b70c-372ed55189af", "sighting--4e1fa62b-00c0-4d7e-8ad4-24eca48ce547", "sighting--2d2cf331-a2c4-43ef-a0d6-6e8dd984a6e6", "sighting--571e1c0c-436e-4baf-8f0a-c7031044e06c", "sighting--a79b0dea-5d60-4060-843a-a2b8688a6076", "sighting--9950b1d3-76eb-43df-a321-5de261cfbd17", "sighting--d4d45511-e297-4cbc-9286-01523643562d", "sighting--c4493f5d-d384-4da6-963c-ea79425977d8", "sighting--55b16da8-dd43-4e80-bc2b-c1a912bfd853", "sighting--baedd9d1-b602-4553-99fd-35af4cbe3683", "sighting--f77091ed-3a27-4e14-8af5-99a4d2431a3a", "sighting--7d6c197a-d008-494a-be12-1a2dd0c796b3", "sighting--c602b526-4274-42d7-b2ff-5092c3275823", "sighting--270f1edd-7e8b-4186-907b-739a53b0686e", "sighting--512bf7c5-253d-4edd-a86f-56ea0898ce71", "sighting--276543a9-fa64-41cb-b70b-2b6ed9ca6fc5", "sighting--b165b28a-3ae7-4d4b-a1c1-b47a8700fc85", "sighting--3e72adc2-6404-4869-ba92-3a5e93db62b1", "sighting--030aa54c-8b08-47ca-a924-4e1104a5038f", "sighting--56ad5d36-a1bf-49aa-b6b4-7ef496abbe88", "sighting--497f6952-aafd-4fb3-8381-d918974b0ef9", "sighting--b934a778-05f2-49a5-90ae-236c93007a6f", "sighting--081abef0-47a5-4aed-878a-b451f3b8ca75", "sighting--f03c51a7-e112-4565-9307-c1c1247111f1", "sighting--a4bdd47d-dcbe-452f-8388-1fa2947c4988", "sighting--f481e9d5-9a09-4247-9f5e-5bd357265a2e", "sighting--fe2aac19-2bde-4cc2-be5e-d792f3e15eca", "sighting--9e206d15-5ffe-4180-b77d-b16b892935ab", "sighting--a3143cc0-5ca3-45bc-9747-6c2bd5f6da7a", "sighting--790643b4-dd15-4202-93a7-4d3e8c40f183", "sighting--bc26e831-35b3-4a8c-ae88-4b5ab8c6e216", "sighting--907d9e8e-c987-4d21-9692-c01fd96c5139", "sighting--8d1a09ee-82af-44c8-8a31-c07f0aa4d640", "sighting--33f276d9-be98-4cbc-a22b-5eaf66810051", "sighting--de35467c-2925-461f-ac4a-09dab6e384c2", "sighting--045e31f7-4ffa-46ac-8bec-355323b2b3cd", "sighting--6d2f0a9d-97b2-40ef-b478-9673bfcd952e", "sighting--836d08d3-b1e8-4581-9e20-21ff1b54246d", "sighting--c9aee191-dcc8-4366-81b2-9b6a8c2fe432", "sighting--73ac0791-8041-4561-a769-56d31ffc653e", "sighting--44e124d7-8e58-479c-8254-20c85f09d523", "sighting--06cdd3f4-e053-4f08-a343-3bd371afd2f6", "sighting--8771c58f-c7d2-415f-9692-eadda57eb229", "sighting--3a527fe4-63b8-47f3-96f0-b68fa7b5877f", "sighting--631f7d0a-80ea-45ae-a2e4-49d9c9d6563d", "sighting--e4fecf48-3a56-4ce1-9aaf-9803c40b0ee5", "sighting--8e733e0d-8941-4ba0-a719-ef4ffa23c167", "sighting--9f6cf964-6f4f-4047-ab6b-30eb5e0db5b7", "sighting--e2495079-a4f5-4377-b9d0-0a805ddb968b", "sighting--9d429462-9dc5-43cf-8a69-50189112a6f4", "sighting--853530d5-6dcf-49d0-b281-40ffc2a53dae", "sighting--4447e496-675e-4868-af56-544e771e52bc", "sighting--015c576b-9138-45c5-984f-2d44bee4db24", "sighting--b76badd3-1723-4c38-88ba-f7d7efac3aae", "sighting--6ec2e2be-8de4-4dd9-ba2b-2e7c6ff3857e", "sighting--e76d7699-9e31-4712-b81b-18f1d11bd6d0", "sighting--20cee1e5-b26f-4647-a631-67814087c9bf", "sighting--e0f05532-b91c-48fa-b101-8fcf0c283d1f", "sighting--a416f07b-eb6c-4cf3-bf06-d60e1b3a5d9e", "sighting--f5963306-d338-4199-b089-b85650f3fb5d", "sighting--ae599088-a43d-451f-9a7b-d9e528f615f5", "sighting--be41e417-fbfb-4b5c-a75b-a319b5817083", "sighting--9d9af24e-cb04-4e57-956d-0abaeeaaf2d0", "sighting--124eed5e-f51b-48ed-bbde-088db6bffacb", "sighting--577a6de4-ac96-42cc-8ccc-b30f49d67f57", "sighting--f2b65248-7dda-4371-b3f7-7ab57da40ded", "sighting--cd89d3de-ccb5-4f70-b6e6-42c363f74448", "sighting--0c26c3e0-0a40-4c9e-8408-59fb1850203b", "sighting--475dfa40-07a4-479a-aa4e-39d5664d9f19", "sighting--d8dc7684-50b5-4989-916b-dae6e016539e", "sighting--2c86d825-f0b8-4151-9951-22cfa57113b6", "sighting--b942f179-e4be-4627-9c98-94e1b043b628", "sighting--ed63c32e-2250-4852-b7c2-7df30e32e4c8", "sighting--eb5420d7-a2ea-4537-a6ee-daabcecad1dd", "sighting--2056c39a-5258-437e-bc14-32745732b587", "sighting--f40e9521-1d93-422e-ad89-6f79ce85dabc", "sighting--fa67d750-004a-48f5-b5f4-fa78761f7144", "sighting--49f04334-eb9b-4843-80e0-9a9ff972c54c", "sighting--c8ea4ae0-3383-496e-86a5-f5271a49d5d6", "sighting--0b2b9bf2-fcc7-467f-93ef-c29847c0f9fc", "sighting--bdd88211-b8e5-4979-8119-f1512c6e173a", "sighting--c308f13c-6cb4-44b2-b881-73311e69dbd7", "sighting--c42c48a4-753c-4b9f-9583-016121a47822", "sighting--b41fda2c-0f88-45ad-8daf-b91efea86e13", "sighting--3a6eaa2f-24ae-475f-95cc-770a7d05047b", "sighting--d493cf43-00ac-4e7e-ada1-ea5ffcc97621", "sighting--f5158345-b858-4df4-9636-796a549ec327", "sighting--8b8a1cc3-85c7-41cc-b610-10d3f341db5f", "sighting--eb43c426-c94e-4310-ad2c-36660ac40fc5", "sighting--76d35898-2e73-445c-a830-35a439645499", "sighting--5f22bc71-698f-4f9c-989e-3a8e84188cc5", "sighting--86e4c923-4c95-470c-a8da-6dd86fc3e9f7", "sighting--fb1fca6c-f6b6-4d92-b607-5b49b16d9b96", "sighting--29727f35-aacb-415e-8165-965dd81b1194", "sighting--16b26817-f0fb-43b9-8738-dfbe826798af", "sighting--d67f0dd8-a66d-45e6-8a3e-c1c83a0bb133", "sighting--baabc423-7e42-4f54-8244-8919ddb20680", "sighting--15c0c4ac-892f-4172-b178-b6e0b812f446", "sighting--1db8cfe7-c164-4d79-aac2-99ff0b779400", "sighting--34a89e8f-7c51-4724-8b31-dda8abc1fa5a", "sighting--664ad705-9ffb-4de6-99cc-a71c687aaaeb", "sighting--cd7e0a51-8d3d-464a-84df-c8e00b3d68d8", "sighting--328d6bc4-d62b-4040-adf0-6eb0f5253793", "sighting--fb9b375d-032e-43ee-94c6-d79468002b5d", "sighting--cdbc59ee-75c4-43f8-81d6-17b5bb1ece89", "sighting--7eaad9dd-86de-4178-aa0b-9a78cc8b9e5c", "sighting--5d56df05-a0fc-4307-8209-bacf757f8700", "sighting--6ae70252-6f14-4f6f-85ef-89e57f78347b", "sighting--457829eb-16e2-4a42-9e2f-3b7c05075dc8", "sighting--f729e50b-e996-4a0e-9abc-0c9feb1f64a8", "sighting--3ab70c5f-9036-428a-9b8d-6d1110733d1c", "sighting--1a934e49-d241-464e-84ac-afb75fa7dde3", "sighting--d9e06488-2db3-4c5f-a81d-75cee3b900ee", "sighting--d6734c7d-41c8-4b57-b8f8-3d9aa8e032f6", "sighting--6e1ba6b0-3906-42b9-a16f-4eb3e97e42dc", "sighting--22efb6d0-b4fa-4846-9b78-0930ec4e5f29", "sighting--8503e4a6-4c31-4281-a63d-f471999e66c5", "sighting--f2912b5c-9232-48e3-ac82-f60aaf4f4828", "sighting--7ddf3e18-1da0-486b-827e-50d360a4fe5d", "sighting--9db071c1-1a41-4c38-b79c-e4e0866e772b", "sighting--d205c139-1625-4d7d-af0f-9e3aa46b4b38", "sighting--b2536f55-0ee5-4ad8-88b5-654047ed5058", "sighting--d3581a62-1845-4fbe-88dc-a91ef4d92d9e", "sighting--1e735d1f-326f-467a-a98e-845dd1a6d70d", "sighting--c14746cd-2d1f-449d-8725-5de0b18007e4", "sighting--4e3958d5-64dd-45cd-8772-433338a89cda", "sighting--d5c942b3-393b-46d5-bf6e-c973291b8bee", "sighting--ea043e80-0220-473e-baab-d0000ad4ba58", "sighting--f32409b4-0f06-45df-801e-51963f2b2a60", "sighting--e1485dd1-c38c-4e07-9808-af38c5bb12d7", "sighting--c6cdbce2-0841-4a58-8af5-45711fa39820", "sighting--d85e3992-b0ee-4cd0-9249-bde9d2eb859c", "sighting--abaf5047-85e7-408c-9bbf-ccbc4d995db9", "sighting--c404a63a-5181-49fc-85e2-8b64c22ca714", "sighting--3a195e83-51fc-4f04-8d23-3581f2e2c6b7", "sighting--380dbe4e-6307-4ce6-8055-17ca8e89eded", "sighting--afe7a511-5845-4bcb-8c9e-9a0858577266", "sighting--f49bb519-78ce-4f53-8498-8f1d8ee90058", "sighting--e8a49431-b9b7-45c7-8f5e-85f7b4d18473", "sighting--b274a8e7-e43b-4bfb-8c4d-d8036f16cd5d", "sighting--2154a79b-a4b2-4301-9fef-5a2b4f644c4d", "sighting--7b331dd4-bc2d-41d2-a820-197bf60b4144", "sighting--92021e87-12bd-4869-a6a4-72890d3f0103", "sighting--2090bb23-fd14-478b-be2a-9954beb22169", "sighting--56690459-5d99-46c5-9e66-453485ba38f2", "sighting--cd7a8322-a255-4509-8a37-e4bcfa89ca78", "sighting--ece8c004-a3b7-47fb-9509-f6dde4717ca6", "sighting--5c3bdbf0-4ca0-42fa-9c96-1f42c1b66833", "sighting--f7632f50-4019-4716-9d62-e07fa3bd7bd6", "sighting--772dab70-d456-4aa5-92f3-f724a02fad7e", "sighting--8db560bd-31b9-44f9-b787-fed19964c644", "sighting--9a2ebd7a-b513-49fc-93ec-54f524c883de", "sighting--21cf3ad6-7951-4cc4-82d2-bae9ee2d9478", "sighting--a1a5fdc1-297a-4414-ac5f-d2fe7a5f71c2", "sighting--25705d9c-3034-4a33-ba81-286c8e5364eb", "sighting--75384d23-3a42-470e-b6c5-eeb0f760c4b9", "sighting--9ef6bc3a-637b-4018-a237-fd64e5de311c", "sighting--6d7b9f81-a108-4112-a257-7b674f309803", "sighting--87d033d6-87a8-41f9-8d5b-d658704bda0d", "sighting--405f29e2-5112-488b-8fb4-94ca9847ba34", "sighting--b0fafd8f-fcb6-42c2-987d-68ef2b14e409", "sighting--732d985a-06be-4d9c-be79-75cb55716e8f", "sighting--ed92d582-3e7e-4f1c-9275-6358b5a9cb3e", "sighting--229b0037-4e48-4c55-a5e2-ae9cc8f21eaa", "sighting--3de14ebf-29be-4e8f-96b9-a686f47097a5", "sighting--fcf88129-861b-4098-aa6f-214cceed2d9c", "sighting--205410f6-d22f-4888-9054-da14c71218f1", "sighting--6121958c-0077-4be4-af1c-087c772c3b0c", "sighting--e89a8656-ae24-4352-bb77-3024c59c8d68", "sighting--1c9a0975-5ead-418b-8453-767581270cbd", "sighting--ba3ed86b-5fae-4cd5-b9be-7aacad28ee89", "sighting--97f5ceb0-46d7-410b-91f6-5754e667040b", "sighting--e23046f3-80c9-4c40-aaee-11717a83b043", "sighting--1d2a43d0-94d5-4c50-8daa-d4379c55311f", "sighting--c685397c-f978-44c1-bb4c-78b81400080c", "sighting--7ed969d8-b456-442d-b9d5-21b9ca89739a", "sighting--6de3244e-8815-467a-9e24-3530ff5978c7", "sighting--942f369e-fa62-4d3d-9883-82970b471727", "sighting--dec4f3a8-3132-4695-b4df-be88722dab1e", "sighting--02dbfb6f-4ba3-408c-9e7b-0d0d80092010", "sighting--44e8939d-863c-4d3c-b866-0b49e13d1199", "sighting--fa87b4c2-d580-4420-8970-64ff302efc36", "sighting--3bf0329a-3cd3-4ffc-a761-7f0defcfb84e", "sighting--8a3ecee8-c713-4ff9-a28e-d1c23a4a348a", "sighting--b085b517-739e-4b08-be24-c1ef33b271fa", "sighting--21451665-235f-492f-a79f-1dfd00ca9ca7", "sighting--72bc30e6-b909-4d74-8667-3eac6e8326c4", "sighting--f7ba87cf-9ae5-48cb-9662-0b6492008d2e", "sighting--536f3f61-186f-431f-b502-e21aaae0f319", "sighting--d7b6a948-b8e5-4e90-a77a-3bd2a8aaca69", "sighting--e1d997dd-e466-44f5-b62b-715a057b578c", "sighting--623236b0-f356-4d34-8dcb-eb0f0e7d2f26", "sighting--d25ad904-ba12-43ab-95eb-d9a6641568f4", "sighting--24a63304-ffb1-4601-bd41-990c424adbc9", "sighting--dfdf3136-b5be-4718-8177-abdd33f538ac", "sighting--bbf2e5b8-5a82-48e9-bce0-1b3679cc6b3f", "sighting--84fd1d32-2d47-4e74-af65-6bf70c2a7f5e", "sighting--19eae2e0-baa9-43c6-af24-0b454f282489", "sighting--e3456d89-758a-4485-9a15-540373a1ae7b", "sighting--899c15ef-8f9a-4c0c-8348-f59941ceebbf", "sighting--5b00a634-6a00-4a73-8ebe-42f746879cea", "sighting--77f6c669-2273-4f8f-97af-ea4920c6543d", "sighting--fd889a2e-b52c-45db-8641-f2c24168db4c", "sighting--5bb7807b-f844-48d9-b68a-7b9bc7bd6263", "sighting--85d9550c-9553-4db5-bd6c-e6f1f0b20836", "sighting--b96f685a-c87f-49b1-ad1b-6df184e66fb6", "sighting--0461967d-b753-4f2c-a14b-b4263d0685ca", "sighting--d91ea83e-1f75-456d-9b19-7e4f861ef9d8", "sighting--885068dc-4db2-4f72-9f36-20d4c7e2ee41", "sighting--167ffc06-460c-4e33-b516-980271855b11", "sighting--ca176e63-df9c-42e0-84cc-3bf399842d48", "sighting--c17a13ce-b62b-4b69-a3c2-985ec291d3b8", "sighting--6bd8b947-4673-4e29-820d-6379315f138f", "sighting--90072ca7-3349-4243-91f4-79406e4c98bc", "sighting--2cee7c9c-91aa-48b4-b0c7-36878ca8f4e1", "sighting--dc290381-2708-4f1c-b780-69c106b18526", "sighting--bc7cacc8-36c9-4463-930c-edcba1094ff9", "sighting--91a6ee96-b456-45ff-ad93-275e9c3f62d4", "sighting--1f3dc726-3a40-4832-8d8b-fd61707f3e43", "sighting--d2a7548f-2465-45d9-9dd6-b2e706368741", "sighting--d1fd26e8-ef1c-4f0b-9099-52c6b6fc59fc", "sighting--cba07191-3b87-49f9-842e-0e984854d260", "sighting--4246c946-7a51-44a5-81de-074b5fa81ec1", "sighting--b27da7cd-067c-47f2-b777-af551ab1e8c0", "sighting--1be8ad28-0fd3-4205-98d0-0571a1d87955", "sighting--24a2f517-164a-49e0-a2e2-78a1efbd8582", "sighting--dc6546c5-b108-4955-921c-a522e49153b6", "sighting--66f459f1-35ad-46bd-935f-ee50ff2fec47", "sighting--71ff36ae-7640-45d9-ac5b-50c4c3ff9d2e", "sighting--44b8e5f1-e9b9-48ad-9663-7a39f3e439fe", "sighting--c225f8c6-6f59-4ac3-a91e-c652ba922e79", "sighting--f40b85e1-d55d-429d-9004-bcbce1d5b0c1", "sighting--a26777c1-278d-4267-9839-c7e36635ca1d", "sighting--e0ad00e6-2541-4805-8848-c7bc21a807a7", "sighting--4a8ab729-991b-435e-b0d3-4c6b917e8783", "sighting--06f90e5c-ecad-4908-b1cc-4bc8572ce623", "sighting--8570bc3c-6459-4eae-89a7-8f7e2d176c8e", "sighting--1cb53f5a-65ae-47c2-978b-658bb9d5e22b", "sighting--231085f2-d2bf-4e52-88d2-2b762c5c5765", "sighting--46050336-aeda-48ed-a257-a36a88442c9b", "sighting--b011fe50-a88f-4961-87d8-0a9f391d2056", "sighting--9a33ea70-6044-49ad-a0a1-134e349456c3", "sighting--57e5df97-e7d7-4b0e-a1f0-8b634a1ba8bc", "sighting--514ad2ee-ecca-42b6-85c4-fcbac1c49d80", "sighting--9dfdbcdb-ff40-440a-b414-8332aaa612ac", "sighting--f73cb35c-c5fa-47b5-9b46-0b6cb595443c", "sighting--7959b11e-0fd4-4cb4-ba13-4f80aab327f4", "sighting--07a0492f-ecd0-46b7-8d6b-2d27da2dadc3", "sighting--0e29b1ad-aa9c-49d4-bd7f-199cd716309e", "sighting--8d2a8e07-cffd-4dd3-add7-2d84b9a500f4", "sighting--2b0f3202-cf5c-44d6-abeb-51f5156ada28", "sighting--fad88939-9d1b-41a1-97cf-b782b2a966e1", "sighting--8298947a-37b4-48ef-8612-8c2ccf11b9c3", "sighting--11bd4de5-21b4-4669-b754-1f682fe16d45", "sighting--b1c1b8d9-f746-4350-b42b-41b2d5b0d99f", "sighting--d3ed30f8-913b-4ed2-a175-4659b5148996", "sighting--71f3a5ed-9aa6-401b-9724-c02cd2b53144", "sighting--1512cd92-2352-4218-a391-4752b124892e", "sighting--c473e8ce-a14c-4604-8f9b-ef795810c454", "sighting--8ce0b0e1-89ac-4acd-860f-c60b53fa12e5", "sighting--b3d9a4eb-ba3b-442e-9392-ee6b2f02fa60", "sighting--661e1835-9ab0-4d0d-b4c7-310399c12437", "sighting--6519d61d-c8ca-4ccb-b19d-7e1c0e52ea8a", "sighting--08bb10aa-9f3b-40fc-a748-97afa0b6122f", "sighting--5b64b0c7-d167-452a-9acc-a1485b9238da", "sighting--ff7f3ad7-1173-4c72-84b5-edcb723aa501", "sighting--af1a5aad-0398-4b65-8a79-5a7c857d0ace", "sighting--b265a9dc-1407-4d76-ace2-499bae493234", "sighting--981fc3b2-084d-4c9e-a7a0-1aa3d38624e0", "sighting--2ac402a4-9c33-4f21-8719-3178d46331cc", "sighting--015cbed8-7dad-45e7-a53b-a920a56ac866", "sighting--c5a7f490-10e4-4d97-a720-26d101266163", "sighting--b5bae4ef-c187-4c90-b6d7-5ecb67504ce4", "sighting--210d62cd-d734-4822-a9d3-9f595ea85ed8", "sighting--30a41c8e-acad-42b2-b8b1-234280fff393", "sighting--86beaa41-4fac-4f89-baa7-c9fede33c77b", "sighting--c1e0c97e-3384-4dbd-b788-87886c1a34ef", "sighting--82dafc4f-269e-49a4-ab29-f1143c8a4d80", "sighting--e356c304-e7e9-4c9d-8025-75759a7d1869", "sighting--3403b7ec-255b-499c-9427-dadefbd5ce04", "sighting--145c0513-60d1-4c18-98f0-a7dd68b0ecb8", "sighting--7a34b0a8-4f20-473c-bee8-028d96a5ee17", "sighting--697bcc34-7ad9-4000-b743-1cdfc0653282", "sighting--203808bc-af88-4c6d-a2cc-9267e8367f35", "sighting--7b3ca194-8474-42e4-b90a-eb71afb453ad", "sighting--ce3de655-7fcf-4b4f-bb6b-8c680919b5cf", "sighting--d06b2c17-a076-4d73-861a-2ba701640b43", "sighting--8c1048f2-e2c9-4d05-b672-d64c464a2bed", "sighting--09d4d891-ad09-4b95-b1d5-0c97dfdaa566", "sighting--fcb12446-4c80-49a7-b1fa-7578df46b1ca", "sighting--765d19cb-175b-4f2a-8441-b5674040cbad", "sighting--e4e77bdc-5c78-4f8e-9fc8-aea3e04e5894", "sighting--778ce84a-b2c4-4da7-94b3-760d99b1b402", "sighting--f349ed86-9e64-4341-b173-a012baf257d3", "sighting--f0fc86c8-4355-43d2-b2c3-d8e7c081bd5e", "sighting--b0aed671-f55d-4330-adb5-d4c85f8ee081", "sighting--381c8c58-cdff-4965-a041-13727e032925", "sighting--5ab4fcec-507a-4ee3-b017-93479aa33359", "sighting--ad6c5654-b9c5-4474-ba5f-2e9ae55acdec", "sighting--0cb9f666-83d4-4581-9cc8-d25a0d51ed5f", "sighting--822972f1-f7cd-4888-a41a-25acc6670ca4", "sighting--d1f1f9db-1df3-4916-92de-98beb1c7a6cf", "sighting--6f820724-34ed-4c40-b9a5-1efa6ff5aba8", "sighting--718ca393-a9fb-488d-905c-24e524d75919", "sighting--ddd9d3e0-a3a6-4c7e-8a90-f63dc9824381", "sighting--7fd0d167-1d33-401b-b468-c3bb43e09c45", "sighting--6ae9eacb-0626-44b7-8f01-fefab0f05dbd", "sighting--6e7a940b-e812-46f0-afca-cac8cd265c13", "sighting--92be977e-eec7-428f-bb98-0368cc52a5be", "sighting--712a2e1e-9eec-4221-b4d2-c9d4eb88fe27", "sighting--526cca3e-04e1-46cf-86bb-0fb6d0472d08", "sighting--0b85c6d0-edec-4deb-8e47-a295b66d107e", "sighting--e12bee60-35aa-482a-90a9-2445e692f090", "sighting--27b1e80a-8c0b-4392-88a8-ba3d243e7bd9", "sighting--cd894c3d-04ec-41b7-aa2c-a26300cdb159", "sighting--ac4eb49a-2bc9-4a22-bb23-a9d08d2ac8e1", "sighting--b69d9fa0-6d3c-456f-aa1a-97bcabe6cb4a", "sighting--39a51a14-3e9e-43a6-bcee-5080e95e0b9f", "sighting--31f48371-c64e-4188-a17f-67dd2231f1ea", "sighting--7bc09cab-3445-42f9-8b46-306ccb866762", "sighting--0ae585cc-290e-4eee-96d9-4fd15f2dbc4a", "sighting--28f7ba40-6568-47e7-b323-bf641f1d230d", "sighting--88e55f43-cd5d-4aa7-bf64-bd7ea37aa80f", "sighting--2070a462-5197-4fa1-8f2c-6fa2c16221f1", "sighting--6b94c837-4bdb-42f0-9b96-7d9d275698c3", "sighting--34cf81d7-3ed3-49ee-9776-b035aa1cd838", "sighting--5b03df7a-da1a-450e-9b13-be3b21f58432", "sighting--5e692689-4f85-4b13-a550-448eeadaf962", "sighting--8d5efda0-9f84-49c3-988a-10850a9872ff", "sighting--09e11e06-7ff6-487d-b95e-3ae6124e5889", "sighting--0094295c-fb77-4e75-b126-724a7b464e9c", "sighting--93f76eb0-d568-4339-a510-f05c767aa41c", "sighting--42bfb641-b57d-40ab-a14a-42e7ffea2c91", "sighting--c775fc71-b2ca-4633-91bc-cba5829dba28", "sighting--eae1c49e-2c98-45bc-9be1-6e057c75cce4", "sighting--a70cf8bc-a3bd-4c0f-977a-677cfecda51f", "sighting--37d2174f-595f-4658-9ec0-8d264634c43c", "sighting--590ab031-6b13-4673-a059-7366706723bf", "sighting--7e7dacaf-f569-4b38-9a3a-52f499addd07", "sighting--62392248-2a5f-437a-ab3b-24430215774a", "sighting--0f6f8dde-df13-4f3b-aeb8-afc645fb079c", "sighting--47f4e6d0-3bdc-4b13-9cd3-d8f7ba8cb8b6", "sighting--4768dc62-30f5-4297-a326-835caa01eccf", "sighting--4d78b078-1352-475e-afd3-68be986aa167", "sighting--efcedf5b-0ec8-4cd2-94c6-260ce4fa0304", "sighting--faa9a15a-84e5-4669-ac56-f77ba5324010", "sighting--f382244b-5a50-4df5-93d2-682b33af9597", "sighting--030ea5d7-bc0e-42b8-897d-86c83407b30e", "sighting--6b635464-fa70-4264-836c-936773342a84", "sighting--9c079684-2c12-4f49-b900-6b26cd2852eb", "sighting--a5ad4e01-a2e6-4523-ba95-2c13ef2c7e57", "sighting--ec816c50-d460-4113-ac08-a90fb574810b", "sighting--3e060deb-4350-491b-b6e9-d368ce3a893d", "sighting--80b0c8b0-24f9-48fd-a1d4-2afd7261a1db", "sighting--a06f2c56-b02c-4c0f-84c7-735bf2f2f58e", "sighting--4d1a2b4d-16f9-4aec-a2a9-89014c3d4c69", "sighting--ac7a4ad4-9ee8-4b52-ab80-d1fe4bb8fc6b", "sighting--c16b94d2-29ab-4846-accd-dc3ab915e78a", "sighting--93f9c2e2-ee9f-4f04-9dc8-f4a0ec2c889b", "sighting--15507fcf-9e27-4295-9107-9d188f7df7c8", "sighting--cf655319-b608-4374-ad68-4a5ef24fbe45", "sighting--36f35eda-702c-4bb7-947e-9207cb0f6dea", "sighting--55d7d3a8-1942-4c28-bbc3-9c70b793016e", "sighting--dfc39c44-2544-463c-ae01-bc9614dada9d", "sighting--419ba61f-27b5-42a6-8821-caa448d6e672", "sighting--9e586d63-e0f9-4426-beb7-ad9adcbb3592", "sighting--67b6a42f-ba1d-4944-a739-743c306d929c", "sighting--0ff96b76-d1c3-41b4-9b05-be0bde41928a", "sighting--a4fe00ae-3882-4765-8ca2-1abdde150814", "sighting--3c83a683-4d2e-49a0-8bd3-c8dfbf5c373f", "sighting--3f450963-6822-4ab5-8211-61e43344db6b", "sighting--a6420191-32a1-46da-8723-4c80fb755ae3", "sighting--1ed9ce4e-1c9a-4277-90b8-222d0ecd0caa", "sighting--d42d034a-32f4-480c-892b-f49585627de2", "sighting--83b01cc3-440b-4d85-b1b0-1e97650b4c20", "sighting--a109a03e-842a-4c83-80c2-6623499b318c", "sighting--638c5f79-5932-4f92-a493-079cf9e6c0e7", "sighting--d229cb09-582e-4d07-953a-509c23c019b9", "sighting--f0259186-17fe-4a32-aebf-a97063d06681", "sighting--7426cb68-71ba-40be-b434-93bd48d9b4e5", "sighting--dca094d8-32d5-4674-a761-dc59d0a8c5fd", "sighting--756e49d8-a418-408e-ab98-08ee34530b0d", "sighting--064b5952-9788-4871-82fb-3967b89c3728", "sighting--099cc387-b120-40e0-a218-90552f588d7b", "sighting--1a323161-ca74-466c-918c-315655fc48f5", "sighting--1cc83200-ddcb-4dbd-a0b9-70a41ab450e5", "sighting--af7d7c11-115b-49a2-9f8e-7f7cca94637a", "sighting--8a4b4202-120c-4221-a944-e01ea91ee1a6", "sighting--e811d402-be5a-4a2c-9594-330144ec6d60", "sighting--73c4c47c-4e96-4c60-a713-979441013339", "sighting--489e489d-3890-4154-b722-4dc5ad423fa7", "sighting--5bc85893-160a-409a-bebc-1e3f2dcc7ea9", "sighting--f0e23b01-89c3-4433-8caa-cc7743d7d48b", "sighting--e96cec50-1e50-497d-ba64-965670ebec29", "sighting--8d954ba1-5b06-45da-989c-bd211a5f94f1", "sighting--344969c5-c537-4cff-8162-9902a2472179", "sighting--a97d1ec4-7e77-4519-b2b9-7746139af908", "sighting--15a45e5d-b1c6-44df-9aa9-590fabc340f2", "sighting--8a5751dc-9af6-4540-84b2-ff6d7ecb35e2", "sighting--5594d1b2-6ad0-4b94-b513-91289bfb4202", "sighting--da86cb2f-2c38-4f50-b5c1-49eab3d9b9ac", "sighting--64c45398-276f-4b32-8cc6-1938b5dd1159", "sighting--0e0b2b2a-c22e-458e-9c43-bb6e8b080fec", "sighting--dd770306-8ae0-4512-89b7-c8bdfe1559c9", "sighting--0edf94d6-2af4-4a3d-8832-da514819c101", "sighting--5fe78a82-0f0e-4260-ad08-54714e38ea5d", "sighting--d1c4a4ea-e0ce-42c9-ab02-dd23c59172eb", "sighting--ce003cab-4295-4f71-a971-77c80dfd4b17", "sighting--b3fa55d1-7a58-430d-9b4b-44eb68294479", "sighting--91916ab5-39ef-4401-a761-0a287d7d01f0", "sighting--cd6df071-0815-4685-8ddc-2e407b914dfe", "sighting--3a6b546f-f076-4426-bb42-12b0f949f519", "sighting--498ecf6f-cf29-4682-9538-d4708ab0886b", "sighting--08fab8d5-af86-4223-99c4-585e02795749", "sighting--cbbeb50b-1fac-4752-955d-da81b5a7d519", "sighting--d75c999b-a924-4d75-9289-39609a6f27ed", "sighting--bca8920b-f8d3-4b5b-b9f5-cea2dfaa1f6d", "sighting--1c62e753-e96f-47b6-89b3-5925e0d42e26", "sighting--c666369a-c738-4d20-85bc-3df1bacf5a15", "sighting--0aaf048b-e997-4e3d-ace4-2932f0ad2376", "sighting--f9ee6420-261e-4254-ae25-df9e58d9d43d", "sighting--8135747f-1f0b-403b-ba96-b65b3f52d148", "sighting--54201ad9-a0d0-4f38-afc7-5ef300a8e119", "sighting--c385c1aa-f7a5-46f5-8b1d-c12f3fa06eac", "sighting--9af0f749-75d8-41f2-a7f3-933d5cac1cb9", "sighting--e9a8cd91-d144-4ef3-81c0-3b9084412025", "sighting--11e52bb3-8cf1-44b9-a0d7-1e43faefbe93", "sighting--197d913f-a200-40f2-a362-ef23754e5c09", "sighting--c7aba047-90e4-4362-b502-a81243be9194", "sighting--0f96c643-0404-4a2f-b222-c7b745d269d7", "sighting--df447962-57e2-4446-a007-13ea5d8e8890", "sighting--3fd47248-a59b-4825-a419-3dfe0165bc3c", "sighting--1c10e0e5-1b23-4e6b-8a3f-e1fa746c9b46", "sighting--b4dfe494-b285-4e50-b5fa-93369d32c15b", "sighting--64ecfd87-e5ca-4bbe-9b6f-85a6335e2b44", "sighting--74830203-600e-4ea5-8f6f-59e8284b7dcd", "sighting--b342012e-d9d7-4053-9c61-844eb405695e", "sighting--dd3d6544-ba1b-4485-af6f-4813315c515f", "sighting--85e58c0c-46b8-4690-b579-38261908671b", "sighting--154fac95-8c54-439b-a99d-f01c870dcf61", "sighting--3f1df6e6-8554-408f-af27-918f80e48d72", "sighting--eca63815-6eb5-40ff-aa0c-64c2cc9bbdaa", "sighting--95c6b2ff-fc31-472e-8231-de82ca3dfcf3", "sighting--5b0366d6-d810-44fa-9a56-0d57dd6ab891", "sighting--eed6f260-3263-470b-b02a-4c291b07d3cd", "sighting--175f6af5-f705-4ec2-bd51-262bd0c78f26", "sighting--9867fcb2-4d21-43ad-96c7-a08e5e4c2f7d", "sighting--f16ea753-46a2-486c-b099-56ce11da4a25", "sighting--4c8a3b8f-11cb-4b44-b1be-e3ef9371c9ca", "sighting--09468732-fc02-4f7b-87cf-def7e0f83358", "sighting--f6e63ea7-7da3-44b7-8589-57de1cb9f9d7", "sighting--0c22f587-a13d-40bf-b6a7-ea8c2bdb5e82", "sighting--11a2b471-e86e-498e-a8e1-13846d0e2449", "sighting--62357181-f6d0-4eb0-a26b-12da51964bbf", "sighting--53b2cd67-57ca-49c9-b3d8-4385342f0a4a", "sighting--d50d9803-06e4-4e7e-94e1-f9cbd6eeb697", "sighting--c5276a85-06a0-4ff1-920f-234c76b5f98a", "sighting--eef582d6-c879-4ca5-8b0b-efe525f192ad", "sighting--e923fe68-6657-4d2d-a317-b1d6c774070b", "sighting--9bed0e47-e4c8-44c0-b442-5dc8a50a239b", "sighting--eab7e972-1d67-4ac6-b034-0ca7d6d4bbd4", "sighting--f62d07ec-ffa0-47b0-ab56-1871b4a3cf70", "sighting--e301d9dd-acab-4952-9c12-016a72423ca4", "sighting--e425b9b5-26e1-4da3-a45f-102f76147326", "sighting--aa2eac4c-b7be-4b7f-aef4-fbf8f96ec690", "sighting--a8a044ec-4754-4878-a6e1-81307017ad59", "sighting--48fe0b4e-145e-42a9-b325-7ad4ed29c792", "sighting--2216d338-e186-425e-b9ce-54a964045a5f", "sighting--290b157d-a248-4656-a250-4ec6df3fee20", "sighting--6d290489-2e07-4973-a787-eda5116279a3", "sighting--3aacf237-b063-43a3-8d27-12df9dd0a289", "sighting--ce18128c-ecf0-4765-bdbd-7d1c23ed18b6", "sighting--3f3e40f6-c446-4759-810f-f2f5bee79ca7", "sighting--480f682e-ae7f-4899-8693-1d105f86c88e", "sighting--37ca7c36-99f1-4f0d-9b41-0602bf297f7e", "sighting--5a49d384-3acc-446d-8f67-e02f6eb7a6a9", "sighting--27174c02-dc70-445a-b1f0-deb7d5adc025", "sighting--6638d738-283d-4e78-9a0d-69419767e53c", "sighting--b9314708-c9c5-4d8b-87a1-55409fc0007c", "sighting--8d121e1b-83d5-416a-b32c-9658eada3a1a", "sighting--fe84d1ba-b9b7-448c-b84d-2118eafc0906", "sighting--1a961c87-36be-4914-a0a1-898b5a2be448", "sighting--8665e108-bbce-479e-bd57-4a53bf85ade2", "sighting--eaf4b8f3-544d-4f10-ada1-229636b2708e", "sighting--15e0d992-edf1-4b8d-a92e-bd665a20b710", "sighting--551c73bc-f4be-4fb3-b0e6-d3b6b6989014", "sighting--f6cb7fd1-a415-4b3f-b048-e2904655b50d", "sighting--9ce04739-6770-4d5a-bb48-5517332fa3cf", "sighting--399b1b0f-2b17-4fdb-abfb-c4996a424d5d", "sighting--e3efad63-6ee5-4f67-aacd-4d894bae5663", "sighting--d4dc09c6-ea29-4bc6-8672-aabdd547e0b8", "sighting--d8c5ef0e-7645-434a-8c05-58003d802429", "sighting--188051d5-8f30-4d7c-8a3b-8c5c4ad618f3", "sighting--62cf7d2e-93db-4753-b16a-d5cf32a0db11", "sighting--cb26ea35-fb99-4fb4-884f-0f16133de5cc", "sighting--94a1a383-7b66-4d10-93fa-adbd8a6730ff", "sighting--1493f4a9-1f5b-4568-9f07-c4395834b5fe", "sighting--6def7faf-c269-4b95-99a3-bbd9dd6f4089", "sighting--f7fe3aec-a6fd-4df3-be5b-408f7bf9469d", "sighting--7634c5b9-75ec-414a-8671-4ab7975e0a92", "sighting--843ab4f6-8132-49ae-8478-532acfb95402", "sighting--33cc33bc-94ab-490c-b351-081d8973e041", "sighting--e6a14d5a-ab89-4a47-aeea-499b0c6dcfbb", "sighting--73f91371-c5dd-4238-ac23-3e75e092f12a", "sighting--48d7d832-2682-4d12-93a0-7c0292f44e15", "sighting--39c7b554-ba79-4141-8c5a-34f666e502c3", "sighting--015e853b-3ffa-402e-ae89-04d82589c126", "sighting--fa25779f-0958-4f64-8221-4da18b8e9ae4", "sighting--8addf6db-dd19-4f4d-83f1-4e2415158fa4", "sighting--aabe4a2c-80c0-4cfb-a281-d3055c8ecb8b", "sighting--e2f11cee-bece-40b1-8d79-b2f5ae9d4341", "sighting--ac2d2b69-37c9-4225-9a83-eff07ed16e5e", "sighting--7afe710a-f4f0-4e84-a4dd-4a43f207f576", "sighting--e9d8432e-de83-4f78-a113-114be883e716", "sighting--5111c529-57d2-438c-a6f9-3ff48c2f549f", "sighting--9f2aabfe-c2a8-4d69-9d82-61d81c0e1a40", "sighting--f9c59e00-5722-40da-9076-ce38cdab5daf", "sighting--ce811382-5f44-4a12-9c87-f98dc94867d1", "sighting--e17dffe3-1b4d-4dfc-8d6e-1f38af44004c", "sighting--caeb565b-ac17-4e17-b930-be7fb055b0df", "sighting--21c2740f-3926-48e1-b4f9-e1a5b73ff8a0", "sighting--58bc4044-2916-4960-811a-bc492e880afe", "sighting--1b6644de-b755-47a6-aae9-fb44407950a0", "sighting--dda7295e-d490-446e-8649-d18ea613a3c8", "sighting--52eacb53-57cd-45fc-99d7-9f1705158308", "sighting--bfcc89f9-9223-4b27-9105-65638bfc43dc", "sighting--f0c322d1-6cc7-420a-a5d0-738b6e307e9d", "sighting--b308fec4-86cd-4a21-a411-b4c8fa7c09f6", "sighting--852a8115-da7a-4668-8cb9-341b49df2e2c", "sighting--8f2164d3-1c34-4ba1-a03a-72fb0796b4d0", "sighting--e47ff43d-a64a-488b-99fd-a0026141472b", "sighting--5f534a1f-aef3-4f2c-8f5e-83a1078a451e", "sighting--ed32e1b2-640e-4b43-af31-bc4b97da94ce", "sighting--39cc6d87-3122-44fb-bd49-7ed9fac9cd2e", "sighting--c120d194-dc3f-4abc-9254-19c6a1ede9ba", "sighting--776d5083-3aac-490e-86e9-ba9ff7517a64", "sighting--52d6f33f-3a7c-4a22-a1ac-af3204051e49", "sighting--3df46e48-b90a-4630-989c-44acc327ef19", "sighting--03e2f283-f41a-4b1d-b16c-891fe7e5b52a", "sighting--34562c72-e809-4512-ada2-5529aece6d7c", "sighting--c605b36b-9847-440c-a797-70af34247041", "sighting--44ed4785-58bf-459f-b56a-d82535cfe076", "sighting--e23e8ac1-89a2-49f2-a964-4d846bde4b4e", "sighting--af8df71f-cdf1-463b-8a83-4b1203abf157", "sighting--0c2276bf-e0bb-4029-bd4b-9e3f03b454c4", "sighting--f7aba5e6-8f2e-46e2-824e-701963f778e9", "sighting--44b03483-418d-4bb4-beaf-05b32d7f0baa", "sighting--442642a2-22d1-4e4a-952c-4dc2697b1e74", "sighting--c9c00f8c-0087-4441-8de3-6d1a916cab26", "sighting--5079f38f-7285-4a03-8d40-430c6fbba2ef", "sighting--de9102da-841a-492c-a46b-aae6d845b3fc", "sighting--26810d41-31e1-4f5e-91eb-c050696f0339", "sighting--2a2dce92-7155-43da-9a24-be05f7e5c521", "sighting--85e39ba1-f0d2-441b-b1c4-467bf7f09e3a", "sighting--95aff2fd-5969-4726-ae62-3a6b84d24c2b", "sighting--cf5b353b-ca7b-4559-b066-208486db5e17", "sighting--77d07237-3ac9-4d55-9a41-eaa90428ffcf", "sighting--e3929b8a-318c-4101-bc9b-1b54afee0c9b", "sighting--2e40b3d4-646d-4f03-9611-a36e85b0faa3", "sighting--b6c698e4-b2fb-444a-ba01-afc99058374c", "sighting--5f10e629-5bcc-4ecf-a1f4-8ba67207d7d9", "sighting--581e5b8e-4382-43c4-baf7-3261ac22cb61", "sighting--c8193649-f2e0-4bf9-bdda-5a7f68ca672d", "sighting--7bc44d4f-7b3b-40e8-b2c1-b101c30c6cc6", "sighting--480d9f70-50e1-414a-9196-615d47dd578f", "sighting--1f9f8691-d855-4b38-9839-6e32682ce1d4", "sighting--2e7e70aa-1b08-43b4-bb00-2025d2f13d7a", "sighting--1e6cc870-585e-49fc-bc14-db283446e16a", "sighting--e06e6f34-9e92-44c6-9332-7239a641577b", "sighting--b7eb2d77-d46c-4a2b-a5a2-ab11f338b548", "sighting--9f5e30e7-d22f-4c31-a98e-a205193e3914", "sighting--1a1f8b85-efb7-41c0-b45d-25579e8b870d", "sighting--1a7a8f70-4f79-45de-9a24-1f83ba187b65", "sighting--8d7c726a-332f-4ab7-be9a-ff43c0695e36", "sighting--3c9cc5e1-357e-4910-b8ea-4c03c93f5659", "sighting--8894e61e-9373-445b-a7d3-8ed2a31b6965", "sighting--83571497-d755-4616-9f11-25d70b69955d", "sighting--5d1e7e55-ab01-4a53-bf60-9dcb0699ed9a", "sighting--ff6f8a2d-f331-4b5e-a94b-f70f72aedb2b", "sighting--5b341300-c1df-4f03-9ea1-7fa5f24e3e3b", "sighting--1a663455-5a4f-42a4-a3fa-922ecf95beff", "sighting--08a0c971-9bd0-4524-8385-7261a32f8239", "sighting--0fdbca38-4cbc-41cc-aaef-2440228d24ba", "sighting--0aadd4aa-465b-42cc-bd4a-7c5925455e73", "sighting--4c7e56f6-f9ac-4594-8324-73014ff5b739", "sighting--e33db6af-cf92-49fc-95c9-7a218ca3b730", "sighting--0bc5b54f-894b-4bb0-8042-ff60d913db22", "sighting--b40c5094-c3f1-438e-bbdb-092a8984d604", "sighting--37637842-35b9-4b23-a577-708f5bee9c32", "sighting--8af2eaaf-dbd2-4cfe-99ae-67798dc3d60f", "sighting--f223fafc-7dbc-44f1-b4e5-2d5f01d69bb3", "sighting--a8e0ef5c-37f1-421c-9259-dda4e2624850", "sighting--5b4fe931-9b0e-496e-b05d-d71d0c566058", "sighting--10217993-9cab-44f8-9a2a-7a6020f888b5", "sighting--aadba493-c5ee-474f-8cff-3967ac45ce23", "sighting--d77111d3-8641-4e29-85f8-b4706ae3606a", "sighting--bcfd25d7-26bd-4f3d-8ba8-8f62a806e9a8", "sighting--155c80ad-4439-46bc-9aa9-cd04347e22e4", "sighting--001c01e9-74b1-468f-8f24-4d8dc402b22b", "sighting--0dd578ca-e084-412e-8f06-a2b3b9f33f5f", "sighting--3bd58433-98a7-4699-b4ac-7922906ee917", "sighting--4fb11762-528c-465e-8320-16a41a17f39c", "sighting--048eb94c-4e59-4fbe-9fc5-0b3aaed34ab0", "sighting--02fa12fd-8528-4c0c-938d-8d88a4231302", "sighting--f5ff5df2-2b0f-475f-8358-19f1365017e4", "sighting--776d5414-71d1-4042-a91c-c4ead576c149", "sighting--131bfdfe-8e1a-48a0-9ae5-a55ea3a04a7c", "sighting--fb22fc7b-f744-45d7-9c8a-4b4c864b8de7", "sighting--5a503344-c106-4eef-84ec-fba1a21cd979", "sighting--44b84fb8-d021-4287-843c-ac2758a296ca", "sighting--2d98824a-cb35-4043-91fb-af928e101a9a", "sighting--cd133536-ee28-41fd-a102-ab72269eb831", "sighting--13c4b085-dfbc-47ca-ae3c-3a44523fbfb6", "sighting--bffd86c0-806e-4255-9ae0-988034eff046", "sighting--ee95944a-5f30-4e52-abe2-143ab543872d", "sighting--7e0a55d0-d7a3-4042-a6ac-797384190e06", "sighting--813b466f-ea2b-47f3-beb5-9e71b173cf2f", "sighting--c2055429-9f34-4c66-baf1-c5954e56d73a", "sighting--6226bec6-e4bb-412f-8737-5b08e1d1a377", "sighting--16cdcff2-00c2-46e6-b4eb-e63d2631302a", "sighting--7b67f753-4fd5-4f50-a977-146e4fb8c7cf", "sighting--f0f96324-189b-4063-b0e1-2c7a53367da8", "sighting--fdf1c25f-24e3-46c0-9879-0e98f6618da8", "sighting--0d31e4ce-fd2a-4c12-8bf7-d2a41efe60e0", "sighting--bca9be12-975d-4180-b3cc-f24ede9dea89", "sighting--51c8098a-6ee3-420f-9f17-e1e7dc58491a", "sighting--19e85c4b-2a89-419a-9b53-34314f081020", "sighting--588c0843-e34f-49c1-95ee-51fef94b7902", "sighting--e6933d70-aec2-464a-bccb-a8275cf88ca8", "sighting--2163ce83-dcfa-450f-9cd5-5820f5f2c8d2", "sighting--43b0b3e2-d510-48a3-b532-08f1a0cc990d", "sighting--1528baeb-209f-495a-bc0c-117922817191", "sighting--912ef037-8cc7-4052-9b3f-76ef7b7f665b", "sighting--163bb37d-7a19-4e24-a95f-d2b02667c0ce", "sighting--6e8f9a41-e77d-4dbc-8537-10529ee0057b", "sighting--dcfda05a-3639-437d-aae4-80dc10dd527e", "sighting--b6df4afd-a50c-4f51-b29a-1a681b0702d9", "sighting--00055bb5-31ba-482c-9b13-2405b6321db7", "sighting--ad5479b3-d4fd-4622-90ee-5a4dd0a460a2", "sighting--9663db54-ec01-4644-8997-7c6eea160b8f", "sighting--cfc09da8-c145-4dea-bac3-5dc0a34c422f", "sighting--8463bb82-caa6-45a1-b02d-14b11ff1176d", "sighting--8096ad2f-16cf-4105-90f4-e02eeeac3f91", "sighting--56f70578-806c-4ca6-b332-c4a06ec4b4a4", "sighting--e4ca4b8f-454e-41bc-9143-f86a1f6bcb79", "sighting--d99e84bd-85d7-4728-ba9f-b7367a9fa091", "sighting--4259a80f-7c00-4bca-8ca0-2bcfbb08a110", "sighting--7f16e88e-d481-4013-afc7-bea0aafc2ec9", "sighting--9b8dc3f4-bde0-4d0c-a4ad-b7392abd0084", "sighting--990b39e0-3fe2-47a3-af83-c626893b112b", "sighting--af55a465-d630-4070-a67b-65dd4998e7f3", "sighting--a14fc880-d432-47b9-bb34-6374b5597a9d", "sighting--012bfc42-32fc-4d2d-aaae-bd9d5729eb71", "sighting--0dc382fa-f496-41fd-9d12-93803c9b947b", "sighting--b22d3333-97ea-4c66-aab2-45868ab0ddc0", "sighting--56c72ad0-f1b5-4e73-9dd9-34e5a33fe1d5", "sighting--3fc83f96-1843-4ea2-bc25-f2c227d4e7f0", "sighting--103be3e7-cc55-4752-925d-bbb51ffc5f8e", "sighting--410aba0f-6826-44d9-8a7f-5107e3ee5194", "sighting--c208cf7d-9814-4afa-b4d0-bf094a73674d", "sighting--fb40665d-f754-4642-b363-94b566df56b8", "sighting--67cde954-495d-4cd8-b294-28b8a5bb5a9d", "sighting--84a8ca26-3ca0-45d4-9c0c-f59e5d2b20fa", "sighting--5bef0b06-6a37-42bb-8369-41a05c65ba84", "sighting--04d48df2-5773-4961-bcf1-86162af46ece", "sighting--77d181e6-53d5-41d7-bfc4-89d9f4fe3fc8", "sighting--40300be4-2eb0-4349-b89d-8883c10f8f79", "sighting--b15e6be3-e77b-4d02-acc8-546c43320fd4", "sighting--13f2d0d4-6265-434c-9690-887d9631c1a2", "sighting--065441a3-30d7-4768-9a4f-4e512f9f2806", "sighting--efe7b6e3-20c5-4bcc-b951-260d6f4da497", "sighting--d0cdd12b-c114-46f2-abb4-18cedb479e8b", "sighting--d6634533-ceb9-41d2-b679-1b05bec4e897", "sighting--3f1e5e9b-0606-4ec5-b247-50ab655b1549", "sighting--ab5c1c6e-92d4-489c-9eb0-c5b0c0fec77a", "sighting--03c1fc42-600d-4c6c-be15-29becaa60ee4", "sighting--76751d13-c1f7-4631-9202-1a8c76678633", "sighting--ca45dc81-9f5d-4ec0-bf4c-88af509ca7a2", "sighting--2983d648-a404-4c21-8ab7-79e48c0b90ca", "sighting--839c1c4f-b637-4469-b350-aa4b1d9f35e0", "sighting--a92b6d91-b4a0-4442-b661-e39b721238e1", "sighting--dc3e7066-0e91-485a-8d91-e9baabca5c76", "sighting--9908f401-6d71-4360-833c-616b545b7bf7", "sighting--ab0b790c-d5f4-4263-9f37-6b01ff166a4c", "sighting--ba758bfa-a563-4c90-929e-3c2c854b53b4", "sighting--e4378bcc-9071-415b-8da6-d8067580ecc2", "sighting--4a54ac83-1b0b-4d84-b612-6f2f34e0054e", "sighting--dfbb550d-fbfe-4683-848d-ff1e34255bdd", "sighting--d4021402-74d6-49dd-80cf-100ff137fb6d", "sighting--e019595f-f878-4c77-89ed-bb241c6053b4", "sighting--fcc52e03-4089-40ad-9455-f1b4bdb67030", "sighting--3b4bab5c-804c-4e4a-86c5-5111f48e8176", "sighting--132c2a9e-496f-401a-ab8a-2f13d6777708", "sighting--589929ae-a9d5-4c90-ab70-0d23ff274174", "sighting--aca0fc6e-fd70-4bfe-8933-321102e71990", "sighting--fc08479f-64e5-466f-9b99-219580b2b015", "sighting--3475b2a3-e4d5-4a2b-81f3-3970fd3444d1", "sighting--6d6088e5-8dce-448d-9c95-a6028893e7a4", "sighting--3346bfc5-f48c-47c9-ac86-442b24b6202d", "sighting--c99d2824-845c-4f90-9634-11f849dce022", "sighting--90537923-c577-4426-a5b4-8c4bb90cdb79", "sighting--5e26efae-11ea-490b-81e7-717e5cf769dc", "sighting--4046b5b8-26fb-4afe-8c39-18e49e8001c5", "sighting--6acf4910-9099-41b4-8e3c-f1b38af0bf1b", "sighting--a178e29e-78fa-4bad-a919-2ae9d94158a1", "sighting--dffe5fc0-abff-4b87-b7d1-25631fcd9c74", "sighting--615e1f55-bf2e-4924-b254-eab270138690", "sighting--494d1ac1-0cb8-4093-8c53-0befad8feaf2", "sighting--d6f62f1d-7938-4f90-b532-c49da62e32b0", "sighting--0f5e7543-17fb-4131-b6ae-41366eb2867a", "sighting--d1f0bb4a-d2f2-46be-acef-d612dd0187ee", "sighting--ca657afe-eb2c-4a85-9a0f-a4df6d8ba1ee", "sighting--3351ccda-06f3-49d9-a118-c39e0a203506", "sighting--e3dfc044-ed1b-4a83-a081-122d789e92fb", "sighting--aeab9bd2-74c1-42cc-b39a-c665265cc782", "sighting--4bceab67-8183-42ca-a5fe-ef5f3fae9979", "sighting--dd810027-ba91-4436-9b16-a54d47c8985c", "sighting--5cdf3740-2636-42de-83c4-85aac82b838c", "sighting--ab4c33db-c31d-4774-9d04-df623347861e", "sighting--52ddd6c8-e935-494c-b02b-1fe28d7d81ea", "sighting--bdb4c908-1330-473a-a8ca-aff76368abe5", "sighting--93ed2c65-33aa-4a29-abd6-0655579bdfe1", "sighting--82810cad-94b8-4f0d-9cb0-664762c57152", "sighting--5274a715-868c-4842-8e77-84ada2e57c83", "sighting--ddeac623-25a4-48df-8d30-990d66b10234", "sighting--b225e6ec-84b2-4298-98bb-e39424af249c", "sighting--2f5f803f-857a-4762-abe7-e40e5ad50fc6", "sighting--800fea31-3306-4a93-9ebf-b1900db31a09", "sighting--233280a7-ec04-4ebe-a361-4b5691997c4a", "sighting--177440e0-c7c7-460e-9b4d-a123bc4c3bb0", "sighting--5fe470ec-7dff-4b71-bd11-db8051ff3ad8", "sighting--d23a48c2-4bf0-491b-8082-155385d9c7eb", "sighting--377ee912-2c67-4fa9-880f-5ea527c14026", "sighting--7091b462-4ec6-41a0-b9b8-5de287fa0c9f", "sighting--99b97038-f1ae-49e4-8e29-c664ec99f645", "sighting--1bf68bfe-988b-4a8c-b7ca-7c8c4ee9ed94", "sighting--6d71fda1-9ed1-4f34-9794-530aac063045", "sighting--7a2bd601-433a-4faa-938b-3076c72e05a6", "sighting--61a3986a-fc96-4f07-a27c-8d49f33f875e", "sighting--493ba36d-b271-47e1-a147-6370d70111a0", "sighting--2c13fe39-6502-4f17-9c07-aa8768689e8b", "sighting--6487a275-5677-4933-99f1-eb45180ce992", "sighting--57263b77-6a0d-4c5d-9a7c-9e807e5ffce8", "sighting--c6d3cd18-6302-4e0a-83df-afd8bfac5dd4", "sighting--950cff71-1eeb-40ff-9467-8e08010f4249", "sighting--4db59820-d6ce-4aec-a622-7889380cc91a", "sighting--009fdfa5-c027-4856-8e89-0de30b08f851", "sighting--30e3d5aa-6aa1-42f8-a6e3-b14cb5c05f7c", "sighting--c6e94a48-83d5-45e6-b879-16294bd207ce", "sighting--9bfe3481-da01-4849-b758-26f4ddd4b138", "sighting--2d70b4aa-2f6a-41f2-be33-ef8fa32786bd", "sighting--ba232d58-d82e-47aa-8109-8d7d32dc444d", "sighting--ce9488a8-0ffc-4458-9e90-65670b72af9d", "sighting--f5e6887e-377b-4ed4-848a-6e3137e5c4c0", "sighting--31be0e6e-79b5-405a-8278-90f2f9f7e2da", "sighting--b213012f-d02d-4c1b-9e0f-c51673ad5443", "sighting--45dd8872-db62-4515-bfe3-766a56a32deb", "sighting--f4787702-95a9-4a88-ba1a-14a65fae3a92", "sighting--b2841262-4f43-48f8-814e-a998145bf46b", "sighting--2af5d8a4-aa85-47c0-a6a0-3868138aa517", "sighting--d0f9d38b-53e7-473a-b90a-d30731b6c1f8", "sighting--4acba5d5-028e-416d-ab62-152d570b63b4", "sighting--9bba68e5-e45a-4926-bf56-7f35579d3222", "sighting--ea0bebea-2389-4537-9963-953738822395", "sighting--60d1328a-49cc-4170-9c78-8a3f24939476", "sighting--ea29edff-8829-405a-8a14-7d035d1ba98a", "sighting--ef01a377-4440-494f-8937-1ec7b5c820d0", "sighting--abbe850a-975d-4fcd-b06b-7fb5b929bead", "sighting--75c994f4-7bb4-47e4-a195-c7dcd38d8756", "sighting--b1039ffb-b14a-4472-a73f-0fc820727843", "sighting--79317a1f-3c22-4f49-9028-0e4aac1ea6ff", "sighting--360fced4-d34d-4f4e-a5e0-1751a076952e", "sighting--3891a69e-fff6-4c25-aa21-da6674bea282", "sighting--5f3d20a6-caf3-4824-a765-60bfa6613895", "sighting--f959c091-4905-4b82-be19-497f55b1e148", "sighting--ddc89646-8b57-41e2-a4be-da2135c09a36", "sighting--54a42955-da58-440a-aa41-709dffb242f9", "sighting--ac6d8480-0cdf-47fb-9405-5a0fe0a0f6e0", "sighting--dd7cd919-4525-42ca-b4d6-946438f154a3", "sighting--2008bbc0-fd93-479d-9e84-29c97d058111", "sighting--a881150a-acdb-46cd-9734-1be69fd36558", "sighting--48088340-b2cb-4760-9dce-d4de70082f28", "sighting--85366a5a-a46a-4bc5-9df7-186d12386e03", "sighting--973e737b-47ba-4d19-a921-433424cd9d5f", "sighting--16b8730a-cac6-4b3e-93cb-befba4cbbd41", "sighting--b22ce089-de89-4dd1-8c18-22870362f2fa", "sighting--1d9bc0ff-892b-4513-8526-a029a101089e", "sighting--e67a92bd-640f-4edf-9aca-a306ffd221f9", "sighting--8c4e16f4-369a-40c8-ad73-e48b6a3772c7", "sighting--19e9aa5c-2b68-41ea-ba3b-0c7749715ea5", "sighting--beb18986-6815-4181-97bc-980bc2ddecae", "sighting--02423fe7-f4fa-4d90-8911-6a8d401b55b3", "sighting--cc68713f-35e1-4858-9931-9bb667971bc7", "sighting--838ba75d-840c-49b6-8e79-1a6a0adaeb41", "sighting--a15eb8e6-b0dc-4b70-ad02-ad7d87db75be", "sighting--ddc47ccb-9963-4acf-9ecd-bf3393816956", "sighting--647ca960-3446-464d-85c0-5acdfe08ed14", "sighting--5c5b2f5a-0d01-4773-95cf-77c0e216165c", "sighting--e99b49c9-582e-4d4d-992b-2a71b2be051b", "sighting--2791a6c0-1fd6-4ff0-a5d2-13e2c8647183", "sighting--b005f10c-3989-4eed-8b66-858d8e38a39a", "sighting--c2801f9e-c439-4c0f-a33f-4a9542832799", "sighting--9493342f-3445-492a-9877-ab6544a9bf21", "sighting--908d5d8b-9d0f-4325-924f-ad45e4910903", "sighting--391c07ac-f1a1-4ce0-962e-68f32c65dae2", "sighting--27c095a8-a9a5-41ca-a6cf-c9d1f01bb2ab", "sighting--a50424f5-6cf4-4688-9666-153abf9323d5", "sighting--a0aaf245-18c7-41b6-b2ff-703813993716", "sighting--e2ccfe34-3937-40cb-bc0c-744b36b84f94", "sighting--6764d857-c03f-486c-8d47-517deae4b102", "sighting--fe892218-2f24-4f78-8d8d-1d8abe2bb9bc", "sighting--5dbd14f5-9772-4b10-b69e-e1a2b002267f", "sighting--ed53793e-d824-4446-940b-1b1803f99f1d", "sighting--280d8720-bf31-4e2e-a97c-7b4d2daade07", "sighting--36c59e2a-7924-4f71-958d-828ffb21a7c4", "sighting--a589f0ad-ba41-4abd-8156-592e4ce76b6b", "sighting--9205d6e3-7105-4ff5-b7fe-943a3ad5e791", "sighting--b88cf59b-34e3-4289-848a-bb52edb9220a", "sighting--e152de73-82dd-4c4a-bcad-d856e810d383", "sighting--c91df257-d906-4f99-a32e-285e9451e3c8", "sighting--3a0890ba-cc2a-4007-8dc8-69a4ef375356", "sighting--8d2ef0e1-652e-494e-966e-8a2ae8dfcf44", "sighting--af8eb380-6195-468e-9dd2-968e0b578a62", "sighting--2ce1cec6-83d3-4106-8103-e45a989c4b09", "sighting--f7921fb7-7633-424c-a16c-97caef441aec", "sighting--06ac0032-8dfe-4e75-8da7-0db226c5f12f", "sighting--3820aae5-a6b4-4fde-8f88-82cdd51cd5d4", "sighting--562b4ed4-1d92-4879-abbb-bd13c79d7466", "sighting--f364637c-0cf7-4bc1-8575-4c4049b7a7f1", "sighting--15bbca28-ad53-4ed4-b885-9d7ea044d38d", "sighting--3e104b22-8973-440e-beb9-ccc711f2f0c0", "sighting--cb88362b-7fcb-4adf-8d80-77409f71f396", "sighting--0827c1a9-a90a-4ef7-904e-eab198548414", "sighting--277495c3-b6fd-40de-b296-b0de70ec6144", "sighting--e75fac42-e325-499a-b722-8a05db3cc489", "sighting--08683b2a-4b35-4e44-ad80-d20b2a586bfb", "sighting--c6040b24-bb00-4147-a0cc-e80beef7aa42", "sighting--3caeaa7e-17a2-4117-a85c-fb55b22f4b41", "sighting--42a6c2b8-9d77-4497-8883-e5de97a28b9b", "sighting--0af60982-c81c-4e11-8343-5553a07ca19b", "sighting--62965c86-710e-455f-81c8-a3292fef6796", "sighting--3eff1398-4f23-499d-bbc9-40bf28cd3fdb", "sighting--caa7d20e-be4a-4cd1-bab1-f33575bbce2c", "sighting--5a7afa46-a7d9-4bcc-8b8b-7baa10f9d0b9", "sighting--dbc5516c-6a86-4de1-9839-c570413bd022", "sighting--8d08a578-cfb5-4cde-8733-f268c6eaecb7", "sighting--081dc8eb-6bbd-4743-93e9-514a584f5daf", "sighting--d60eb2bd-584a-4cee-a693-b78bce4a1775", "sighting--5eee0e9c-f9ff-436b-b2fd-2e20d545ff2d", "sighting--56021e23-5493-4214-8a8c-48698a5050c8", "sighting--34d9ce35-9540-4742-b45e-9de24d3658d8", "sighting--d8cc2668-9af2-4b0e-a2c8-42c1d56ac0a9", "sighting--97280e18-6780-48db-9694-63d6ed9bcd9f", "sighting--8b4df350-64f6-4992-96be-97df9f007a70", "sighting--6acf152d-c6ae-4d25-b276-74e33d43fa67", "sighting--1bc2a01b-3439-44b9-b427-edb3bded84c3", "sighting--5c4286f0-62f3-419b-9504-3906f3587649", "sighting--fbba715b-2e92-4b91-b905-9208f9c417fe", "sighting--1b3e73a5-d6f1-4382-9729-f79d0f1afe94", "sighting--23ea65a8-28ff-4a18-9b81-a505d3216da8", "sighting--2afbd84d-2983-40c6-ae6f-e3b5e5987af8", "sighting--3b5493d1-0d38-4edd-93c3-df0678f03acf", "sighting--9f9a91c2-0e8e-4c31-a651-2f1d7415abb8", "sighting--e47de9e5-c5f2-4dc6-9ced-e17091a27e18", "sighting--33d5cfd0-8a6b-4794-ab65-f461994072e9", "sighting--acade71b-2892-4d66-8c96-be5917321135", "sighting--b69b47b3-1c8e-4a43-bcc6-40fca3a6d607", "sighting--8fd38753-523b-4066-bbdd-c1414717e6e8", "sighting--356637c2-188e-4ce8-a908-9803154d65d3", "sighting--11a1f419-8d45-4887-9512-1c5a387775ec", "sighting--f2128ba3-b59d-435f-af4e-8de7b53ce107", "sighting--be019982-e00b-4595-a8db-ac348e31abb5", "sighting--ae077754-e936-48da-83c0-de02d3e7a52b", "sighting--ec0049e1-7b08-4a7a-a547-042ad585b81d", "sighting--c92a7798-16b3-4a9b-b128-665a1add89b6", "sighting--da2b260f-46e4-406d-9c31-e13e557a15e1", "sighting--e952fb17-f30d-48df-bd84-d8289ab58e9e", "sighting--6c1b86db-5896-4209-99b9-9051d663a9c4", "sighting--a55d81c8-4cbc-4d56-a1cd-119ede8b057d", "sighting--c303804a-a5d9-4b28-b139-ec645af6afdc", "sighting--36ad275c-d534-424a-a922-03c7804f73e5", "sighting--34437624-5981-4bff-a342-3b46aca0be39", "sighting--ef0ce8ce-3a0f-4094-a8ae-2e20c0ce34f5", "sighting--26ea7cca-9ea8-4ef7-9ed9-6bcc12a3f91c", "sighting--b86de7f6-1ba1-44ec-96ea-5aafb217f0f8", "sighting--f655c778-ae03-4c44-abfe-0b1703e074cb", "sighting--df05df6c-ceff-4860-bf60-de7b71b9388b", "sighting--7c7ea262-be9e-4039-be11-2a7ddf46b328", "sighting--ce57297f-acf8-4a02-bb23-1bcd66f739f7", "sighting--28c2d3b6-92e2-4d9c-b5c8-62c389b86b97", "sighting--550bc12a-f691-45e5-a6d4-69cb4b125114", "sighting--e117bfc4-eee7-4e29-a62e-41b731e30bd5", "sighting--1c4f0ac7-eeff-4001-95b9-f0bd7731fc7a", "sighting--b9b11086-5fb2-4276-ac73-a2ecd9008da1", "sighting--61971795-c774-40ec-9394-bcc51600cf63", "sighting--f5fd9066-2e94-40ba-abf9-9587e57141fd", "sighting--a2727b21-ec74-4d98-84a3-09e40057fe18", "sighting--90667118-39bd-4afd-909d-cf07e75d49c6", "sighting--3aa859a5-f849-4bc6-81db-40c1a6b28930", "sighting--2835632b-1460-4ff4-855b-c9f47964d146", "sighting--a7ad93a4-cfbe-4831-b99f-efa1e3dfed19", "sighting--c94e9f3b-f55b-4a70-9056-118a36d6a144", "sighting--b5b33881-f073-4071-887c-ec69a790d4dc", "sighting--744abd1d-ebcc-402d-a2e9-dc78d071bbc2", "sighting--879effd0-7c1f-4436-a354-e06af0149957", "sighting--b75cb649-4a19-46f3-ab83-744143c171d2", "sighting--f78aa89f-8023-4c38-9d9f-88d64f2b7b72", "sighting--d9ffacc3-8aaa-4487-8723-dbc79bdfdb76", "sighting--1a37709e-2679-4ded-9910-727508b51987", "sighting--92c73316-b044-4399-920d-36e4678045a0", "sighting--b0152750-0522-4694-a267-525cce7581d2", "sighting--7b0a86ad-4ffb-4cfb-ac05-9a579a87097e", "sighting--f90d9723-34e4-432b-9290-488a164dbeff", "sighting--0187217a-87be-468b-bfd0-1bca7e8d0aaf", "sighting--2cca5b77-e7c9-4e43-b961-4dd4bda09470", "sighting--73319d21-6426-4a45-9f77-03d2ba3f9c34", "sighting--3fdf73ce-b141-4b11-bb66-6e16ef0f6843", "sighting--b783b61c-8185-4c1d-947f-10ffd2797f1b", "sighting--39c589b9-f425-4411-8ec4-0be3b3071ec9", "sighting--3260c663-860d-43fd-9032-16c08a764d7a", "sighting--12f3fb1c-4b25-4cec-b9bc-ea4601accb8e", "sighting--1a675217-1118-4169-8ffa-ef749fd7bd88", "sighting--60113148-93b2-494c-b330-ee4f1481b93a", "sighting--9aa632de-8cbf-4929-9f22-7424f0d9bd1a", "sighting--34b3e671-e821-4d56-b3a2-2c0e7a30ab14", "sighting--ef4b9107-d5d2-4510-8a09-142470abc4f2", "sighting--8ed7f374-1808-4414-9eff-f90e6ee2351f", "sighting--ef02edaf-2385-40d7-b24d-9299dd7aa7a1", "sighting--4eeac778-20ea-4864-972d-b4f24e4b7202", "sighting--0338e144-2432-491d-ba02-b872583b8d8d", "sighting--dfe0f9e9-a328-4ac2-a933-c7fca064920a", "sighting--4c0ff3a5-3b49-4b00-86cd-07008d73aeb9", "sighting--b659bf6c-f5a5-4d59-8833-650c1f606686", "sighting--36c2730d-fa0e-4487-ac1a-51b9f0952a29", "sighting--1790434d-3ee7-40c6-95f8-64e1faa47341", "sighting--d791700e-46b5-4fe0-b47c-387848db9e1b", "sighting--c99a9005-a1dd-4011-8348-ec622f25fb01", "sighting--d4454589-8aa8-4964-8c49-e39e989fecf1", "sighting--ce22ee67-1df4-4b7a-b619-6e707227d0e5", "sighting--f8cf67fc-7a49-4513-9bc0-f20ed73db63a", "sighting--9f2e20c8-c5eb-4cd5-97b3-edf9ec28611c", "sighting--7341617b-67d7-40a1-a468-af3177eb96ae", "sighting--ce9029ee-cf0b-42e9-b594-a45604d1187e", "sighting--327f09fe-28b2-45cb-adae-42b0a7cdc50e", "sighting--7a696320-d332-4940-9da3-45676117c541", "sighting--999989f8-4bae-4fbf-8336-3bfebe39f450", "sighting--9204133f-0617-41c7-810e-cf1010ed56ab", "sighting--63d5c60e-264f-431e-8862-4ac4c77923bb", "sighting--700bc39f-0d4c-40a4-b67e-1b14c0578f22", "sighting--e6e3515d-9156-409a-a5da-6ee80ec46125", "sighting--5b30de6a-2373-470d-bea7-083ecdd31c25", "sighting--fe3dd346-c4a7-40d6-9655-fdba2af7e599", "sighting--ab9e169e-a593-4a09-986b-0cfd7ceb1d82", "sighting--b73292bb-949f-478a-9eaf-619c2c6a87f2", "sighting--d95859d7-a52b-4be4-8612-7925f2efdd97", "sighting--3bb9132d-72e0-4bf0-b15c-7bd3e64cc263", "sighting--d099749a-8e3a-410b-a465-6586b4adda03", "sighting--7ad2e33a-9e91-4ff4-8bfe-21f30cce29b3", "sighting--ffe9f11b-8bd1-4a26-bacb-6e478d3a57c4", "sighting--691d7b5c-2f9a-4d39-a34b-fdafa5a269ff", "sighting--82030f03-33d4-4a66-9fa1-dadad1226239", "sighting--ab71916f-f16a-4824-a9c0-02ab99c18607", "sighting--38c47301-9ff7-4cb9-bcf7-ba056c8e8676", "sighting--f443081a-d7c9-46bc-bf79-5717e0157e0c", "sighting--7bfd3d1f-7226-44b7-af5c-b07eb4a9b174", "sighting--3a73cb20-bde7-44eb-841d-73d7ce830a8f", "sighting--5ff51098-43d7-4fa8-ac23-81f6a6825814", "sighting--e16cfb10-e95f-4721-b302-be3cd3e39137", "sighting--d22be0b2-7316-4c7b-8601-5b4d8be836f9", "sighting--5fd652f9-b285-48f1-9fa1-922838e401d1", "sighting--c12a6b98-0632-4f4c-8f03-bc4167a22959", "sighting--81ff831f-6238-451c-9676-797ddce61696", "sighting--9febf4f4-45da-4c2e-b5f4-58ea9e47c71e", "sighting--f8b65957-e393-4a2d-80ce-639bf531e59a", "sighting--df9a4ff3-9411-41a4-948b-71e5f20e450a", "sighting--f7e3fafe-ee23-4094-bb94-5f4c7c7ce410", "sighting--d4afc9f5-d9b1-47fb-98cd-c021754097f6", "sighting--824f21f9-442a-4acb-8e22-30f687c03bd2", "sighting--1c888208-9674-4dc4-96e0-588c94bb3bf5", "sighting--41dfcd5e-1f3f-4abf-88bd-3f6540d311fb", "sighting--9c3a3873-58d1-49df-9680-43fe4e66eb9b", "sighting--e7fae3fc-dcbc-458c-924e-fb981388fe8b", "sighting--d7a58a05-6afd-4e24-a901-56de551c720e", "sighting--acd025de-1998-41d9-9696-fbc0ecf00e6c", "sighting--04db17e2-fcfa-4741-94f5-2b9e001e7f3f", "sighting--3e3d90c8-b305-4dac-947a-d4fbfd8eeca3", "sighting--a5801d4f-a5e4-40ee-a022-f693f3dc8fcb", "sighting--a4e98b82-34d0-4a23-84d5-315cf24bfdf5", "sighting--c3a8c4f8-8ac6-41a4-abfd-f2ec95a17d97", "sighting--a4e86c85-7760-4a66-81f3-09f1b2250e59", "sighting--827fccbd-2fe1-4f75-9411-a4f4c92a19cc", "sighting--a837e624-f1fd-4e24-9003-1878ed096e43", "sighting--9d52c614-36d7-41fa-9218-ff2d7c00c367", "sighting--658745d2-2a35-4df2-9d3b-a9a287581392", "sighting--79fe03ec-87fe-4512-8be0-0b5367eb6e6c", "sighting--1d75fac6-b689-4d99-a211-692dc8ac376e", "sighting--a17134e5-5a6d-4a27-8b84-a9219d63039e", "sighting--2bc89aff-b735-4c72-aeac-3f97dd4d8a87", "sighting--00cb2e2d-632c-4c5c-8fa8-4aca0a76dbcc", "sighting--4e8db060-2232-488a-9024-029a2ac1cd98", "sighting--6901e80d-6993-421d-86d6-6a284d9f2cfe", "sighting--7555211e-4fd1-4c49-9e15-733d8231bf07", "sighting--1c8e205b-8ddd-4051-b30d-9e24f9a4b04d", "sighting--37bc9a5e-fd51-45a4-8d52-d703bddd71d7", "sighting--c5f294fe-9f3a-473a-ba4b-92a4e91dc902", "sighting--32ca1d31-207c-4ade-919c-d9bfe6ddd101", "sighting--41716093-cfbf-4ddc-a6e8-f7291310a1d0", "sighting--9e474c11-0df0-4e23-88bf-d38ab5a58cee", "sighting--6abe1ab6-56e8-4b88-a1dd-352f99f0e676", "sighting--4bdef06c-eb03-4934-8fe8-724225b84bf1", "sighting--2bb40953-fee8-4999-a8bf-a9243cc8c999", "sighting--130b123d-bc83-41e9-98b3-1ba0451533cb", "sighting--e8c05d20-65c9-4c95-b1be-74c10539dbb1", "sighting--ef716b0a-7a1c-4bd8-b907-e94f9562f82a", "sighting--100aa8df-9cc0-44c6-ad64-35fb4024a2b9", "sighting--4b4e214f-ff0a-46d1-aaa8-0290fe0e0d56", "sighting--17dc1b6f-5d06-4393-b7e2-96da6296f664", "sighting--4df63b02-0e16-4480-84af-122f862bb343", "sighting--679d20d7-85bc-4c12-b0d9-400dc6833555", "sighting--d9762191-0bb3-4cfb-9edc-e8d87d0ac7e8", "sighting--9b882449-1eb9-4710-a441-09f64dcc9a1f", "sighting--358c145b-3db0-46a0-8c2b-250bcb2d2590", "sighting--c96880dd-51d0-4f39-bfdf-d32c1e3532d4", "sighting--1e7779f6-e5f0-4188-ab4f-4938da2ead47", "sighting--22679c2a-c61d-4061-a3c1-3903af8d1f18", "sighting--a8bacfc4-69fa-40bc-b5f3-4adc24db5072", "sighting--7908be10-d174-4c28-b504-3e8b90ce4f1f", "sighting--413f29a0-6ac1-4200-90cd-29ecb5f9f18d", "sighting--d6777f1b-7cfb-4676-8b51-c7a9937dbe41", "sighting--a038167d-272e-45fa-a85b-e436f747a6ae", "sighting--b695aace-d037-436b-9a68-e70e0ef612d7", "sighting--b7afc8bc-5899-4c95-8b35-2dd7f25c322e", "sighting--bf2f8175-2f1c-4261-be79-e2c3930343e5", "sighting--5878ca45-0c98-41f8-a4fa-9374765c9d91", "sighting--d209a444-c304-4574-8403-909484126073", "sighting--e199f16c-a8cd-471f-a6b5-4320b02a0b89", "sighting--a6926fac-0cc9-42bd-a1ba-ca13e7c26bb1", "sighting--113bbdf9-666d-4133-b13b-47660f6311be", "sighting--a8c52a75-34f0-4666-8466-658fa760e1c5", "sighting--6f8deaae-2c77-4f3a-9b8d-3785590c76a3", "sighting--e2eb18cc-234d-4906-8c57-e3c746d19f21", "sighting--952b0e8d-475b-470e-8b1b-fd93c37cae46", "sighting--a9f6c725-7166-4869-b5b2-aa6bb8b17b99", "sighting--a2de3ce2-d74f-4f5a-8ee8-1afa9ce2a915", "sighting--9393b1f4-e063-442c-be61-abace89eac98", "sighting--8325d8e2-eea2-444e-8cf0-7f84ead1fa66", "sighting--120e6f3f-845e-46cb-b57b-3e3d59a6292f", "sighting--3921c5e5-4363-41eb-b57d-261c5d099836", "sighting--e08c2571-4af1-419b-bbb6-988d7b3d259c", "sighting--d15c6fea-a943-459f-a308-b603668a7e35", "sighting--64105381-6106-43b0-b968-61fd6f2babef", "sighting--3c2f4bc9-9179-49cb-acf6-956041bf3eba", "sighting--60ca5f46-24c6-40ab-93ef-6faa0824faca", "sighting--ab6b9238-b0e5-4b02-aff8-24fc9dbfa250", "sighting--bd416444-efd9-4989-ab8d-555b59106687", "sighting--e194b2ff-94f9-4592-9cde-d59fb7ae5c0f", "sighting--2ddcff1a-2725-4566-9aac-cbe44d277312", "sighting--d740941e-dcc9-4521-9275-750e5fd27539", "sighting--d2b3dfd9-1564-4e05-b65c-2f5c86159444", "sighting--30826261-a6e4-40e7-82ae-cbde626782f3", "sighting--ebf50535-38ef-458a-a20a-a44103fc8ef5", "sighting--a20a6a82-18e9-40be-ab65-6eb3c1ae0709", "sighting--a155193a-0c84-4c55-aa9d-48aa8afa5f40", "sighting--75d01ec2-4d57-4a10-b8f6-697da5d02c91", "sighting--6f322fed-9998-42d8-89b4-91887c36a7ef", "sighting--19e4cfb4-7715-4a5c-a9fe-e777aba666fe", "sighting--6bc249d4-d718-4996-aaba-4b751bba5b00", "sighting--13b70807-495c-4753-8219-474919db920d", "sighting--ac93bd2e-9d01-4314-8ec4-c41f4ce95001", "sighting--e23d64c9-e761-43c9-98bf-de3474b0e52d", "sighting--b4c7cb6f-18be-4eea-af0f-e6ed6cefbae0", "sighting--ad1d67bc-dd53-4369-b2c6-2696bd590d10", "sighting--4622a220-f76b-4cba-a8df-4ae25b53ca67", "sighting--286df56f-9d4f-4426-ad61-6dfb59a82472", "sighting--ee606f0e-400c-4e1d-ad4a-7874fcee7533", "sighting--a1601d4b-f267-4b5b-bd47-3597926dd006", "sighting--3ccbc225-c806-4d7d-9803-4e42ffc42f8c", "sighting--4fc96238-7793-474c-a985-7f7a93175713", "sighting--d2a2ad81-96be-4c3e-a576-4a4012329e29", "sighting--ba03eb5b-0be2-400f-9fb0-e365921b54b0", "sighting--5eebc57a-2f80-4877-ace5-565884101458", "sighting--2e87dbdb-ee43-4204-904a-832e0247f249", "sighting--47f681b8-1462-444e-afc9-f8a33a4e619e", "sighting--11ef37f2-84ad-4265-9d63-eb67b8c53c34", "sighting--9f684c2b-3832-4637-b08e-f07dabf331db", "sighting--6e2b9901-91c0-4f15-9bea-c2831b4103e3", "sighting--df7fceba-b892-41b2-9da9-d6d0c01d8f12", "sighting--da0bddda-4808-4708-a852-3e24246aea15", "sighting--a5b72e6e-191a-4e69-a3b1-bcbfeb231214", "sighting--648eaf3b-ea21-4461-b43d-fcb9332239fd", "sighting--7f0fd03f-059c-4b45-9e63-6609995cd2b9", "sighting--bc69cfa6-0874-4d3a-bb97-4e82dc1507f6", "sighting--1d3eb5fb-2a80-4622-81a3-bd4f6ddc1dfb", "sighting--1734ffc0-4760-44a3-8625-bcc269d5b13d", "sighting--8193dc6b-809d-475b-b3e2-128aae3ad1ee", "sighting--3db2954a-628a-4995-8e3d-a3e3789c121a", "sighting--b9213082-29d4-440d-b5b9-e60e54604828", "sighting--e5d629cf-c8ce-4b46-b20e-6205dd3c0597", "sighting--0eca7103-a618-45a6-bf0d-75ee9a34a56f", "sighting--201639d5-fb79-4f6c-9960-065d877c0ae2", "sighting--1efbbe12-deef-4c91-953b-0d77a8410ca2", "sighting--c252331c-31ab-4b8b-984e-e0d781c66e19", "sighting--d3f70bcc-8afa-40ad-8634-992deb92d4c1", "sighting--e6a3d773-ed8c-4e4c-b379-717cdb78163a", "sighting--e3952162-5df1-4124-b811-36c89e29cd56", "sighting--3ce10ea7-d5e8-47ca-a7e8-fe84d3475173", "sighting--08918636-e9fe-4762-8cd1-64328bba7a99", "sighting--5c81d9ba-88db-448d-9177-561a34ca5d17", "sighting--34d6797f-9c1e-4147-845a-b9dcb2a9c24f", "sighting--f725bcfa-b6fb-44e7-b945-a1d7d6a31690", "sighting--76ed59c5-754c-466e-bd02-fd0c54e31fb3", "sighting--a05be2ef-55cb-44be-ba31-3ac8e3716d14", "sighting--0b9718b9-9e01-41b1-8302-b2beb6c6400e", "sighting--a599cb4a-9531-4add-a265-be5de116700e", "sighting--179ab951-bbad-475d-9eed-d59af3e5fc49", "sighting--75bad444-172a-4cab-88da-8487dbb13acd", "sighting--fc8eeb46-6c21-48f6-aa4a-904601906d19", "sighting--672db472-d3fd-459c-8b5c-d9ab9f121509", "sighting--3646a298-7a41-4c46-a6da-1ef71b4f1e4c", "sighting--054d4d9f-740e-4b11-9c04-c99d1d8a263b", "sighting--28c9bc1c-1c0f-4ad2-9901-21744268f200", "sighting--819b9584-971b-44df-880c-aba4badb7d7c", "sighting--81dfa191-3e04-4bb2-be68-01f839764a5b", "sighting--825e1504-ee5b-4e09-8344-c1ff50a0e34c", "sighting--cf404c88-1891-4600-829a-78a71e6da332", "sighting--6b11b786-8e93-4dac-be6c-473cafe7f568", "sighting--c5586802-4cd8-463d-81cb-8492cfc12ae1", "sighting--f39d5a07-4520-4f5c-8caf-cd6160d04f2d", "sighting--ed3909b1-2d21-473e-b1ad-5265c2a1fb24", "sighting--10e78022-6228-4a5e-bfc4-7e02061e6b20", "sighting--d25475d0-50fd-45fd-83ec-3d880854732d", "sighting--c907bd5a-14da-41aa-ad37-d79b4c1e313b", "sighting--fb85c738-ee9f-450a-93f8-df2ddd0d35fc", "sighting--97935c8e-12e2-479f-925a-b5fbddc509e5", "sighting--82ad7262-a818-4572-b5d7-a7589d2defef", "sighting--c5c7d90a-2af5-4e89-8455-a2b1a2f0f86a", "sighting--8a126359-c1bc-41ae-aafd-4f2083135d45", "sighting--401eb4da-aced-419e-be9d-bace66c779ba", "sighting--f444f20f-1a3f-4139-95b6-90677bcd994d", "sighting--b4b74f57-62c6-43f2-be8c-72950a24a70b", "sighting--c0c5ff28-64ab-4666-8925-610f53e562d0", "sighting--803be235-f40f-4a06-bbb1-61c06131e2a1", "sighting--5863877c-1c15-431e-b65b-5c23f0407163", "sighting--7f489c62-d29b-43c2-a168-77897f7b1ad3", "sighting--9ffcc8ec-7db1-4f6e-bfbe-5c94ddc64c8b", "sighting--87ecc4a3-923f-4338-b779-e1bfce201513", "sighting--d4645f1a-07ea-4bfd-873d-64aaf247c9c9", "sighting--7f32b27d-dbb2-46b7-bf02-20820d132506", "sighting--a583557c-10e1-4f09-a406-54baad6c7270", "sighting--27892afa-691b-44ee-b883-ad65a3a8f19c", "sighting--0dc26d1c-ba52-460d-bf28-160e47243cb1", "sighting--133193e8-b603-4d4d-b2b4-03f5da7ed337", "sighting--3d02e52b-3f5e-4437-883b-4ceb32686cc3", "sighting--b3dae5cc-b493-411b-8cc5-b523d977415f", "sighting--d03fbb52-f714-43d0-b7cc-5fb6391c67c8", "sighting--b4b2ef3a-c364-435d-a631-e04f36f7556d", "sighting--61cae73d-008b-4f55-8bf5-388546144234", "sighting--c3d1ebdd-408c-4117-8ae7-774c7d7a7e31", "sighting--7ce7912d-464b-490d-b446-8f593a361f43", "sighting--9484d3e8-b047-405a-a589-2ed217f69b37", "sighting--41241beb-efab-49e9-a52c-2f99d2bc1b25", "sighting--05317bd7-a6a5-42d8-86c2-befc6fa0df50", "sighting--85045ec7-8a7c-448f-9fb3-799d8b97ea61", "sighting--f00e522f-ff8d-41fb-ae2f-34664098f7c8", "sighting--cfcb1a94-c02e-428f-a531-8ce9111892d5", "sighting--a8cd739d-4197-4568-a9ce-d22be727fe26", "sighting--8256cd23-32e8-4dde-99f6-1b05982c7337", "sighting--ebd5759d-6e73-4482-a0dd-0b4cff9283f1", "sighting--a801aa8a-bacf-4836-a90e-f42109fcb60a", "sighting--180ce4cb-3511-4783-8824-7c230d98b2fe", "sighting--a3d1c7a9-f280-46a5-ab2d-eb6a0d7a8c55", "sighting--13d4f801-4b1f-4076-afab-5059ac6c66f5", "sighting--fffa7a0c-84aa-40bd-b815-015e755f0116", "sighting--8f8ae8d6-833a-4dee-823a-ede41db24a0a", "sighting--eb14b417-6834-4193-ad93-407a023d955a", "sighting--bd00966b-9193-4e94-8543-d7f65eb05784", "sighting--25e085af-a141-4465-b579-223906f81ab5", "sighting--55b314bb-3665-45e5-befa-04c195fef80e", "sighting--ac95dc2b-4634-4409-8f16-093fbef74589", "sighting--fd867003-81cc-4e07-b049-aa3cde2d6ec2", "sighting--c41feff0-12f8-4d0e-baf6-8eeb6be8279d", "sighting--13fa9ddb-04e4-48ad-b5a7-31956226c49d", "sighting--e7d85a49-eb2e-4b15-a195-cb28db963d48", "sighting--598f6168-e1ec-4595-ab8b-ae7739f768bc", "sighting--fb697c9f-3c9d-4fa8-bba5-1c3ca1f80745", "sighting--851fef84-6b44-48db-b26c-12a170517f48", "sighting--0e464c49-5a4d-4d8e-8535-6d00a157503a", "sighting--1074d1fc-599e-472b-8299-19de5904b7fd", "sighting--43c06068-05f0-484b-b8d2-b4c34f3614dd", "sighting--038566b9-a069-408f-a7bd-80264596a943", "sighting--8d5d29f9-b25c-406a-95b6-8bac85ed2e62", "sighting--1aba55db-35f4-4c24-b198-2c29789b2a63", "sighting--e2859fc4-27db-4e27-9208-66a076cc1342", "sighting--32354ee3-abb9-4dd9-81bd-de7ea46bc54c", "sighting--04da5888-a455-40f4-be37-66740ae2a68c", "sighting--c0f6ca43-2e39-4d20-b58a-d538b9f49e9f", "sighting--72f52f94-ceb0-4e42-a1c0-a0cb5e9ab77f", "sighting--14a6156c-c5fc-44dd-9ebb-b13e7fb5f8c7", "sighting--aee67f8f-6489-487d-abf0-64678bfdcc98", "sighting--ecaafe28-2c42-4c1e-9487-785bd797f09c", "sighting--9138a987-7a11-4a8b-9976-2aeb22b5f564", "sighting--5208484a-9dde-48ab-b52b-58b7ded314d4", "sighting--49b15284-e03f-4feb-9cb9-5ebe04b50b24", "sighting--16ae853b-55e3-4fec-a1fb-a7fcb5d48abf", "sighting--46205e4a-8532-46d5-be64-f371e2c08bc9", "sighting--1f4ae5f9-1732-4afe-9532-7dd77af255bd", "sighting--c86df6d7-2c4e-4469-b8e9-9a65fe733e35", "sighting--fca2e11d-cf14-4c6b-9994-2f4f2f890cce", "sighting--96edbc81-f4bd-4144-bda4-1252366cc536", "sighting--1b4a2078-74f5-4d62-b669-3dcd65b4f2cc", "sighting--ebab6ef8-7f02-4662-92e0-96318f6c3590", "sighting--b8b49e98-eaa0-4b4c-b799-b58086bcc2ff", "sighting--89491331-86e4-4aaf-a14a-4dd98f7e16ea", "sighting--84326b38-852c-4518-b677-7f4d24e61eaf", "sighting--93d203b6-283e-4218-bcbe-957c0d749eb3", "sighting--a50e21a8-59d9-4cf7-b756-28b1ae784816", "sighting--4d1a4727-3eb2-4657-a7de-5bf0ce080950", "sighting--ab893373-8225-4acd-931a-969044c39172", "sighting--cf867558-f8d0-42fc-9065-8e4d26215dda", "sighting--4d75ef0b-beb2-4d79-9f6e-5b0382e0d3ab", "sighting--35680b00-ab76-43b0-9dbf-859950a356ba", "sighting--38b0add0-2888-4a15-a834-5e6ba7d2828a", "sighting--1062cdea-8180-4ed9-b329-968583fb7d1e", "sighting--59c1ac60-de79-4684-9a38-d2f1224f60f5", "sighting--29e83e00-e66f-419c-876f-0fb834171d5f", "sighting--56a1ab6f-f299-41b3-a07c-b8b9790de96a", "sighting--ededa61e-1402-4615-a51c-1158174bf62a", "sighting--211a1cb0-8c64-4799-9d57-73f47882e1f7", "sighting--3699891c-3a62-4844-a4e2-34333be5afce", "sighting--4a49047a-9708-404d-91af-6f0c0d874fbd", "sighting--c137e8da-5df6-479f-b0a6-631e76f78d21", "sighting--d4ae6537-d627-4b21-909c-8a072f7653e0", "sighting--8a1892d6-8c27-4b04-908b-d7239df1b175", "sighting--6784e7b1-83fc-41c3-98cc-33373991545a", "sighting--3770132a-4b6a-4314-b0e1-28c23ec585fd", "sighting--7bd01ded-fb0e-4de2-a6d3-1602785c5c61", "sighting--c355be3d-a121-473e-b56f-65f0a0e64171", "sighting--ca2c4eb1-f4c1-4dfa-9fd6-2d6d80eba0ee", "sighting--13d0cbe3-d9d1-4bbf-adf4-a94c7ba4a3ed", "sighting--c543fca0-787c-4518-ab69-87bb4878b49f", "sighting--ed72d4f3-07d6-4bdb-9da3-8c7fa77e48c0", "sighting--ab4ddfa2-5c59-476e-8b1b-394beb0b3c9f", "sighting--1841b853-1499-4116-a07c-f3a00e342707", "sighting--dbc7af2d-326e-447e-b2b5-57fb4079e8d1", "sighting--d458a19b-0ed6-4bf2-82ec-9306f985f33d", "sighting--be8dfa3f-d7d4-4321-a665-01132e114faf", "sighting--9b627ba7-c924-4a7d-98f7-d928485a836d", "sighting--d0ac30a1-c768-4968-97e7-15bf0728180a", "sighting--cc8118ec-67a7-4e4b-8eeb-c81a08ee4c3d", "sighting--f9f87907-e033-4d28-9e41-e8ac31817257", "sighting--98bb6654-208f-4d13-b53e-b8f895003e79", "sighting--813660c6-ca37-48a0-bee6-d13eb0b5a8b7", "sighting--72dede7e-abad-45e9-a345-1ab1f7993d09", "sighting--941825a3-a1d7-42f4-9f54-20dd8d4f8117", "sighting--d15ebab1-e849-4703-be19-a589328e7b5b", "sighting--8f52b2df-b0ef-4b83-91d0-2c794a93111c", "sighting--0e9d8295-f8a6-4413-b7da-207dbcf80b01", "sighting--cd6089b9-101c-4f02-9c4c-4043d2ba7fe0", "sighting--92e312c3-4d9a-45c9-8ce5-97df517f817c", "sighting--04e9daa2-8650-4006-a590-97b9f8baa5cd", "sighting--a4256217-523d-45e5-872b-b05d6651b6c5", "sighting--acb47df4-c18e-4281-8038-a217343b9d83", "sighting--285a97d9-0c84-49f2-8fed-66be7de8eb78", "sighting--516498a0-3926-45d6-ba43-0ba56b892637", "sighting--33a841e7-5d56-4079-b646-d04452bb5bba", "sighting--8bdc8fe8-da88-465a-bfbb-01c6fba9aa4b", "sighting--2bfb3ef9-c650-4fa2-9976-08c9d7c1b52d", "sighting--be46709f-e431-458a-ac89-032a46e6c484", "sighting--b168bd86-e9f1-4778-807a-c0de0b296aac", "sighting--c7f48c1c-72dd-4556-9ffe-8232c6ee5beb", "sighting--66f555b8-dd6f-4322-b927-4373b3daf340", "sighting--7836c367-cc63-4fa9-88f6-812aeded9ead", "sighting--e87adbdd-6a35-41fc-89a0-1b5378922ae1", "sighting--6f6d8b2a-d48a-46ca-99bb-b2e82f2f9df8", "sighting--6ae1f8db-adfc-489b-84b4-f5ab22ebca88", "sighting--3a1e23fb-efcb-4993-8e6f-5fa73eede576", "sighting--a9c48c8c-b060-4db7-91a2-a587c22b8c66", "sighting--9cb40599-de4b-4b9f-96b7-d217e1e18293", "sighting--7a1557c4-4f86-4d5d-8fb9-75c1caa43272", "sighting--d0a35814-789a-47e7-8a1b-4949e1d2d6af", "sighting--aa769ac4-9eb8-43f4-a086-d5c78c9babbe", "sighting--91f7ca06-b747-4d0e-92ab-5b8e9e59370a", "sighting--024fa0da-8a16-4474-9cc6-296ca6a3eccc", "sighting--a50198d1-3a8f-488d-a42c-1626c62398c6", "sighting--87380485-90f6-4499-aa16-662e0e60846d", "sighting--1b095e43-ecaa-44a2-87f9-0e4dbc9afb47", "sighting--0984559c-d15c-497b-9e64-780bb1112e65", "sighting--5b83351e-2ff7-4e24-a300-abe1702a4ae6", "sighting--9aba185e-885e-4ba1-9403-7b3cd7bcab1f", "sighting--87195aca-6508-4d41-bdad-c1b96da5d32b", "sighting--88b859a3-447c-43d1-b1ff-17d93965edda", "sighting--b08406f3-3f70-409d-83dd-f84bdfbd9413", "sighting--8dbf8fd0-c3cd-4ed5-ade6-61431edc5d32", "sighting--d65eae01-e40a-4283-8e66-2bac2dd978e7", "sighting--05656dd8-ac72-4057-983e-fe649e4a4846", "sighting--2bd2a446-ea08-433a-af3d-621631e50562", "sighting--ca195f5a-03f3-42b0-b254-937d26e64161", "sighting--f073ef00-0b4e-4732-84c1-0cf9ce338fa7", "sighting--1925b40f-d8de-4fe2-ac78-1b698fc251b5", "sighting--d9c6479d-414b-4c66-becf-58186f98d3cd", "sighting--c653d5de-a5e8-42f6-b634-3b8b69a01757", "sighting--487fcc8d-59ab-4269-8eb1-b5773de747d7", "sighting--9b1f63f3-1d34-44aa-8ad9-07f93eec7aad", "sighting--c24cec26-96a1-4ac2-a9dd-91b085f57643", "sighting--f524f119-fbd3-47a0-ac8c-dc6919f46d71", "sighting--02c18872-df7b-4df1-8fd9-a57f57865b1e", "sighting--67e2ac88-6ad5-45ed-ba90-143584fe7a7e", "sighting--dfdef5ff-f0de-471e-8a22-2750cb43efa9", "sighting--db50ac50-8903-4f94-80eb-e2cca2ea2c97", "sighting--9b309d7f-088b-46ec-8059-c20ebec0ee99", "sighting--03003b19-e0e9-4c77-a91d-dc36c21dc609", "sighting--05c83bae-1ff8-4f01-8c92-f4c5148d70a0", "sighting--65d916c1-3fde-4db2-8dbf-fa4537176a51", "sighting--f09a1bbd-d610-4758-aa77-abdcc1667794", "sighting--f2a9d6fd-9b93-4e48-8238-1330298f690e", "sighting--8786d1fb-e73d-4731-8669-571102312bf0", "sighting--7450426b-3113-4849-aef4-779f30eb87f2", "sighting--3858c88d-9e84-4a4a-95ba-9e2d51957d25", "sighting--66948faf-89c0-475e-8147-6d49ec8e01df", "sighting--8553e440-efb3-44b6-a953-4c2eeea631d0", "sighting--b4df5318-cb82-4e79-9ee3-c8ab51d4c27d", "sighting--cb7086bf-7834-4e1e-b667-4a87a9496e07", "sighting--f485f7bf-0174-4819-85aa-9ced103db619", "sighting--a3d2e1b0-18d2-4e4a-a448-8e4ea9988d7d", "sighting--00e43f74-932f-4bd4-af21-e92467780e5e", "sighting--330e48f5-c688-4387-bfd7-542709cc06d3", "sighting--656616a0-dd8d-42f8-ba0b-6fde803af76e", "sighting--88126a44-7e40-4bbb-af47-327da139a4bb", "sighting--69ab9af6-b6ca-4dad-918e-f8c506c2f1f6", "sighting--cca6c808-77ff-46c8-b22b-ce2b3173c4fa", "sighting--eb294f81-6c29-48dd-9706-0aa9c3d52495", "sighting--366998c7-20bb-481a-862f-a6bd4590629b", "sighting--3f728280-8e8e-4953-9093-90883ac7069d", "sighting--7e7afbc4-1163-4359-b38e-ee3842d1afe5", "sighting--dcabb949-143c-4f50-93e0-12ab3371e791", "sighting--8e999dab-a729-440c-a365-3cdc4300a0aa", "sighting--590d8a5e-e262-4601-b141-0778f5935465", "sighting--3ab38cf3-298a-419e-b241-3bd8335ecf29", "sighting--a14782f2-e5e2-4213-9a55-2552b3df6566", "sighting--b1225246-de41-4f5c-81ac-11d465d9ed4e", "sighting--67212837-8275-429c-9095-a472e684cafe", "sighting--a2440528-2d57-4279-8dd7-7a6cabfc237f", "sighting--765e5bb4-e064-4a6a-8330-7632ece7a316", "sighting--2e578cb7-699a-4136-96c2-959bedd39dab", "sighting--8f916250-3ddf-48b5-8f3d-250bf5dd981c", "sighting--8e2c27f5-2415-4286-bd7f-ae27b1726e7c", "sighting--b4594b42-35f2-4fe7-914e-f3ae4efed680", "sighting--1167c88a-893b-4c5f-9e6a-66c51074002d", "sighting--0ac7f8f8-d611-4d8b-a6a5-0d7c89f79d99", "sighting--42c03284-f8aa-48b4-91d3-e551c54e2efe", "sighting--2b553c40-7189-4fc7-8baf-b1d4a48d4aca", "sighting--6b6a30bf-e710-49bd-b376-d034c4da42d4", "sighting--b2fe281c-94b6-43d1-9936-9e3f12a65e20", "sighting--ee295e11-15a6-4393-9777-4bc23cf4c5b8", "sighting--1384515e-4269-456b-a9e0-561356af845a", "sighting--2021e12b-96a4-4645-9030-2357562a1b20", "sighting--04e21aae-e3b4-49df-8625-002455d84821", "sighting--a4922076-3dd7-404f-87f2-476c704b22da", "sighting--f3cdfab4-928d-4d39-adbd-f84102d14cdb", "sighting--f14c5ec2-66fa-4fa1-954a-94c7e574b54c", "sighting--53948263-c60e-4a55-b5d5-135cd39c08f1", "sighting--5fd6c39c-5eac-4a89-9c0c-5db4a634de99", "sighting--8d69b1ea-2800-48ec-8068-ef7d6f8720af", "sighting--cc35691e-6774-406b-813b-842ac64b1909", "sighting--efafdbb3-cfde-40c6-80bd-486034727d1d", "sighting--1c3af8b2-2011-4338-acd1-02b81f4e2da7", "sighting--edb394e8-0862-4e31-939e-0247d0040539", "sighting--67aa24ed-6c27-45a1-a68b-04ff5291dd69", "sighting--6fcfc617-94c3-45d6-b89c-01bd4e1df647", "sighting--2a0a0054-caa1-4b85-957c-6ff8630f64bb", "sighting--bd1b736c-1699-4aab-9ef5-3620b6ade048", "sighting--24273032-269b-4ad8-bf16-16b888c5e1d1", "sighting--d42ebad5-262f-4497-b471-b1993065e90c", "sighting--1119f36b-ad74-4ce1-9a28-833f437c5600", "sighting--7c8656e1-4e93-4303-a9f0-f92a72c8e1f3", "sighting--b82db391-ccb4-4f87-8b21-de5c617ccad2", "sighting--3afd0205-91b4-4e2c-bc77-295b9320c4e3", "sighting--3453aebf-f095-4730-a9c2-b06dab3e9b80", "sighting--7d1f111b-3fc8-41da-8067-109e70999136", "sighting--aa9094a1-cd14-4525-a3e7-852c9092ac7c", "sighting--af0bb221-6ca0-41b1-babc-9084e9039cec", "sighting--2efe6ff8-181c-4d06-b839-c601ba000d4a", "sighting--c8ed24d0-0409-4d3c-869d-c48a46b551de", "sighting--be4ab2d1-12de-42f1-b961-732469e031d0", "sighting--ec87beb8-6a4e-4b43-b877-458917eb2bf9", "sighting--1584d70e-7338-457a-a909-eed9dbfc7261", "sighting--996efcc8-9f32-48b1-93d9-68af1c6e6837", "sighting--840bad62-cb9b-45f1-815d-fe32601b02a8", "sighting--8967b78e-40ab-44fe-b89a-2c898a4b15ea", "sighting--eebcc412-36af-4c69-8427-d60571d76bd3", "sighting--3d148caf-3a8a-4c3b-8152-76f59fb805d7", "sighting--adc174b3-4c75-4c47-97bd-99ff53dba9c6", "sighting--947680cb-a564-4629-b23b-8617aceb96b6", "sighting--090c63eb-063b-4f3c-9239-ea626dd42eab", "sighting--2adba1fe-3d3a-4cfa-82fc-93fccc9d562b", "sighting--586e08fa-1d7e-48fe-8031-fc8a9aaaa387", "sighting--56ee272f-8b4b-49ee-8578-6cbab3393180", "sighting--b96e02f5-2845-4693-8f9b-144aec6ae45a", "sighting--ada4b35d-a399-48af-b9af-3f43ab0ab82e", "sighting--79cc71a0-9d7e-43ca-bc1d-ada8134bbeb0", "sighting--21b071d7-9432-4039-920d-5c5a19954eca", "sighting--e1b1b3ff-2543-4b91-9676-9b0280bc034a", "sighting--53521b90-2005-4291-812c-f803db02c1d8", "sighting--fd9bd9e5-6d2f-4968-831a-e0d175aa3765", "sighting--b3084356-c580-4a02-82a7-d88eb31ca339", "sighting--bbaf3feb-0b82-4bc1-bd70-2c7a55543810", "sighting--75832e53-075d-4a74-8978-8f20730c1e6c", "sighting--4c8c2268-652c-45a3-946c-48ce4179050c", "sighting--6cbc2967-071c-444e-93a9-2706861efc96", "sighting--b625abbf-5062-4567-b658-55dc79a2ca01", "sighting--89b6707c-b4e9-4f7b-958d-8e7e07160d82", "sighting--6232b1d1-c612-461a-953f-54feb9f4a799", "sighting--7ec5b3e1-565a-435f-b791-f7999f2e884e", "sighting--53b00d15-1c6f-4a8e-ac8a-2c9d72766241", "sighting--814fb89f-c71c-4d29-b489-08069157ef87", "sighting--8649869d-6437-44a9-adf9-4da4b6b79946", "sighting--a823143d-b519-4728-8929-33bbcb5db22f", "sighting--ad4f098f-11ef-4dd3-9bd5-e67444b9c711", "sighting--fa294bc5-50d5-4373-ae17-1a9738ea21fe", "sighting--57a1d002-a3eb-4a64-b572-83bfe773736c", "sighting--dae81807-fd2f-41c6-a311-0542692a2c20", "sighting--9b36c16f-ec01-41ff-9bd9-7797d595c984", "sighting--666fcd3f-b18d-4d98-b66b-ada3dea657ca", "sighting--39af8716-4ede-4d20-a358-d32cd92ccb67", "sighting--f807364c-4a56-4321-9842-e2db1f63c9ef", "sighting--c4145c72-45a1-4f91-99e0-a3650fd961e7", "sighting--da2e94d6-7572-4d96-ac24-a2209052ddf1", "sighting--562c48d7-e396-4eb1-9c9a-f92d0bc429d0", "sighting--c36350c2-5605-4dc1-af77-f1784ba9ec74", "sighting--2515fc48-c0fd-4f85-bccc-9d2cde6f16fb", "sighting--dcc1844c-532d-426d-b210-8abc26d620f5", "sighting--e21656c1-ece9-4815-b152-3674eadcbfab", "sighting--6edbd335-7440-4b39-b0bc-55da887fe9a3", "sighting--6c01b650-971e-4f6b-aca2-687f9c52a3e3", "sighting--54362fe2-c41a-42d2-9e87-7cd7b7908f2c", "sighting--93cc66d4-951b-45d7-b7e9-3792784b3e5e", "sighting--e5207f44-c919-4c6a-93cc-d930a90fb5a7", "sighting--d29c28b5-d87a-4654-a7bb-d96e65c53160", "sighting--4ca499c6-6c60-4f9e-af53-a17977d7e223", "sighting--d341d597-eda1-4bc9-ae97-938a605a8656", "sighting--9e10d22a-3706-4efe-a8c2-03130fc5b278", "sighting--5f520753-b75c-42be-8d00-03be425d8853", "sighting--5bf4fac9-ff91-496a-8d10-69f8d90f192e", "sighting--5a9e8fb0-cfa9-4568-a769-c89d868066e3", "sighting--dc68700e-afc4-4a3f-8962-d9a16bce1d59", "sighting--53b7dce6-803d-40c5-a681-9d66d43d9901", "sighting--7216b525-430b-4900-bbda-d000e6082ebc", "sighting--a08ccae9-2d5f-4723-9e4e-e65a3799529a", "sighting--a61f008e-c030-48c2-8cdc-9f92983713ac", "sighting--242fa3b7-22d1-4997-b5bf-1a6140893795", "sighting--3bd02ea1-f719-4879-b28f-127f5580515d", "sighting--eacac890-eae4-4352-836f-e895fadcb0ad", "sighting--12ec1831-5745-4d18-b0d7-ca78f3a8f15d", "sighting--b4cf04a4-9875-4eaf-8b0f-234dbda00342", "sighting--6b4d31ba-0596-476f-9989-82e21fcb16e8", "sighting--77d88ef6-2ec8-4bf9-8a4b-d38b39bd2075", "sighting--ce0f89a4-993f-4077-b46a-cd6cff2d131c", "sighting--7b19cf04-f5b9-4c14-b489-146c32707f39", "sighting--894ac0fc-4635-490c-8c96-51d5f6cbf082", "sighting--998bc593-3bdf-44db-b023-c4cb4a77e103", "sighting--0be34762-e1a3-4b35-a1e7-e3dc32631ef5", "sighting--8413a748-feea-4658-a993-007b427b72d8", "sighting--3c9008f5-8673-4ec1-a7d3-35e7759d0ed4", "sighting--c7be1334-e83b-44ef-a216-55ff3fa65610", "sighting--cb40a2fd-ff6c-425b-9d3e-daf5788978b4", "sighting--e3668275-610f-407d-bdd0-c686959b1550", "sighting--adbc1db7-aac9-4ac3-ae71-06244158a4b0", "sighting--0923f6dc-e4e4-4d75-a2a9-665d5374a493", "sighting--d771c948-d72a-4bc1-bb37-00a5710e5556", "sighting--e450d1ad-f2d2-4cb9-9297-1e8f47c18f45", "sighting--2da854d7-5dbd-486a-8707-0679eafe9ec6", "sighting--e42a5920-8d48-484b-b063-39359e0f853f", "sighting--13a500d4-d82e-47ba-ac46-bc233d40d538", "sighting--389ee493-41ed-4753-9b24-4989c968b553", "sighting--1874f923-ba94-4b6c-85df-c4a1c910add2", "sighting--80ad81e5-4216-484f-9c55-64306a6eefaa", "sighting--b0ac4376-f40f-4c95-978b-4bafe9d16d52", "sighting--baa9bce8-d2bd-4a0a-9697-8d01b53d63d6", "sighting--e34eeeba-4fd4-4057-80d6-7758c1a2b3a1", "sighting--89e7f69a-3782-4519-903f-3823ecde40f8", "sighting--b92d0a66-35e7-4e68-af68-bc923f6d0e45", "sighting--a4a741b6-939f-4112-a3ff-17cd62c103d2", "sighting--e605a826-f6de-4e39-a059-7f90ea38cdac", "sighting--e9d0689e-1dd7-4379-9ea2-9c9f231e8be4", "sighting--b170cca3-0b27-4ce2-b1dd-0d8a7be26c92", "sighting--e0df3fee-9109-4c9e-b4c6-4e5fd6c1db0f", "sighting--42094e57-2c8b-482d-a68d-18f4ff622f5e", "sighting--1aac3768-7ac0-4701-b28b-1a007976ac3a", "sighting--10082a3e-e4d7-4172-a166-bf81dafa801b", "sighting--ed04f9cb-22ee-4a14-af78-621f07d85073", "sighting--81cfc86a-0a41-4ec1-8490-8dda53c7dccf", "sighting--377b5993-5f03-429a-b3fc-8b807b81f323", "sighting--14bb7253-7654-4311-9aed-a0bbc21bfe3b", "sighting--62f71537-d0bc-4c5c-835b-55e3b2e3a2aa", "sighting--d8873dfd-7260-4f7a-89a0-968133911a1d", "sighting--9d0da74e-3787-4311-8551-4099b2076df7", "sighting--d8d6fbd0-e594-44f6-9662-81b5960cb6c0", "sighting--a8b0f812-4cd6-49fc-9989-7cde9f62689f", "sighting--79d30c39-e6a3-4927-81de-73219bb17c0c", "sighting--2a4b23ea-b320-4bdc-aa98-17581a2626d2", "sighting--f659f671-3a4c-48cb-b5e0-73a6c224706a", "sighting--ddcad799-0620-409b-ba2f-13c0bf5d18ec", "sighting--dce8e25b-d357-45f7-b459-de8e5a85ab1b", "sighting--dcd70d71-a2dc-44fa-8b3c-86aa0a8b78eb", "sighting--771f5cfa-3384-4226-bb76-13f669e9d810", "sighting--1fcb0517-b804-47be-b8ce-ed7a87fc911b", "sighting--3ed8dcb7-93e8-4e72-b994-496c5c2291c1", "sighting--03059c4f-f7b1-4fb2-8602-a34418a2a4b1", "sighting--2be4955b-8a97-4665-b9e8-2d30cb3d18fc", "sighting--66b6c776-9a50-41d3-9ce6-bc98f934fa4a", "sighting--b7960cc8-7284-4ccb-83f0-bb28802a3234", "sighting--605f403a-8fab-4c7c-9a72-beace078b7a7", "sighting--6a1987d6-8fa3-4be8-87d4-d9e9862bc375", "sighting--942de6cd-739e-411c-8057-1028334b9912", "sighting--f80a56ff-c4b0-44d8-8a09-782d9facb964", "sighting--684e75c0-0202-4271-869e-fedf64d8a40c", "sighting--30353e07-9386-471f-8f2d-91d272e99129", "sighting--7d2054ba-2837-4c58-bc2d-d73b18a6bdf7", "sighting--60616437-74d2-47a1-9f15-44b92cda6d38", "sighting--f43dc87a-3d29-4d4a-a79f-d24f21f7de6a", "sighting--c16821bf-fe82-4a23-8d6a-965208b24c5b", "sighting--dc64c8a2-264d-4f44-ba9d-64b4891a09e2", "sighting--f2bee1d8-1525-4423-b851-701badbdd26d", "sighting--06d643b1-9a51-4898-989e-a5b5cd97a259", "sighting--b690bd1e-9a04-4b60-ae3e-886f577fe792", "sighting--e823286b-010c-46bc-aec5-d634c8502446", "sighting--d845e302-ee35-47d9-b81d-43ea1058b2fd", "sighting--99568562-492e-4630-90aa-05a8197de01b", "sighting--fa126934-1a97-4867-bd4b-dae33ee7e81e", "sighting--d2c7b836-e3cc-4428-a847-9ff395dea342", "sighting--be819747-bddc-4c68-9982-7f4273ce12d8", "sighting--d4be4b94-1dc5-4951-bcbf-79c05a8bc1cf", "sighting--520ec5e2-a0e4-431e-8e6f-cc3b94d50f2b", "sighting--fa35cf0e-4e2d-40a6-aaeb-88e7e3c020b7", "sighting--2ee3f456-679f-4f4d-bccf-530cba65f8cb", "sighting--16a6da3a-a421-4cd8-ba5c-8b0cede58ab3", "sighting--0606b22e-9c92-449e-ae55-6468c92c3770", "sighting--13f80a47-6703-4766-a796-753dec6e629a", "sighting--a663c597-b3bc-49c8-8e2f-a728ee207f12", "sighting--aeab0f23-1005-4827-8388-979450ae4031", "sighting--830c7821-1aeb-429c-a9b8-ce3771055092", "sighting--3ed9580f-0cd8-4b5e-8e66-6958ba6cc7d5", "sighting--37d7cc20-a3bf-4ea2-a846-6aff2406ff78", "sighting--ed48f17f-d4d7-4e39-8094-ad642c34c2e1", "sighting--31d7e7f6-e067-4463-83bd-5d677e4b05ae", "sighting--b0bad304-0ced-4b81-af76-1b3389b187fb", "sighting--138380ad-1365-48b9-83b1-3241fe24dfc3", "sighting--6c316af1-30c6-447a-b13b-ab7421888295", "sighting--a0bd4985-7cd9-48f6-bd41-fec4da93bc61", "sighting--fc6d3258-0eee-4ce1-96c7-5726467c8195", "sighting--244a9a2a-94f5-41ed-acf1-5bc101ece583", "sighting--06850373-9dc4-40e2-8481-b53253b1d677", "sighting--b93bb1fc-7323-4883-9889-e6422e2a4405", "sighting--06068bc8-9170-4039-a612-6863735af3b3", "sighting--36ac1f31-bd3d-422d-b8dc-4456e658c1b1", "sighting--acd19bda-89ee-407d-8948-61e9dbfe4736", "sighting--89a5dd12-9312-4ba8-a192-b08468207a78", "sighting--870939ba-9dc7-47e3-afdf-5ff112f8238a", "sighting--c8c925ea-117c-4fe6-a08b-ee1b9c93fe3c", "sighting--63933553-bbc9-4dec-8ff3-bf8bb6173378", "sighting--b8218d38-5e32-4e8f-b104-ce15ff073d0c", "sighting--811281cb-1cbd-4186-bd4c-f564bdba0822", "sighting--56a6d64f-f4f7-474c-a451-dc0d7498b824", "sighting--86327221-2104-44f7-840e-396a9638fc05", "sighting--7029a15f-0772-40a0-892c-0fb76f1adcda", "sighting--ee0fa176-cf80-433b-8681-b3df67c4d1f6", "sighting--5d78520d-6f42-42df-8320-a80152a63164", "sighting--35a14878-f448-462a-bfe9-5cd0a48ad004", "sighting--458b61e6-d4a0-49cd-bfa0-3f2d2336fc2d", "sighting--daea3658-4f9e-4927-a204-366968e30007", "sighting--f24c7de7-ba23-4a11-97b2-1da4f0ffc37c", "sighting--84542b8f-32a4-436e-a6ab-31248d5cd4a1", "sighting--8e769000-5a46-4f23-814c-91036b6874e3", "sighting--c290a7cf-6153-46e3-b5e3-f33e198ed001", "sighting--f570a529-65c4-4dfa-add8-5fe0adb84378", "sighting--f58b24bd-cf27-44fe-95fb-ffcad28b0714", "sighting--fc61362c-f576-419c-894d-e3f9f7643aa7", "sighting--f1384a59-1f67-411a-8dbc-7b7eca8d1ca6", "sighting--9c0bb349-5754-4050-a9ed-d7eea754add5", "sighting--02eae60e-f2b3-4db8-b353-5b2fede88502", "sighting--5a886c70-97f8-4d02-96fc-544440e1b88a", "sighting--498631e7-1451-454b-8cd9-91954de01583", "sighting--70fb9acc-a51c-4d9e-8cbf-b9313e2472fc", "sighting--4e6b4713-86de-46e1-8f64-54a112e2497e", "sighting--3a714070-c6c1-4d48-82dd-558e8ebf7b65", "sighting--6fe2afd4-0a92-4b38-a007-0311caf060cf", "sighting--d2f728c7-6b25-4ad6-8045-e107a1487960", "sighting--f2d0dd09-4913-4cc3-b7cb-84218f7cd7f6", "sighting--6010e345-5bab-4fb0-95bb-a5cfc3088092", "sighting--b14dd543-86c0-43fe-afb5-11a9e8686e8c", "sighting--0590664b-827d-4dec-93b7-55e67941626d", "sighting--4cec6538-efcb-4bcf-9b19-5a2ade06338a", "sighting--1bf5b22e-5c28-4224-957d-82dfbded1eda", "sighting--ea749c35-e6d1-4807-983e-6bf92bf03a86", "sighting--8a90e398-6d30-4b82-932b-1548ca8e577b", "sighting--f2e9b315-2e5d-4e65-81e4-77f70ba207a9", "sighting--1b36f0ad-01d8-4e35-b441-0c9f53b152e2", "sighting--579cb0b9-68a1-4a79-a65f-755fc1a2bab0", "sighting--142ae391-e874-4451-a4a3-c59338c3426d", "sighting--d04776ab-44d8-4e59-a9a2-253887662333", "sighting--3f0d2c16-8af7-49c3-af26-da07c15b8e99", "sighting--21bd66f6-6f0e-460f-84c1-884f32bf0714", "sighting--f403b284-e0d1-48de-8515-ff762f3c6b50", "sighting--ea03361d-781e-4175-853e-8710bb57a478", "sighting--e5ab31c8-8023-4387-bb86-280bc76f5e08", "sighting--f87950c0-5478-4be6-b2b5-b297de801d97", "sighting--a414763c-df74-45a7-84cf-0c84d0ab69a5", "sighting--cf5f3c37-ac02-4ca5-abe5-e89093c704ab", "sighting--b905c0f1-dd51-47bd-9582-f9b9ad44ee4d", "sighting--0165455f-a135-4005-a52a-6e360776e9e0", "sighting--cf544b1e-50dc-40cc-81a0-2696dea7512d", "sighting--966584a2-80bc-457c-b811-1525f5cb7015", "sighting--68bfe308-abe8-4ff0-b77e-34e6d2f62e1f", "sighting--8efdd452-35c9-4e69-8d9a-e7de23f83c9f", "sighting--0b4f13f5-c508-4a53-885d-5b5b3ef5003f", "sighting--264c49a9-6e65-4ea8-883b-d526ebffbacc", "sighting--f6260c10-8a1d-49f4-9f24-91a25a54168a", "sighting--c45e4e9d-d9b1-4053-89b0-4a820dbf6bf8", "sighting--8cde2aaf-44bb-4178-8149-afe0e3cd10fe", "sighting--1c307cbd-d6ce-45eb-a8fe-65e664a50d21", "sighting--08b4a4b9-dcb6-4dbf-9a71-2a988c5e08df", "sighting--b8c3f644-b244-4c0e-8698-79a719bbbdf9", "sighting--acbc6142-ab39-43fa-9db2-a25e03a2f89b", "sighting--c1a22b20-d103-4cf7-81a9-2976e25f7e15", "sighting--72fb82f6-89d8-42b6-971a-f2cbb99140b3", "sighting--defd6cc9-77ae-4808-a94b-ba01249cbf49", "sighting--f4074939-64b4-440f-a5ff-c809f7015d10", "sighting--2900a9c5-26ff-40c3-9f95-6cfa11d5f853", "sighting--27272f08-a6af-4ca8-b3fe-1216f6adeda1", "sighting--be3061be-f2cb-4979-8065-6e0ffe467255", "sighting--d348f863-ae6b-4cc8-b252-d96058d64813", "sighting--5f382b43-f36e-4ac5-8580-6dbe198a6223", "sighting--b746909e-e77e-4d72-8dab-1d020c146ac9", "sighting--7a7c6703-f9d4-431c-b7c0-892f18a5e6b1", "sighting--a966194e-9619-4ece-a86a-54a1cc77f11a", "sighting--a8726662-9f47-4f82-8ae0-ab30fbf3a7d6", "sighting--205b304d-8d9f-4eee-8089-777e7f0bd536", "sighting--5480a615-e957-469f-96f9-dca088889038", "sighting--4f059d79-272f-468c-a9eb-1481ff6cfb0a", "sighting--9100af79-308a-4771-ac57-4abff26138f4", "sighting--8ca19fe6-3020-4b16-8ba3-69fe0c9cfba6", "sighting--2ea1cee5-a7e9-470b-b279-a8da0847d2e3", "sighting--2c893990-30ae-48f3-92a2-d0c81d6334b0", "sighting--845f581d-14db-49ab-900b-4c6580777cfd", "sighting--99066ff4-8c89-40b7-b837-ae99be64b972", "sighting--c2b2cb24-8576-467a-b087-b68f4d5ddf27", "sighting--a9c66322-ddc6-4a02-9b2e-2890c85377f4", "sighting--4d85ec77-3d52-42d6-bb96-33dc68da2363", "sighting--9eceb863-856b-4de9-827e-bd5c6a2d5cae", "sighting--36c3bfca-9675-4440-b2ff-0d2cbe71a959", "sighting--d0f30417-fa0f-4f15-b874-7daf73c6ddae", "sighting--69a630b1-e010-45f1-81f6-322ba3c25ac0", "sighting--99ce711a-2f44-4086-accb-1a2383e1a058", "sighting--344fed8d-6b4a-4639-a2ef-4b8d71f396d8", "sighting--a324d298-87b3-44c7-a7c0-a2b3277e0072", "sighting--81997a2c-e908-4200-872e-8e760abef2d3", "sighting--33e071d3-8035-4df6-ba06-1a54637eed2d", "sighting--28809d1d-84ad-4258-8813-2a3dc7b36c19", "sighting--c9294353-2d3c-4541-a4fe-8002d7314833", "sighting--3ee51056-bbc3-42fb-a607-f42f16813920", "sighting--a8473092-ea4e-4041-a7a1-29106fdbd901", "sighting--45307a74-9154-4c53-8c45-43579a529e10", "sighting--4ad0d217-bda6-40f2-aeb8-152645941de9", "sighting--5c9fc449-c1c2-4db6-a9aa-eadc2affb989", "sighting--a72adca0-3bef-49cb-968d-991c6cbf61c8", "sighting--13848d00-9a77-44b0-87f6-bf647601c51a", "sighting--741e3efd-f8e1-43f9-9bfa-e2999c0e23b6", "sighting--ab9ea222-d764-4209-8cdd-5b5e12dce1f0", "sighting--d2320a49-7e6a-4f55-ba51-c48215e08acf", "sighting--f40a0be0-d56d-42d0-86ce-d3e4d149cc22", "sighting--a406d323-eec0-4234-87c0-531559ca3c04", "sighting--f677d823-2922-433f-951c-75f2ae445966", "sighting--29047e6e-7ac0-4266-b826-33a4322f6d49", "sighting--67a2abdf-0ae2-4b11-b2bd-aa03d77c9c9a", "sighting--90cbf2ab-925b-4948-9f8a-888c08d3dceb", "sighting--5897c5f8-d14d-4459-88e2-93f4002b16af", "sighting--13361691-f387-4b8f-8506-f8c8e9996974", "sighting--a1906ad1-7aa7-4343-8249-d4d986a2b189", "sighting--7f1a1812-b0cd-4156-b667-ce226b676e3b", "sighting--6bcf9fb5-105c-4ffe-ad4e-cbf77cab3650", "sighting--f7792673-1aab-428c-b107-61f6b2c737cc", "sighting--9c79c09e-711c-4da3-ae91-0820f52a9eca", "sighting--05847a2e-0d9a-4069-91ef-72709f3c27f7", "sighting--aa8d31fc-3d02-4ace-a31c-e5cea28ceece", "sighting--7e085483-b59b-4cdb-872f-12d464eb2d3d", "sighting--6a1ed82e-292b-44f6-898a-d4a3cda4dc4c", "sighting--9e6ad578-18e8-45db-a4af-7376959b9aeb", "sighting--804c7081-5fe6-423d-a525-feff6e05563a", "sighting--12a98654-329f-445a-82f4-239bc0ff9375", "sighting--ce7467ff-5e77-4c12-a745-a527ccd2e104", "sighting--9183844b-c592-4407-9531-1e18ec8a9077", "sighting--02bfc396-42a8-4c97-add7-72130990ed13", "sighting--19b8b037-1855-4788-9509-dd8936734923", "sighting--43f475b4-2d0d-4ba3-9504-a794d09b9d86", "sighting--ce3ff52a-c80b-4c4c-8c8b-bab820bf3d98", "sighting--6284adda-534d-4df1-be23-2ad37157cbcc", "sighting--112fb769-bdcb-4b4d-9b5c-e336edf0ec45", "sighting--d702cb63-6a11-453f-932a-7b2ebf9469c0", "sighting--6a27a070-09f6-4700-9bc8-18201e1bb1d6", "sighting--f68d59e8-82b9-4769-abf8-bb8feb4cc035", "sighting--062f468a-72f9-4584-9df4-a7b14c41444b", "sighting--0a275b1e-54e9-4884-976a-2b44c494ed05", "sighting--647569db-9720-410f-8ae7-35cbd2112084", "sighting--d839c0b5-901d-4cef-95f3-f20a90113640", "sighting--11f8adf4-92be-419c-a9d7-e05021d02195", "sighting--8e27cb96-33a9-4edf-aef7-81ad8a50ccc7", "sighting--9bc611d0-6716-4982-9023-a6fe2f9408f6", "sighting--7f2f6dda-7171-442f-9645-acebf6117633", "sighting--bb8b65a8-bf21-42e1-98c9-01843eff9168", "sighting--dbc6f52a-af76-4ad4-b5f9-7fb33477d03c", "sighting--1e5a6b80-38cd-403b-b673-2cd52998463c", "sighting--0fccad5a-6317-4222-ae27-1c42de781434", "sighting--17713715-d9e0-415a-99fd-701b35dcb7a0", "sighting--87f4c8da-be77-4717-b053-45e3093b6ca9", "sighting--d568dc79-affd-4106-a4b5-83b247b3810e", "sighting--cd2e6654-de20-4289-8f57-8701babaa77a", "sighting--841cf2f3-de6d-4069-816c-695434bd8d2a", "sighting--2125e1f2-7f33-4038-aaac-a890e7829e96", "sighting--a5fb5e9d-db9b-4f7f-87b9-a1f849f1671f", "sighting--9d53b8ec-dda9-4f20-b465-5321536e2241", "sighting--56996668-7cd1-4d35-acf7-3086688dcf69", "sighting--c406e2ff-6f30-4598-bdd3-d4b7f7a1ee80", "sighting--10fc4bfc-8a1b-48a1-8b4c-21049a7d04bb", "sighting--9d0eff5f-a0bf-4d21-aeed-e61b1f06043a", "sighting--7afeea17-c106-4cfa-82c8-22a870186104", "sighting--be96b464-9888-4ab3-9cd0-f6b95e301ad4", "sighting--e172aa64-932a-4f9e-b4af-77616219df47", "sighting--9aac11c4-3bb0-41e2-8d7e-587000388e9c", "sighting--43b5f198-d831-47de-915f-750bc2561bc3", "sighting--c1bae37f-f69a-4681-89ff-5244fdcdd7ab", "sighting--3b50de63-09b8-4ad3-ad9c-bb1b225ccad1", "sighting--55ec8a6c-5116-4f96-b6bf-41fdf30c149e", "sighting--d5a624b5-1421-49a3-8718-2fbdc29e73cc", "sighting--a9b3cb4c-afe1-47bd-bb70-b1eed13a47f6", "sighting--082a2d3d-0986-4741-b1ba-4e320463cceb", "sighting--7230520e-bb81-43c7-8698-00a7892816fe", "sighting--0ceb4ecf-1615-4dab-a49c-3db5cb762a9b", "sighting--e0a4477d-df68-4d83-adfe-5f9e11d17778", "sighting--d56c0c4b-2176-4959-904b-86a0664617e7", "sighting--9daf0e62-9ac2-434a-8618-9298a67b6fdd", "sighting--6486c918-b6cc-40b9-9252-a3f59738b510", "sighting--4d35ffa7-0fda-4ddd-8d22-6f3381fce722", "sighting--2519eec9-e1bf-4e27-af6f-a0c22b9b2b63", "sighting--3f2cae24-79a3-4cd5-b845-d1aab805f88e", "sighting--c10feace-c4dc-4aaf-8dc6-7d78ac3cf0c4", "sighting--cf4d28a6-5490-4c62-b79f-0b0d0744e7f9", "sighting--7ed6024e-0391-4845-af60-fbff4da60f8b", "sighting--ab6e602f-5918-4541-bb01-6404631468cc", "sighting--4c45e29d-fc85-4178-b949-17033f380e9d", "sighting--e1b620b0-73bd-4868-8e02-e3e0d0915a45", "sighting--c6ccc395-22b7-4b2c-9db1-01c0107fe56e", "sighting--b13b650a-6c17-42e9-9f3f-98a21f913809", "sighting--35b9859e-3d85-4a81-a6a6-245526a2b660", "sighting--8814643e-cebd-46b5-a73f-22be6c6ec690", "sighting--c036ccd4-f078-40c7-9399-436ba4943fee", "sighting--831ff6d9-bb20-4585-986c-256013dff7dc", "sighting--b30a535e-43d1-40b2-9dc8-eee92d6193a2", "sighting--b1dbf37e-f8f2-4078-90bf-ae6b61ea4658", "sighting--60e93f91-bd80-4f46-a747-bf33e6b2ebc5", "sighting--3600e61c-cf21-4db4-a250-24d0d393b977", "sighting--ba110932-0e96-4966-bc05-4628b65c5a8f", "sighting--a51e6572-a1da-4a39-93dc-182c198b9dfc", "sighting--dcc6eb3b-b29b-4536-a1db-d4d8633c4c65", "sighting--ae3d532f-6d63-44e7-a2a9-bf832941b9a6", "sighting--3c14e179-f8bd-4855-b7c6-8060c14e8719", "sighting--905c1d0e-ce11-4855-a157-1caabc5cf83e", "sighting--280407df-5991-4a51-9104-844050dec3c5", "sighting--3446cfd1-a571-4fab-9e74-c306243be493", "sighting--a6439626-44c7-4120-b43b-89218f7ceba4", "sighting--1e557a08-5b29-43b4-b6b7-bd28eef09f68", "sighting--1a5c154a-0a61-42fe-93a4-d6da72608623", "sighting--8741bc6c-7518-4753-ab83-d4544bb850b7", "sighting--82babee4-532a-434b-81e4-a2a28f782074", "sighting--525372d8-7d1c-4c77-a16d-9222329d3870", "sighting--1db91869-08d9-43f8-ad8c-edc5fb8ad74b", "sighting--d12baac2-ba53-4c7c-bb18-aa4b9e3a6699", "sighting--50636742-f103-475d-8276-2ab5042b4e84", "sighting--ec76f298-ddc1-4728-bf20-f3185ec0196e", "sighting--b29fc636-143b-43f3-b4ee-d15a0d6580cf", "sighting--2165d3d1-5810-4c78-85e4-074535be9e4b", "sighting--b1f8d6ea-9efa-4b32-a0c1-3d472e68929d", "sighting--b7aadb84-b90a-4e69-b48b-c450a38d1f0e", "sighting--58756fe0-d02d-4678-b3ee-ee7552ee04ad", "sighting--816a167e-ebc0-4d0f-9959-eb1be8a19d66", "sighting--80dab568-67d8-47b5-aa28-be5aac99f39f", "sighting--7592974c-bad4-40c4-b2ef-92ca2ddaa67d", "sighting--2d1c12e9-1348-4990-9c3d-6b36b05e4036", "sighting--6b2ab0ba-d417-4779-8424-60941c187551", "sighting--10dc3be1-6f01-47da-bd43-1be4dbefee84", "sighting--ad7983cf-1f39-4db3-a246-4d12c2e937fb", "sighting--67b84ef9-6c51-4f78-8693-55abdb7675ec", "sighting--a282cd9b-e822-40ff-ae7e-9f4ad223b58e", "sighting--22f55eea-f996-4d95-9cb2-49cde4fbe9a4", "sighting--97ded1f8-fddf-42b6-b8db-0c770e69f8bd", "sighting--cacedd72-ebee-47fa-8846-5dccf8beaa8a", "sighting--d9ed4e1a-a71d-412e-9b6e-754468911845", "sighting--82f1c403-fa4f-4a15-b5d1-f7aea070a104", "sighting--9e934dc9-4391-4f20-b68e-aebde39ca671", "sighting--36e821ef-fbf6-4cd3-8edb-8bb670e9fcb8", "sighting--872872ee-5a4f-4a1d-8907-b6e34c3774ee", "sighting--e8820244-6402-4ea5-a188-20d5f77211e2", "sighting--29837d6a-b87a-439f-a11d-4e3f3dfea326", "sighting--f80f6ca1-edc7-4b8d-b31f-7b3bb70f0a99", "sighting--7dad830c-3b4d-4520-b8b1-01730e77837a", "sighting--1f135e93-8f5d-4da9-a12b-fa89b0ff6b8c", "sighting--119b0047-7a85-4064-b478-abc1a56ac321", "sighting--703bf7cc-1c2f-44b8-9e3c-0a3774b91021", "sighting--058d5da2-a0a2-49e9-8c3b-e50cb5365436", "sighting--a38debab-3835-4779-ba16-1290963a4886", "sighting--d5896c48-7f0e-4797-82c2-ef1f21ee219d", "sighting--ca8bade4-0f46-49d2-b5bd-f59defdde259", "sighting--00eda986-4183-4039-85b0-d5ff94cef5df", "sighting--a44d8db8-b3e1-4c96-91b0-3e8819eb8f0b", "sighting--b1e5a4ea-cb55-4403-b083-c95b638bfeba", "sighting--8ad11681-7414-4c16-b419-c9f2d773f136", "sighting--e59a8dec-4d54-41b9-934d-eb7a7abb9889", "sighting--04a775a1-87f1-42f6-ad88-d99a435ce45d", "sighting--53022c95-9912-4612-9a28-f6a67f29195a", "sighting--6f9fff9b-38dc-4d1b-a264-76beb5398549", "sighting--16dbda70-695b-4a03-a705-7056dfbce0d0", "sighting--bbced01b-5251-4cdc-9e13-9997c19b12eb", "sighting--e013badf-9dc8-4e4d-a900-1933e76b3cd4", "sighting--c10ade5b-e1dd-4cc0-b3e6-0c331597ab2e", "sighting--c985871c-e24f-4826-bf87-97c479df4031", "sighting--e6d0061f-8e5e-44b6-b94a-64e631265319", "sighting--e5bf640d-63f0-47d7-9718-08f1bd5df1b5", "sighting--c745a671-bd6c-4d86-b961-1a4bbe812654", "sighting--259a5e89-5eb7-4d95-8d5a-b59781af56a0", "sighting--f040e85d-ac3a-4bbc-a5cc-e2b39930b68f", "sighting--44486097-0c74-4744-93b7-cb6c07ffa5ef", "sighting--e5740439-9fa2-48e7-9d3a-87973619dba5", "sighting--87281848-f6fd-4f82-9f0d-0fba8458534d", "sighting--28a736de-ec31-4df8-8879-45bfef60bdba", "sighting--a777f97c-8d47-459f-b0c6-2037a94d5071", "sighting--5b6e3dbd-3875-41ca-8aa2-7de6c1adbbb1", "sighting--1c8d3047-a7b1-48c5-913d-bf23a2c7c5f1", "sighting--99dbf315-7552-43fb-b36c-16d986e44c4f", "sighting--a99c9dec-863b-4ffc-bfa8-31ba79e0290f", "sighting--57ea9e7a-cc33-4783-8b9e-0ea29de6a4d2", "sighting--f3b185d3-66e7-4cd1-bd71-a0b496646e92", "sighting--782721c8-042d-41ea-9f6b-ae3257a074bd", "sighting--3a9b3aab-04c6-4c33-a668-c574fe0c2369", "sighting--b07f4dd7-eb82-4d42-8f01-4b0030348a2d", "sighting--22534736-09b2-4420-b98a-bfd6f41cf2f6", "sighting--bc3eb2aa-3ce1-4a90-a5b9-08a9544ed8c7", "sighting--237a29cb-dd68-4954-80b9-e4249b64789b", "sighting--d5b5438c-4861-4820-a2ad-e5945518ee2c", "sighting--aed92f07-c3b8-4c85-9739-a37d44242ba4", "sighting--5acc9cf7-93bb-4971-95e3-085ac6f01b41", "sighting--eb50ce0e-a306-4692-b96e-9e80e34ee989", "sighting--389952c9-795a-454c-be4f-75eb49774ed1", "sighting--3519f6d3-ed28-43fc-8216-cefa33d11174", "sighting--c5d7f045-d1a3-4b46-bc04-341a9c475cdf", "sighting--65c14cd7-02bb-45d0-a685-c6765a1f6fd8", "sighting--e4a247d0-73cf-4d41-bbaa-92fb1a9f242f", "sighting--290c4e4d-2664-462f-b4ac-4d79e27648c7", "sighting--99f70b73-dc69-4222-831e-ac2cab414eea", "sighting--f9254379-273c-4ae2-8df0-2b86cbc10db1", "sighting--4ce939ad-f688-4faf-b2ff-f7629c584d44", "sighting--b3a37ceb-d891-4591-8267-529febb7c08c", "sighting--80335da4-b290-4186-8352-f042b8ff296a", "sighting--c799ad00-47f3-46e1-bb48-3968595cb1bc", "sighting--0b6a30d7-aab5-44ee-b65e-299c780f649e", "sighting--cd7e17d0-3dc3-4ffe-8d32-f7c9f5a577c1", "sighting--9c3451dc-ece0-4c89-9b42-fd4001c8e980", "sighting--d356b3ed-8957-4350-a36e-39dc9e261449", "sighting--7a0d934d-e200-4105-8e84-c74a6cc2e2a0", "sighting--8a1c7e36-421b-45cb-b321-4399249473ad", "sighting--817196e8-9112-44bd-b274-f34a800a71f2", "sighting--9e80b7cc-1c55-4ead-9ed8-40ce15d5d62c", "sighting--cf9a2087-1028-46d3-8b16-89b464d89cca", "sighting--e0b583ea-caa8-4995-a017-5ac5ac42557b", "sighting--068f296b-7264-4afc-94cf-848b492a2ecf", "sighting--66822631-2771-472f-b60d-c1bbcac0a991", "sighting--54e5517a-53ee-4d88-9018-394803f19697", "sighting--406ac6ff-6691-49f1-8b77-64a4c1a8d207", "sighting--11ab83de-e1b6-499a-9694-c18706e3bb71", "sighting--6def5fb5-95f6-4e98-9e31-cd94a6480b50", "sighting--6dbf0b04-0f42-47bb-a677-b67c1f2cad94", "sighting--10d9cbe7-fc99-41d3-ae6b-7f4aa59f2a34", "sighting--ea8b0619-1ed5-4030-af53-5b7911c5896b", "sighting--294a8357-20cd-4f0d-9ea9-ab5885ba186b", "sighting--44eef2d3-780f-421b-9635-f0d9c137a4e2", "sighting--41418a11-4e2c-495c-8ce5-f486679c9f7f", "sighting--162ba425-b8b2-4260-9af4-91ad7566a296", "sighting--1a05096e-bc22-482e-8c18-58dd71966e7f", "sighting--53eba0f6-4080-43db-8d53-da69dfde0238", "sighting--ae1a8da5-8caf-4f82-85fc-a015c935ba13", "sighting--c525d2de-5842-473a-93c5-865c391de211", "sighting--4431ac33-e874-462e-90e7-2d6829883777", "sighting--69cd7f95-092c-4cd0-90f8-bb3c6b3603a3", "sighting--168c79ce-3167-41d2-8669-eaf38d39eca7", "sighting--1af81745-a16d-4329-a62e-b118ad011bcc", "sighting--beb2525b-13b5-4d6a-9dc9-e33681b584f4", "sighting--274a9cca-a417-4e1e-b050-962a2507e06e", "sighting--92740401-1ddf-4dfe-a3dc-ff83b524a906", "sighting--1e1fe06c-c31c-4366-8dc1-2633d232b4c8", "sighting--6fa2423d-e721-439c-8e8b-e61550d441b7", "sighting--69a5a586-6efb-4492-a704-e64e35866c9a", "sighting--a17e750e-a729-4f7a-a353-724878d9559b", "sighting--58be94c4-b175-414f-8036-0e10dc043144", "sighting--c49bf647-2ba8-482c-b738-cf77208a6a07", "sighting--ad63bee2-ce5f-4116-9f4a-b3205299d0f2", "sighting--c8a8acc6-cd78-4b22-b757-210551bb758a", "sighting--4aa72f73-a39c-4bf4-a603-ad41420bced8", "sighting--be455702-c614-4a51-9ee3-a61a83c89bbf", "sighting--29a39577-0db8-4af4-b958-56d0d99cbbcb", "sighting--0e1724b2-2c79-4f7c-b651-2ca973fc823c", "sighting--5fd33524-8c85-4bcb-a1ab-5168e1ccc87e", "sighting--c6a53152-8183-409d-9c63-5554e9149432", "sighting--c00f84c5-ced6-4ad8-9b1a-1c3d56d4587e", "sighting--14a2251c-2f98-44bb-be31-d748393aa198", "sighting--f60413d1-7550-461c-ba03-3f9dcfda6e1d", "sighting--7adb5bdf-1efe-4af7-a04e-4cbf3ef92592", "sighting--f76019ee-f9e6-484c-a324-3b07e511b577", "sighting--9eeeda48-61fd-4163-a792-386d74883f90", "sighting--f0e5d107-f5f9-4910-ba32-1cf494ad5afd", "sighting--a32a2c1a-e6d6-4161-b43d-ea59ef0a8b42", "sighting--26cd2446-5883-4be7-bdb3-66cf7e2c4595", "sighting--becc2ecf-c9d0-4a15-a18b-8d1d64df8cf8", "sighting--bdc71152-22ac-433b-87a8-a43869a8852e", "sighting--3450d3ba-b311-474f-a0a8-429c12abb10f", "sighting--d93e27ea-8f31-4347-95ec-b4a5f7223c95", "sighting--094030c0-749d-4fe9-9584-d09e9b224441", "sighting--ae473a05-5aff-4ef7-abda-2b5a43187479", "sighting--80599894-9b88-46a0-bd3e-934d046ac9e6", "sighting--0a4ab868-f2ab-4c11-9be8-d8cc4dd55fe0", "sighting--7d1f62e4-fcb1-4103-a6d1-55ba7e9ad645", "sighting--966d2419-8c36-4ddd-90cd-031d7f1557b7", "sighting--1ce8d6ef-4c81-4d7f-80d3-e014041bc1e3", "sighting--6d8b8a3f-7f47-4cc4-ae60-2eda4c33adea", "sighting--50448368-03ad-4d69-87bc-bc776e3fc4ff", "sighting--cda5de08-2d5b-40a2-a867-70319ae3d1e1", "sighting--daef18e7-6079-4c33-8a11-7fd02b8b8078", "sighting--b6de3281-293b-46aa-ad6a-0eaa38b3a14f", "sighting--154ebb38-ddae-4d6f-8c79-f91c458c52af", "sighting--08903e65-9768-44ee-ae5b-fd7612c92ec5", "sighting--46cb362f-24bb-45f2-a94b-fff0ef6ffbe3", "sighting--c1183edb-5ae7-486c-93a3-f66c3e53eed5", "sighting--b57b342d-8fa5-4f27-baea-221e383c5adc", "sighting--4a09d40f-899f-4159-87f7-1303e774c0cf", "sighting--8f5ccf32-9f5c-42f2-b217-bfc5bd557e67", "sighting--7a7fdae2-e67f-406c-8090-be8d3429eb17", "sighting--b570d157-15e2-4153-8bf9-e5d65192c4dd", "sighting--4df91850-9a0b-434c-96b7-2ced88587667", "sighting--6ae28d04-6f67-47be-81d0-3e33e8fd0f84", "sighting--34978e87-5393-4b68-9520-4cd68649fc98", "sighting--c1b2f3e1-cf3d-44cb-9f0c-d395ba7f5355", "sighting--83f8ef33-ca98-460c-9b2b-11f5e6380f0f", "sighting--c3139c64-6af2-490b-a78f-8727b50e1870", "sighting--4f71b319-ab98-4486-be03-f59dcdf2f459", "sighting--a8cf8734-fb17-485c-8176-865c9a4c28b1", "sighting--16bfd316-4eb3-444d-81ed-e8d2ce5ab401", "sighting--711fc654-e3f3-46d3-9503-73517fde883c", "sighting--5c352586-31e4-4536-9d57-ca262604148b", "sighting--3ac5ab6e-b512-443b-9375-cf7a3f612b79", "sighting--c7f071c3-431f-4b17-af83-89fd68891d99", "sighting--c4c175d3-894d-409d-a8bd-ba4ed88a6096", "sighting--b16790d5-3595-4581-8d49-90195c594500", "sighting--772d6eae-ec0c-4376-bff2-3fcc4836dbd1", "sighting--bd932706-4e3c-4d57-925f-728614d31230", "sighting--032686a3-6f68-4301-bf34-5b4e738490b7", "sighting--04c6ac83-b328-41fc-8155-5edb9d384a41", "sighting--dc803393-c369-47ce-8157-492e0b2b65cb", "sighting--62efb43c-60a6-47a4-b125-275ed2cabacc", "sighting--e6289d07-9f74-4dd8-9ea3-ff76e7973cf6", "sighting--e676a88e-a83a-4a59-b84a-237cb69e02ee", "sighting--1785c99b-9cc6-45a8-88cc-baae9d2cb3d7", "sighting--731e6f15-4684-45cd-8e8e-021311091d9c", "sighting--1d99d061-f418-43f2-9755-bb65feb68fb7", "sighting--97b64b1a-0aab-469f-8daa-39f084536e55", "sighting--ea7148d1-683f-4f69-81b1-3144ba336d43", "sighting--6f42f3a5-4dfe-4eb2-977a-8af54d4fb886", "sighting--512db7fd-55e4-420f-9d2a-52f79656155d", "sighting--36ed85f7-f6d9-462e-909b-345941d09609", "sighting--781a8f10-d25e-427a-9b1e-221afc0cb341", "sighting--fe5b7c74-aad7-48d3-a9c9-f62761bda231", "sighting--84bb9b28-9e72-454f-b71c-9d7edbdeb0a0", "sighting--746cdbed-7063-4920-a309-bdfb0a104ed9", "sighting--d2127f52-66d8-4cbc-95e5-14e382bb8a67", "sighting--90d94ead-24f8-4d0b-9f53-1dc16f2f0872", "sighting--824ec1bc-fa99-48e7-8628-b473819bf20b", "sighting--f0e89b75-87db-4004-83e8-32b3bedb3e2a", "sighting--f4444513-65a2-4dcc-ac79-7ebf2576f1b2", "sighting--463426ad-163c-4298-b1d9-c9f24ecf0de8", "sighting--2d33f8b4-d025-4e1a-82bd-4c1fc08e73e7", "sighting--9120703b-e968-4564-9d0f-e9fd08d20e0a", "sighting--fe46e7f0-0d9e-4acc-bfeb-0c1e1ba84284", "sighting--cb05d07d-0f9e-4fcb-a6ed-158d0828fa90", "sighting--e22ad98e-4b23-4a38-bc70-05b74d3398c6", "sighting--5d79dd42-93c5-4d54-815b-397d0c0615d1", "sighting--92c64db4-7ade-4f81-85d3-2f7f063a5a01", "sighting--bc1fb145-6cb6-430a-8997-5261b5a1c185", "sighting--81a64a70-6883-494e-8dc5-fbcd37fa8948", "sighting--3374022e-9ffa-4f7e-9626-565d5f543afb", "sighting--0e4eca4f-f9f0-4f99-858c-7697b1176cf4", "sighting--3d63f14d-a6ba-45e6-af7b-7519b40eb7aa", "sighting--7cc54563-8460-4b44-9aee-c5bfb0ddc891", "sighting--75918ed5-a38e-49e2-9699-3b95fc394afe", "sighting--23842511-8cf1-4b3e-ad94-ecbd3bdc6634", "sighting--e233c0e5-307f-478c-bf51-a9043b8b7afb", "sighting--27b5fbea-6878-4ad6-8c95-d0cd96544bdd", "sighting--b37e4384-eef6-4234-af77-0693e1615d03", "sighting--907370c3-9e10-43d8-a80d-ce6b75fc81f4", "sighting--dc030724-ced2-43a1-92a8-6596a852a8a5", "sighting--2d7c769c-6ecf-46cf-935b-e234bbda49e9", "sighting--44c21783-0443-4fca-a5c3-7a82153c68c3", "sighting--17e9e277-c2f5-418b-bea2-870c84498dd2", "sighting--b5095fff-92b6-4670-854c-6c47c323a683", "sighting--a5b06878-06a4-4be5-99f9-75ed3699acf5", "sighting--2d78d0ce-0cfd-4570-a841-d19047b3c4fb", "sighting--e0541638-05c0-4e03-86c8-22048e81d8e3", "sighting--98e14765-80f9-4a25-b327-a9199cbab392", "sighting--27dabd88-35a1-4e91-9050-47ed67fd2151", "sighting--d9002191-82df-4311-8797-85b46f177b49", "sighting--57c09ae6-2fac-4966-bfe8-374b08ae16f5", "sighting--32bb5d48-0e0b-4ad6-9fab-4149a0f4ed5b", "sighting--901ef834-1391-4136-93d7-3f6c309c66d4", "sighting--d81bcff6-6d03-407e-89a9-d7ba4dc0f1f3", "sighting--9a080e55-42be-4786-98c7-efebece6cff8", "sighting--68ac9812-e3d7-4a30-9617-a99ab1794366", "sighting--5b693ec9-ad5a-4f2c-a14b-9a66d5fec5b0", "sighting--c6e7f06d-a31e-4112-92ea-03b229650afe", "sighting--dc312c77-929b-4284-9d00-12d12f57b218", "sighting--bf453cd7-cfee-437b-a465-faf20376aaa7", "sighting--9082a068-7c66-42c3-8cd4-66991da1edcc", "sighting--ac65c507-8b27-47ab-8278-750dc2da613e", "sighting--f42aab51-68a2-491f-9968-52c6dcc4643c", "sighting--cee4b71a-a412-44d2-a215-58a34451b0b2", "sighting--80e55307-1fef-4918-8250-81cbadb94311", "sighting--ee032aa3-6823-460e-ba46-0f13ddc7d131", "sighting--42ab9b97-7ea3-408f-a9f9-b85bf2fa0208", "sighting--055d5e8a-32af-47ce-b321-28567fc93000", "sighting--919e99b4-c360-496d-9298-3ae7d46c8526", "sighting--8721afba-5547-4346-baf9-d63f486b2f2b", "sighting--a759a0ad-5f9d-4c86-bfe1-1276555dbe2b", "sighting--bbbd90ad-8084-4eb2-8331-7eae636b4fcd", "sighting--29357794-af20-4ce7-9830-e0ff52bda57a", "sighting--eb9477c9-ca0c-4f0f-8332-12042af911e3", "sighting--7888a551-82c6-479d-ae9b-43f1e0ee3993", "sighting--683d4d0f-e5c7-4919-91ae-72069fdb43b5", "sighting--70ae91f2-46bb-4d02-a3a1-1ba673d75cf4", "sighting--6d28cb37-c100-41f5-8f4f-b0965cb1cedd", "sighting--cf952b47-7d61-4f1d-8874-41b0eb25b321", "sighting--6cc7706a-3f3b-4400-8fc6-87824777c4c9", "sighting--66d4929c-f0b7-4470-b80f-86ee78a881b1", "sighting--ecda3b61-8f2b-430c-88a2-acc42fe5d9bd", "sighting--4ca78f57-86ec-4738-95d3-c3f8fa92a3d7", "sighting--46c3eaec-ea7d-48d5-ab9c-557ab5d3dee8", "sighting--93e427e7-edd5-4434-8a74-f34cb4d2a938", "sighting--ef25b539-8923-474d-80f0-4f01ee042ac1", "sighting--2efe42a5-624b-45cd-b371-a425ebd8a929", "sighting--e7b7c2ed-9c93-45d2-952e-6f50829c9bff", "sighting--4545cf18-b1e2-4caf-8f07-8657da7e705b", "sighting--068cc5af-5d95-45c6-8819-ab5598e27226", "sighting--d39d852b-ab03-4d8a-99b4-15fdfa069097", "sighting--ec64c49d-890e-4e5b-87bc-e0e62d39ea86", "sighting--bed636b7-d92f-4998-b4ff-beed900b590e", "sighting--eadad2e0-d9ba-4d9d-bfc0-b69d3f3edaa6", "sighting--a13d62da-1099-4f6e-b245-8ae4da847eec", "sighting--9e426c23-e5ff-44a8-a2b3-0ad86c17275b", "sighting--adcf5908-aff8-497f-9a73-39f484e1bf1a", "sighting--39db4892-f062-40d4-9e7c-5e1afea8a2de", "sighting--175a6256-098e-42b3-8fe6-f150d9234171", "sighting--530aff81-1938-4ae7-b7f4-c7900ceaa6f5", "sighting--b939bdd0-3d2c-460d-8b02-c690fab995fe", "sighting--d0a67ca8-e432-48d4-8e5c-ad82affd2dee", "sighting--18ab59b3-960e-4378-ad0c-74f225fda102", "sighting--4cc0c437-d0d5-463f-9398-0a7bad757300", "sighting--bdd23d97-50ff-422e-b874-cc0e7cd6170c", "sighting--c9f30a9a-a8df-4134-83a4-4bd8ec9adb0b", "sighting--446fdab6-caee-46d3-8cdb-085c4d1315d8", "sighting--cb6ec430-ab13-4131-b228-abd74f3b53bc", "sighting--92656535-f016-46e7-a5f3-5dbadbd972a1", "sighting--ec14db01-d866-4e02-b68a-1f05619b2020", "sighting--93c9276d-b8bd-495f-9ca2-45ff417a6937", "sighting--6a1e4db0-4b54-4cf6-ac05-8a85a2e107d6", "sighting--9cc3e1de-5c89-4a70-bbfc-ff9e81a7e4f5", "sighting--679167e3-0af0-4d00-ac07-44efea43a61a", "sighting--009029ed-d78b-4592-bd3f-418d84b33448", "sighting--face0ca8-0510-4094-99b7-71963108c97f", "sighting--c7e82604-2851-4dca-9c54-b269d4f52be8", "sighting--95576a64-c951-4145-94b6-d1adb4570fba", "sighting--28191218-46a3-4c64-999a-cc6a37ed10c7", "sighting--66208510-238f-4844-82ce-1aa04ee40ffe", "sighting--621efb9e-68e4-46e0-ad9c-0365c00815c6", "sighting--738f686e-40a1-48a7-b1b3-e390921cf02b", "sighting--17ce0af7-b489-4d05-b590-de68b8b68ea1", "sighting--1a42a89c-fccb-4f94-9bfd-230e847f1db9", "sighting--9b0b7da3-a20a-4cb8-bc9c-04bc93f56c5a", "sighting--2ad26b6f-701f-4a1e-9e72-a84e29517cfd", "sighting--53f67103-7ae7-4e3a-8412-ca7e05c01791", "sighting--071b404b-c2de-485e-9ec6-f7f26d53904c", "sighting--166c7416-197f-4ae2-a971-d7db70a961f6", "sighting--5c587e96-b750-4780-8bee-48aef64e2416", "sighting--51c3344c-9309-41da-b830-b341a4131240", "sighting--50ebab6f-56da-4399-8b48-af7079f6f657", "sighting--39f35ae4-89c5-40ec-9c25-88352ff1dcfa", "sighting--4ec56772-c50e-43c7-92fb-0a86778b2526", "sighting--6229b043-8b9e-4bac-8463-67eed35f06a4", "sighting--f85792b4-2fad-49eb-9b84-3e8ae70bdb92", "sighting--c8ee4951-48e2-4c56-8b8c-f99849cbaac1", "sighting--24b264b2-ab47-44af-b968-0070c021d873", "sighting--9fba1e2c-ba98-4318-a7ea-258a5fc87e9c", "sighting--6b5d1db9-385f-4e26-b8e1-5c4913a4fa42", "sighting--7fc9d6f1-fe0b-43bf-9fb4-56f49634ecd9", "sighting--218e0473-e2c9-4e26-82c0-15545b9b0e89", "sighting--c1e8f002-767a-46b3-92cf-5f2b825f2aac", "sighting--3591c417-5fad-4cc2-88fe-445705a277b0", "sighting--58817c43-e6c7-41c9-9766-393ff0c55f75", "sighting--cb1c4aa3-726d-4c57-9d60-e488c8447fb6", "sighting--02cefaff-04f5-4019-b573-903dd564833d", "sighting--3b3919c8-e1a6-4371-a0f1-5281ccd3e958", "sighting--8d3e47f5-88eb-439d-bdde-b22ffe9e92a0", "sighting--a4a94642-3149-4beb-8849-791b84ac410e", "sighting--e3d956b0-8f61-4ef6-b99d-10c6164f4eee", "sighting--afed0014-77db-4fa0-8cd2-4784e3836d97", "sighting--0964d54d-cfe4-4a31-846b-e15aeba45aec", "sighting--3fb6326b-65a8-4830-a78a-283f80ce03e0", "sighting--63d1f2b5-6225-4d45-a0cd-31a175e3fca8", "sighting--96e27810-5648-4482-a026-58f2e26a25e9", "sighting--d085bacd-033f-47cc-95f6-22dd4e41d115", "sighting--7644f66e-3d74-42aa-9590-7b7489441381", "sighting--2489bc2c-1e1f-484f-b63b-1a6276ea026e", "sighting--fffa5ee3-78f2-4530-8074-1200d799e21c", "sighting--16709f66-ec46-401c-b09f-fb1d9ffabfb6", "sighting--906a5b56-caa8-41bc-a446-5d510c2a7965", "sighting--4f8f1832-fea3-42cf-b437-7bd15d70bb19", "sighting--ce72f713-e0ef-4158-a837-ad4197cf66cf", "sighting--9b183894-5d82-4b81-8cf1-701bca28d9af", "sighting--50b66168-e76b-4202-a992-fcc20d00f286", "sighting--25f77028-bd74-4046-a652-4d6b18a01896", "sighting--7b316c8d-cc45-44ec-ae7a-50ecb1004e07", "sighting--97243cfa-0b3e-4be2-b416-a527ef6464c6", "sighting--068a7c50-88dc-482e-bc31-41e889b3a03e", "sighting--82590283-e54c-4599-877b-e069b211e5fc", "sighting--f21e0e86-d421-445c-a75e-51853165247e", "sighting--e45ef190-cc7f-49e9-ad56-254b32d258f0", "sighting--571af8de-cf2b-465a-9a18-e65250d366b3", "sighting--a89a916b-d48b-4f56-9a6c-2578246ab018", "sighting--95c74c5a-b798-45f5-902a-5888eba12506", "sighting--9d56692b-d08f-4185-8c02-2d9c930825bd", "sighting--fd43edeb-20f8-47ff-b860-5b07eb7d1af0", "sighting--a0e93d8d-12b5-4935-a619-180e6fe0487a", "sighting--a6a3a76c-9f2e-4715-a07f-fc8ef8dd9a66", "sighting--8cddafd9-9d18-4482-8321-2b99923cea2a", "sighting--2118255d-3f68-4c07-9d24-610d9899fa0b", "sighting--cd17ec23-3eb9-45bc-bf7f-6fbc8c6e1d9a", "sighting--896ce49a-e437-48d2-b2b0-4ef26b0e4f7d", "sighting--9ca86881-d0d6-4584-aba0-3fc26517b0ee", "sighting--02412292-93ab-45b5-a9c7-a86f0c8c0f52", "sighting--a5da308f-eee1-4212-89ba-1a383a15dc95", "sighting--0c023496-0a04-4170-9441-6507b4eb7ebd", "sighting--9728956d-2111-49a3-a63c-79485d3f1302", "sighting--a8869e19-bf75-4b81-b1c2-72bd03b6f915", "sighting--730c79cd-4179-49b9-b2f5-180be2535162", "sighting--cf03c869-1f3d-4325-9c82-99d94baa9c8e", "sighting--043b3869-5cfb-437c-9f12-3c720bf9cbf2", "sighting--75ed17c8-4dea-49f8-bc43-d73a3050ae1f", "sighting--9706d0c9-426d-48c1-a7e6-a66afc58f380", "sighting--4ce87259-898e-4a46-8433-944b680ee92a", "sighting--0783d064-bb0f-46c1-8074-3d45e0ecd29d", "sighting--1e96316a-a3e6-4f60-9111-adce7f4220a2", "sighting--7dfcee73-4302-4088-989a-cf077ac7356f", "sighting--7602ff81-4fe4-4af1-8c77-1a24c71f87f8", "sighting--ced5d753-a565-47fe-970c-df68aec070ad", "sighting--39ddd3e7-ddf1-4948-8a60-f49abfa5af39", "sighting--9992b9f1-9863-48a6-862e-44ce70647411", "sighting--d225a68e-6e2c-43fc-96a7-20a533ef3caf", "sighting--b979e955-bcac-4d64-b1c7-c84a6fe8ce6e", "sighting--3fda482f-3d58-409e-9a00-9152a4f2704a", "sighting--33575149-fda0-45ba-8f5c-0779ac9b14c1", "sighting--bcee8288-8969-42a3-987a-d5f90b8f13e0", "sighting--d17335ce-16fe-46eb-b050-efcabd71a095", "sighting--1b238e0a-95b4-4f7e-abb3-f1e48362a6e2", "sighting--4645b756-5576-455f-bbe8-e03873c630ac", "sighting--6436f98e-d65c-492f-88fd-13f244087336", "sighting--f3c19677-0770-447d-92f8-0918d9fcf85c", "sighting--b5c3effd-9a48-4c95-b0c6-242a7e3cbf38", "sighting--6bc380f0-9372-4baf-b8a5-f40513783523", "sighting--e1348cad-f69b-4bda-9881-b21d59b2d1ca", "sighting--e864a484-8ce2-48e6-a62d-cde6854fd8f8", "sighting--c820bc2c-167d-461c-9906-e1308f88e6cb", "sighting--4040d89f-3368-4981-99c5-8677c0111641", "sighting--1c02116f-fd06-47e2-8414-8b6aab0a82ab", "sighting--59fa7444-5177-4bc8-9f13-04c451820f48", "sighting--14c054af-e7e3-48f6-9c5c-99489b21a212", "sighting--bee5ccc1-75ac-4cb8-95be-3d029e3f5677", "sighting--bd2e7b15-3bb2-43b7-bbb1-38b73b14401e", "sighting--d5b221b8-2040-41f6-a9bf-b6c679bc49e3", "sighting--e277397e-9f24-4442-a2ec-a594552b33e0", "sighting--96d78b86-6eb5-47dd-800c-7ab8e4c007be", "sighting--fb82f0d0-5381-41c3-9942-36bce8ce5568", "sighting--c687b63d-09c6-4449-bfb1-dff021137388", "sighting--f083ed17-e41d-4b50-a1b8-7ce5c2a390df", "sighting--1bab97c6-5092-4d23-9685-4e0d697d5d13", "sighting--a4003a91-91c4-483e-92ce-641847883d5e", "sighting--0ba00b0a-f694-4f69-b7c5-3b51331a9ca6", "sighting--2ad16dd8-8855-4a7f-bfdf-dfe88e7bf7e1", "sighting--65db8df7-8e7b-4c6a-95e5-724d8cb5adb7", "sighting--2c6bcb80-a76f-4ab7-bd6a-2527c0053842", "sighting--96ac548b-f0d5-4c03-95e5-2f0f33ee7143", "sighting--d3faebbb-1889-4c9c-936f-a1339107925b", "sighting--9c410105-9064-49ea-b3d9-f83b100979c9", "sighting--f49ad8c2-5dd0-47dc-affc-c5e3f532285f", "sighting--88412286-be72-41d8-8641-762ad1d69da5", "sighting--30c82c9a-4433-45a0-9484-cb9f684f1eb0", "sighting--512bc40f-b5cd-4186-8985-060e210a3571", "sighting--6fddd925-ae3e-42de-911c-b2dbe60f8186", "sighting--38134036-6b6e-48da-8d1e-d849598885ab", "sighting--e0e0d01a-43c8-4a58-97f4-020477df8f46", "sighting--3d31efec-c0d3-4504-8d51-a1a045cf05e5", "sighting--e7ecd18c-292d-4036-9847-d98e55b0c652", "sighting--45ca14b8-481c-4d4c-b322-d9fdba7ea8fa", "sighting--0b90c476-7f4c-4c77-92ce-3a48aed35ae5", "sighting--f08bc536-3fdc-4ce6-9655-13768248bdf3", "sighting--f4dd53d2-8591-4550-9d4b-0e1f02ddd529", "sighting--d7fbdbd5-172f-496f-ac3d-e9abd9034dd3", "sighting--1ae7292f-983f-4ce0-ab2c-6640ace4e94a", "sighting--ecfa78dc-5e31-43e4-bcfd-bfb973512aa5", "sighting--9dbbd7ba-6b6f-4414-b83d-e64699e2e02f", "sighting--d1ea34b0-d763-408d-bef2-7ee0e190ba60", "sighting--96faa943-22fe-4a8a-a4f6-e4faa80b0976", "sighting--82de1507-7287-4f70-8842-4bab9ebbc684", "sighting--1d5862ce-eee2-42c0-baf2-cb628bb7eb9d", "sighting--10941391-7efb-4c44-8571-8fffd6a0e0c2", "sighting--ff0fa3a9-a194-45d2-9754-be68e53618f0", "sighting--e1c0aeec-afef-4c08-b975-53ce2187d7b6", "sighting--3e94b592-fe1e-460d-9f69-19914bb57ea1", "sighting--36c02096-a081-4ab3-8c16-3ff609f640da", "sighting--d46e475c-b268-44a6-86c1-75830b33eb76", "sighting--85b88f81-1440-407c-9990-cd14e1f9a017", "sighting--026d5586-d9e6-46eb-94c0-e5fd63ea5227", "sighting--5b726d3b-7a46-4923-8bc2-32a6cf7a1f4e", "sighting--040896b4-f16c-4053-a075-f4773d40a368", "sighting--92a9c14e-c5b6-4a36-9d9c-4a51f4a8093f", "sighting--7c3c3e5c-61da-40b6-9156-8d1b823a3a18", "sighting--ed1f2c37-634d-4413-871c-a2c391741701", "sighting--f11d58d1-6208-4832-9b4f-8f004e625ea9", "sighting--545c50aa-7b09-4b13-8d3a-8a85bc12db22", "sighting--98dec2b0-0c26-4e21-a851-a3059b82015a", "sighting--2d7a1c1f-4d7c-4673-9055-835a8f74a720", "sighting--e892b1c0-0b54-4692-b6f5-d62ff62e1cbe", "sighting--81927e7e-39be-455e-8f59-a79896732d54", "sighting--0e53515f-646f-489f-8635-e912f7d7ea9c", "sighting--d0ea4133-c460-4bcf-8e50-1d08f29f05ac", "sighting--26fa6895-8e5f-4bbd-b535-faa71f3df644", "sighting--1dc59434-e17b-4431-886a-167fa8107fa2", "sighting--eb3e28c3-3efb-4a46-a81d-73e350e2f5e0", "sighting--273bb799-1c52-4ca4-aa72-4e7a0dc4a226", "sighting--67bf00cf-69de-4155-bdae-3bd046f755fe", "sighting--75f1d8af-bb61-4dca-9f71-a5cb2a80f047", "sighting--7ecc1958-bacb-4a4a-ab52-e5ef6c888aa2", "sighting--9e3be0e7-3f27-43ad-b882-0ddf2014b213", "sighting--90b33a3c-f371-48fc-9f31-56a552c6e5cb", "sighting--32783b1d-dde4-4450-8ca5-e60f78ef3547", "sighting--121c9e2e-118a-43cc-a623-2e9e17a7283a", "sighting--431cfdfe-5825-49e4-ad77-579111d76880", "sighting--2538e681-12a8-4aa4-8fea-45df3195c624", "sighting--d719710e-1ae8-46b9-aae5-74dacc20f0c6", "sighting--2900483b-7717-4f39-8f05-8af44a755c1c", "sighting--e2d6ec37-248e-4ccc-bb74-9eb5d90a38f5", "sighting--3af9fdae-e263-46c4-94c3-d85830bf684a", "sighting--1c2d1577-edf8-47d5-a7e0-aa06311774d2", "sighting--5d67b35b-86d0-4ffb-89e7-e73d9f30beb5", "sighting--c4bdc2a2-5cd3-46a1-b4b6-1e8527701cb4", "sighting--f7862877-c5fe-4d39-8ab3-265bf5dba48d", "sighting--25c7dcef-03bd-427a-b469-329744ca5de0", "sighting--0fbc23ac-e408-4736-816e-fa74e10b48f5", "sighting--27210213-d333-4bbf-a19d-04467b865d89", "sighting--3d0355d8-e311-45c4-a7fc-9b4cec0f3f27", "sighting--1f98f80c-8781-4b5f-a89c-3e0cbfe6377f", "sighting--0d5e5fbf-d54b-4aa3-9d06-a1abf440ad94", "sighting--bf8f3e90-0f18-43b0-b69a-161496454168", "sighting--72cfeddd-33bc-4420-9daf-c20d226444e6", "sighting--e850e011-c8ac-44d8-874f-fc5054f25423", "sighting--49e35f68-a3c2-45da-bb19-91818324a0aa", "sighting--e1ec483a-215e-480e-8cc2-912a1c9c4922", "sighting--a9084b8f-e90c-495e-9178-179e0a225ae4", "sighting--4d09b2f0-0b08-4bca-9a62-ace5184044e9", "sighting--19e83923-b19f-4b00-91cf-2278053c24ae", "sighting--20fef868-2607-407c-afcd-fedf15d99563", "sighting--d5e836e5-85c2-4381-8585-34b0ddd8b057", "sighting--679660e5-870b-42ad-8272-6d20920bfa0d", "sighting--e1e41a95-4c78-43fb-9652-86f32dc98db7", "sighting--368355b1-294e-44fb-94e9-297371392bf8", "sighting--7c026497-6fae-4b11-ac2e-a4ed773f5eca", "sighting--a94d10eb-ba54-4208-b0e2-8eb416ca0d9f", "sighting--25f8b089-7c2b-4deb-8f7d-1e393263b158", "sighting--95beec99-e567-4e56-b4b0-e5c1bb0c661a", "sighting--2a44a31f-9460-4623-8fcd-2af5355e3e46", "sighting--f387666a-174a-4da8-a51c-e94cfbf3ce8a", "sighting--0b2b4f56-bdd3-465b-951c-f3f4574eb5a2", "sighting--97df1884-5523-44db-a0c0-c10099bf6509", "sighting--d3585acd-ee22-4c41-a036-7e3d905da6d4", "sighting--8e992491-6726-4266-bd56-e614e84546b1", "sighting--260385c0-578b-4405-bb75-8360bafb9e8d", "sighting--210cc4e5-d924-40a9-a684-6e7cc909bfce", "sighting--d5baec16-7411-463a-95c4-3e6936407506", "sighting--8ad25b1d-3b7c-4af7-ad5f-9bdcef8033b6", "sighting--58aa72af-14f8-404a-afdc-34970d97f56d", "sighting--e69213a8-4ed4-490e-b88a-be98e74f825e", "sighting--26f859b1-72bf-46a9-8abc-35f65643ae04", "sighting--00091db5-8fa9-47e4-82c5-891af56632bf", "sighting--aa581241-5b39-491d-9c93-89204da65f38", "sighting--4829395c-efd4-42f3-96b9-6587dff437a9", "sighting--f672a839-532c-4dbd-a33b-7823f9fd58b7", "sighting--a6c9077d-c2f2-45c3-89f4-805cbdead8ea", "sighting--6f7ce1a0-d4dc-4867-99f9-8964a353095b", "sighting--f7354545-6222-43a0-80bc-01cf585444ba", "sighting--1684b1fa-23ce-41b8-b3d5-019cd15a1483", "sighting--60ba452d-650a-4488-aa64-8557b9619eee", "sighting--48702193-a4d4-46d9-b621-b827197ea202", "sighting--9fda6139-3c8e-405b-b708-994b7b5947b6", "sighting--646a9a46-fb7b-4cea-8a53-d30b196137e9", "sighting--4abf9109-c663-47e5-8e78-90e5a876e851", "sighting--ee8cc95b-1f1e-46f7-9b11-d0b273ab61ca", "sighting--48f2f6f6-62a7-4c93-98b8-084c2eab3f78", "sighting--ad318987-5fb1-4e68-8806-fb47b4771727", "sighting--ba0c9d07-ac6f-4bba-b44f-49e147f5b312", "sighting--a4a51fcc-5003-4cb1-ad4a-33b3420f2c1e", "sighting--fd17b91d-a648-47e1-8ed8-cee38814b603", "sighting--05ac28c8-ffb3-42aa-895e-1bfd5ca7efaa", "sighting--6a6dd7a8-37fc-4330-85d6-6b4162ac3b68", "sighting--3548933b-c5fe-4869-9ff7-4bd54c75b67b", "sighting--14122d11-6e7b-49ec-b02d-17a8f1e3d037", "sighting--99786ef6-bb5c-4764-84b6-49047e689bda", "sighting--3011c179-9846-4cba-94f3-5fdb9914e275", "sighting--1d58e4fe-a694-4732-a0ea-67374d88571a", "sighting--99fbb796-dc43-46b4-94ee-a637a7fab5d2", "sighting--aa84545a-924b-4b84-a229-ca1519d0775c", "sighting--cc07541c-150a-4fbf-a4ab-9b9db13dfdae", "sighting--7dc8934a-1051-4be1-8240-c7fc384525a2", "sighting--2098b9aa-3c3e-4ab4-91cc-968152548b09", "sighting--630c8278-6bf1-4d77-8fdf-43f5c8139aa4", "sighting--38ed4897-e406-4e2a-8207-7a15d1d3a1f7", "sighting--67d4baab-dd08-4dc1-aa27-77c328c55dc7", "sighting--8daab3cc-3ec1-432f-9dcc-86168dd15f6f", "sighting--9e905b96-95fd-4cf7-a303-391c28aee3a7", "sighting--19fc1c65-a4e1-4f04-9f81-7d462646ca41", "sighting--b5cc48ac-fccd-47ae-b33c-c911f52ae3ec", "sighting--e4eca57b-2f1d-4f46-b4ff-e26531af9b8c", "sighting--e6504029-93b8-45e4-bbf2-e1cd0842c516", "sighting--2f6f8be5-ed66-4bf0-8420-9f29a0cfd381", "sighting--1f9aa5fe-d7a6-4098-917c-bcc1702ccf07", "sighting--016e0ea8-0649-4d40-8329-3c88e8deadb4", "sighting--6b5c8420-af22-4ec5-bd89-6ac84ed5a528", "sighting--0ae65207-0d35-43eb-9af4-2d95f77023cc", "sighting--f8e0c7d9-3f35-432b-9803-b578532063c0", "sighting--bec6cc26-e90a-4120-95c1-3b86bbcd1c41", "sighting--9cb47a3b-f657-43df-85dd-03a4f1b9eee3", "sighting--28e191fe-0411-430e-9535-b72ebfd200da", "sighting--33012027-261b-4b4d-ac67-6157a20d52b8", "sighting--447104ad-9f6f-433b-a7a9-4aee92e4b3be", "sighting--cfb17703-d656-4cc5-ab93-3ba44e5dbeec", "sighting--329a3023-384a-4bf1-b5bf-28bdc52977ad", "sighting--f6953980-1d27-42a8-820d-a8fe6d1674c1", "sighting--1f85d364-48c6-413d-b477-4cfd0c7e14fb", "sighting--9d996efd-26e5-41d3-9670-755e431f3863", "sighting--8581a946-cd68-4e2a-9af3-134a3de97e1d", "sighting--db68d97c-370c-465f-8e5e-d514643628df", "sighting--85717007-3024-42b4-8e1a-b6b4ada26b85", "sighting--6f0a4751-dc1b-44e1-8539-b913a87109c7", "sighting--d06e2b3a-5b5f-4173-a63b-53a61cd37193", "sighting--46047e10-d639-4882-9557-cf039ef2f93c", "sighting--5d3e5671-17d6-4200-b8f9-ad5138901aee", "sighting--971680ff-c1e2-4a10-85bb-1b250dc1df2c", "sighting--d9f70262-2224-4957-825e-ca22fe603d35", "sighting--50590426-8de4-4373-a960-ef6522147807", "sighting--0cefa6d4-6e4f-47fe-97cb-27442cdb1d8d", "sighting--bd023be6-abe8-4d0a-b18e-a823328d83f2", "sighting--15eb0cab-2619-4933-85cb-404909cc6046", "sighting--ac700bc5-caf2-408a-b5f0-5d3be0f018ed", "sighting--83106717-941c-43e3-8671-923c29750ee4", "sighting--e32cff76-a414-4573-ba28-f94253a09088", "sighting--65cdf30f-873a-410c-a0ec-1620e460cd33", "sighting--9097177d-4aed-4aad-97cb-acafef9cc19d", "sighting--af54bf96-a0b5-443c-a450-96ba5da666e5", "sighting--2d1ec1da-1e0c-4701-8dec-d0b95c4dca3c", "sighting--2a4d96f6-b712-4abd-9ed0-311259525978", "sighting--0e026e81-87e1-49f6-9872-cdc8854b435b", "sighting--1cfc2ab7-6d22-4fe8-a5d9-8aa5599fe7a0", "sighting--f22c3868-32b8-45a7-b4f6-ce542a11792f", "sighting--a950af69-dd23-4bbc-a30e-804ecc11ebc9", "sighting--4f30a8fc-dc6a-4432-ae33-b1a71e831c1d", "sighting--95f63128-900d-4a34-b9f9-79c9acde53e9", "sighting--296822c7-ccf2-4578-9337-3a5f0a4adec8", "sighting--0f782358-2461-4da9-841a-58f5a60ad65e", "sighting--d5f28f3a-453a-44c8-895f-3392448e256b", "sighting--298f7f8a-e3f9-4559-a2c6-34920fa5e077", "sighting--95255fb5-04dd-4a6a-af64-aecff256f2ab", "sighting--f721f2cd-1b80-49d5-a790-57670e4f779e", "sighting--6661dfa7-3c5f-4a9c-a6aa-f368780c3127", "sighting--c4d21e8c-3d2d-4a4c-aa60-7b2f069c03c1", "sighting--6e8694e5-9837-4259-838a-5fcb4aa7b7aa", "sighting--ad4a19a8-1238-4a49-b877-ce7dc2634328", "sighting--d69364b7-0460-44cb-b081-60be9b4fe33a", "sighting--d5d379cd-57b3-4587-b624-1ac3492b8333", "sighting--59c16e54-10bd-42af-9dc8-561f533fed9d", "sighting--cb2dc364-109d-4690-b4eb-423db6668b87", "sighting--014a35f7-6fc3-4a7f-b82f-0c1b88ca0017", "sighting--ef6d0864-ec8a-4aa8-9fb9-754f1a94ecd8", "sighting--36aba617-67aa-4b46-8ca2-63687fcbeebf", "sighting--74511830-4283-483b-b9c9-dcf7ff7bfa30", "sighting--fa868b57-f927-4acd-9d5f-4d29096245f0", "sighting--b5a384ac-d99f-4156-8aa7-13fe9280253a", "sighting--903b9d07-d012-42e1-96cb-00ca13ba7ad4", "sighting--1e70188a-d32f-4c6b-948a-d7ba498fac89", "sighting--aa584d40-1308-4cab-9165-d1d171658874", "sighting--23384187-4b9c-41a4-9280-a931a6fb6b6f", "sighting--7b974001-98fb-42a5-a11b-84799394a0db", "sighting--18cbca87-2de6-4d85-b4a1-40e7a9a1c63e", "sighting--2c0858a1-ff5d-477d-98ff-a23f8dc1ef37", "sighting--78bc2951-1f7c-4e8c-ac4d-9a37366c6e0b", "sighting--81715558-bfeb-4c45-810c-2a7c5792a8ad", "sighting--4692929b-2d79-42b6-9f81-0b556b3f7fc7", "sighting--844bd9c7-1029-454e-bb3c-6e09e3df8b11", "sighting--f05cd43e-05bd-43ef-9462-243c22ac37a4", "sighting--8112cebe-e84a-41d6-b4c0-24f818676912", "sighting--31a7f650-6eeb-4ae6-8117-9e2a5b37aa4e", "sighting--870564fc-afdd-4bc2-be65-f77b9a5c0df4", "sighting--895cc43a-2a79-449d-b79d-7acf5d872910", "sighting--d0432f12-e9c6-41db-986a-16b5d8821af0", "sighting--effdc950-2408-480d-99ef-ae63cbffa69d", "sighting--192bceb6-e1e2-4f68-addd-379d7c8f7da8", "sighting--912eadad-693d-4c67-897c-dff1aa502a4b", "sighting--311b23fb-8fa8-4851-a883-40067a0d4e08", "sighting--71c1841c-c20c-44cd-a67a-fe766a1e6f62", "sighting--6ba2aa53-c51b-4ddc-aab4-03971cdb9bf6", "sighting--b858d62d-8766-4a3b-9f36-cdc8f26b0171", "sighting--c3f3d24a-8c00-4696-ae2d-71e31f1d3dbf", "sighting--b2b99135-202f-4c9f-8ff0-f36b5204ecb1", "sighting--e74d44bf-c049-4262-8a60-20c552e5a686", "sighting--43e07575-946a-401d-bbcb-58bc82bf1e8d", "sighting--a0d335aa-3f24-47db-8780-5a5081360661", "sighting--58897d90-4cc2-4862-8fb8-0cac45c9f2ab", "sighting--933d7db9-ed07-4526-936f-982da1e81ad8", "sighting--529ba3ea-a1e1-4098-9d9b-a344e99756df", "sighting--3305daac-bd9b-4914-bf63-9e33bbba549d", "sighting--4adf8ba0-f3df-4083-b3f6-3d13cc51a71f", "sighting--686a3082-e176-438f-91f2-8530e7cbbbd4", "sighting--4fd38434-d989-4468-a9d1-eab27807d244", "sighting--ebe3097f-c588-411e-b9ed-9ffcb5a9388e", "sighting--efdc3d99-fe4a-4a73-b24c-db4456d24519", "sighting--eb5e453f-b662-488f-82c3-03ab103ee51b", "sighting--ef3e5b4f-741f-4fc1-88c2-692ec90ed086", "sighting--463315bd-5e44-4365-872a-729b03fc6834", "sighting--05679c67-47d8-4312-8680-681cca9bbd60", "sighting--fd47d303-9e61-489e-a0c4-54d614a6e6fd", "sighting--f88048be-1e8e-4b62-9a0e-f574ecab13e2", "sighting--73b9222c-095d-44bd-9c59-95f00236c333", "sighting--304a7a4b-5e75-42b1-b584-4c6a591a771b", "sighting--12667368-f545-4f15-89d7-a33573cb1cd1", "sighting--60db7b3c-7873-43f8-aaf2-6e4810c9f563", "sighting--7682794a-3376-42e7-b3e9-a55c0957380a", "sighting--941c87a3-f252-4337-9890-170b1535f2b6", "sighting--ea544771-76c8-436b-936c-3e79ee6b6ea1", "sighting--8335079d-c21e-4be4-a6d6-66e655db24a3", "sighting--5b9120a4-197f-49b6-a3e3-8e51993715a5", "sighting--31fa0dbf-0143-494c-b267-1f88ff70ac04", "sighting--263e12a8-23f1-44dd-ad84-6578760760ba", "sighting--7eff7969-81a5-4ed7-9411-187b42715708", "sighting--a810d64f-47c3-4b94-bfbb-cf86ced924ad", "sighting--3a944f55-f44d-4526-a3bd-bfff4fb7a5f2", "sighting--83b9bf50-adba-4788-a0ce-acf4d2b0eacb", "sighting--9d6c5128-9363-4820-8383-b0eae31aa12b", "sighting--859e0565-ff2e-4d2a-81c3-1b05be33fa2b", "sighting--4a165bd7-0303-4904-a2ac-371fdae726f9", "sighting--2a0af210-46bc-44b3-a47e-6696c22c6de9", "sighting--8cc57d17-39a3-4079-8ff5-b1ddcd51f17a", "sighting--e56828eb-18f5-4461-9796-c77c930f9aef", "sighting--daf7392d-ec6a-4596-8da5-6dccbaf8852a", "sighting--48977ea0-cdce-47c5-9d61-ca2f607b2dfb", "sighting--2f5be9e7-2917-481c-a374-6d7934bfe0ee", "sighting--8e242952-75f2-4171-8c8d-5590b48abbed", "sighting--9ac6a844-0815-40a7-b464-ab4a0b05478c", "sighting--8741ba8b-a9a9-4c02-97d2-49b25445b330", "sighting--482c6da2-01ff-4a21-a266-6727a3293024", "sighting--1c83d180-cc52-4194-a396-8b114e051ab0", "sighting--beee7cae-0bb4-4572-98da-28f503d7bda5", "sighting--12e97b0e-dc0a-4282-8419-a0a358b12a26", "sighting--f88b0c29-5c05-40ee-b2f6-272ce3305e2b", "sighting--c62f4924-8024-42fc-9e6a-b8254f5a414a", "sighting--19cf7074-b621-46d7-b2e0-997b3db18f53", "sighting--c2468911-6534-4c88-ae3b-f3056b524359", "sighting--64231830-ca00-4aa3-b948-04b9cb63892c", "sighting--1e5f7247-d8a6-49ba-9731-807aa97d918c", "sighting--bce24180-45ba-4d2e-8047-02771f2e938a", "sighting--d4ea4e3f-a0cb-4f90-b1e4-c93565e82473", "sighting--ae344a4c-89cc-4032-8aae-02cf7bc4bdc8", "sighting--f88a9ee8-e72b-4c40-8115-bd6df643560c", "sighting--b48643a5-2309-4233-a5a2-d8d57a00c0e9", "sighting--42ebe4f0-4d49-41b1-9890-8e52f1863fd1", "sighting--e5a31c97-0950-4c02-b558-2f70f586d62d", "sighting--9e7418f8-f9f7-4b63-b94b-4315775390a1", "sighting--1abe6ffb-dbc5-4406-9f96-f0d798c3b08e", "sighting--d9518a90-7b96-4f53-b440-cb42841ec385", "sighting--fd1fd4e4-c239-4f7b-a04b-c8d6086c411c", "sighting--0cc06a07-1b37-449f-b23b-59b437a5a85b", "sighting--3207372f-5b73-4c90-80ea-3501c5eaeb7d", "sighting--857bb680-ee29-4ab8-8d42-25a73fd0d57e", "sighting--18ce95a5-43c1-4453-83a0-1bd8fb258e37", "sighting--ee89f169-524f-4020-9424-8e7d90c080ed", "sighting--7ec61ffe-5341-464f-9a1e-8213dadad223", "sighting--b8e85ca0-6214-4423-9c7e-0f9f5e44a557", "sighting--39dc34ee-d68c-4274-88b1-df41679e070d", "sighting--62b7bd87-048e-49fb-8128-d779372f3890", "sighting--38f9eaf5-eee5-43d7-bab5-8035f52c8f92", "sighting--e0059a43-9a69-4cb5-ba40-e269f189729a", "sighting--70e3056a-7f90-4ab7-ba7c-89b8956d9a8f", "sighting--b08df532-12ff-43e2-83a5-226dabf3017b", "sighting--980ea365-5d59-417b-9600-8197fc04c487", "sighting--e082d604-afe1-4481-8ac7-5ffecf28bf96", "sighting--12ac2cdb-f411-4006-a434-9707473163e8", "sighting--2b29f3c5-a1ac-486b-a371-88939852ece1", "sighting--3aceda1b-4731-4130-8a28-a3cd6c82204f", "sighting--f1beb57d-b60f-43b6-84f8-c0dcc50faf95", "sighting--848f0014-d5ad-4b8b-85c0-dd4c79bd0856", "sighting--689a4b4e-8332-4648-8ce8-d9407a4b5a48", "sighting--2cbb1fb5-67e2-45e6-955c-1938e34509d0", "sighting--993a2691-a0dd-4442-abee-d507b4d11d06", "sighting--6d4a83bc-9010-4b29-8816-91d7b87b663b", "sighting--418d5893-be20-4f55-a105-031808d1637a", "sighting--bd3d6454-073f-4e6b-af4c-09c55387d343", "sighting--0deb516c-9b81-44ae-8f01-c1e09bb1e717", "sighting--599b16e5-c6ef-4f25-9029-77e207c5ee1e", "sighting--7e551bfc-0bc6-4fb6-9af0-3927bff6426c", "sighting--47426651-fbcf-4f05-9fc5-496dd508bf53", "sighting--7f6f8208-3020-4400-97e4-0e0e2761ae8a", "sighting--da4fe4eb-7fa1-42e8-9a99-12f8b48cc285", "sighting--d4076ea4-37e5-4739-bc50-560c4fc9de13", "sighting--c4596d9c-5604-478e-9f3c-5612dd7cbd27", "sighting--a9449c8e-9793-4f6a-9350-ba8295b90c5d", "sighting--87239856-55d1-4802-b94e-31221f28ed71", "sighting--c1addc84-5c2b-4249-b270-4d9bd24cbbc5", "sighting--7e7a69b2-7644-4ca0-a4f8-c97167ac287c", "sighting--7e7fe88d-98c2-48be-bb92-7dcd380c9d60", "sighting--763ba229-3b0d-4e46-9d07-349e6163a7fb", "sighting--516a5df6-fdad-4ebe-bbe5-7c2566e68366", "sighting--3542d3d8-e972-4255-8e9b-8ad19a38937e", "sighting--61c91f70-1cd4-4018-94df-441065c56d61", "sighting--19f8cb35-bd95-4617-90ca-c7db37dd8995", "sighting--65a41150-4efa-4c12-bbb8-aac9f0f60d86", "sighting--73675f24-fb8b-4fa8-b2e8-a0f8f02573ee", "sighting--5a8718bf-4193-4495-840b-de353bb8b3a1", "sighting--6d9b9b3a-667f-454a-9819-714efe44e19e", "sighting--f2c39159-02d4-4956-8e88-c93ebd912edd", "sighting--9e79ca2e-2215-4e8d-85af-f9bbcf06da18", "sighting--c5307730-13ac-4f78-b1f2-b700c5346413", "sighting--98cb983b-e821-4a31-9cd0-f5448758a4d9", "sighting--366947a1-bb78-4329-9c6c-f67e5f4c8a32", "sighting--835ffbe7-59d3-41e3-b6c8-9a3772052b0d", "sighting--507d4605-7d24-421c-a98f-62adb3f72efb", "sighting--6992b600-0dfa-47fd-b16b-f55c03ff2af5", "sighting--a1522a22-14bd-47a9-90ba-166ad11b1d26", "sighting--e7ab0807-6b34-40be-93fd-4b2e8eb954f2", "sighting--dd1efa66-a225-4744-9e62-34895b79530a", "sighting--3d25d220-712c-4aa7-9a89-a745d0b1d2fa", "sighting--d0ae3a6a-2489-4f46-bf0b-3334e8900841", "sighting--72c9e717-d222-43f4-a2be-35d21c089c4c", "sighting--98bdb7ba-a274-4de5-b3ce-59071137f7aa", "sighting--3412d97a-9255-49ee-841f-d7d3e67aae19", "sighting--33808993-d1f6-4b2f-882e-29bf1e2e11c7", "sighting--d241878e-ee62-4eda-af47-07c2ba59e9e8", "sighting--b84d5124-bb65-4c76-9b3c-e5375aa39927", "sighting--e97627ba-b056-4328-886e-1af7fd5278fd", "sighting--8e251f62-88dd-47c6-9449-ab91487c3461", "sighting--22eaa66e-f961-45eb-a15a-82a3ad9724ce", "sighting--5b30f58a-8431-470c-8105-6e8f89e04473", "sighting--ca2f3bf2-faa2-4d8a-8b80-6d76ccd28be5", "sighting--88f7574e-87e5-4335-87f1-d4e9a0e9dc01", "sighting--69c55cd2-ffcf-4d09-bea8-67fccc42b664", "sighting--da46467d-49ee-43c8-a3d7-eec1735c7af8", "sighting--d5c5ea09-4533-4f5d-89ea-cdf4f291f724", "sighting--0d33b397-10f1-4f23-a661-901f92ccace0", "sighting--9a5bd08a-7b5d-488c-8ab9-787ec21b4946", "sighting--3cb0b270-e203-44a5-a98d-a670555b3c9f", "sighting--98c9ba0c-e080-485e-82bb-e46f7f6dab4a", "sighting--70a0e268-03f2-4f11-97a5-3b6968a342f5", "sighting--7f3790f8-a15c-4386-854b-3ae02ee90839", "sighting--83be37ad-7ef1-4ea6-bc58-4f1b80464861", "sighting--ef3a28ff-077c-4fcc-93e2-a6e5e881d262", "sighting--dfed5e59-cf72-48f8-a392-972ba23d226a", "sighting--3515b687-cfa0-4e28-b05f-28b7d701cb46", "sighting--a11e3992-611f-4cef-8af6-be22c88ee8d6", "sighting--7db1b29c-476a-4916-977d-280f753763a1", "sighting--8b03bcbc-8b06-4772-b3c1-32da35c34790", "sighting--f176174f-591d-46fc-8960-2a3ad61a9bd9", "sighting--ba8e7882-dbc7-4e04-ad6e-aea6a9932780", "sighting--a6ac30ea-79c8-4f9d-95a6-891464b480b9", "sighting--f0fd1608-4053-47a4-b009-2c7bc0d4f486", "sighting--bb3ebdde-6407-4326-80e1-4dba719edbfa", "sighting--1c03a1ab-388d-4be8-b8c8-0bea4ab66f0a", "sighting--63f04b1e-2a3c-4d10-b0f8-984b5d468aaf", "sighting--f6eb03dd-1ec3-40e9-a158-648dbbdeb212", "sighting--eaea4bde-4e93-4a3d-9a97-8d782b131211", "sighting--97780c89-538b-415b-861a-54a4346c451d", "sighting--1947853c-f1a7-4e54-9428-ac7383638420", "sighting--75217da9-f8cb-4e7e-ae99-b0e2a8532fb3", "sighting--0e2fd4ab-7083-4e3e-a4e8-cf9428f0e503", "sighting--ed10eecd-e8e6-47c5-90ef-0e1974542587", "sighting--15451290-bee5-4e8a-8a94-fb86f83a2d25", "sighting--e442c11e-485d-49af-8eee-9315b3a9279c", "sighting--78e427dc-3ba4-49a8-b708-d492c5edbf5e", "sighting--500532a7-f905-4b86-94bc-d4de6e6e9f42", "sighting--d3574699-81ab-4bb2-b39e-57dc3e1a9126", "sighting--586cbec9-7342-4d8c-9e93-f999f43bcb81", "sighting--37868faf-2eb3-4b1d-9919-fbf37b743100", "sighting--4868a465-5a35-4aed-a7a6-a14bca65b45c", "sighting--dfbd3b73-b382-4270-8566-59021bb1f4be", "sighting--7e88074b-869d-449a-8950-5d544da1152a", "sighting--4ec0d5a1-c819-46aa-9f49-feecd60403fe", "sighting--ad5e7db7-09a7-4260-8b39-910b0166269d", "sighting--ab3fb2d0-8245-4342-8344-f568fef52d08", "sighting--efaafbeb-2689-4d39-b195-2a617016c9a5", "sighting--b9f5c12d-ecc1-4e5c-9abc-a24229a950c9", "sighting--2e9aab46-564b-4553-9a3a-ad8e0c55a0ef", "sighting--e6fcfcd7-5e91-446f-9e2c-7603e0615361", "sighting--a32b101c-4626-4e6a-ac3d-ea395e661fe1", "sighting--cd91fad7-63e0-41e2-833c-244db3896aa8", "sighting--c41c7712-99c6-4ccd-a579-b06ce7a75779", "sighting--7c4b718f-5dfa-4546-84b8-506f46510f15", "sighting--0a63bf62-4658-4b0b-a030-7b2fa29990a2", "sighting--e94205a1-f124-4892-a9a5-ad21ceb38663", "sighting--36f52380-8e49-49c6-9e4e-0e92e8c72142", "sighting--213b72c9-388c-49ff-8816-ce271c9d1220", "sighting--cf106c41-c0a5-4c81-8c8a-8cd6ff17895b", "sighting--25ff5e6a-a7cb-4d99-9155-b4041a2b2ea9", "sighting--69119801-64f7-449c-a307-7b9932def3b1", "sighting--44d5771e-6e7a-4de0-9609-30657edebf87", "sighting--239c3396-0d0c-4d12-856b-6adea0e7b9b7", "sighting--f88c8883-b8a9-468a-a9c9-a2a67345024e", "sighting--6a2d31a7-e663-4411-b0e9-fd8144bb9b8d", "sighting--b07d009f-d419-44d4-bf5f-fbdb2e4c49b3", "sighting--e13b2a40-e95b-4554-9a31-dfd5da04d563", "sighting--7aee5617-9601-44bd-99da-3ba0eca81310", "sighting--bc16972c-67cc-409e-bffd-2802aa7186a1", "sighting--d2116728-a94a-4109-acde-6834480ecf73", "sighting--fdac944f-5242-4b63-91ca-33ed36e20ecd", "sighting--63d5c860-c97a-4c26-86ba-8d7901cac4ee", "sighting--9928fff4-cad0-4f9e-aebb-fa5617dfdc98", "sighting--4ba05e78-acf6-4d7a-93cf-ecec371a33cb", "sighting--a8a6fa7e-cea5-4774-820f-5a395d320781", "sighting--848c0cff-674b-4684-97f4-74e2a7ca2420", "sighting--4a893e69-5698-4b23-a926-4679a41549e1", "sighting--343cca8d-87be-4aed-88ad-cc88b2dc5856", "sighting--2701ee93-00ec-426c-9b4d-55967347e0ff", "sighting--cb925b78-fa55-4359-9883-182d4d4034ab", "sighting--0bc12334-69b3-4b9f-b0f8-aecaabe13492", "sighting--aade17df-3ef1-401f-ab30-41f1923d2b97", "sighting--c515c5ea-c604-4a0a-a351-b733598cfeb3", "sighting--342b2d8e-405c-4cc0-b3ca-09191dc25132", "sighting--cc875fe8-e4ba-4992-a362-ef1edd2dbb25", "sighting--9869bbe4-fdad-4b48-945a-d2502d840156", "sighting--ac9ecb29-fa7d-4b0f-b292-adbbfbc4e46d", "sighting--375f0ce9-f5ff-4d80-93e4-7b19f3cc52bf", "sighting--a5f67780-69bf-4a7d-aa00-ec800aeb8e3b", "sighting--a4440bbd-9c1a-46d8-b1d2-2313c66aa749", "sighting--bc822d01-7491-4eba-b7e1-e6003e16bede", "sighting--30a576cf-dde4-4892-a6af-e8cffdb03dde", "sighting--5ac7ba6d-7df4-4c8a-a329-ed72bda838c6", "sighting--6eeaa947-3e3c-4d8c-b908-ab94282131bf", "sighting--563851f8-273b-4c23-b610-d94748f6b339", "sighting--1874480b-bcf5-4e1d-b105-cc80e1c16503", "sighting--44e53367-4342-4b0a-a196-8b686453809b", "sighting--15d3e3df-e6c9-48f4-abe9-a6b28951b231", "sighting--5672bcb4-a678-49db-b6d9-f02d32d8cdb9", "sighting--77b06d10-5fd0-45e6-b47b-2ae51227631d", "sighting--bee8a215-62b5-49ee-b626-d8ae0d7d54af", "sighting--ee2bfe81-73b4-4a44-8f27-e5b33d3d4928", "sighting--8bc1cf29-5bc3-44b6-bae1-49059638791f", "sighting--4518325b-9a8e-4a48-a433-e3cf5d004cc1", "sighting--64c84c36-580c-4098-ad2a-4c3bbb0d3d0e", "sighting--bc611965-8346-4957-9152-47248f6222f1", "sighting--d6d7bf4d-7572-40b4-830f-460f7a567aef", "sighting--c4f33fbf-f293-4f3f-b2fe-78dd0a289684", "sighting--fc6aa78f-0648-4e58-9798-2973add4079f", "sighting--6840e6cf-8549-420a-88b9-120db0775efc", "sighting--9317d20c-722b-49de-87cf-7a93927f05d5", "sighting--00470975-eb72-403a-a8c7-ca4d565fa6b2", "sighting--814c012d-54b0-4df0-adbd-002c45d186d5", "sighting--79cfd835-355e-4851-8c59-6dcf4837ff1c", "sighting--03f8e6b8-8957-48c3-b6fe-1c8ff2fcb2ca", "sighting--e79fbfbf-00bb-4f50-95b7-a7e43dc62442", "sighting--f52ec0d8-642f-48e1-b7ff-85a5c085ee1e", "sighting--38da24c5-cb94-4d3f-b0b4-e8084decc9a1", "sighting--3d7e2c25-c1fd-4b40-bd16-14354ba49a25", "sighting--9c31e11e-763e-4dfa-98d5-36274b760189", "sighting--a6ffed28-b0f3-4e37-ae34-4b8b85bced45", "sighting--5dfba577-9f1c-431f-b1f3-4b605a079a7b", "sighting--68078693-f5e0-417d-abbb-46b8fc9eb7d7", "sighting--bd3115fc-93bd-4035-8c7c-2917ca4e9452", "sighting--de1c549c-0c9f-4fc6-bd55-b0ce49f6d722", "sighting--22d7cb95-0899-4eda-9a33-2b9ffe1baf06", "sighting--7d9beff8-c764-4a4d-b130-923329df7013", "sighting--43f698d5-981b-4047-bf43-2074ae71eed7", "sighting--70774688-1d30-4ad0-8c6a-b861da98c83c", "sighting--e6249489-2a37-40d2-9015-2e0f1b66f13a", "sighting--1c8133de-ee83-401f-998b-498df5aaa9bb", "sighting--e65a630d-89b7-4f15-9863-3a38b1074473", "sighting--d6bd51ee-d637-48b8-81f4-3146b92046b7", "sighting--8b6848c5-0979-4886-971f-d33e4ffb78f4", "sighting--9337a2e2-14d5-4bc2-a952-cd17a59c0af6", "sighting--789698a8-e5a8-48b9-a56d-5bf9929b933f", "sighting--e09c111a-4aa8-4364-8c67-b64a3dd6529f", "sighting--eacfc3d2-9e2b-4897-a865-4de9deec6a4e", "sighting--97a42fe9-2681-4611-b28e-04b9cf13b4fe", "sighting--4746b043-d7a1-409a-88d1-97dde2aceb25", "sighting--edeba79e-c701-45a1-8e4d-6c166ad6ccfa", "sighting--b2a29544-7d24-45d4-8644-7d319ef0bd5a", "sighting--ff0bbd96-bba1-4d18-a399-32ae08b4cae0", "sighting--8e3bbc4d-ef79-473f-9772-efcd9c821596", "sighting--163bbf97-e69e-43da-9c72-4e639d64e03e", "sighting--193d84ea-2e94-4418-b57c-daa4d6158c91", "sighting--dbf45962-04ac-49f1-b211-cc24ebe5429b", "sighting--9a6d651b-c421-4b1f-98b0-7a4ea8411926", "sighting--2f73bce0-d383-426b-b735-a10bb4fce475", "sighting--38b11969-cb13-45e0-8700-5ebf9b328747", "sighting--31bfc467-c24f-4c46-b5ad-ede99229c6fb", "sighting--333ddb76-39e0-49a6-b462-fa0e70b3bd24", "sighting--9c909833-0678-4cfe-b19d-e1defb18910a", "sighting--e69a422e-973e-40f1-8fe5-cd99d79e8ab6", "sighting--346de3e3-5efe-4b47-af00-c22a3cd835d1", "sighting--34a4a334-b81a-4d61-aabd-ebc9139b380d", "sighting--a51c628a-733c-4a5d-834a-c35e23aa6758", "sighting--9352352b-b707-4bf2-bf29-e6ce7461608b", "sighting--d12e622c-fb95-4d73-bdcb-b9661096b6ab", "sighting--4fb544e7-3350-4a1b-9f8b-18480e45ad3a", "sighting--38fc6d9c-ccb7-40a3-94e3-a03f3d80b06d", "sighting--d44f1042-f3e7-4e63-8fc5-183befd8523a", "sighting--a971b1c4-ef64-4cc5-9b85-423ebefbaeb1", "sighting--6cf96bca-4f0d-4412-a750-24b0de4e2de7", "sighting--4fb9ab75-0b0c-40e3-b259-ac9e30f490b4", "sighting--638f1179-abcf-4142-8874-07f34df75ed5", "sighting--cc54c2a5-7c1a-40b5-9410-c81105aa6e05", "sighting--73d0a21d-989a-40b3-a131-3b5d463666db", "sighting--1bf370ea-fb9a-471b-a988-51161bf5a166", "sighting--564334fb-cdcc-4bea-a69c-8fb78cc9dbb0", "sighting--0d2f1244-62cf-459a-83d0-a68344e4af4b", "sighting--2c0b81a3-b5d4-4376-bd01-7f0cc2c0cbf0", "sighting--585e50a4-51bb-4ad5-91da-ad094452d0fa", "sighting--4e541fe4-419b-40ad-9f36-4f82afda1b00", "sighting--27df4439-3015-4aef-b172-3d75a7089337", "sighting--20d0353f-f8fd-434d-b656-63d41b727e07", "sighting--73e5c489-7af2-4671-9001-54d1931dde27", "sighting--3272f814-ba45-4685-8654-c95f35d2f278", "sighting--c9f92ced-dd19-47f0-9cef-33b25ca6385b", "sighting--70727b21-0953-4fd2-beb8-9d59f5be340f", "sighting--1362f8c1-bea1-4811-8007-f7d370fd809f", "sighting--8894632c-03fe-48a6-8d10-62756d6c23bb", "sighting--4d4d99e9-3855-48c3-9db7-e7a7cc7441e2", "sighting--74b9846d-83b5-49a5-8378-4286209063f6", "sighting--17c947a5-b2a7-485d-a838-4a7ddd6bfae7", "sighting--8274e751-c252-4b1e-8efe-360bf3ad5c7f", "sighting--c8b07071-c536-42a4-8b00-befb3e42bf01", "sighting--2b1de95b-6c89-4c7a-a3bd-6204814858ed", "sighting--b281fa90-64ce-4616-9571-24f6707e816d", "sighting--3b051d17-b11d-4d5a-8006-f3423ec2298c", "sighting--23431502-88c3-40d9-a9c7-8e0354c04b17", "sighting--03cdf36d-abd3-4316-8124-ff2deb7f54b1", "sighting--0d1a8516-f986-47fd-b207-9b454fdd5114", "sighting--1143b9d6-bab8-4850-8087-daa83b3f4fb1", "sighting--8a12c716-20ab-4a32-8fde-e8a3058267c5", "sighting--a1aaac4f-154b-41e3-a3ba-2b10217f2f21", "sighting--9701726f-6281-4c26-8704-287ef924c52e", "sighting--8d05e370-4746-4258-8852-07cdb211e263", "sighting--dddf3389-c54c-49bf-a4ee-3169827f716e", "sighting--e45fbffb-a379-41f4-9f60-a7f1d7cab371", "sighting--45bba192-82fb-4ee9-9475-863091e4dc07", "sighting--9e166e38-8ba6-48ad-a5ae-349b2c29e314", "sighting--1ce68079-62ef-4a48-a09b-acf790ec3a05", "sighting--6533b0f7-ae51-4c02-8785-97775d470f81", "sighting--cc6ee8a3-d64e-4591-a072-5f9764ca4f10", "sighting--41d82947-ad36-4639-a75a-8dede53f8283", "sighting--dd0ba2b5-049b-4377-9431-62b4300e6882", "sighting--9dc20818-8824-472c-b84d-6feefae280fc", "sighting--3ec4b2be-0202-4b44-8c9e-f6d89e616dbd", "sighting--c307d758-ec4b-4930-9b14-506dc72ca04d", "sighting--351cae34-69ce-4dc7-b9b2-4815d8aac1f0", "sighting--f0bac9bd-d50e-4d73-a1b4-6ea44acdd721", "sighting--cccb8d22-c664-449f-be98-239236fa7a33", "sighting--3f898304-30c4-4a71-ba1b-45ee53b79e24", "sighting--403bbf9a-dadd-48ff-8d4a-f48c450aafee", "sighting--b66ab7c5-9d1b-46de-becd-b23f0720682f", "sighting--ac888960-622e-4509-a00e-25bd177c2f51", "sighting--accb96f2-9fa8-4916-bcfa-f38ad15661a0", "sighting--5c640b05-3497-4b51-a84e-11e7b51aaac9", "sighting--2e5c9927-5553-48ed-961f-90319c38fdd0", "sighting--79504d40-6fbe-4587-a16e-1e79894af0d5", "sighting--b29180bf-6984-4bf0-b4f6-47ddbd24cc68", "sighting--82c8fbd9-8734-426e-af86-2b47d2442459", "sighting--12d9641a-5a70-44bd-99e6-f65aa52cf7ff", "sighting--9315904f-2082-48b2-aa79-b9a6a73628b9", "sighting--f2b96cc7-a663-44fe-bfbe-d781c41c3a62", "sighting--cc5fa136-3168-4a8f-a54e-e47b21ad723b", "sighting--6465affd-b3ad-4f0a-8280-ed2c0338f1d8", "sighting--a8e1ecb3-97bb-4bf5-9657-68b54ebcebd8", "sighting--c8eeb678-eca8-4f65-996f-44d5ba3b6057", "sighting--91f1c6b1-a799-4162-9946-479c43a41fe6", "sighting--0fba3568-400e-4fe2-aafc-1ed98d57f853", "sighting--93706b52-4364-4fab-9031-8122fb57760a", "sighting--58d02781-402a-46c9-a628-fbf439d681f6", "sighting--f8417a2f-0d7b-4142-aa1b-584eeff6e3a8", "sighting--ae403e3f-f426-4ee7-9e7f-97dd53e372e0", "sighting--39e2ae75-13ac-41c0-a701-b0f2640a683c", "sighting--8b41fde2-4e57-48fb-aa36-4f7ca4013816", "sighting--8174f6dd-71aa-4527-870c-55e06ac867dc", "sighting--9464ecb7-3c51-4bb6-b9ef-5bcea690406e", "sighting--96c41a53-2e3a-4ab9-9af8-bd56eb4f4090", "sighting--46068cac-6837-4130-be41-fdd50121233d", "sighting--6546c68d-d38b-406d-ac1d-463aa1c05e61", "sighting--a39a7c86-a4a2-4c72-a7b7-645511f1b488", "sighting--ff1f6bb2-f20a-4109-b01c-501108a67215", "sighting--2ad743f8-c5de-41db-82df-a90547c9ca38", "sighting--75e49c0b-9379-4117-9941-76df2aefd9a9", "sighting--72d60b6c-6501-4b38-8040-184aee38e7a5", "sighting--cc997dcc-6c9e-42bf-b436-629eb3a31d0d", "sighting--f275943b-01bc-498a-9d9c-5266e39c3c8c", "sighting--cda4b4b2-60f0-4691-97d5-33de2bfa5f6c", "sighting--0182eabb-519c-4bdf-a65e-c81fee6d9871", "sighting--a2db23e9-04d8-47d5-96f4-d89708143dda", "sighting--f80fc960-b85d-41b9-b5b2-d095c26ab0f0", "sighting--5071354e-3bd9-4a4e-ab4d-19725d4d2c2d", "sighting--96c02cd1-5c71-4260-869e-375d3e060424", "sighting--873e230e-061c-4099-b7d2-efecfaa57f51", "sighting--1013e393-422e-492b-b576-06d8f4791a2a", "sighting--e3b0f0c3-6f4e-46af-a673-03e68421e3e5", "sighting--04bc5af3-1c34-4f70-b5cc-ec1de1c23ab7", "sighting--212760b5-774b-417d-9cbd-1b5beb377040", "sighting--bb96fe13-4c12-421e-81bf-60af912024be", "sighting--b1231f90-7b2b-4131-b8d4-3838703bf341", "sighting--2b604bad-2d24-4ba1-a6ff-c06003289df5", "sighting--e1b93896-e93b-4d50-b59c-fc60833d82ed", "sighting--c96e91cb-50ed-4d6d-8197-3f044dfad8ad", "sighting--8f1c5683-c7c4-4cee-a772-cfdbbfeb9650", "sighting--6c888a02-ba13-4deb-86d3-0b54f5694826", "sighting--71f67143-0299-4c41-83c3-921051f5b673", "sighting--dfd4b0f8-0fa7-40c7-837e-3f54aef809da", "sighting--294949e8-ddbc-4c01-9301-f6c31e6800a2", "sighting--1dc1b4f8-ae5a-4aa2-9cd2-f10328084ca2", "sighting--ffba14c1-63c3-47a8-86fb-745473ebeeac", "sighting--6ec8f3e4-a30f-44dd-b9f7-11d7fb1fe7c5", "sighting--5f088b1b-7ff6-4117-b462-d7135a3a0b78", "sighting--5c9cb4b5-ac0b-4d90-92d0-b5c279110d55", "sighting--02eca239-db30-49c0-91c6-77e283d64dc9", "sighting--935a2ebd-be3c-44ca-9a4f-47610d5f8bf7", "sighting--34a40e96-8156-486c-a1a1-5a87d7a95734", "sighting--52737a4d-8954-4015-a7c3-60a82441e7a1", "sighting--5aa923a6-a930-43c5-87ff-8e8cc12d14c0", "sighting--f473bf91-e449-43ce-89ce-04047638e929", "sighting--772f8e37-992d-4ce0-854a-62e7d97fe68a", "sighting--86736134-4748-4af5-888c-abb5cc75270f", "sighting--52fd4b8b-ed4e-435b-aa38-cd0c56c33710", "sighting--b5f8bc6d-f789-4a16-bfed-aa4a45a26408", "sighting--1489103d-34e9-45f3-9858-228143a0f998", "sighting--6b25c671-fa95-4711-8ceb-c62083e32f24", "sighting--06325468-82db-4300-84af-dc4a67b3c1c0", "sighting--55871d4e-86c9-4f85-89a3-8aead0e3f34f", "sighting--21cb90ac-1c96-426a-9ae2-955ce9e2cdb7", "sighting--a9d91878-5319-4d49-90de-21aea97dfc0d", "sighting--a73045c5-edc4-4594-a476-afccfa23ce0a", "sighting--ed8e517c-544b-49c1-aef2-f34363f5d6e9", "sighting--dc61a71c-b47c-4cf7-83d4-6ad9be20564a", "sighting--175b766c-e40c-472e-aced-c59ce9466445", "sighting--81c05ff7-20f3-486b-96eb-511a125f3f25", "sighting--f8a32c7a-14ee-4c95-b44d-c493c7354a98", "sighting--d448a910-a6ec-4b5b-bffa-5615793fd8fd", "sighting--cb93e18f-9b0e-474a-9ce6-b67857b8b140", "sighting--bab75ed6-28fb-41e0-a3b1-1ba3a4bd6469", "sighting--8f75784f-6126-47fb-8093-644c651ac77f", "sighting--318d7875-9503-4c33-a859-1d5d758b6dd5", "sighting--88fa9a87-1947-405d-8921-390b022e1f88", "sighting--30e10a2a-84f3-4c93-ad8f-c74b10e0a504", "sighting--b3768a7d-96c8-4fb1-9be2-6ce829e692cc", "sighting--0dd7892f-d7f8-4e84-8dec-5ff16766dfa6", "sighting--714bcd58-388d-4417-bd85-012607159b26", "sighting--1ce7eb3f-b7ab-435c-86cd-bb515ce1bbf1", "sighting--bb7f9694-a5a9-4799-aae6-77bd4840251e", "sighting--e40ecd7a-e33d-4f21-88a3-4fad7a19ced0", "sighting--cedd3ec4-41c7-4bca-8604-61f2e7f851ff", "sighting--6f75c2ba-1cfe-41ac-9119-74155cf47d32", "sighting--03fa36ac-af92-459c-822a-5b16c6818574", "sighting--de5a20c2-9f01-4474-a0ad-43eb44f43e8f", "sighting--a52f9772-45b0-41c7-8f16-06217edf3a71", "sighting--76a75af6-f927-455d-a60a-c59e33ce21aa", "sighting--d2609ca8-abed-4e48-a48d-906bee743061", "sighting--530e77a3-4692-49be-8f50-16c7cca5e837", "sighting--9831af84-3db1-4dd2-8220-e2862650e6b1", "sighting--c3039fd9-c568-40b8-87b8-ee9a71db6272", "sighting--7248e655-7425-48a6-be8e-a6d23b28f17f", "sighting--0a958255-9bad-4214-a84f-107d46fe148f", "sighting--b1582de2-b652-4df2-8742-1c4f646b619a", "sighting--95594264-50d4-4740-8e39-4e628053c374", "sighting--33ad488f-c275-4d28-952a-63cc642ae59c", "sighting--6bf0cd89-b1a5-41e5-a443-f4482bcb1741", "sighting--441ef99a-2498-4056-9df7-966c1f59726e", "sighting--b1f2d51f-b468-4b1d-b7ef-c6855511f08a", "sighting--8e632f6a-bb3b-46d2-b3d2-4c63273612ff", "sighting--dda1b15e-2bc5-406a-82d1-6a8f04153b43", "sighting--fc196e75-664c-4af0-89c6-49e3b9a8e9fa", "sighting--3f98ce07-04e8-4886-a5b6-0f06501d05b1", "sighting--d65cf57e-8f00-492b-90cb-123b2736f485", "sighting--bccc45c3-f903-4a04-89f1-c8d8c7129dab", "sighting--2bf23aa3-98c6-4246-8448-a3f146efe54e", "sighting--a2a4bf99-999c-4b15-83d2-e3f915c4a6a8", "sighting--abb5aed5-8e80-4080-925d-64579733301f", "sighting--03e1bf49-062d-4dd3-b5da-4b04add68c45", "sighting--08d8e7d3-8411-442f-811e-33427c0e499b", "sighting--2dab56df-3b88-4db9-8117-8745d3d90309", "sighting--afd5df6f-feb4-4e62-ba0b-68765066e2d7", "sighting--d6b5bd7f-d8b6-4118-a6ea-10dccc17b0e5", "sighting--96092dbb-d509-421b-95c6-8c56b027f122", "sighting--37bd4f4e-987a-47a4-a3ad-c6294f0de53c", "sighting--b81cdde8-69f3-4e23-9eea-508dbc9ca525", "sighting--dc695092-6160-4204-8249-b0a9f65e6eff", "sighting--8620460a-2c6a-41d3-ab27-d119889a76d1", "sighting--356d1e21-84af-43b7-a6a5-bbb995d11c64", "sighting--1d4fea10-1343-42e7-8896-9b3a2e8b6edb", "sighting--65d9f9d3-93f8-41b1-8d9c-f8d13b236ecf", "sighting--e358e897-6289-4da5-8bb6-da1dec1c8d84", "sighting--2c211e41-3f8e-4424-ab90-bb739427e503", "sighting--f84bf084-ef6d-49c0-951c-a70eae1f6541", "sighting--ef251da7-416f-4a94-a70c-9dd13e232fa6", "sighting--8797144e-30fb-489d-9ceb-af21127865d3", "sighting--314b5fb8-ba2e-4dfa-bd0b-89286b3900f5", "sighting--8af455e6-e865-4763-93f4-72627b2c3d2f", "sighting--7f0ed897-5729-4a6f-b33f-ce779612e90e", "sighting--8bffb1f1-e6f6-4f3f-ae8b-63b44f199854", "sighting--98bbddbd-847c-4e9a-b8a1-e597d11e358b", "sighting--d1b5cdeb-a255-45a4-83e0-41cebf684cf8", "sighting--e7d5abd0-3de8-442c-a50a-b5de171d340c", "sighting--d8dcb401-837a-42fb-a047-4fd540957257", "sighting--83e37f92-2cb7-4311-9b2d-27b15ae966cc", "sighting--6c0f9c0f-ad05-4f62-a5e0-ea9d7535a6be", "sighting--832605e0-5140-4c6a-b85a-bcfdc3049868", "sighting--3325559a-d68d-4c89-8d94-129bd994c4d8", "sighting--e3c36660-c270-4522-a2c5-c6fef7e9100c", "sighting--626a2374-4455-4ba7-a893-6fd19673b6cc", "sighting--e8105358-985d-42a8-96a6-d4404c3eff6f", "sighting--591e651e-cc45-4984-988d-065c564ed649", "sighting--cc7b4cd6-844f-46ea-badc-14c37beec096", "sighting--1dc82675-82f7-4615-bf7e-af688b08c53c", "sighting--d791f538-e3ea-4c05-a112-1b5269532161", "sighting--81a62bf5-6e1e-40b7-8800-61f4fef99195", "sighting--38d30f96-a0f5-41f4-80d4-a9c49dc0e082", "sighting--e9cab4cb-d264-42af-b71f-992fc0a29d68", "sighting--b6beac66-8197-4a8a-b628-ca58b2411396", "sighting--bbf47653-dea5-48da-b05f-659a61333bc8", "sighting--f67eddfe-e131-4b46-afca-eda4269b4605", "sighting--40824602-5fd8-41bd-b464-b0da3ef54b41", "sighting--f0a725a6-dbed-4b4a-862a-b746ba3f52d5", "sighting--cc8e51b8-1e92-4a75-a78b-319456b544ff", "sighting--70065a50-fc6b-4ccb-8241-4d827a34be95", "sighting--d9c54ce3-363d-42ee-837e-e6cb3b35d98e", "sighting--f38f4bcb-8316-48db-ac05-efa4325591f0", "sighting--d7f30d79-52a2-4d3c-a5a7-581675b0cee9", "sighting--35a2d3ed-b57d-4ecc-959e-58617a907040", "sighting--722f6a3e-e589-4099-94c5-673a9e5ed474", "sighting--a7d590e7-67fe-4093-8693-b842805ba5d7", "sighting--906b0e04-9469-4a3e-b856-e1aa564a3e91", "sighting--1d4b8006-6360-4116-844b-fd42229333e4", "sighting--ddb659fc-9dc1-4550-b938-60f09a518e10", "sighting--968c7e42-e9fb-45bf-8d32-0eeb439c4d6a", "sighting--8d5d5060-3cc0-4f00-92bc-a83363955161", "sighting--e880b364-75da-4eb6-abdc-cf89c5a2329e", "sighting--986fe19e-3d69-45bb-bfd2-1f52de0cc189", "sighting--759df104-93fc-4e7b-9099-242da2b5b928", "sighting--d10623e9-0ba4-46e7-a7ac-802ebf3d02bc", "sighting--d14cffcb-fe84-4b0b-80ab-17abf52c45cc", "sighting--3ba79578-27bb-4e82-9c12-8bcb2ad328ff", "sighting--27bf13b2-557b-4345-baac-24be65ab89e1", "sighting--94df57a0-4969-4e5c-8171-226a0d468e9f", "sighting--675c86d1-0a46-4de9-b535-c056e852b60a", "sighting--699990dd-5cb7-4217-830f-6053309fd6a9", "sighting--50cf10c9-1c1f-4b89-931b-098ff812d7b2", "sighting--c1b2fd07-75e3-44ca-9874-bfdd4ad8e0ac", "sighting--6626cab9-56b2-4a84-81ca-522b5fc56ffc", "sighting--46d29fc4-19b9-4c8f-89c2-feca239db443", "sighting--19527698-8102-4d2c-9353-d2f009afd852", "sighting--1984c7cb-6cf6-4bdd-bbc9-13f20bfae805", "sighting--4bc46c15-5365-4fcc-bcfc-1d29fed34595", "sighting--e7327c5b-504c-43ba-a13e-46bad88063e2", "sighting--5205e0bd-abe0-46d0-84e5-7930bce7aa79", "sighting--fe1ab1ea-7a23-420f-b504-183689bf043d", "sighting--42919373-8393-49af-a65b-afd936c2a91e", "sighting--885d64b9-e222-4a40-aa9c-6b701e28d6be", "sighting--a722fdb0-f587-46e2-9e2a-850e6349ed33", "sighting--000a2cdb-94a1-496b-bb7c-faed09ddc3c5", "sighting--8273d809-d47a-47ff-856b-d1b885864ea2", "sighting--cc499ba9-f5ff-4d95-ad09-7775a44dc1de", "sighting--012d6862-3865-4d89-a4b5-9adf479fbf66", "sighting--5e42fd60-ee70-45d6-ad26-d0ff147b0a0a", "sighting--cd820082-9852-4194-8179-e4ddf6bac31d", "sighting--f0f9939b-b236-4949-93ae-1e2a9654136e", "sighting--6a60c5c1-0a59-489b-a250-1b8a97dac34e", "sighting--d0bec1ee-6247-4470-8c84-7bcceed66b5c", "sighting--d4e1de18-979a-4a07-a5c2-cba8274ceedb", "sighting--879a41ed-64b9-4c70-8ead-0584d6b22945", "sighting--b6930560-8cea-48af-9088-98a3b5617f59", "sighting--41afd51a-8a35-4431-b4a3-c2b589c823d8", "sighting--3dc66834-0950-47d3-99ff-00583314f65e", "sighting--3c7339b4-048e-4fb6-8b91-3c43df78fea7", "sighting--af1f29aa-9e1d-4a99-9dea-22852c2418d4", "sighting--7e7477de-bcd0-4fd8-815d-7571c17bb7dc", "sighting--4f5d06a6-286e-4026-bff9-6356a4403719", "sighting--6c44473a-8f15-4725-b9d8-ad5e0415334a", "sighting--13bd598b-8c1e-4f93-9694-92878ad65453", "sighting--a2e81158-2906-4c47-a81a-be26fa266da1", "sighting--405261a6-6706-4ca6-a3e5-c87d86149cfa", "sighting--f7fcb767-98b3-4f41-b257-53f7890111e4", "sighting--cbd4e888-68d9-4a05-9811-7329be3c0bd3", "sighting--445b37cb-509d-4082-a406-e78e36b9c4a0", "sighting--8f934ee0-8a50-4fd3-8fc9-6c9864c4ef16", "sighting--05b0d64a-98c7-4072-8d8f-4c7c994c1e95", "sighting--21e898c5-334d-47e7-81e6-91e3ef0a7fe0", "sighting--d4444861-e7f1-4078-b143-e12ef2b2c0fc", "sighting--7be63034-dc90-4903-8ba3-a903cae55ab8", "sighting--54ffa02e-a09b-424c-91a3-ef8f69eb128c", "sighting--4f56d504-9424-4f55-8bd2-396e00ef64f6", "sighting--18f6c0d8-f9cf-47d2-8ee3-d0d2148a84ce", "sighting--a98a031b-ee1e-4661-8907-0e14be5bcf96", "sighting--b14b2535-0841-4ffa-913a-94b1d0e5b8a0", "sighting--b4be6e28-e864-4b10-858e-dcbaafe9b6bb", "sighting--6a83ed34-31fa-413d-9814-f2a415b10586", "sighting--8c6706de-2b83-4eec-bf3c-3c4825a91c45", "sighting--0129aad6-3b76-43aa-b3ad-e054e28e2e1c", "sighting--3681d58b-e248-48ed-add3-8e0380ea3a14", "sighting--cc60d419-1ccb-40ef-a90b-6ee41ea3b64e", "sighting--50794a92-6fa8-4426-89c0-f84f89073a2e", "sighting--bbfb01bb-8d26-4649-89bf-472551994e43", "sighting--73bf3cba-f395-4665-9971-31a9873eca81", "sighting--74cc6d2f-6fae-4991-8f92-7435d5089b9d", "sighting--cd649b20-e393-4458-9ed4-623e8efc1e41", "sighting--ac2671c9-81d2-413d-b014-b630b7dec9eb", "sighting--520ad712-4fe7-4793-ae3c-e169debaaffa", "sighting--7e198ca2-5138-473a-8327-37f93411b282", "sighting--c741a605-fd86-4deb-a49f-523060870e9f", "sighting--776adef0-52a3-481e-a382-b4a193ecfc86", "sighting--89c4b452-34d6-439a-91e0-0623d68f0078", "sighting--6fd23a27-3173-4fee-8cee-aeac6d31ff91", "sighting--b3878b9b-b0fb-4638-bfbd-b31e362235cd", "sighting--4a69cc33-3649-4de4-82d6-dc6c14deddcd", "sighting--8f099cb2-a62a-4e22-bf16-43c6d81dc8e7", "sighting--16ebdce9-a730-4055-bc97-31cf0d67a6c6", "sighting--caa704c7-2aaa-4de5-89f2-798f093f85e9", "sighting--6393b7c7-9824-4972-814e-6c1bbc0e6f1b", "sighting--2911c62a-1637-448f-a8c4-f0e5606e36de", "sighting--f011516e-cc8b-491f-ac6c-384395ce41a8", "sighting--4f40d8a2-03e2-475a-844b-f524d401698a", "sighting--031e9f78-6189-4e26-bd1b-60c45e9df01a", "sighting--0dc507c2-a6f3-45df-b001-3c69344a1f26", "sighting--c332da08-81eb-43e7-b0d0-f82955b47f53", "sighting--9c653a42-2dfe-4f20-8f0c-e6dcb7b6c3d7", "sighting--4bb26de6-869d-48de-aad7-6bac87516759", "sighting--cf70e24a-e848-4ee3-a2c2-7bd3b5db76bc", "sighting--4f4eb084-5299-4d71-a0f9-05359e225c44", "sighting--c09b16b7-e556-497b-b6f9-64420da2d183", "sighting--cd50bf9a-8ff3-49a8-96e4-e456b7524148", "sighting--783d57af-07ca-40ca-84d7-44f60161878b", "sighting--d6b1a386-3a14-4522-842e-45bae22454bf", "sighting--2f4d8319-fa48-4a3a-9e01-27b42e3beaf4", "sighting--7382b11b-2c94-4e56-babe-022103c6d030", "sighting--963c1054-c4db-49cb-ae36-5b6d3eac0653", "sighting--c0eedaa7-c592-4d6c-9e62-92d4be393a04", "sighting--e5716ec6-9eb3-4b7d-a231-262e4afeecc6", "sighting--f8f5c479-d617-4ffc-a38e-409eed5c11ca", "sighting--9d2a9b78-7660-4319-8b2f-87841d6b7e92", "sighting--d55b5ee9-017c-464a-a5ea-964db49d93e1", "sighting--7722772c-e081-40ed-a984-8fc409069b1b", "sighting--27cb0688-1950-4d95-b083-04c89d177506", "sighting--c308ea87-a531-4636-8687-96af4f59cd91", "sighting--6fd19d56-8555-4250-9d14-4e4474e71ec6", "sighting--36cee437-d9dc-4973-b3bb-da69c7ffc0ca", "sighting--d1e60683-bfde-4f7c-9e22-cb482152cb1f", "sighting--c61936b2-f704-49a8-aaae-d90ed447f7c5", "sighting--3b98655f-b890-4c4c-9bb8-b9360d46caaa", "sighting--54160cf8-c337-48c9-a878-db0e23120ef0", "sighting--86397554-0485-4a4a-b480-0ef855a670e3", "sighting--6f85d830-9428-4182-bd58-8137d59bd1d9", "sighting--6f72fcfb-cc3d-4332-9d6b-04da44dfda7e", "sighting--46415104-0d6f-44de-9f97-641bfaa12314", "sighting--0b1853c9-25b3-4e70-9659-6279c8cc1d49", "sighting--8a42f178-1861-4117-951f-5ac03852b0d6", "sighting--d5503053-0861-416f-97e2-14928b013ac9", "sighting--69e35990-00ba-46b1-800f-dc8760d2b822", "sighting--c8d41988-2857-4da8-89d0-79798103d163", "sighting--47ba536b-617d-4e15-b6b4-9986e22a21f3", "sighting--f15e267c-2a64-43ee-b089-02ca9400d722", "sighting--fb8c9028-2338-423b-9242-1c9b9e77c01b", "sighting--850771aa-7752-4f89-bc25-eb2c31839a4f", "sighting--9b756ba2-2dfb-4fef-b2ff-21239bf549f1", "sighting--f4256859-ba7b-4889-8cad-5d94eb3fa5c7", "sighting--1a64f8ec-ef60-4ea6-8df4-fa4fd12dc01c", "sighting--3ee4870e-330d-4a8d-a786-2afa67263bfe", "sighting--8b69e6c3-fe96-4faa-a59d-e85162d6657d", "sighting--3f9131d5-735c-4f64-a8ed-ce0d7fd4763b", "sighting--e5abbca3-da40-4636-a4a3-dbd821c440db", "sighting--2c6121ad-0f7a-430c-a2d4-937d7a295994", "sighting--672c8732-7a08-4761-80f0-f6fab125c2da", "sighting--f5b2964e-964d-4eb2-913c-87285acf9eb8", "sighting--4f677f05-d217-4740-8e3c-c1606f60d2e0", "sighting--2c5d8899-daef-40f4-9aee-2a49a6df258b", "sighting--6a150539-cedf-461c-9954-226de926241c", "sighting--e266984b-4897-44e8-81aa-087b4a2fa32b", "sighting--a9fcb813-e636-40ec-9205-d5eaa8d56fdd", "sighting--fd124e9c-856e-4cd7-8d40-2b92f8cf0748", "sighting--e68ed326-e35c-43f5-a762-997f854b628e", "sighting--3f6aa331-36ca-4d66-813f-e144549bc7d9", "sighting--4199586e-5844-4b90-a793-9425b4496f25", "sighting--f16be86d-dbb6-4edf-b6c1-728c5f185dc7", "sighting--cd390c65-ab6c-4831-871c-a624e65768b2", "sighting--b5e1c68d-c323-45e9-9eab-34b791a87671", "sighting--58dc318e-9a9e-4d9a-9784-824bf1252538", "sighting--c915f2c7-c676-4bb1-a4a6-8cdf72d9e2f1", "sighting--79ea630c-11e6-4eef-9b59-8db9c5cb9b19", "sighting--27bffbaa-be96-4d55-89c6-c2158414aaec", "sighting--c74b91ae-05e9-4422-b8f8-cfb50adb1bb3", "sighting--64350b8c-a970-41e6-9d38-70cf0fbfe055", "sighting--924279e5-3052-42e4-b9e7-168f5ad54c06", "sighting--a6f7031c-2a1d-4dac-870f-46f48e6239a6", "sighting--befd7f39-dd74-4908-802c-1bcddb150ab4", "sighting--4517fb10-7fd4-4ed9-be2d-9b7afc62bc51", "sighting--78816973-757a-4148-a637-af02bae9cdf8", "sighting--6b35e012-af06-45f0-9b56-c7f2ce93df37", "sighting--7802d1d8-9df7-4f98-87aa-9b320fc510dd", "sighting--ab2c4fab-bc6e-4b80-907f-a3adeb04d0a7", "sighting--c9abd64e-e52a-4aff-b54e-62041022d140", "sighting--90797afc-536d-4915-9af0-57a5b8b20e10", "sighting--117c8278-bda5-4453-9ede-2a7129fbf1bb", "sighting--79e9554c-ac73-4ba7-9321-ef6198cd012e", "sighting--e4bfc3d4-ad42-40da-9003-538dd2ec0736", "sighting--ffb183e9-9f8a-4a86-9c9d-afe1b3875dc3", "sighting--cb098f4b-c203-4847-962c-565b653d846a", "sighting--bac4b725-71ee-4e83-9c84-ea89a81abc66", "sighting--305c8a3f-cb35-4941-adc8-b8dcbecfc647", "sighting--4240f17c-fb0f-4f93-98b3-6c9be46e5fe9", "sighting--6aa1e877-3648-4625-9ab0-48a77e27a44c", "sighting--d7e6c443-f1eb-4302-85c9-d8f35c812af3", "sighting--f4571096-a1e5-44a5-800a-d39e9a854d01", "sighting--76da544d-ef20-44c9-9190-89bf52c04da0", "sighting--1a6f0ad5-b349-404a-b74c-f4705c251430", "sighting--2e44a7f9-ea9f-4759-9d20-0af4598e6c03", "sighting--a96f6236-ea9b-4b68-a1e8-d8b5625d5249", "sighting--e5c8881d-ab47-4795-958f-50ac55fed672", "sighting--ce0f3d0b-20f4-4b94-813c-9577e87e1fef", "sighting--af4851ce-88c7-4228-b2ad-9c6347a75277", "sighting--996a97df-b58a-4662-8596-b72391ee0418", "sighting--a750004a-adf4-4f94-8867-058537b71ee1", "sighting--daea3e33-fdd2-4420-991a-ed9a0277207c", "sighting--d14682d1-77fb-42b3-ab6b-b8b9613d6813", "sighting--14f0e97e-78a1-4f0e-9791-14fe8fa0c30c", "sighting--1df23453-b5de-4ec6-a2f4-87828d893b42", "sighting--04e0ef70-4940-45f2-9550-944ab8cbf8ff", "sighting--c0ac911a-6e81-4616-a5de-6e1785046e27", "sighting--59424a74-5d9f-4b00-bbd6-b2849ca14313", "sighting--ee9a04e6-0247-4a96-8502-8aa50e2bee96", "sighting--2f4b3488-22ea-4148-a376-f6645a629473", "sighting--a3b80687-c24a-4d04-a63a-f384023e6220", "sighting--6b8c3436-e95d-440c-8c65-5916a3792528", "sighting--2b6a0531-eed8-40bd-8fd9-7d4eea4bb519", "sighting--ec14b5a9-aa6c-4645-a2bd-85b36fde3ef5", "sighting--329ca152-04dd-4256-ba75-986be4a116b8", "sighting--20231e20-4245-4591-bde9-30bf2cd70539", "sighting--f4734c22-7c21-44a9-9c1a-2690eff667e3", "sighting--d4c24451-8b4a-4163-a04c-10e7fa89153c", "sighting--73d4a652-be61-4311-8e11-0c71307c88a0", "sighting--009d6a10-33b2-4e3d-b8ae-bb3dbc2049ea", "sighting--26a5325a-8d89-4085-825a-703854dead25", "sighting--2d71618e-fb63-49fb-b1d2-5e3437e8e278", "sighting--0f1f01de-c8c1-44f4-a033-b1b0658dc150", "sighting--bc3ec614-7e2f-4467-b079-75105f04739f", "sighting--50768fdf-99fe-4d86-9316-fe5c9796f115", "sighting--9de2887c-ee68-4166-ad9c-bdafbc162b37", "sighting--4e7f785a-4156-48e0-adfd-c72f83db8e5a", "sighting--06b639ce-5966-4eb5-985c-0b0f386c9666", "sighting--3751fb6c-8aec-4069-959a-5376069f34e0", "sighting--4a2d31ed-e195-449a-b39f-6d395c79eb92", "sighting--9b19d71a-23e6-405c-8edc-5076a98b6bf9", "sighting--962a17e5-2738-46bf-9d09-d731d549a547", "sighting--1ab86691-063d-48e8-b66e-c8b942e1cfdc", "sighting--8e413ab0-5bc6-4a90-b4c3-afd9aca59dec", "sighting--4741a4a9-8732-4ff5-9f7c-719848f4ca3c", "sighting--ee3bda63-9ccd-465c-95ef-b920db3e5882", "sighting--dadc5ccd-7c7b-4b29-b8fe-82b9bbf9c3f6", "sighting--77c04331-4029-4119-8c46-e991f324d3b8", "sighting--d7c33633-9c15-4dae-8969-e7dec7bcea82", "sighting--d17ae7bf-6549-4244-98eb-59a46d18f4c2", "sighting--42973210-fcad-4370-8a54-a6792375d4a8", "sighting--0bfe9687-98ba-426f-b9a9-13ca76db6cca", "sighting--1428a581-0dae-4b09-9b41-29370c1069f5", "sighting--f5492598-d477-40c8-8cf2-113900da8c7f", "sighting--32c4bb3f-4309-4b07-a31a-96c939802311", "sighting--e95401f2-f773-43f1-ac74-15f2eb6f8303", "sighting--1ba2ef2a-e9e6-43c1-91fd-df7409abb81b", "sighting--c1b1d9e6-0d02-473d-a6dd-42ce8bc8eafc", "sighting--17ee5e47-68dc-42e2-b282-e48f055ca84a", "sighting--fa2fede6-d587-450c-a79b-b4218f447581", "sighting--78d7c485-515c-4ce6-9a13-616bd942da13", "sighting--1f5a7ca3-b98d-4069-b8cd-e9ecdfe1112a", "sighting--aaa73b14-7934-4a3b-a3e8-fd9b33537eda", "sighting--23ab9724-c656-4a8a-92a9-98ef49524cc7", "sighting--069d2a42-9b56-482f-b04a-9afed5d8211e", "sighting--0ccb0f15-0ee5-4c6b-8b42-3325ff791e6b", "sighting--4ed19fe6-95e3-41a8-92da-b6ff1d2eb944", "sighting--36db4a5b-b41a-40cb-a9c7-7bceb23c7cb2", "sighting--1e25259d-d343-4a2f-ac6a-e5c08155ccba", "sighting--4a578271-3d99-4a34-bd2a-9100c09a7640", "sighting--e52bff31-8ea1-48ca-b8b0-79cba2370afd", "sighting--28094049-263e-4b0b-81ed-1810dac2be03", "sighting--d976c764-73c8-4589-a48d-650320af63f7", "sighting--9bd37a6b-e481-4299-848f-d2992fb4d3cd", "sighting--af131fb3-eb5e-4073-a86b-38717a7f77c7", "sighting--276fc8c6-a8e6-41a4-ad41-0f5bbac11360", "sighting--c6b27f0a-beec-4501-8a77-1bf12e29784a", "sighting--92a458a0-ac56-4615-8b0c-c3e2ed7fdc8e", "sighting--90c24f4e-6078-4b0e-9649-bd6410d1ea27", "sighting--2174ad0d-4877-4f15-ae48-8dfe63a1cc4a", "sighting--4b26c17a-c81c-4f77-bfb3-f943586b6331", "sighting--98af48cf-612c-4219-a325-4ed7938fa214", "sighting--c93b46f5-c145-4019-ae25-7fdc95bf727a", "sighting--0d068af6-d61a-4370-95ee-f9600185ddb8", "sighting--e6eeb45e-59d5-4d81-b2ce-ceb42378e14a", "sighting--c171f7e7-21bb-47df-b268-e26ea4c5aae5", "sighting--6659a988-5094-4c30-aa39-23d84eda3459", "sighting--a0d3dcd5-a307-40fe-97fc-afd05fd8e8bf", "sighting--b028e567-a4bd-48bf-887f-d9f023b43c6c", "sighting--646e9d40-9b95-4b96-80c6-0c7645da2ad9", "sighting--9b526b22-3fb6-404f-acef-d173d57673cd", "sighting--7513290d-954e-420f-83c7-a3e999744c1d", "sighting--cc28754f-6eab-4f40-9b6b-ca714f7470b2", "sighting--fc91b235-2bae-4eec-b95d-86d6b31e0dd3", "sighting--d42c6ac0-575d-4ba0-9225-b97c73c0342e", "sighting--53359027-6e8b-4cae-b76e-d6aae8e0fd19", "sighting--757c1a07-902d-40c6-a501-b1b902fdd605", "sighting--d0bd0a86-ff57-4332-8fd4-e9f92b6e6f7f", "sighting--9e705870-cee5-458e-9f03-24b61202ec4f", "sighting--ab1a95e3-f1dd-49f0-adf1-13bbb0fb1496", "sighting--9679745b-fe79-4e9c-bf9b-974acdaea240", "sighting--64023d9b-68bb-47ca-98b0-3791faae42ab", "sighting--0cab8b9f-85ca-4bcb-a955-b5719afcae89", "sighting--4f5da577-0d52-4ba9-bf57-753e3b6bc509", "sighting--7d01cdc9-e281-4797-82c1-1a641da2cb1d", "sighting--e724a244-b53c-4b40-97d8-7d7dc5db4db6", "sighting--ea7733be-377d-427a-afcb-4b449edf303e", "sighting--9dd90b20-3310-4ca1-acd6-5ed5adbd2f56", "sighting--ebbf8787-d2c7-4754-97ae-f9f204d14de3", "sighting--842c6e43-0801-482e-981b-dfed9bcdfe09", "sighting--a3844582-e08e-48bf-bccd-983675f04362", "sighting--ce3f8782-46e3-4a52-bb28-6b3fe137bc3f", "sighting--d2cb2aa1-3e86-4d2f-af78-67ab395a0531", "sighting--7c1bf581-c410-48e8-840c-21896a76830a", "sighting--45bfce7d-9aa2-49f0-a99f-743532a189a1", "sighting--3a117f6d-718c-498d-b720-b5ee3b927aed", "sighting--3bda9d15-82da-4f66-88b8-425557d7c85b", "sighting--662a9eaa-b712-4d10-8313-184ea4b07ced", "sighting--b6e352db-3739-4234-9c68-3bbfc27c3c47", "sighting--58a2d5d7-bc03-4b9e-8e88-372860bd08c7", "sighting--20787473-f87d-4f3a-8759-efab01bf579b", "sighting--86d58849-b00b-4026-8353-610f058db034", "sighting--b590a8e1-bb53-43ff-8d74-5832a4f37d0f", "sighting--d1cba177-73e0-40a6-a616-60a49632d8be", "sighting--d56515ed-c54b-4e8f-a7af-7f3bc4f892fb", "sighting--c5e2540a-28ec-483b-b4ec-4a75b2794219", "sighting--9f06a9de-216c-4809-ad53-7f8034c8ac83", "sighting--ba8dd65c-3605-4f16-ada7-7c1b1422dd75", "sighting--7871da6d-11a6-4bdc-bfd5-db6727cf9cb9", "sighting--38923491-bea8-41b1-be12-dcc1d86ea4c4", "sighting--2cba60b9-fa87-47e2-9862-3d020008d2e7", "sighting--5ee6997f-da03-49e8-83e1-ae7ac4ae052c", "sighting--7eca402f-aba8-460c-b3d2-fac2b18f833c", "sighting--869a4c76-d55c-4757-ab83-a7beb00dc3bd", "sighting--1eb5f651-5a9a-481f-b3cc-fee47e5e8e22", "sighting--5856d8a7-62d9-4ed3-a2dc-30f9971fab74", "sighting--5d92b355-4688-4ef1-86f5-bc64724ad2d5", "sighting--55c986f2-71b2-4514-aa44-c4e725cf8dd0", "sighting--9d9222d1-7ffc-4c5c-afe1-8e1d8b1d0d25", "sighting--f7f76c2d-1d61-4c9e-a96a-8b1dfd652369", "sighting--7c5e2b51-d970-4cac-b35b-6297291d2a58", "sighting--9b8ce6f6-2607-4117-a3e8-b3b5512ea06f", "sighting--449f16c9-592b-4cef-b917-50ef960cd93f", "sighting--43c6d17a-4fbf-4a79-8bb6-7d991688840c", "sighting--70edbdb4-e564-4d31-964a-083e0b12cf35", "sighting--731edaa4-e1f9-401b-8bd8-07aa5b2dc12f", "sighting--3569d2f6-abb3-4861-b4c1-0c7e4b6d276d", "sighting--42441d35-873a-45ca-8806-e6f686476ede", "sighting--ec82ab29-4f4d-4ccc-8452-404023563baa", "sighting--0db61cd1-d065-44a0-8413-94bbfd686b27", "sighting--886a4b2e-0cea-4dc8-bc4b-f7a6860ad3d6", "sighting--eaa4950a-9989-47eb-9d09-e3dc4dd02361", "sighting--348c19d8-ca52-4eff-89cb-ceb659cc0f7f", "sighting--c6916506-a9dc-487c-aaba-a2248c728890", "sighting--37ef5857-1e30-42dd-807f-a2f0f130a3fa", "sighting--f7a78af9-8773-42a7-8da2-c503e9c721ec", "sighting--29ea9cbc-00a4-4505-bb5d-dd709519f930", "sighting--e86c5229-6940-41b7-aede-057913d94b33", "sighting--553252c7-5324-4bf0-b64f-845e44d2a79b", "sighting--2658a09b-adf9-4b71-9518-8e9ed7a960fa", "sighting--026899aa-8d23-4c66-955e-578ea342156c", "sighting--f4ab1d6d-fcf5-4595-aecc-458198121b4e", "sighting--ba91e60d-87eb-4ca5-8ee3-afa072be3cd2", "sighting--f6f8aec9-5a80-451b-bb2c-4b1928347ea4", "sighting--22222b56-6430-4c5a-93ce-a9540477a8ae", "sighting--f74efd79-3ad1-4894-b9a4-ac1183bcf2b8", "sighting--8999f4ab-f349-4a4a-b76d-d1f1b8ff1532", "sighting--de10fcd0-731d-4535-b2db-40e060303312", "sighting--218de5e0-81dc-4e7c-96b3-c0b339ef9567", "sighting--9db27834-1f87-4d5d-b3a7-f08dd71c6591", "sighting--399102f9-fe34-4474-b043-74d657640080", "sighting--2798dac8-cec1-4e69-aae1-4bbf5aa717c1", "sighting--e5042c67-df2a-4bbb-a6d3-98f5e52e2e02", "sighting--f52ee3c9-df25-4a74-bd40-9761629729ff", "sighting--5bb04920-7316-49f6-9824-7215e83d23c0", "sighting--c016af11-7ec8-4fe9-9688-9f4740469a52", "sighting--920b1f4d-628d-47ca-a702-e2f6273edad1", "sighting--d99437fb-4cb9-44bf-b4ed-d37aa4c94469", "sighting--ced5b7f3-7486-4c0b-9087-ee6917130034", "sighting--af8a6bb6-7fc6-4b53-ac18-1d6ea7f31c51", "sighting--0a7819d6-a47c-4151-a659-971f337479b5", "sighting--d3901f21-c943-4fa7-825b-f358a061e9eb", "sighting--c2a12f88-e780-4e91-b8be-164702fe3455", "sighting--b0eeb515-bc84-4282-ac5b-cef63a5a7a1a", "sighting--3cbd0234-00ca-49c4-bc4d-024f7aaa7f80", "sighting--25663f28-074b-4fe0-ae80-7985fa5713a1", "sighting--e96dedde-9900-48f3-8bd1-fb9faabc6b72", "sighting--3ee014de-14c2-452e-9c65-74868c0078b6", "sighting--7a672a20-cb3f-4b7f-8185-30ed239851a5", "sighting--5bec114e-1467-4cab-b410-c9a26668e768", "sighting--cd71ea00-cb2d-4f14-b0bb-1a0bc0ea7bce", "sighting--2a217d16-e578-4ce9-8022-716c37991915", "sighting--beaac0c0-7491-4e90-8716-02dd4a42ecd9", "sighting--56311d31-8646-4d5c-9b75-d0538794ca91", "sighting--d871e867-22b2-4316-848f-08c51cd25a2d", "sighting--4840aac5-9cb2-48e5-922b-da3e31e26def", "sighting--9487ab59-fa09-4ae2-8359-92850bb1ccdd", "sighting--707f5f23-f193-45db-a69e-f3de51940a82", "sighting--fad19d7b-abd1-4a61-8ab4-788300254a47", "sighting--a309e470-645d-45ed-9ee8-03c2a6be8eb2", "sighting--996c4327-0ba1-4553-bc48-86d086e158e4", "sighting--6261885e-6c73-4203-91c9-3eeee8ba9f3e", "sighting--a4ed4bcd-d8fc-417f-8a2f-438a1cdf420b", "sighting--023a201b-093b-4b68-854f-57ebe3a4ad00", "sighting--e17006b7-7872-4d66-92f5-a63a122de2b3", "sighting--6604e159-5453-4d03-8a19-f7283a9a0eac", "sighting--2ff46d08-5d71-49f7-b14a-4678ccc51172", "sighting--f647b72e-8aee-47d9-a64f-5310281c0acf", "sighting--9591aab3-706b-483f-9240-e1b8740374b4", "sighting--755f0455-9fd4-424e-9ee5-525709cac1aa", "sighting--d66c27a8-f607-4675-88bf-1da4e139a7b9", "sighting--8778d1ae-ff86-45f0-abe7-6f69daec9ce2", "sighting--ee5e77ca-0f08-4698-84f1-6e4905447029", "sighting--682522ef-dc93-446f-83a9-950ab4e5586b", "sighting--c0f967bc-607e-4db6-a5d8-674b2d90c438", "sighting--cb737d03-9052-4f47-8fff-41d4bd7a8d2a", "sighting--f7155504-c8d6-42b0-9a6a-8a935d38722e", "sighting--3aa270e1-2fe3-4353-a9dd-b487e3e5ced8", "sighting--c27b5bdc-9e71-48a9-9ac3-faa0b6c63c3c", "sighting--1ee31b44-a3ea-4a4f-bf3e-72e091d2eeaa", "sighting--f2639d8f-3939-440d-a6f4-bbda14d88133", "sighting--544f653d-2577-466e-8caf-0b5ecff18298", "sighting--a8777546-521d-4347-9f71-9661899104c9", "sighting--229fc62d-3e84-4047-9aa3-992660ed3a2f", "sighting--1852e376-0895-452d-8e20-d87b56ce46cb", "sighting--e7d21d8d-42fd-41c1-be3d-81f721329c73", "sighting--539f9ac9-962d-4c47-ad5f-658dd0b80d52", "sighting--eaf84d0d-976e-4f18-99a5-20f965da0ccf", "sighting--f77fee9f-482e-4241-a319-44ffe7062bed", "sighting--12adbe95-b155-4264-90f9-cd7e0de245ad", "sighting--7d1d57b7-9df4-4e45-8a4c-c27e64e23b28", "sighting--23e4c8e2-36ed-4b0d-b890-b5f89009d5b4", "sighting--dc4097c6-fd53-4ac9-a699-3f4c82b3df1d", "sighting--91662d7a-2866-4da8-8955-6c430da2ae60", "sighting--48b6da67-5626-49d5-9d0b-798d582efacb", "sighting--77f929b3-19f5-4a22-9181-9ea56a37e6c6", "sighting--914fc155-42f1-46ac-92ad-036aa210424c", "sighting--4a054a54-c708-47a9-9e80-948acea21e7d", "sighting--c3dc6f09-4ad2-48b4-94aa-95f91655b168", "sighting--f6fc8cdb-2788-459d-97a1-e73ddfb46f4b", "sighting--816a4fb5-8da9-4311-8d19-465c1a39fe5e", "sighting--709fd913-4632-4fa1-a98a-b4f38ebd9d2b", "sighting--6c335819-d716-491d-a871-7c8223601582", "sighting--0dc2707e-59d4-40e7-8201-5a1000afe9b1", "sighting--45b442e3-1e10-468e-bf47-5f98bee2659f", "sighting--963559bb-d998-4de3-a60e-97632e87f107", "sighting--a2bcd591-b327-49aa-a8a5-5bc7496ee766", "sighting--ca665064-c446-47cb-9c6c-dd25712a2c48", "sighting--772ed162-8d96-4dab-9226-1244a1f215d4", "sighting--e0dabc89-4824-4f7f-83c0-130d34f5186b", "sighting--eb89b740-df24-4e3d-80a4-236c8f1a85ce", "sighting--f47cc287-38b0-4b73-80e1-54432411ac5e", "sighting--00ec0443-3321-403f-90cf-bcb5bb8be228", "sighting--ceca1329-3c88-4f76-9251-9a60fc4766c4", "sighting--a1d2592a-f2b5-43ae-8da5-e19d5553fb7e", "sighting--6a5a15f2-1145-48f6-af83-109e39cd7b18", "sighting--8e674e86-10cf-4711-b870-af429275e060", "sighting--e76206dd-ecdb-4032-8403-91a5106142dc", "sighting--8e9f5d32-8d10-4f2d-ba9f-4022a6bb54cf", "sighting--58e4d996-5eaf-423d-aeca-b0dd287cb6bf", "sighting--b969616b-b618-4926-a625-0c0c0975f77d", "sighting--6add4624-dfc2-40d9-b2c1-c8329db9f5f4", "sighting--a4bd5aed-a2ae-403c-a0b8-4e6b30f5cbe8", "sighting--fc8caa20-f6f9-44c0-ae17-a8cf8ba670f5", "sighting--19df4156-c357-4d51-9c8d-b957a823ea74", "sighting--0591ce58-e16e-4052-a010-56b38f01cf72", "sighting--dd092cf8-7d0b-4168-80cc-f3fbe06eb4b4", "sighting--d8446f87-f4d2-4be1-9370-23608286dcf6", "sighting--0ce43d42-4038-478f-8453-93a30aef9245", "sighting--cb85752e-2d10-4b41-88ab-7919c9dff6ea", "sighting--aede958c-e96c-4df3-878e-1219eabbeb93", "sighting--14208c2b-c12a-4211-b7f2-ea8128e4106d", "sighting--359dcb95-31fd-4c55-ae6e-98475340d050", "sighting--7ac65148-3dd3-4a41-bc37-22f6114cadf1", "sighting--44cc6b24-c2b3-45b8-a352-3bbc2604fbd0", "sighting--b79cac05-ea56-4f7d-b98b-0f1259fffb17", "sighting--36d45199-1ecc-40a4-814a-1fa2e9934233", "sighting--53f610a5-fd78-4314-b399-4c3d9fe67f17", "sighting--5c315070-1f6f-4b94-9af2-69789014e5d3", "sighting--5a5a776a-f347-4734-abc9-a74326474e90", "sighting--e581bd3f-b6ee-4714-99d7-75bf785512ae", "sighting--ffc563c6-817e-4f0b-80db-a533d70f4512", "sighting--f1902631-fb00-4110-a1c2-53a55b0b5531", "sighting--18bddd66-8b9e-4ffe-a7e1-4b49401a3bb8", "sighting--9d60bffd-51d9-4c28-ae29-b7547b217d6d", "sighting--5d82e35e-e2ff-42fb-9d09-cfc0314565a3", "sighting--3e93d55c-93c4-4cf5-85b2-1ba0edb99a2b", "sighting--1e030a4f-87b2-4940-9dbf-674ba625d83a", "sighting--89a662d7-1bd2-4bd8-b6ba-cb4e66bf056d", "sighting--9c10a67e-b209-4474-9c1a-9755f2cda6f8", "sighting--d0ed8b9e-ebae-448a-92da-e360a8536a78", "sighting--caa7953d-ad4f-44aa-82c1-edf58b0ee121", "sighting--bac14938-ef73-4dde-a941-bdd2b031391d", "sighting--b68045ec-617a-49f3-8dba-456f96928373", "sighting--1a2dc2db-1bd6-4b69-9f4f-110afdcee3aa", "sighting--d92219cb-963e-4200-8abd-d7233b8d0b45", "sighting--00696962-872b-47d9-bab5-469ffb43104e", "sighting--1c96f383-7172-412c-902f-38b044c79fb2", "sighting--2c4e8a71-5489-4a01-a811-191a620df5e3", "sighting--8e5a82dd-f459-437a-9d10-0cd81b657dfa", "sighting--0d3752be-e6c5-44da-bfef-92de4675b6fb", "sighting--633b9d43-5d6b-4221-a8ea-ecd72f9819ee", "sighting--1114161b-4468-48bb-8359-fbed3dd77a22", "sighting--fcc3802b-0ffd-4f11-881e-c928e650425b", "sighting--d84804ec-43bb-4462-8f0e-96d58ec848c7", "sighting--2c4aaa8e-11a0-471c-b506-0e504da1e89c", "sighting--58a1e436-60dc-4aab-98a9-f6608a075665", "sighting--b02453ca-f9ff-4788-960e-9ea803734dba", "sighting--0637c67e-7673-405f-a098-42a590d60eb3", "sighting--599da854-2960-4328-a052-403fbe037c26", "sighting--53ac81d6-5195-4605-9678-ddb905d88ed8", "sighting--2c43004a-3dcb-469e-bf31-69792adaaf49", "sighting--f3ed6d30-e5fc-49ef-942c-f5479522994e", "sighting--faea3385-de56-4797-86c9-b6b2785c142b", "sighting--68e00d4c-3056-4db7-8579-cd5ce33d685c", "sighting--986d9a2e-908e-4f2a-ad61-1b774b40d5b8", "sighting--77968e05-4d4c-44f4-ad0b-c853dca08ba5", "sighting--fa9e666d-c880-42bf-8bb4-408892b3b6d2", "sighting--1b48af05-6e1e-4f44-a986-e8ef42eba7d2", "sighting--9b6ce1f1-c054-4103-99c4-3b65498e3809", "sighting--99dc2b78-8fd6-45db-ad3f-a10b8c6ec24b", "sighting--04db313f-b6c0-4ad0-b26a-7d4351dcaa66", "sighting--06150718-3ca9-4658-8a1a-578c2a17b4c7", "sighting--1153b709-d656-47f6-9776-59abe96cacaf", "sighting--a10db110-8477-4f3f-984a-53aec50de9a0", "sighting--ddcbff83-e48d-4624-833c-0b31e007e032", "sighting--cbdfd04a-3f4b-435e-9ba3-747e234e481c", "sighting--7c6b3d56-bcfc-45a5-b3e9-8d4713a9f064", "sighting--cb5e1a42-ea23-4330-a69a-28bd76db7452", "sighting--1f2ceb9f-f123-42b9-8507-0916f0a56676", "sighting--42c20ba5-f8c6-4f64-9754-a550c820e4ce", "sighting--9228cb1a-4268-480f-9137-9976908635d7", "sighting--1f17a817-99dc-491a-8c94-6c1140b317ec", "sighting--28fa401a-b5fa-4339-b8c2-660d9253def3", "sighting--773e1988-f404-4694-b0fd-02261ec67144", "sighting--703dad3b-cc76-46ed-9491-38c9f4f5d236", "sighting--08ab5955-9e98-47d7-930a-c1ab58416fbd", "sighting--ba7ebbcb-57ba-4fcd-b2c2-5bd6bd9682a1", "sighting--54b264d8-9f8c-4df2-b2cb-649d63569db1", "sighting--946a3e3f-265a-411c-a358-8e551c17e438", "sighting--391b5a45-421f-47bb-a9fb-b4637ac25a6a", "sighting--fee1e3b8-14cd-407e-a4e7-f8651b0706bb", "sighting--0f9b1c3a-b406-49ef-aa52-8c44831759fc", "sighting--21f5abc3-aa7a-4e3a-881f-9e06a29f2853", "sighting--24460727-2100-4422-a3b8-7b69fab68f1b", "sighting--2379a5dd-5dd2-4507-948c-ec4a140d315d", "sighting--7ae8e037-a6ef-4d58-8984-dbcfa73a00d1", "sighting--eabb5243-2b84-4d8c-afb3-137cf9788a59", "sighting--a9d48fcf-5c31-46ea-befb-1da51db5ff78", "sighting--4a5d9ac3-51e3-4bdc-896a-b2fac89dafec", "sighting--ffecfe8a-059c-49e3-af8a-f18a58d77d85", "sighting--20d2b1c2-7958-49b9-b573-bc9e1ec3fe30", "sighting--cc417455-0e4b-40c6-9980-d2bc9f8b7c92", "sighting--ec759510-c1e3-494d-a91c-dec4fbfac2b0", "sighting--95b06aac-062c-4762-9375-9053bcc58bbe", "sighting--10c72f6c-95f9-4e0e-920e-a01c9d36e7c5", "sighting--8cc05f4c-d5da-4ce0-a524-8ef16ede4c7c", "sighting--1ed68314-6241-4ac7-b45d-86ff3cde1eb7", "sighting--111d92a1-c078-4ada-af19-ad046b110dcb", "sighting--e51fcc3c-07ea-4bbf-92fe-aba0ccbe6555", "sighting--3bddd194-6b26-4e5e-bc98-295b892956e9", "sighting--e573d1c8-e55b-4f7f-97d5-d623f60f62ee", "sighting--4a30a62b-a9a0-48b2-a8e0-68aa873964a2", "sighting--2bf93c8e-d78f-47b6-af03-dd43c53ceec9", "sighting--95a09d62-e464-410c-a8bc-54f69cfd409a", "sighting--6346d079-7d2a-4e01-9ec6-6e24aaa85a33", "sighting--06f4264a-134f-4d71-8737-4fae8d6fe80b", "sighting--156c6959-be64-43c7-839e-ef67e1bbc4d4", "sighting--33d6eb8a-31b2-42f0-93b7-81c811e70e88", "sighting--d7152a1b-4e19-4a29-9dec-4ca82a41a24e", "sighting--dbf72805-ac64-4de4-bbd5-748da5d22241", "sighting--30acdf09-140a-4856-825c-999c799e592e", "sighting--1ff8c58c-1b99-4ac2-b746-80c9148b6778", "sighting--43e01de1-1006-4b13-a2b9-2efd42ae8c36", "sighting--2f0e03e9-108c-4fba-bc5e-47b2763f85a7", "sighting--2af3ae8f-bd7d-4011-99c9-deadf81a705c", "sighting--58ef0f47-c390-4ee4-8203-5d10a1720e1e", "sighting--f1cd1caa-89bc-419d-903a-4b17ae4f50f4", "sighting--ae5b1b7b-ea35-41e8-b681-ae3561e448ed", "sighting--bd8cd960-02d0-44a4-8821-bc37fa25bfc4", "sighting--8d58fcc0-5c09-4201-ae91-e6d50d4b29c4", "sighting--30a84145-d239-4346-82b1-e100e67dc5b6", "sighting--3db21f0a-38c5-431b-8489-b2c2d5d2013b", "sighting--2634539e-f196-413b-90ad-6ab4204e9697", "sighting--582c29a0-8c69-4096-a454-5399eb996d1f", "sighting--bf08d4a6-1d2c-4eec-af96-96b3372dc6ba", "sighting--f599f948-216c-431f-89e4-fd534d38e782", "sighting--b0bb3d01-fb3a-4528-8b73-dc3443f99179", "sighting--fb064235-8780-415e-8db9-2b59e8fafc65", "sighting--e7df552f-5848-4460-aa52-7aa1ea33bc3a", "sighting--46c4e612-dd4c-4c16-b8a3-a908abd5451d", "sighting--31ab93e4-8e6a-4314-b8a4-40e1fe9a7615", "sighting--3436def7-e66d-4849-bc65-88271e750317", "sighting--bc2d64fa-f42e-492a-bcd7-e52eb5a216e5", "sighting--78ed513c-a9b0-40a4-b93c-8d3c745e3d86", "sighting--84679d79-3c76-4e66-a1f6-e330cb90b094", "sighting--309288b1-9a77-4be1-bc2e-0e1048500e7f", "sighting--1f137414-7953-439f-ae75-45e81d3edf02", "sighting--d4290efb-1e30-4d74-b91f-2dd96199208c", "sighting--099ae0ee-238f-476c-ac03-aa353ce13cd9", "sighting--c4e29ba6-0d4d-4bda-ba52-0e7e2125d743", "sighting--bc603a24-ea58-4742-8d8b-4ccc967df45e", "sighting--1ac9c9fb-c3e9-4b25-9b23-f264d8e85a67", "sighting--18b8d872-f590-47df-8b57-57338938b3bb", "sighting--2db7c246-05ba-487c-a182-5504a1b596aa", "sighting--b4e87e91-7adc-490b-a6fd-b1c3bb673ae7", "sighting--a6c4579d-986e-4083-b870-e2bb8b97be2d", "sighting--678b1895-f53f-4d18-93be-3682dc152f98", "sighting--98cde88c-4a95-4f25-95a4-c2aafad151a1", "sighting--c2a92617-c543-448d-b8fe-d26840822cea", "sighting--648ac8e4-0326-4fd8-bb9e-ee3db5855bf2", "sighting--706d455c-a59d-40db-a31f-d3febae41753", "sighting--b9599b38-a289-4396-9173-badd0716e80b", "sighting--9d008808-c508-4c75-9381-a2727911beae", "sighting--cddf3824-6e15-4a21-b309-cddc5757c636", "sighting--c1335524-f69d-4d75-8404-06cc11778e75", "sighting--90bb6359-290e-4e8d-8233-6e8074f8dc2c", "sighting--6cf30ebf-a999-4521-8323-4c9fd3c21eaa", "sighting--202c09f8-493a-4976-8931-5c1fa6a585c6", "sighting--fa95d669-c0a2-4026-aee1-b4428fa7920d", "sighting--07aa39a6-d301-444d-85a5-f3c77073ad97", "sighting--fc9109e5-1a22-4cfd-a41c-fc32f8355903", "sighting--2e2737c7-1ff4-40ee-a066-0324ece17b01", "sighting--19d4b2ee-bbab-4d94-9bbe-66e274edbf0e", "sighting--ff11682a-c4b6-42bf-a01f-ed4d31dbe4a8", "sighting--9fac0dfd-4a30-49d6-a592-20e0554ff42a", "sighting--051c4b57-a013-4a0a-8c4c-312c79390e9c", "sighting--ce6f6c68-a2f2-4d44-8e2e-f6430940d015", "sighting--ec11bef3-4c65-47d6-9ba5-f7bd26071222", "sighting--1b3ead3e-e069-40c8-8aaf-4174b0246b36", "sighting--51c92020-4d78-49c4-a7e1-fdb714c8e288", "sighting--091562f3-2257-4688-a7bf-9d04a6e97958", "sighting--86da95e2-d238-4018-a00d-670d8d5a1f87", "sighting--46d7330a-926f-4a4e-9958-7d06827f5e6e", "sighting--c3af8c8f-b718-4bc1-a371-cb659ba344f7", "sighting--cd2bdfcb-0b38-42f6-8672-8309529202b0", "sighting--d1426829-8486-49cd-abcd-314584823261", "sighting--c4a40647-f2b1-4c83-a478-7180cdc443d5", "sighting--1021f28e-ab0d-493f-902a-0a4c6967dbb1", "sighting--e4712275-d16a-47b0-bc82-4fc31c7f2b3a", "sighting--52b1273d-7ae0-40ad-936d-133938ec6204", "sighting--e4ce55ca-bb05-4321-aa70-37945b731f2e", "sighting--739b85e2-9aa9-4da2-acc0-b890735d4a2b", "sighting--a1bd080a-9273-45d6-ac02-582551a8f52a", "sighting--ee1ec8e5-3b38-4810-a49b-7b9158d171ee", "sighting--1f4a5e10-93c2-4d57-8b2f-0c9261b526eb", "sighting--f99dbbcc-03b5-4934-91ba-3af67760cbf7", "sighting--c39c902f-2802-4274-b0c0-bfefd996eb15", "sighting--494e5797-76f9-41ed-9786-9bd6a0bc13a5", "sighting--e9c812c8-e651-4463-bef9-036621f226ca", "sighting--c45b000e-4452-47b0-810a-84603130189d", "sighting--d07f2ab6-7dbd-450e-83af-784cd61026e4", "sighting--f623167e-a7c4-45d6-8988-9282aad5c098", "sighting--8c6afa8d-4052-43e8-b862-3fc2390c014e", "sighting--0242280a-88ed-4b3b-adb7-c0b7c9a6985c", "sighting--37bbbea5-7849-4699-a4ce-a367439602f2", "sighting--432b8371-2254-4b86-a184-9ad96a5421cb", "sighting--ab1dca0e-6202-4f46-9446-9069eb91ee33", "sighting--1383723d-48d4-407e-9de2-477f466ce9fa", "sighting--1c5a222f-4db2-4f6e-8699-5887a7254e8f", "sighting--c82ab5a3-d059-431b-9264-b0680c8e45fd", "sighting--a33fcecc-03e4-4d55-8f31-9e3dbb183653", "sighting--7b39e6d2-3a38-4458-aa0e-30a00b0d2ddf", "sighting--71b002ee-56f0-477e-aefb-7430201c6124", "sighting--4bbe363a-5782-4efe-a3f5-51f1f7484ef7", "sighting--ee1804f5-6578-44ef-9826-a0725d2536fa", "sighting--78923a96-329b-4589-afd1-3545e9fa5337", "sighting--f5333b2d-c173-4437-b7a1-98bf950ff824", "sighting--9d806ef9-729f-4193-8c99-88d792f9db7d", "sighting--e67c3e60-e525-479c-a1ae-05eac4c4d61f", "sighting--2c393521-4eee-4940-b24e-501cbe34bc20", "sighting--e3ad04b6-b77e-4965-b8fe-4ad5c196ad35", "sighting--4965b28b-ef5a-4a37-a10b-bdd2eab5bbf5", "sighting--3c674884-6dc1-47c7-89db-b74a6c82911d", "sighting--f77c72b8-275d-4aa0-bc67-55e61be71777", "sighting--e77d5f43-c448-41b6-b524-441871ccb7aa", "sighting--a8eca3df-ac55-440e-928b-9af70848bd5c", "sighting--f52add28-205f-4f70-92bf-a48fe4abffba", "sighting--000bf42c-219f-4e36-9fdf-19194ef2f5b8", "sighting--64127752-bd70-4099-8580-8376b09c6a4d", "sighting--f345ab83-2be1-4c6e-bad2-e355bed059a4", "sighting--e7d692ff-e793-4655-b5b6-87c1a4d83320", "sighting--3f04b8d9-3438-458a-9395-0bbf6ff209aa", "sighting--aa73ec89-cb82-487b-b3c5-596904f800e3", "sighting--56c115bd-200f-4503-b048-d968d7d8cf7a", "sighting--dbc7da3c-3d7c-43f3-8c24-793c715c5fa8", "sighting--bf70acb2-243e-456b-9e3d-8dacdc7b7994", "sighting--6bc82a73-ec60-4f35-8edc-0fdd8fa8d07a", "sighting--34735751-a170-4788-80ba-c8d4b2044355", "sighting--9df04a32-9f29-4a29-b7dd-ec994c6ad7d3", "sighting--ea566cf7-1e1d-4c0e-9c7b-afbad8301590", "sighting--27bf91c8-6393-4d00-8f42-b17a55915004", "sighting--e72ffdde-6eb9-4954-a96b-e01d62efdccf", "sighting--7b2abb75-3aaa-4512-b06e-5983f7f22de6", "sighting--1112e751-0812-49f1-b545-d0023e441a4d", "sighting--b9433f4d-8f5c-474a-b68b-cb7aaa3af294", "sighting--4f887783-55f0-46e1-a1ac-3a0e547d94c9", "sighting--250950ef-8738-4419-a3fc-905e2c1d9b88", "sighting--c457f138-da67-4ef9-b66a-3baeb469aefa", "sighting--09aaecbc-fa35-4f63-97ee-1824bc1e82e8", "sighting--5b689937-0ed0-4202-a459-8f8dfb476854", "sighting--9d5496b1-8c88-4e13-9a4a-3766321fa1ca", "sighting--1a1570cc-a3af-4b19-8578-0c38f00dad95", "sighting--534d3621-9276-4e73-8d65-3b4888695bea", "sighting--a7bd1fab-f855-48c2-99f3-b7e2047b4363", "sighting--162a514e-83bb-40d4-b7aa-ba432412bcf7", "sighting--ea4bc5f5-0029-4e29-82a0-71be7fcaf82a", "sighting--20e4578d-c19a-4d75-bf06-8d4aaacbe0c8", "sighting--49b933af-1de5-4d34-a60e-c7e1b4cd6260", "sighting--27930fae-c60b-4343-81e2-559e45873f36", "sighting--26db66cd-c1a7-46ea-ac26-fae679de447b", "sighting--7c81e0d0-4304-4777-a912-48b9c652a2d2", "sighting--3acacd25-d807-4963-a789-aed4e873078b", "sighting--27c31663-0801-4e71-87e8-03598454796c", "sighting--d82dbc3e-46de-46f5-a42f-4dba9b5f6592", "sighting--ebe8ff7c-8272-476e-b780-9edbc47b738b", "sighting--42a110d6-7852-4495-9142-2c1fe02c893d", "sighting--996cb9ae-0672-4b74-8431-10dcf76e3f0b", "sighting--2e2821a0-177e-41e5-85f1-cf0e3f3d347d", "sighting--1ffadadd-d78e-4064-8454-9ede318ec633", "sighting--79f6a001-61f1-48c1-b922-76225688609a", "sighting--712bd9f6-897d-477c-a01d-778f5f702433", "sighting--c3a7242d-2dbd-4b63-8745-932b6d5ac3b5", "sighting--ca01ba24-d8b1-4966-8f64-ddc8fc0c31c5", "sighting--20c18754-2690-48f3-824b-54840323cdf1", "sighting--1ee30cb3-f630-4511-8e8d-bfb304416b12", "sighting--10ff8b6d-00c9-4715-b00b-bf9cb0112a76", "sighting--f9912f5b-6915-4e80-9efb-32800fad0dbc", "sighting--835429cc-3233-4aa1-af4a-674d9020dbb7", "sighting--a3060237-163f-4693-a175-3bb192e6ff4d", "sighting--a3418d8a-c5b3-4b89-b2e8-16ee13b06429", "sighting--d02c9a4c-1374-44e1-973c-161ef2b8def2", "sighting--eabd97e1-c54d-4566-a6e7-91be31f5181d", "sighting--11538cc2-87ac-4f12-ba3b-5b4b2c453e85", "sighting--859950fb-71cd-49a8-b6c2-6395c4c9a221", "sighting--03944ff5-03f5-4d42-8e43-177417581d9a", "sighting--7040c775-7f88-4f3c-958e-4413cf0a49b7", "sighting--8465ca06-cb63-4dde-beec-90eaa13e6258", "sighting--41acecb9-1079-4d25-a098-ce81ddf9fb1a", "sighting--4b5cfe4c-452b-44b8-9ab3-1e18bb6be931", "sighting--f625f102-27e4-4e8e-ad21-7d7dc02166d1", "sighting--e83b7963-0f10-4609-adf2-126aa488be5d", "sighting--215404d7-42fc-4f0b-801f-ce09d0e2667a", "sighting--a205adb5-de45-454a-be94-05379a3b5362", "sighting--5fb54feb-367b-456c-b353-39959fec91bc", "sighting--3af17da0-a6f4-4ad2-8cc9-a5363355cb1a", "sighting--b54b4515-ba1f-4080-ba31-62fbd022c31a", "sighting--ac31c399-e013-4009-9452-124b866b3063", "sighting--698a4dd9-27d3-4e26-a2d7-83d64c23f865", "sighting--78464a2c-edfa-42df-b370-81cb1309e85c", "sighting--23460c97-7d81-4cd4-9282-45b267cacc07", "sighting--2a3cbd11-88d4-40cf-975b-81aa4415a05b", "sighting--ea604601-f2e0-4ede-87e9-ade29c4efe6f", "sighting--65ac527e-4704-4352-9a14-9b580b908477", "sighting--b75fd8f1-57eb-4fb9-a201-b2b75515a733", "sighting--c4f164db-aa72-4be0-8150-be0274962b68", "sighting--4b720f58-3553-4ffb-9fcd-c694be412d9f", "sighting--2cf0c615-fde4-42dd-8685-b8307c2fca14", "sighting--d9531a16-7158-457e-b778-2dfadd0fecd7", "sighting--bbef64e7-413e-47f2-abc1-706f398a6300", "sighting--2093fe6f-51c1-4db9-9e0a-3fcd5a19a84b", "sighting--aef4a9e3-99a7-471d-bf2f-981f164625ac", "sighting--13417173-712f-4d4c-9fa8-06fe3ba3a1af", "sighting--ee86a0bf-b97f-4e0f-9b34-3d4fec7a6504", "sighting--87e4610e-4ef0-4996-91ed-6e7d0ae649a4", "sighting--eac522ad-c9b3-4f6e-8562-859539a552f7", "sighting--b638acc1-42b2-4829-9044-24e0417099fb", "sighting--6b2018a4-04ef-4bcc-b585-ca2f2eae8840", "sighting--830d50c0-b843-4125-928c-93f70231b812", "sighting--e35b2ced-04fb-4ebc-a8b0-bda935dc0f77", "sighting--d55408f0-abe9-41d4-924d-b980950c8002", "sighting--d4a3a334-3ea7-402d-b4a3-9c9ece951fba", "sighting--f6adf925-a3a8-451d-aa98-e595ca7de840", "sighting--fcf4fc83-4ad8-46e6-8ec7-411d0e1cb76d", "sighting--408e8783-d172-4e85-a6ea-68d712349778", "sighting--ae99dff6-1612-4415-87e0-573494b4b2ef", "sighting--4a26666e-8767-44b8-a719-97e4ee8203ee", "sighting--8017922e-cd41-47ab-a42b-6ed28b5900ff", "sighting--e76512bf-573c-4923-87af-7ab4ac1dfdde", "sighting--a5ae2e7a-27cb-4242-8482-8b05c41b087f", "sighting--29a70186-e926-4826-812e-fc389d1e770e", "sighting--06ce78e4-d3bc-4dc2-a702-091cadd180d8", "sighting--3cb99db7-1544-41c8-9a49-2d187cc95ffd", "sighting--8be90957-7fe6-4d6f-840b-8a791e1e1412", "sighting--5ca97caf-223e-4d16-935e-6c5b08656f74", "sighting--92de2ba5-2eae-4643-bf77-7b3725f8a765", "sighting--cd89f958-1d22-4e19-91a3-b66be3c9f0bd", "sighting--182a0b45-9c1e-4d15-a96e-90dcb692813c", "sighting--af5354bb-2d6d-4546-b7cb-2b0089df7ea7", "sighting--8305f7a7-70c1-4e2a-9bde-d9e5398d0a37", "sighting--749dca4d-8c50-42fd-a686-f446a5510cec", "sighting--fee254eb-ba62-412c-a470-c0bdf7b4b74a", "sighting--8eccdce8-2202-4443-966a-f120891d898e", "sighting--c184ba0c-70af-4e86-982b-28fbec04afd0", "sighting--bc73cd46-1d95-4a3c-82d3-b6e06881606d", "sighting--05415c23-83dc-4f58-8af4-9670379cebb6", "sighting--5ef82a6e-fb8b-4d2c-a732-857c37787164", "sighting--ff92f7ec-efa9-48c8-8c8a-bcbdffc43aed", "sighting--088d0a33-5add-41f3-8ce3-72a922356418", "sighting--5774e307-2184-4b54-8f08-a41cbc0c2728", "sighting--a7fff01e-c91f-49d2-8993-e4b92051cedf", "sighting--60ffecf9-765d-4852-b905-b840f55cc796", "sighting--b3475ddf-735f-4f60-a315-88c8e33c28da", "sighting--9bf38ebe-96fe-46a1-9988-dc1a01dc764d", "sighting--cd69c476-9d4b-4520-833b-7450e506db75", "sighting--878601cc-ec6e-45d4-b239-a3c3517c49d7", "sighting--c1bfaa25-0b21-492b-9da8-182c19644927", "sighting--29190d4b-340e-4e26-8ac4-75e483e8b20c", "sighting--10815744-abfa-4c7d-b32f-1db18923a8b5", "sighting--746ad08c-cc86-4afb-8402-136fbcb20190", "sighting--6b0ccf34-eab4-4ed9-87de-c3a7772e39ec", "sighting--a9bc2339-829b-4316-a3c4-4324d32f4a59", "sighting--1a3f1766-e981-4995-b1e5-39cdc48582d8", "sighting--1a33aa06-1afe-41d9-98b5-9e9115de6e5e", "sighting--b14e6f55-0f5e-44cf-8a9d-dcd91a6bea8a", "sighting--9ddecf02-8c00-4a00-b10e-60aa17dfa3f2", "sighting--9d7cf21a-1a26-4c7c-a97d-84cf39b87d88", "sighting--354a6d6d-59e3-4716-9e1e-6d755fa9a090", "sighting--d82d46f8-acbe-4874-82c1-4cc7d9c4fc06", "sighting--1763db01-0497-46ec-90f6-a74b7adc7b42", "sighting--43016e58-5aa7-40fc-8272-db076571d272", "sighting--29ba314f-28ef-4c8c-8463-091d076dece3", "sighting--5b658eec-0d1b-401c-9a54-ea8c295e6ad9", "sighting--b2357a62-798e-4cd5-adfa-0172a79b89ba", "sighting--58eb518f-ead8-46cc-b5a8-cc32e432af5d", "sighting--ad87eaff-2c04-4368-9445-179c518ac173", "sighting--1d811d06-8055-4383-919e-4243b4397932", "sighting--7eb3f392-b9a7-4e66-bedb-f955705561a9", "sighting--bc48afe9-146b-4469-81b8-88b343fd0af8", "sighting--e5a3ec73-b1f7-4eca-9713-91c9f19ab111", "sighting--f7cf6dfc-6291-40ae-940d-2e69fa24c229", "sighting--73c528f4-afa9-4af7-8e60-1a1f1eafab13", "sighting--780ad8b2-53a4-4f67-ae26-36b2ea62aa62", "sighting--e31be997-0983-44ac-a6aa-9118bd4851cc", "sighting--280cc33d-e6a9-4fbd-9195-8a7b6b0a0e40", "sighting--9c461ddc-f057-40f4-b66b-c504fe60ade8", "sighting--28d4afbc-b59c-4190-9537-e8806f45fa78", "sighting--4a022efd-249b-4c54-a2dc-b8d6011b26f0", "sighting--c6ad68b2-11a7-4479-809e-5589372096df", "sighting--31a4742c-3281-4b21-a21f-44da9dba62c2", "sighting--9c4f879a-1907-48d6-99de-03286fa0a734", "sighting--4f841494-fb05-4df4-b109-282cfa53c9bb", "sighting--8b63e183-801c-4d6d-858c-d362c872be9c", "sighting--ee8f93db-8469-4c3a-bc78-ae4eb4746df2", "sighting--ad537989-9276-48c0-bd40-27ed9e9799ee", "sighting--f4cb1da5-3ce7-47f3-a531-8ab9250b2109", "sighting--5f686a8d-58d7-401f-ac6c-c419400975b3", "sighting--fefef848-156e-4f38-82ae-2b8ce266302a", "sighting--87bb0127-ee1a-4429-b27f-efe485dad327", "sighting--aa4ece62-8aa4-4173-9457-5fbe9d549a77", "sighting--cdea3250-3418-4d21-b123-12d4709b0954", "sighting--fff15810-1b9a-4643-a540-35d884c3380b", "sighting--30c1c6ed-9846-4868-93d6-84f4eb2d2801", "sighting--cb1f46bb-e000-4228-aa52-1b3c01079f35", "sighting--02e9268f-80d2-4bf1-b62e-0b58c763b665", "sighting--a796bede-2425-4b2d-a873-c55c716f8282", "sighting--3e380520-027e-4ed6-847c-60dcbd5e6d3b", "sighting--5f45b953-c795-4132-bfc0-35711e78cc07", "sighting--2c8d170d-4ae2-4902-a095-97dc90e905fb", "sighting--f44b8092-65c6-4876-a406-48e8f80ffe95", "sighting--0e896c42-2d6a-446a-9268-86a0be8adeb4", "sighting--4fcafa2b-3e07-4a99-923a-5d9abd41ec87", "sighting--35e79b74-f867-44aa-bc74-64c6f6067c0f", "sighting--515a1e5c-6a29-4bcd-9dd1-8af2485a607f", "sighting--43ecc2d9-302f-4803-83c0-ddcfb4b30fb0", "sighting--6afc885c-ecdd-4973-86a3-524e5b6766f7", "sighting--1ece6389-c5dc-47cd-94db-4e84dcaf4fa2", "sighting--f2a3f323-961e-4db1-80cd-be318c5f6a3d", "sighting--381db8db-fd7d-4d14-9a8b-d5ba11e5529c", "sighting--58133bde-3496-4c57-95d8-1b1d4b7e1c44", "sighting--9eebe4b3-5923-4203-8cbd-bcdacb1d8c54", "sighting--0d8c059b-03d6-4d1b-b043-cb2009c93444", "sighting--9a6b24d3-4e1d-44a0-b108-4328f7b269fb", "sighting--428a3dde-25e6-4494-b4c8-57f7e4855c26", "sighting--7cc961d6-8308-49c0-a153-0eb94e685616", "sighting--2e99c937-153e-4e74-a064-88203793a860", "sighting--90e79478-84a3-406c-8a0d-9c78e47e90d2", "sighting--c524b684-bcc7-458f-89f5-00b7db21eca5", "sighting--cba54643-9d22-4579-8567-19f5e379c6b2", "sighting--2d9588b2-96c6-4835-8516-e81a4614a264", "sighting--328cbef3-881c-491a-8c99-dea855336703", "sighting--187e0372-d011-43cf-acee-d74bc4238370", "sighting--2d1c6e8f-e012-4047-962e-9c369d612b0f", "sighting--189990c5-05b0-42d5-ab4d-4fe70134181d", "sighting--c5f5b64b-dfbb-4db0-bc5b-7cc609ee80a6", "sighting--523e7873-8f75-4dd0-8e8b-f6cf6e902004", "sighting--1ddc2d40-a6fd-4e3e-abfd-dcbbab09540b", "sighting--efe4409d-c6ad-4211-ab1c-6caa0be89789", "sighting--d9927fd1-643f-4726-bb61-025425627102", "sighting--92788322-60a4-4cc6-8f1c-d452d197bbed", "sighting--194fa295-e865-48c5-a605-1773d71d598c", "sighting--a07a2f2e-bd3d-4ca8-8942-eb461e73f8b3", "sighting--2a71f4e9-1ca6-4d63-b5e9-714261dd5db9", "sighting--7271c37a-54e0-4fb5-bbd4-e73be23f1250", "sighting--1c1d5a23-cf77-43e0-b626-34d3629a746c", "sighting--070abb74-a250-47b7-a28a-c77f99ecd819", "sighting--de5713b2-0c98-4f84-94ea-c87d4ad250c8", "sighting--3f3322b8-0804-4751-bd96-6fac26663aaa", "sighting--7f696e9f-c988-4d4b-ab37-051dd870b3e2", "sighting--5d38fbaf-6420-4317-9afd-7d0a96cd843d", "sighting--2400d64c-6b66-44eb-8615-f10e75f729e8", "sighting--c03a1ab1-10c3-4013-923b-2a48ac616b82", "sighting--f9b6192f-2337-439c-ac3c-ff87676f2dac", "sighting--0b4741a1-c724-4b85-9ae0-71cadc464bce", "sighting--d8eb39b5-eb65-414a-ae63-7f904158cada", "sighting--3e63cd03-6d46-4ffd-8292-493a97e1ae49", "sighting--ca2b3ff6-bb69-4377-b6b3-f3d59edabe4c", "sighting--4f407ba5-9a60-477e-a156-b3e063ef5411", "sighting--8d68078e-6871-4825-a4e9-9e386aced07d", "sighting--3efaf8b8-8c5a-4f05-8811-567d31b24fe8", "sighting--2a1e1515-3e3e-4a93-a44b-2972e66fc034", "sighting--21071d19-6add-4260-9c15-7565e0948c03", "sighting--1a883b20-c84e-4b9b-94ae-f11a001ded86", "sighting--3cf6ac80-2754-4726-9c7e-1a24e65d2cbd", "sighting--2347b318-a525-4917-86ec-145be05bb768", "sighting--ea8c36b9-8e02-43b8-9fc3-d31caf649f15", "sighting--32441c2a-909a-4259-afe9-624705494246", "sighting--b04563aa-eb5f-410f-94da-4377b4ab327f", "sighting--4d06eef1-3b10-4793-b4cc-68bed04323e5", "sighting--36545c23-b382-456d-ad2e-8a452a2c0a29", "sighting--d25328c3-d6f5-4f6d-82d1-80ad33662737", "sighting--dded0f7c-39be-4740-8bf2-b47dcf49497f", "sighting--4c0052c6-7c1a-41c7-8f92-bc971ba100a0", "sighting--83d7d7f7-925e-4d3b-9d77-94649dcc0ea4", "sighting--86a6c722-453b-4630-bec9-06e03fad38ff", "sighting--3764114b-21f6-401f-8c36-55e449ce2c32", "sighting--5f1f505b-c49d-4d8e-b95f-8fb2f2d97f00", "sighting--c1b7b382-1c74-4305-9db5-0dd357defed0", "sighting--472a44bd-80ce-4ff7-a902-b6b153434bd7", "sighting--0ceff395-ed3c-4dc9-8cfa-e55b0e778bac", "sighting--5b992e45-a1b2-414b-8bd0-6d073a805fe4", "sighting--26c00b33-bb91-4ebd-8044-563ffb07d681", "sighting--c6d32057-63fc-4cfc-ba9c-009306dd3db8", "sighting--0a7479ba-61e2-4ed4-9d4d-2eede356a598", "sighting--a2932fbe-c704-4602-bf01-a44dbe5ce5af", "sighting--97a93e03-7892-4b7e-868c-99d596b95225", "sighting--e4605741-4aa1-486f-b8b8-b5dc87e17652", "sighting--5bf31301-f125-4b64-b9cf-84abb0ccfd1f", "sighting--d9a8a0ee-ad71-4199-aa87-cb5bfa0b2a71", "sighting--91e9fc5d-01fc-4594-9c59-c7f4cb055ea0", "sighting--ec3ae669-5ac6-441f-abbe-3555cf7af688", "sighting--303ad689-1439-44c6-a2c3-bab1a77e7533", "sighting--37f0bbee-a609-45b7-a10a-57492583437a", "sighting--2a7d07f8-2614-453e-8b0f-cc659426eac0", "sighting--8502f6dd-d3ea-40a9-9012-d21ec14d33e2", "sighting--a4a62d05-cb62-4bbe-81c3-e21ad392a615", "sighting--999c37f1-5462-4d21-a376-fddbb939159d", "sighting--53f447c5-7ec0-474a-96f4-831c098d9ac1", "sighting--b78a0525-7534-4deb-964b-9b19a9d18ce3", "sighting--ddb95803-8879-4678-9696-63d82b62a6ac", "sighting--2d5a9761-d5fa-4097-be0f-b669405f3773", "sighting--82560add-a5d7-477a-93f8-32fc7d3cf27e", "sighting--fdc3d702-c91b-4b5a-a951-5714bc24850a", "sighting--e951c826-ba1c-43ff-8243-7c40ed979960", "sighting--7e1e2109-d91f-456f-a488-1ee9867802f5", "sighting--3c3a7193-0164-4b44-b7e1-c286792b5588", "sighting--b498efb2-1dcd-46a7-b72d-e3982b05a246", "sighting--6e7520fc-92d2-4a6f-862c-d4a3555a08a1", "sighting--8e160ea6-ca60-4dab-8b9e-432c4460312a", "sighting--58c569f1-aa0c-4dfa-ac78-34f35d7a29f2", "sighting--df567676-30ed-4c85-b41b-1ff4057bfa36", "sighting--8f5bcd61-2f04-40f0-a226-2d79a029acda", "sighting--5cdbbe51-7dd3-43d6-a710-0c3fa31962e2", "sighting--62fc79f4-10c4-4e7d-9340-f9dc3658920e", "sighting--55a53543-8d68-4253-a045-19ab92ba0236", "sighting--da0320a7-27e9-4568-9fd8-b9b160509dfc", "sighting--efa355a6-8b20-4496-87eb-41587c43ceb8", "sighting--b2c2171d-ffe8-4e91-b862-2ce9df67c8f8", "sighting--9824cca2-f9ef-40e7-b638-75ef4d1c4278", "sighting--81f12321-8037-4b2c-88b1-358fcede68e8", "sighting--c9b74bbb-083e-4147-91fa-234b1394be41", "sighting--830526df-b6ff-4792-ac49-43234bf8393d", "sighting--4b47d0d4-7877-440b-81f6-f1f1e1b40d62", "sighting--04660623-cdbb-4832-8186-7ea69d9071d6", "sighting--53c30aab-62fb-4754-9250-f9cfe4739db0", "sighting--e246f388-7568-4c1f-b33f-3c40cd3cfb66", "sighting--c8046b3f-be5e-401a-ab6f-9091925a4369", "sighting--18de757d-755d-48d8-8611-76751d314cad", "sighting--ff768571-1042-4527-a173-17eaae903cfd", "sighting--b43e667a-0ca3-4ed5-be52-bce84d293a8e", "sighting--74b43d48-9bef-4650-b75a-b91fa085dbe8", "sighting--24205a61-cf34-4721-b173-8e9ce2a6428b", "sighting--e1a9666f-79d6-44a0-8f59-bb8da805371f", "sighting--b5446cb9-84ae-4b3a-91cd-865dde8525fd", "sighting--6f7c474c-c874-4b68-b22c-511156f979dc", "sighting--b8e4dc66-34cf-47fc-9c04-5d26a2386204", "sighting--9a72c1d5-9623-4b06-9acb-c24861f27d28", "sighting--421de81d-d756-4a62-be19-903a66e39ab3", "sighting--6374921c-c962-43bf-9e09-145598aaa96a", "sighting--9dbf1c96-401a-48e9-8c9c-b809a51ed853", "sighting--5654f9ef-ee56-403b-bad9-fb901d57bd72", "sighting--ac813454-7d7c-498f-9e9f-3045202a4aa5", "sighting--450a8ee9-ff73-4605-9c63-8724a00570de", "sighting--7bbaca29-fff8-4e0f-b711-29bc09c1e3a4", "sighting--dfc818c6-a119-438b-845c-a0e2e0ae4cb3", "sighting--bba747a0-fbbf-43dc-b4d4-2b32b8f93766", "sighting--12aa4e37-05b3-42da-a69c-0a6b93e7e050", "sighting--ccd51d09-ada1-4546-b89f-3cdddab3517c", "sighting--ce696e56-3b65-44e9-9bba-2d6068a6f9d2", "sighting--c59c5ec8-ca1e-4095-ba74-f4932d0e4eae", "sighting--8a34a878-bc0e-4201-ac91-8f9759d6bb1d", "sighting--efa2485f-84bc-4853-b0d2-6b545d99c8f2", "sighting--de84c040-bfe9-4be3-aa54-8f5eb99702a1", "sighting--6ebaaaf3-85c4-4115-958f-65c5caa3142b", "sighting--b736578c-ca8a-49d0-8a24-0e0f98e22602", "sighting--16ce47ca-b81a-48ee-9d96-6ff9f4da8040", "sighting--aefde993-b3da-4b43-853f-cc548f879141", "sighting--b6232cb8-1ab0-47e8-b139-40564a8c7ff9", "sighting--7e102d75-cbd3-4ad1-9edf-470a46b3cdaf", "sighting--799e1882-aea5-4063-9fb5-2336becdaec3", "sighting--ea2c0952-be85-44b9-846c-59494309d739", "sighting--1245d505-1afa-4516-8f8b-3fa16b3c1569", "sighting--2249df93-9028-4a46-a453-7914adab5175", "sighting--1ae46024-3eff-491b-bb7a-f4f5fca6a22f", "sighting--34508c56-23c8-4cf5-a26e-1ea2a14c79e8", "sighting--571dcd24-da35-48e5-987c-87b4577e70f2", "sighting--91ea7e34-06fd-4bb8-8a43-5cc3a742543c", "sighting--99312f13-81e7-4dfb-8cc1-da8e717b62d8", "sighting--9e56be26-d76e-404a-bc0a-e837ec9848ea", "sighting--8d76ef83-ed7d-4bc0-88eb-c90bdd5de3d3", "sighting--482a207c-31da-4372-a282-fc14b97dd8c1", "sighting--d4d979b3-a563-455f-8f8c-fb3755e67787", "sighting--8ce73e1b-09f2-467f-a0fe-856e7ba0efda", "sighting--087a0dce-55b1-43c5-99c5-66d38a3d7740", "sighting--c2f26b41-7eed-4915-89d7-fd3899de64e3", "sighting--1f8c3a10-4977-485e-bbcf-979186429d67", "sighting--a49461ff-78b9-4ca5-ac16-cfbdd78b810a", "sighting--a8ce3ecc-b614-4ee3-bd36-636e4b429e46", "sighting--a1104d2a-7d50-4d20-bead-bc263097e54b", "sighting--297c234b-973f-44e0-9c49-14e04c440a75", "sighting--d92a4864-1996-46ce-8d79-12b5aac4dc70", "sighting--b094a5b4-3e64-408b-9c0d-aa842f054f1c", "sighting--1114a7ab-bc35-40cf-a5af-44417acf0d69", "sighting--b9bcbce6-023d-401c-9030-404c25332884", "sighting--eb76b272-e5ad-423b-a5b9-c211713d135a", "sighting--459019b1-4163-486e-bc3e-cb2dcb2caf77", "sighting--d169fc4c-41a0-4b21-aa82-0e41ead49f59", "sighting--da3f4189-9a4f-4fdc-b8fc-610ee7a2f201", "sighting--df4ac897-451a-441a-97f7-9cda2b8afa60", "sighting--c0edb6ad-4efe-4007-bff1-563bc0807740", "sighting--f2de94f5-e677-4839-b4da-49bd36656b6d", "sighting--5994daa4-c677-42cc-9059-aa86a284de46", "sighting--1a6aed0b-865b-405f-9624-2394509e313c", "sighting--6feab737-313f-4631-9247-e362f32b6c5e", "sighting--1c874e53-e2a3-454d-96ac-991734689880", "sighting--d83a20dc-1e97-483b-ae44-6741a89b2864", "sighting--da4550f9-6240-418f-994c-9efe5673fb9d", "sighting--d7d862d7-2b52-46a6-b4d2-9c6e3a864833", "sighting--03b285cb-3e7e-4244-9d6c-b63be40761d2", "sighting--15f114e4-17f9-4589-82f9-8533ee5ea33e", "sighting--c0663f0d-33f3-47b3-8b04-0ca399789e6b", "sighting--0290a571-cbc7-4abf-8e6e-17e43489865e", "sighting--3c350004-e932-4aa0-aed3-30c10c60f971", "sighting--e579d371-59ed-4081-991b-85d555e47e57", "sighting--5de3d74f-171f-4771-bf89-45fddf99d6d2", "sighting--311cecf2-4f69-4631-b8cc-944a53d59746", "sighting--6030adb4-77f9-47b7-a76b-5d953ffee24a", "sighting--5d2e4565-900f-406f-b462-40c3d193b1ca", "sighting--75dbc90f-cfea-4ac2-9ebe-66fb2d88efa6", "sighting--22418a90-66ee-477a-ba0f-45a7bca9aa91", "sighting--7d057574-0aea-4d47-bd40-dc2558e79810", "sighting--eac1fbee-cab1-447e-9f6b-af4d623727f2", "sighting--9269bfee-9c5b-48c4-89fa-2b44ca8d7123", "sighting--9cb96e20-890a-4131-96ca-9230bfae2de6", "sighting--aa94bf92-6dec-4f6c-8856-8f5a2d224cb9", "sighting--220fefb7-5e4e-4601-b326-6e4a83c43861", "sighting--1c2c9a2c-338a-4482-9844-4ddb3c23fb58", "sighting--7f9c75c4-6c74-452a-bf57-7a27ec210ef0", "sighting--68b71988-af58-4808-80ea-7eb5bbd0e010", "sighting--6b28274d-3753-4295-948d-63d80010a3fc", "sighting--a24cd76b-0106-4e6f-8bd0-0a46220f6448", "sighting--f2e38f0f-9cee-46f6-b6ae-7a1bd42139fd", "sighting--6bc6daf9-69ad-4c2b-b19c-1eefa29af0dc", "sighting--f080ff87-c964-42ec-a503-d981949c6a1c", "sighting--e209701e-b8f8-4172-8c23-ab55ffa6b499", "sighting--c8e1c0f2-1a9d-424e-8385-7b6e140de365", "sighting--cdabb436-f7a1-4d3e-905c-581e93d60d24", "sighting--8fd5b798-cb42-43bb-92f0-015731c97be4", "sighting--b1d38a6f-38c8-4669-832b-c3ac1e98ee39", "sighting--660ca64f-1afa-405b-a53d-51dd7276d61f", "sighting--cbb51f2c-c1a0-43bb-91a7-f3958b52fa6d", "sighting--7682fea0-7eb8-4535-b680-8a2b755f1623", "sighting--94f55212-b6e8-4c4e-9121-4ecda054e6e5", "sighting--e341b81f-e6d8-43a4-b066-dc3a9584e77f", "sighting--e05f4b18-583a-447f-901f-51e328c33878", "sighting--0a4f57b9-4e5d-4100-989d-fc1578879ce6", "sighting--c749d9fa-a8ef-4fc7-ab95-2a7bcec19d52", "sighting--5d586a8b-0c13-4172-a741-91e405da708c", "sighting--3487de0c-9550-4c35-a50f-255d6b7429d0", "sighting--42c49b92-2c07-4bce-8155-52a4498d3215", "sighting--1f5b3e5b-1fa5-4842-842f-248e01a835f0", "sighting--99cef0c6-5721-498d-a72d-8bc45777fbd9", "sighting--51aebd8e-2047-4b9c-bdd7-9795f75b7ca8", "sighting--5c85f28a-d141-47e5-b7cc-50f1a0d3e335", "sighting--eb814615-fbc9-47bb-97d3-8e6e7da03e20", "sighting--d837ed98-7daf-40e8-950a-c0976579f77c", "sighting--f5ea22a4-41db-4253-8d14-bd9a3ebe1a7f", "sighting--422a4ee3-cbd3-4f82-a83e-b281871e63f0", "sighting--a8d925ef-5db8-4fb2-998b-35019efe03ca", "sighting--9a687acb-3c10-49b5-ae2c-9b4a5a342d69", "sighting--8943b78d-126c-4734-8ce6-1e5d8ccf4171", "sighting--831a9bee-f04d-4a17-9e4d-bc946e9f07de", "sighting--13ad2374-e4e7-436d-902a-7265283a3c64", "sighting--eb52ad45-698a-459b-9a5f-5af74025a11b", "sighting--8bcdc2d6-e268-4af8-994a-a820acdfc867", "sighting--07f20e87-257b-4bfd-a5c4-6780af544d0a", "sighting--4bf90f41-32f3-4bb7-aedc-0f2df4f8630e", "sighting--1ad87f5a-05c0-40c5-89ec-4cb9b9b139f8", "sighting--75ee6c89-f7dc-4d1e-96ab-eefd61104961", "sighting--2053d46a-6340-4017-b104-1de539b6b34e", "sighting--c9681b7c-73e0-40cd-89de-4fc3450f2a79", "sighting--e3663fe4-fdc3-4313-876b-38e638b545f7", "sighting--2f401a09-c7ae-42a2-9bf8-cc514e1a5673", "sighting--f34618b6-d07e-46c4-98f4-3cafc045ce97", "sighting--15f2bca2-1396-4307-9cc7-4fbe0b996b2f", "sighting--7ca7408d-7bbd-46ee-94ca-372dda8796f1", "sighting--08036aa2-a1a6-4dc8-a37b-c07fc75f6dfc", "sighting--32fe4357-a2f3-4618-8956-36dc40143507", "sighting--5f337e3a-d781-4a6f-9363-6c01677d672e", "sighting--50281118-8b74-4fbb-afa5-9403c467d6fd", "sighting--9f37acd0-746f-4f49-b047-d5250941121e", "sighting--18fdaf9a-16a0-44fc-99ef-dc8c8f7a212a", "sighting--124e90dc-444c-45e0-a0a0-fa3c8a278660", "sighting--ad878f5d-e370-459a-832f-1cd433a7c120", "sighting--3bd81562-5c26-443a-a1f4-36a91fa4b991", "sighting--299a5925-bb2c-4d66-9511-b755a6d792ee", "sighting--56b03e57-4ad8-4fd5-bc20-b6c2ca87b853", "sighting--9b62ad5d-0944-4bc6-8bb6-67945c290dcb", "sighting--6a6eed24-113c-4eae-9f67-b8ed14890d28", "sighting--55d834ce-f738-4e15-8c74-da34ec889ff8", "sighting--28a60eed-db3e-44e1-ae04-af37efdb0e15", "sighting--885e827e-ee7c-4b2b-ab94-83fb7aa5617d", "sighting--6e8c8f91-9251-47e6-9a7c-33a216e93f92", "sighting--eef0166d-3b33-4967-89c9-f246f9f11e26", "sighting--3a107d36-5d9c-41a9-8863-8aad4ab74748", "sighting--0a6f458f-680b-41c7-90c1-55fe50b14d1c", "sighting--fba77119-02c9-4c06-ba5d-bc0b1bee7f35", "sighting--33df0cc7-b11d-4b91-839d-f0f2962d0a3a", "sighting--0d50db22-09a8-4bc8-8c77-6f30f23f5373", "sighting--34fcc4ff-a264-4402-9202-2c67ea1017c4", "sighting--c1d0dd0b-96ad-4293-8d57-9df6ee864b55", "sighting--950fb79b-d0ce-4f28-926b-131af1e88da8", "sighting--e946128a-376f-4a32-8c2b-e550fe25e721", "sighting--24585d50-5dcf-49fd-acf9-82428c1ac3f6", "sighting--06683e37-b14e-41b0-8936-464166a285d5", "sighting--db17c553-6640-47c7-9d82-f588c127aad5", "sighting--06d9d2c9-b31a-4ac8-9332-0ed22346828c", "sighting--ec4a8c09-4e73-4732-834c-41175591c8a0", "sighting--056a197c-958a-44e6-8bd4-39641c7ea56c", "sighting--b77a3ca3-a1d1-47b1-b02f-13d46f7f057a", "sighting--dafd3fff-6cb7-4abc-9dc4-bc7ced45ca76", "sighting--9341a1a5-172d-46ea-b33d-2b7e5e13bea6", "sighting--94e7b9b2-a7ce-47b5-9158-62e43b9a57c4", "sighting--9e6d6dd5-1501-4f8d-adc7-5efb1b123f77", "sighting--820c3cf7-6e87-4afd-875a-7efcb38ef4fa", "sighting--52e5c8f9-3726-47bc-a027-11ef7f7d702c", "sighting--cb626140-1607-41e8-b24f-b184bf65cc6c", "sighting--b13288e1-7283-4e85-b085-5b45a7d7e793", "sighting--ba148050-2f24-407f-9538-fadc8b5c7da9", "sighting--63acf49a-1b02-42cf-9da8-51b1a630d32a", "sighting--dd4756a3-a554-4b59-a962-ac8d470e9482", "sighting--fd3ae594-ba4d-4c29-8dee-fe0dddd6c3ae", "sighting--8925f600-a6e7-4306-aa9c-bb291d257e63", "sighting--58cd4af3-661e-4771-9c87-ee372589ec1d", "sighting--18f4fcc7-6da0-44f4-af32-b727d62411e8", "sighting--44644f1b-1f92-44c3-808c-90a232a66bd2", "sighting--85e35565-d77f-4868-80ce-6721caa951a1", "sighting--e40d72d5-4ba5-4f22-8541-575b5d868496", "sighting--844218b0-6fdc-4918-8867-94625d59957a", "sighting--8121eef4-391b-4f12-824c-b7b56048b456", "sighting--894dacd7-ca92-4805-b02f-f7278ee86796", "sighting--33dc4d8d-7cdf-471d-9db2-0fad7963e532", "sighting--54813a52-9201-4ee8-aec4-657daf170961", "sighting--03d2dbb9-8f30-48e0-a937-087036e85595", "sighting--b5683197-6417-4f6d-857c-66a798756fd3", "sighting--1e611e51-fcdc-4a27-925c-152f6847d178", "sighting--cfb3e252-6341-43b6-ac6c-9a0bfb9d1376", "sighting--0669f53f-1a59-499f-bb9f-dded419ccb08", "sighting--7e976bf3-262c-4a93-a742-982e2563055f", "sighting--11f6c077-45ef-4477-801a-bc4629f94148", "sighting--afc7bab5-303e-400d-866b-1c9fc681fbe8", "sighting--5bb1ff27-5a99-4b0b-93d8-6211b6ebf212", "sighting--a5edb377-9de2-486c-a00e-fd5cf2468884", "sighting--bfeae36b-bb86-4a50-b6c0-2636f20c560f", "sighting--d296ec0f-d689-4096-897a-2b35e59194ee", "sighting--19f2f74b-935b-45eb-bcf2-a89a4c839ecb", "sighting--a07d1f40-8bf8-4e23-b8ab-cdd8528a255e", "sighting--5990ef80-159f-460c-b0bb-2ae179fdd535", "sighting--9fc0398a-7eeb-4670-b4c8-d962b1d26e72", "sighting--e8f8fedb-5718-4092-8861-338ad7cd021c", "sighting--d06747db-cdac-424a-8b0e-6ec050c0b02b", "sighting--c692a543-fb47-4650-991d-e29f43a00309", "sighting--ec6631a6-c139-464e-ba8f-487dd5c35739", "sighting--2f115b02-974c-4b1e-8d2f-5e29f9e0d819", "sighting--fca4311e-3c51-4fc8-babe-2bd89b892b1a", "sighting--b30d2773-ecc7-47ee-a379-9235b630fcf0", "sighting--38b54b29-46a5-4b22-b30f-8377c78c4280", "sighting--e55b3920-d21b-4771-8874-e2af4c90f32b", "sighting--0c8009b2-f062-482b-a415-49c5f6847763", "sighting--e1a9f9cc-b84d-4eb7-b5e7-a57653638a8f", "sighting--e5429dd9-b804-4472-9e1e-0b3117368163", "sighting--4d5df455-dbf1-412c-8006-1634473dbcf5", "sighting--e650f905-62fe-4034-8f32-1715b6583481", "sighting--64e0e8c3-5ead-4931-b908-465faf5be3db", "sighting--1da3cfc2-a632-4ea3-937a-4a1b8f0db86b", "sighting--6da54806-044c-4447-9d06-c649894d8274", "sighting--41a4a69f-8db3-4310-8eb2-d3fc09636ac7", "sighting--3b897ee1-7c69-47d7-a78d-5992ea70165a", "sighting--10c9b7c2-a038-4916-b446-891a219bbdec", "sighting--116022eb-f763-449a-979e-65998e19e1dc", "sighting--de588ff6-05ed-4e2f-a052-f608e6bdc8f3", "sighting--456c51e6-4bc2-465c-8499-d16ce934110d", "sighting--8cac6f66-657d-46a6-b813-1792e666caac", "sighting--2cc4208d-a13e-44b8-9c20-33bcc014015c", "sighting--23c490fc-a424-4a1f-946a-f7e43fc67ab3", "sighting--3ad2ac5e-442d-4409-8310-51b097431fb4", "sighting--4e8dce52-936b-4f54-b38f-a8db4f9f2110", "sighting--04f66527-2280-414f-aaf5-d11d85fe9de1", "sighting--5fbab825-b240-4d5a-a585-9a7cb01e42d1", "sighting--be611124-d683-458c-a90e-1108d674afbd", "sighting--7ea42bfe-5c72-456b-af99-3a52549d6ab7", "sighting--bae79fe9-e76f-4020-9343-3526be0c52ec", "sighting--322382d6-4c7c-425b-8787-6df64e12b3f2", "sighting--0d2160f9-a365-424d-8627-02679ce9bc60", "sighting--af6420d3-641a-4912-b8c8-a9a4239d94c4", "sighting--954308e0-60fe-4205-b666-dd7441b91335", "sighting--10a722a3-1e26-44db-b23a-2b18fa633eae", "sighting--945d0618-fb39-4fe6-9ab2-49fcbeb6ae24", "sighting--88734095-07da-43b7-a233-38c90b70c88b", "sighting--65f6b188-27e1-4101-9b1c-c0014437a808", "sighting--6767dcf7-8e3b-41b1-8eb8-ec2b3f1d1320", "sighting--edadc834-dca9-41a6-9896-56cc233dba27", "sighting--b858e5a3-61e2-4b05-b871-d7ade8d8987d", "sighting--acc9e981-aba2-4f8e-891d-989e135a3fe5", "sighting--25050695-1c0f-4f12-8060-aed28b2ce27a", "sighting--0da75b77-e955-4650-80a9-b763867bec12", "sighting--1f64422b-df02-458b-a19c-d0ced651affb", "sighting--a99539e2-7a16-4c4f-8c6d-49d4a9fcbaf1", "sighting--e398e1a5-9c81-45d8-abce-72f6043a9f8e", "sighting--27f4a10c-bc95-4124-92e3-22bde12925f4", "sighting--2d4f397c-5f0c-49c2-aa36-1aaa68fbf6bb", "sighting--a214a4ca-e4e1-4a92-a04e-8d1cacc3aa63", "sighting--2f4113c5-b44f-43b1-87cf-f4eaa5992bd2", "sighting--cebee0d7-0e6f-49b1-81e3-9eeae9287478", "sighting--01ff54e8-abe9-44ea-b34c-a46180b241ca", "sighting--9702ace0-1e64-46a7-8d5c-131ae763021f", "sighting--2f791792-ea09-4d3b-b541-9b6f3f9e948d", "sighting--9794bcfb-af6d-4d7b-8d91-93c3a5b3f989", "sighting--0993b1cb-d21a-4ade-99d3-fb7a7df573d9", "sighting--44fd6861-b5c2-4393-9f9d-cdae1dd7aea0", "sighting--dfef75fc-833f-4ddb-907f-c5b467f2dadf", "sighting--785cae25-d8a2-4058-97ba-b4d3e929e047", "sighting--cb39a27a-8ec2-4a7b-8a9a-6c4994ba248c", "sighting--da73613a-7f13-4a5d-8e6e-06ed3d79435f", "sighting--6e62f10a-eaef-40ba-9906-de4b77312233", "sighting--d83470cb-b6fe-4958-959a-0a01c288ab24", "sighting--f11a4efd-b783-4122-b3ae-710dd8048338", "sighting--e7b694f2-6cf4-487e-b355-7528edd1b68a", "sighting--161035f8-5345-4bc7-accf-ed746e588ae6", "sighting--7690501c-71fb-4055-93ed-b9c12c676642", "sighting--f213fad9-91b7-4d54-95e1-81583a43c457", "sighting--e400c08f-7e99-4487-a98e-39b83b321de8", "sighting--66c03741-e178-4fa8-92c7-fab41509564a", "sighting--c64de42a-2e76-4d40-9829-e0a3fa7e1b7e", "sighting--a02621fc-00df-4137-a350-6c2a16bc44c4", "sighting--ab7f0df3-af9f-4092-9c50-a21ca9d3e7ac", "sighting--fdbc5c57-0943-4b3b-90d5-8dfd0e24b8ba", "sighting--6f760f93-a3fc-4b04-9d32-5eb3dad59db1", "sighting--0d8aba7c-1345-489e-a8a2-03608b08ada6", "sighting--e050b9b6-dc4b-434a-b354-8c4f530081ca", "sighting--0ebae00b-a76f-46ad-8f8d-dfc455ddc6fd", "sighting--2ef4952c-cb9d-4edb-a549-3e0235d64110", "sighting--587dad48-121e-46dd-b78b-9d5765ed5646", "sighting--a11881f0-4667-4ca4-ad8a-23b13b515f21", "sighting--0ee42a54-78b6-4c2a-b808-a6089041a44e", "sighting--07f8425d-98f1-48ff-885d-d6cb96d22e1b", "sighting--e956b1f6-fb89-4cfb-8676-b5a18a83ac7f", "sighting--709790ae-eb38-41b3-9de0-289acc39d941", "sighting--0ad62773-d0e0-4bff-9f1c-a216612c3ce6", "sighting--5a940169-19ef-403f-a433-93857bd07fef", "sighting--01a26283-4ecb-489c-9d93-38a257af4a8d", "sighting--7687e956-168b-4a5d-b901-c0d7272719bd", "sighting--0938a755-802a-4aa6-be5d-2ce4cb9a09e7", "sighting--9a8bee47-fba2-426d-85e1-c05655442f1f", "sighting--7899c210-5b6c-41b8-b97c-5dafe4e15246", "sighting--214fe16e-749a-4ff0-8e70-d18928a1e066", "sighting--57dc9249-2e19-43ae-a8b4-c6669ecdc005", "sighting--5536f599-44d1-47a1-95ab-59c00a532079", "sighting--c88c3b4f-e2f6-442b-b122-c2527f8cca23", "sighting--a45131e4-3f4e-4d2b-a2e6-92bfd92f6e7d", "sighting--2eca875f-290b-4416-ae4e-b020775470b7", "sighting--bcafe891-1b00-4c3c-ba7f-ff8ced5da19e", "sighting--f9624700-c244-4009-ba27-44774d5fd6ff", "sighting--5f13ae05-6998-49b8-ae6b-f536fe86dfb2", "sighting--4fad8721-f8b5-4f9e-a139-b4f843a398ef", "sighting--c34ae014-e32c-4945-94e3-4480d23471f9", "sighting--3366796b-f1c5-471a-af46-992e3eba3eb8", "sighting--f9fd39ac-9294-49c3-a2d2-14825f24273f", "sighting--3ef96e5e-176f-47d8-a773-a656dbb89095", "sighting--e9645bbd-0b16-4696-8e16-091fb2ead742", "sighting--d4f78fe0-d4b9-4190-8244-804e75ff74c4", "sighting--9a43be37-cf0b-469a-92f9-cfcf1f25d601", "sighting--eaae31ae-1df5-45d1-9038-1b6836f32291", "sighting--75d14786-a129-43c2-8f11-dea0567658b2", "sighting--e539c176-e11a-491d-9484-456dcabca845", "sighting--91c71c3f-60eb-4425-8955-43a749d4d850", "sighting--18b6e6e8-aa3b-4031-a70b-cf50a893260c", "sighting--c50811e8-8fb7-479a-a643-7858ecf74c5e", "sighting--2b376f64-1bd3-4294-ab04-15ecdad340b7", "sighting--eb2bf61d-40b2-4b52-8700-1eaf5285e191", "sighting--d10152c8-a07f-483a-a084-138852d645c1", "sighting--b78a54f3-1b42-40bc-9b97-5aba478837ea", "sighting--c17d6ae1-0971-4fb6-8b34-6849d929b118", "sighting--0167c42f-6ad9-4136-b474-4a11ea21bacf", "sighting--ec898f36-8b56-4cc4-8b30-8dac7cd92671", "sighting--c6ab3455-a9d2-4aed-889d-38a57a996ab4", "sighting--7012566b-e9a5-444d-8312-b6502f7946f2", "sighting--10631faa-b648-419d-88e8-2817e060dad3", "sighting--d658f48f-b4d6-4abc-84c4-4605fb3254ab", "sighting--a65fffb9-69cc-4405-9683-6ae4c5105135", "sighting--5b05448c-3257-4dfa-b68a-bd79d97b265c", "sighting--4e1ce610-45b5-44c1-a9c7-a6f0cc964bdd", "sighting--e1ba3533-7850-45dc-970e-f2c459d357b1", "sighting--6513bb8c-b45b-4f89-8293-87138e56f77d", "sighting--a50a757c-c802-42e8-8bdf-aac564acc64c", "sighting--2ee0453a-333c-4039-bd7e-3a63f63da647", "sighting--257caf4f-aaa9-4ec8-b50e-ee5f88c2ca76", "sighting--18ef1774-e147-42dd-ba7b-d268154cc8b5", "sighting--8bea5c28-e7d6-49ee-aacb-a575a8e09ddc", "sighting--5c45a9ad-5fb7-45e4-b46b-e55d9e443e9b", "sighting--af4a00d2-8e17-4ad6-b301-7459f21ae6b5", "sighting--ab95a91f-45aa-43c3-8d97-53a2f9ec4295", "sighting--30f4d438-cbf4-4200-bd4c-58ca6ffbe66d", "sighting--ce285192-be2c-438e-a365-cbffc339427b", "sighting--c8ece974-8eb2-4451-b2ab-0742dc6c5159", "sighting--ebd536c4-9308-46a0-9897-0cbb01b2c9e2", "sighting--400095d6-a188-45a1-a65e-8d818a3132cf", "sighting--bb82102e-9f3b-437b-b929-e1230d47c310", "sighting--2acaaab8-332e-472f-98c0-eccadc5ebdcf", "sighting--b35be76e-27d3-42df-ae4c-a371e3e9b15e", "sighting--6b37b6e8-ca01-4a32-9a68-69d7b39c6844", "sighting--ad65c09b-9c95-4e56-b65c-15860c801d5c", "sighting--46acea3c-be1a-47c8-b9a8-10342b84f5c6", "sighting--6b84ce0f-3b47-4470-bb4c-8a14e39e0312", "sighting--554eada8-7131-46a0-ae7f-4c4fa5510136", "sighting--1ed9ba18-23b8-4cc4-be2e-ae23a5077993", "sighting--5bc30bea-efae-47f0-9a43-107ec124c932", "sighting--cbad8731-2a19-4715-a7e8-7884c723dd65", "sighting--14b97dd3-fb5f-4644-b973-45923b0921a5", "sighting--b1db01ea-ba72-4b93-91c9-aa60b9b66c8c", "sighting--88f27f15-db4f-4a34-9404-c6b4ff1daf55", "sighting--24bd8bc5-16c4-4582-bd96-a2ff2dd6da91", "sighting--87f291c5-39dc-4ae4-873a-2dd7f8439635", "sighting--30b8bc85-300b-45f5-afc8-3d67018d6690", "sighting--2928c6c3-2ad0-4ebb-88c1-1fc47d8c093b", "sighting--959ec60b-219e-48ea-a41f-7ea9a1c10f18", "sighting--86940b48-2d2b-46ad-85aa-2671b530e6cc", "sighting--1220055f-9cc2-4f04-b083-896997f303a3", "sighting--525c3d3d-2143-4cf0-a6bb-bd5577904458", "sighting--ca8fa28a-fbcb-4c76-9e0e-b98c7446ef83", "sighting--1f2d22a5-f4c9-4faa-882f-dee49b6f7794", "sighting--557bd2e1-8d65-437e-92bb-5c44574abfc1", "sighting--196d565d-1f27-4f05-b830-d012c26c9242", "sighting--42ebba0f-98cc-44b6-bd84-ad784eb23dbd", "sighting--840aa998-d019-4048-b149-3bcc206c2ce5", "sighting--c816b6bc-043c-461b-a5cb-8780e3f7b20c", "sighting--21802021-3235-4cec-bdca-454e768e52d4", "sighting--5a033ae4-f8c7-420b-a818-7abcd51f2452", "sighting--98de52b5-dc8c-42db-9b02-c2c099de487f", "sighting--ff7200f0-e52d-4b3c-addb-44e3c68488af", "sighting--4d4129b7-2f45-44c6-9bff-54963a338f2d", "sighting--803b2c69-0e88-4fe8-89e1-ffc1e5cc92ed", "sighting--1888b335-3526-48dc-b832-fde91fe7bce3", "sighting--40b8b97f-a526-49a3-a761-65dbcdb63352", "sighting--11df7ed7-03ca-4847-bd3d-655969d232eb", "sighting--022863c4-7f44-4564-80bf-dac7df8dfbba", "sighting--9524b492-02a9-426e-82cd-02b017a55f95", "sighting--1a944246-2a9f-4f88-ba01-5259ab842443", "sighting--279fb145-6781-4d3d-9885-a16bb3786721", "sighting--1b133453-983b-4e6c-93c0-4356373368bc", "sighting--21a3a92e-e6b1-4d02-898d-43a81631016e", "sighting--f6b3cf02-5e8d-4de8-8594-eb46763e1890", "sighting--c2c8399f-9626-4b9d-8f01-22c0472980cc", "sighting--c0c47f5c-8e7a-4310-9789-ad2f342e69e6", "sighting--f6a46e83-2cf4-40b5-a286-4fc4f7c282fd", "sighting--6619d149-7e60-429e-a6c4-844d85e31723", "sighting--7c8efc39-cb98-49b2-8a9c-ad62926610c9", "sighting--2a931ad4-f780-4e42-88d9-e271af7ceb00", "sighting--28a14f7c-7741-4b6b-b917-fbc50b0a8c0d", "sighting--942ab557-ad9d-42d6-b18f-65c5f2579ac6", "sighting--2d1d00ac-a9b3-4ad6-8f1b-b90d95b649fb", "sighting--3e9e89dc-3114-4ca7-a61f-6690833174ee", "sighting--25bd7209-ad54-4d7e-bf6e-3786627f8973", "sighting--4eb6dd58-012c-4ec0-8b53-672d49622e9b", "sighting--4100c510-7847-4af8-b047-f80199dc248f", "sighting--a25787ac-44d2-4fff-8d96-266e5e89dd98", "sighting--cb65ca2c-7cc9-4ff6-b5d1-796c43f51c57", "sighting--e3672203-22fa-4475-b16d-d7bdd143cd85", "sighting--634b3551-b7a5-4b72-8556-0de14ca8b6ef", "sighting--a77b701e-3422-4e99-924f-2043d658c274", "sighting--436806f6-87f1-49b5-868f-5ccb5266f07f", "sighting--0a944737-b919-4609-b283-4ec0e950660d", "sighting--24eac986-13c1-402c-93ed-6966933292f5", "sighting--2b6b93e1-e412-441d-a493-cecc83d827d9", "sighting--673c2c6e-44d4-4b2a-9b1a-9e6ea9cd872f", "sighting--7157f19f-a6ca-48b9-8446-58f33e25f821", "sighting--8a8a5a1d-7f2b-447b-885b-6c24142fbfaf", "sighting--62d477b9-49f8-4430-bd47-894059c20d6c", "sighting--517cc603-69a8-422b-8dc8-7090269eb3c3", "sighting--444f9971-1b70-4532-aef3-a7276ba98d61", "sighting--d5cc5175-3db3-426a-aea2-23691983a580", "sighting--ca20ea2a-2fd8-4f0b-bbe9-7e9041c2dcbd", "sighting--8db6f5c6-5f8c-40ef-8fb9-fc4c1bbb5f18", "sighting--113c01e5-9050-47d6-aae9-e1cc1ae655f3", "sighting--7c52bf8d-98c7-4f3e-8325-e207342f85f8", "sighting--4afa683a-6710-4f7f-940b-d7c2b8655c87", "sighting--cef4302f-28d2-4b8b-a29d-d0dcfb984129", "sighting--c9db519c-ffe5-47ad-9d57-7008ebfd01c4", "sighting--5ee0d2ec-495a-45bc-9659-74dc6f0cb9c0", "sighting--4828da5d-7a21-47a2-b207-9b77009c39d6", "sighting--07bfa52e-7673-4e6d-a87e-ccb6ea12af87", "sighting--5067e8eb-03d5-4a0b-b45a-669826654d3e", "sighting--8edb406d-e512-4d29-bb5b-6f09c43c5a3a", "sighting--42d7f149-21ec-4e85-9252-4dccd0e37fcb", "sighting--dd5ce717-7480-4d69-91b3-18bf0c2703cb", "sighting--dd14ed8c-95c3-4242-953b-9e097aae7578", "sighting--20d778fe-789c-4a6e-a853-72c011da3609", "sighting--3417a2b8-9f71-4580-a9d3-f30050089abc", "sighting--8926bda2-7907-45a0-9c8e-d157e0dab88a", "sighting--da93783f-e4c4-4747-b181-906bd7c609d7", "sighting--3713a8d2-7756-4a2f-b01a-9069894d5e2e", "sighting--a5e6b8e8-5cae-4ad9-94f6-c9380cfb90ed", "sighting--345bd489-8a60-47f6-b1fb-ddccc4d591ce", "sighting--45b1cea0-8aba-41f7-8c02-dd30fcbe224e", "sighting--e926926e-3607-41ff-8684-65d7e0d857ba", "sighting--2ee78cf1-eaab-4042-b1f5-418bbca6f449", "sighting--20454078-5b13-45b6-93f9-298d0591dcf0", "sighting--24f2c5bf-b234-4c62-a175-6a3e9b69af15", "sighting--a86273f7-2cc5-4c03-8dfc-9bf6b6863f07", "sighting--6f4a904b-9c50-48a3-926c-1a90d3f37030", "sighting--4ad0512b-b092-448a-a285-08acc78b9ce9", "sighting--368b2451-8d6f-41b6-96bd-1385df5a514a", "sighting--d2c311cf-fd2b-4115-a8ff-9afc410e6509", "sighting--4c9b0c76-db41-43f1-9fa0-298880617baa", "sighting--cfbe9ebc-4e23-45c6-aec7-d82e55dc6903", "sighting--113d9dc3-ce87-4e1f-bd2e-e1b025204ff8", "sighting--0d3d43bc-e61d-4aee-b8c7-8d83240631a0", "sighting--2d805dfd-07bf-41ab-b7c2-198b5c94395f", "sighting--161f4f17-2608-4d5f-a547-5b9d7ed2def8", "sighting--a1755682-a3a5-4605-8691-35bdfffdbcd4", "sighting--12acaaf1-2fcf-4933-8ef9-4d04dd6725b5", "sighting--019809e9-c322-4214-b0d5-f9aa478ae563", "sighting--79d012bb-3595-4ff6-af82-d9d2bc3ae211", "sighting--55dde88b-ef61-427f-9c4a-9828d79c57d2", "sighting--1f20ec59-19bb-48b0-9c40-81f328258a9c", "sighting--bb2011b0-8dda-4b46-bb81-2e9c83041c58", "sighting--0e6feb1f-b231-42cf-b470-f92eab1098a4", "sighting--b1bac0e5-b08c-42fd-9693-e8aef8d15b5b", "sighting--ac9a0568-71bd-4c76-a909-5d111246227e", "sighting--8a9a8959-df6b-4ab7-b992-e273978631d8", "sighting--40f7ede9-b1d0-49f9-8f2b-1af8d9851fb8", "sighting--c9bbfe04-8cb1-4d03-af8f-00b34158b4a6", "sighting--46882bc4-4e77-48f0-a85e-e0729cc2c8d4", "sighting--c9e2a00a-a663-4ed5-ab2a-42a97fe5b19e", "sighting--a831fddc-094f-40d7-b1d2-ef762979fe8f", "sighting--8abcaed1-ab65-4026-8490-6a80bf3cc892", "sighting--a2658d72-cf76-4930-bcf0-51c18140cb82", "sighting--0d59ec13-d02d-4ddb-b198-b9bed1db62d7", "sighting--dae05790-a4c7-4c7e-87ee-b65325977248", "sighting--6f0c9217-d5b2-4031-b047-d929ae663f48", "sighting--fed9c6ed-079f-43d0-aa39-a44fd518f16b", "sighting--6fe7101a-f6e4-47b8-9aac-660eaec8e4d4", "sighting--242f8340-8d77-4704-8978-3b65f8f2dbb1", "sighting--c932e600-fad3-48c1-a0dd-56196aa4cee7", "sighting--bef23527-a195-4cb2-b726-8bb2c9ef1543", "sighting--aa9cea73-33db-4af3-9506-937d964bde49", "sighting--8569050d-6c54-405a-955e-163a8b7d7bd5", "sighting--847b34ec-7351-4b2c-a993-ef142970c19b", "sighting--aa5f655b-bddd-4fe7-a539-f95e3d54c94b", "sighting--27443a51-6c48-47fc-bbf3-d1d1abde53a5", "sighting--4c528eda-42e5-4354-8864-d83110263049", "sighting--c5f978ad-5f52-4d95-884c-aa41820b0e80", "sighting--8e0eebf3-b572-4dc2-9d61-856b121e8f1b", "sighting--80a0acfb-58b0-4159-b62a-4249952bd763", "sighting--4ee9e58f-8ab8-4cc9-b5a8-9624163dc1cf", "sighting--ec6184ea-3651-4620-8ebc-66559cc77fd1", "sighting--7e9c40a0-5d3e-4ddc-8d08-6017b22faf3a", "sighting--003ce1aa-11b5-49c3-8f30-8fb5314edbee", "sighting--cdc7c457-7612-4207-ac85-f1d46b99e58b", "sighting--00384f34-4206-4614-a540-34277d91d707", "sighting--53d2c6b3-a22b-4e11-b3f3-056abfd2b34d", "sighting--78b0db66-5cf4-454e-bb27-9a6306905456", "sighting--7a65b808-1a9f-41bd-8141-4764787b181e", "sighting--06d30e77-f556-47d3-bbb7-9996adbebdf0", "sighting--5704f350-e35d-45df-8385-41b48e22f72b", "sighting--81620d02-5d8c-4cb6-960d-66d2f7c94641", "sighting--f393fd4c-3eb7-416e-a95c-fcf94cdd8c7b", "sighting--ac79c2d8-bf51-4d03-8248-7901d55167a6", "sighting--7b8e67d9-3d06-4b7b-962f-95e6ca6df799", "sighting--63828745-96a7-4fab-989a-2028d2fbccc5", "sighting--110b0ad4-d903-4548-ab52-a83dcadd17ad", "sighting--d83baf2f-ee2d-41db-8740-42a95c5a50b7", "sighting--17571598-8991-45a4-ba2f-b0d97cea656b", "sighting--cf2c59eb-9b2c-4634-a54c-0116abee8c7b", "sighting--9e11d190-390c-424d-a680-4dd0353f8d55", "sighting--69551f3f-389e-469a-a884-d61c852a1040", "sighting--f7a40f40-6fdd-4f0f-b44c-0260b3ef31cc", "sighting--4e4c89c3-b174-4604-94c1-6c18ccf08f24", "sighting--d2afb32f-76f5-4147-9be7-781b7530de74", "sighting--33f6b2e9-c5bd-43aa-a413-377e3c49f192", "sighting--db823cac-190b-4170-ba23-d675cecee78d", "sighting--ec8bbc60-d07d-4eec-a839-e64f9959785e", "sighting--49efc543-15a8-4fec-bf7d-04f89e7a556a", "sighting--f20be80a-a37c-407b-b39a-baa8042f02a3", "sighting--52c8a59f-39f7-4907-97d7-4593069ddbf2", "sighting--be2875f7-e7b1-48b1-b929-877fb0b9263e", "sighting--0efd958d-c331-4e41-8d2d-4f788eea111f", "sighting--63923fdc-d301-4d8d-89c8-99510fe0ca8f", "sighting--f0474aee-5db5-4680-a1fd-1fb71d008bb7", "sighting--6cebab92-ca63-4f1d-b3f1-c9e065a17631", "sighting--a5a8b9fb-bfff-4559-b8a3-5d24efef683d", "sighting--45bcd89d-de8d-49a6-87e3-177dd35b5f88", "sighting--61c1142b-95f3-4bda-a15d-55b85993dfd9", "sighting--8e230707-7715-4a73-942c-b7fcca4562de", "sighting--3d36b2b5-243e-4078-883a-4b33440b7662", "sighting--d128e7a7-0aeb-4e3f-8e67-3d9099b8fe86", "sighting--d07e14c7-f665-466f-aabc-8858833a8d2a", "sighting--02f43f6e-8c8c-4dcf-b795-a60789a49c30", "sighting--bfbc4e6c-dac9-47f1-8849-c73666070103", "sighting--c31daef4-4454-4feb-80f4-21c9e30b56a5", "sighting--a56a58dd-f750-4d98-b8ff-2bfffff8beb8", "sighting--a0a38ec0-ca75-4285-9be9-f5578b9d728c", "sighting--c5c06288-a4fa-4624-bd90-dbc76304f799", "sighting--d1c7f8fd-5239-4440-9b9e-98223cf3a3c2", "sighting--ee133cab-1935-429b-87f9-3122842f9f07", "sighting--c024e5e5-ed9e-4a5a-ad59-86186ed66c3b", "sighting--97bcfcca-ffa5-4db0-9d2d-473dacd3ce97", "sighting--85929c4a-2af3-4ffd-b66c-04e98ec0819f", "sighting--46e014ae-9c10-4c98-a776-000e0bfd97da", "sighting--18862604-96e7-4fe8-acf1-58f39eb10f2d", "sighting--baecc352-dc0d-4f9f-9823-09fa090548c2", "sighting--a8e3a760-0296-44c2-b49c-3168964f08c7", "sighting--cbd69443-1461-4891-9553-18e2e85e36ea", "sighting--276b0d9d-20fb-4a1d-9fa1-687b1d43cb5e", "sighting--fb32206d-4eba-4bdf-87c1-cb1aa4160216", "sighting--803ba06d-80d8-4605-b353-e06751c6870a", "sighting--6204b9bb-ab36-4274-800c-c0cd2c2b1f8d", "sighting--f390e781-bcb9-43e7-b2a5-0b98dde8c8eb", "sighting--2375f14e-ee0b-4b65-88f9-1b21600cc4c8", "sighting--cb127d04-665f-4b5e-a33a-115dfcdda849", "sighting--e15328b8-c99e-4e36-bb9c-92b4148668d5", "sighting--fed0b5c2-d493-40ab-bc50-596077214f79", "sighting--6c645874-b2dc-43ef-9a95-9662a43719fa", "sighting--54ee8946-29cd-460f-9f3c-23ff5f58a6eb", "sighting--cee8a757-c38d-43c3-94e8-217bfd5739c3", "sighting--d3a1d168-4fa3-4b28-b700-9e55e8028711", "sighting--2e969331-3ead-4021-869d-12db607202e1", "sighting--f445cd25-f093-417f-a5d4-69fc3faa01c9", "sighting--22ce549e-9769-4317-ae68-f43540939a5a", "sighting--35e30c1e-33cc-407a-8eb9-9ec2e3843359", "sighting--202d7ef0-bc9e-4108-b130-cc38113f0903", "sighting--bb425718-d950-4218-950d-5aab7b8ac0f4", "sighting--941f65e3-bbe2-4385-9cc6-118d4d724379", "sighting--078974c3-fa79-4258-bf51-fce26425fbbf", "sighting--5b972feb-e15b-4ee4-a305-eaec63bc425f", "sighting--201e90c7-5756-4017-abbe-f40e32d40f8a", "sighting--df80a481-2705-4dc5-bca1-bfd3b2874d6b", "sighting--beaea8bb-19a1-41e4-aeec-4a9c37250a7a", "sighting--9df64428-1a34-49b6-87d2-e06c8eac8fb2", "sighting--24c2bf14-3ad9-4f25-826b-b7eafd61f16c", "sighting--67e8c8e5-6e42-4e63-ad08-fe0cd3513d44", "sighting--a48d4dfc-9b9f-44a7-8e6e-19c58d00ee9e", "sighting--68d0dfeb-ed7b-4f03-aaa6-9082ff753272", "sighting--479d265c-0126-4823-a67f-bd40f8cd6ec1", "sighting--62e114ce-d28a-4d37-8e5e-e6595e89b11d", "sighting--795fb67f-29d1-4f9c-bc79-23debec1c293", "sighting--02e888d5-ed14-4c88-b4b8-2795f684a914", "sighting--07ddb6a2-e29e-44b4-b99d-fb26df3f341b", "sighting--b3acad57-985c-4039-9797-d4e8cd7d7f8c", "sighting--eec2d3c9-3192-45cc-8f9d-5a5002545c6d", "sighting--0c601c36-e36f-4674-bdb0-ec8a5a54847e", "sighting--83fe558a-e8ed-41e3-8672-04534b855c0e", "sighting--ee50e7d6-e661-4d37-abcc-2f83846a53ba", "sighting--63b05873-d797-4c23-a117-cbcb316527d8", "sighting--5cc1c50f-4923-49cf-ac05-17fa4eef9174", "sighting--6ccc4ce7-8701-4f39-a419-9472a544eb18", "sighting--d5b0718f-ad33-44d5-b230-9d1876884368", "sighting--4fd437b8-3018-4f4a-a47a-0eadea3a5380", "sighting--f013ba22-8fe0-4785-9703-46c10a9be2b3", "sighting--7690176f-dc70-4235-89ed-a5f1102fe0bb", "sighting--2fd58d68-726d-4a8d-940f-ab8b66164fe8", "sighting--4239e2d5-179f-42c3-9681-31495c1d85d4", "sighting--a225eb04-6f45-4fd6-bf66-64e2ff9ede86", "sighting--5f6e1abe-af3a-426b-bf31-9b3ad895ffcc", "sighting--4c211320-faf9-4129-9a17-86dcb3666c56", "sighting--b720cb9b-632b-4415-aef6-5eeee0544ae2", "sighting--3c1dde38-7c01-4b71-aab8-0a298672e862", "sighting--41d89a17-a383-473e-873c-90abc3eeb30a", "sighting--30c6f16f-66b4-47e5-82e5-e303d20e4a92", "sighting--448de99b-1b08-4161-a39c-49139239957b", "sighting--fe8b0aa1-88b2-4513-9e74-998677aca4a7", "sighting--d0bddc6c-c969-4d7b-8122-60f1bdc064c0", "sighting--6b9daf80-2d03-49b3-9d3a-50af14e8350f", "sighting--25517616-b8c3-413e-b4c1-e0d4c5225e63", "sighting--9d7db16c-6512-42b6-a9ae-349c5f76c2e2", "sighting--9c90426e-7ca9-40be-b33c-a44812174a38", "sighting--86aeb0b4-672b-4d8d-a129-308cef0f678e", "sighting--67adb3b7-7615-4be8-b51f-0a285db37e83", "sighting--bdfd4296-5a98-43c6-9057-d9a46ce754ed", "sighting--731e4f29-353b-4287-87f6-b63f11d85960", "sighting--487e8e84-4d50-4866-bd7f-0bd2088a90b2", "sighting--2adce28d-df87-4ef9-805a-648a65658cd7", "sighting--c49dfe5f-f191-4935-a6e9-5a0b1056aaa6", "sighting--6debba68-2687-48ec-80b1-bcb3579d8370", "sighting--be7d3f82-3170-4493-9b0a-2f5eb571d1f7", "sighting--3b402ca6-3539-4cbf-8f7e-859a7a58f10c", "sighting--d5943817-128f-4965-9605-8da42c0de719", "sighting--0034c3df-e20e-4362-b192-474b725265af", "sighting--8a30ce2f-6a77-46c3-9298-4f6306fffaa8", "sighting--9baf2df3-6a6e-4fba-9839-cfb6e97f1d7e", "sighting--13293d23-a22b-426f-9fea-abe14e941e19", "sighting--08e3a56e-fa2c-4051-8f1c-6f4589ab3420", "sighting--0b8944f9-1828-41e6-9d8d-3e0ad01902f9", "sighting--5a53f875-21f6-4208-a4e4-fb2fca262d21", "sighting--e65ea403-a521-4ea7-ac59-40800164422b", "sighting--fb21731f-84b1-4266-9c79-b5f43081e8ca", "sighting--a92f1314-4522-40c7-af4a-325bffd3bfa1", "sighting--cff99c91-2bd2-447f-a61b-f4bb9a7502f5", "sighting--01c9d5b3-8fb0-4d12-ab95-acbcc345d0fb", "sighting--c902227d-3995-4a1d-9af9-f08f1678c187", "sighting--6fa48a25-43e4-4330-8f51-ce66deacacee", "sighting--8e310343-d083-4a20-9659-1751f536fa5a", "sighting--c7f3485c-0eb0-4be9-a48d-fb2021755c63", "sighting--9548986f-2a2c-494f-bc76-66bdf6d3fa60", "sighting--af962ba1-16a2-4003-ba67-b6fe5afde0ea", "sighting--480ecb97-fb65-47f5-ba38-4377fb2a3e1e", "sighting--e7904344-1321-45a5-a0ec-f7cf36d955d6", "sighting--cb73c23b-7430-43db-bc5a-178e1aace5ea", "sighting--ee7bc98e-8717-4fff-b7e5-5069fb58e109", "sighting--dff327d8-43d4-48b9-a325-b91a012fda1f", "sighting--bcb35bd0-bdef-4b72-885d-f46f0aa0b3f5", "sighting--f291b3e8-8a41-449b-825b-33ed7f80ef65", "sighting--a9f09775-55a5-4159-9d0c-5425400d8808", "sighting--eeaf738c-875e-43c1-a246-7afe2a39cb96", "sighting--15fa53a0-2974-43cb-8dc3-8ecc3f900653", "sighting--55c947f8-449c-4fde-ba54-a7ee763b5d13", "sighting--499fdfc2-110d-45df-8b91-866720e8b048", "sighting--6ac88b84-707a-4b00-955e-79b93094ca06", "sighting--722d9f8c-4a81-4592-8f73-58c67eb66667", "sighting--525259a1-9d68-49c5-b08e-9ce7d0bb8b2f", "sighting--4054cef6-8041-4fc7-a7b9-48767354f376", "sighting--8ccf561f-a67e-4416-ad36-6adf97922df4", "sighting--8012585f-d56e-4904-86f4-df109f9d8362", "sighting--6e598d43-ec55-4c36-9bb0-ee65dd4ed21d", "sighting--e8db5b0b-3293-47f8-8afe-bb5633f42ba8", "sighting--e73f3ebf-fbdb-4a1f-bddf-cbc2924a8d16", "sighting--19ad40e4-0f11-4ca4-b756-c29b53fae9bf", "sighting--8b25373e-7f84-479d-9002-224970885e46", "sighting--d07da827-8a06-42c7-909e-c7a450662996", "sighting--f5ff6317-d9d0-4243-9e71-370fa1309cd5", "sighting--45dbf8ba-fa7f-491c-bec0-99d365ecb470", "sighting--fd06d384-aa57-4698-b42b-269f66702006", "sighting--e7ba8657-a0ad-4750-bd7f-d53c7c4808b3", "sighting--b8cc2d66-146e-41ed-acda-12317aafa54a", "sighting--25c65a63-a0ae-4bf2-85e3-38440a14c43f", "sighting--35bf658b-9346-48b9-8357-dc7feecd68e8", "sighting--c576e167-6082-4cc4-b177-69d74506d2e9", "sighting--50a451c4-d684-436e-b08e-d4f74dbc03ed", "sighting--70597a3f-0bc2-4ad6-9514-c755e80b748a", "sighting--50846a62-11be-42da-bcf5-40deafc1ca20", "sighting--f50bb3cf-6093-42b3-a5d5-9dde1f075618", "sighting--70bccc3b-40ef-4091-9e46-0751c13572fb", "sighting--08bbdd66-317f-4b44-a6cb-6f3897647d60", "sighting--5f6f1663-4b0a-4cd2-9428-133c879c1620", "sighting--51bae87f-b6f8-445b-b36e-6526a133c88d", "sighting--9c59a602-adcf-4fa3-98d6-3ec486fe19b2", "sighting--33d6e851-ae40-45e0-89af-22f2402a493c", "sighting--2b99d1db-f302-48f5-97fc-ab1c162a9170", "sighting--e27b2656-59cc-426e-a7f7-07eef7e7f253", "sighting--ea6c6d66-4a38-4707-aced-6a17e02a97e9", "sighting--6a4edf78-6bd9-4fe8-abb0-4314df55f948", "sighting--ff04c45a-9743-4601-8fc6-44553c79bbcd", "sighting--8b9e92e1-4169-4819-a257-175feded880c", "sighting--a0934fbe-8b6e-41d8-847d-d986bb3c1c8c", "sighting--2b1b0d94-5959-4ee5-bd6c-c9f45b9a589f", "sighting--3ad27db9-511d-461a-a73a-491d863a13e5", "sighting--301f2675-1d4a-4596-8815-9b4b80d554dc", "sighting--db9916ce-cbe6-419c-aa90-b26b08e4af5a", "sighting--6a449dbd-9e59-43a3-b292-381753d49144", "sighting--c750e096-967b-4273-8eba-2d571a0b93a9", "sighting--8e4426d4-8d4f-415d-8f50-49e0a0cbd3d3", "sighting--e6323717-59ec-436a-bdc3-5a59d37b36d7", "sighting--f5f3952a-1e6f-4c6c-b4e1-802d84f3751d", "sighting--164dd28c-798b-4d5d-9678-35c636a62ae5", "sighting--c23e6914-6035-4e29-a727-7ef314224fcf", "sighting--ad4c2100-66ed-478b-910c-e8b431af8e61", "sighting--8ebe0623-9992-4c94-b06d-55f77a4c1620", "sighting--d3c80afb-43db-4747-ad28-d0a747e9c2ac", "sighting--e1570e9b-8a5f-4ec5-a003-47b9a9cbf39d", "sighting--52fb67cc-adda-437e-b74e-a15118b08f50", "sighting--ea273a98-c481-4c73-abc9-dfb40b4fdd7d", "sighting--c4246b4a-7eac-46cf-af0f-c3b26550bb83", "sighting--2dcdd46e-a618-432f-9bd0-d4b1c5aa080d", "sighting--f7a6a2ca-97bb-4c8c-83e4-1ff64f0562b9", "sighting--a62abe4e-f92e-4868-bdc7-e5b388229bca", "sighting--ea184ff1-2925-4ab2-972b-efa0109e5e91", "sighting--cbd8338e-d271-4990-ad42-5bc26acdc284", "sighting--6edc02a9-ea5a-49af-b2b6-07bf5a7a7017", "sighting--1c986e12-9192-414d-a5df-6d1bb017a188", "sighting--752b792c-13eb-429f-9c6f-6459504ee469", "sighting--d2a374b8-9d3e-48e7-b0da-72d6496a4636", "sighting--d71f0ecb-0958-4b79-b737-ad22863c08aa", "sighting--c3790405-5e3b-4b0f-87f2-bf1a7dbd7f36", "sighting--409b934a-20b3-42e1-a8e3-d2c695be5f9d", "sighting--04048040-a4ba-4e97-b6d2-c8db5dfa5230", "sighting--2ea7a460-15e2-44e7-9974-36121901d6a8", "sighting--e2c98360-f7ff-415c-8342-e600c66e1558", "sighting--9fd9064b-2b2e-440c-829f-f202b387a34a", "sighting--13be85d8-53c6-4317-96b2-6fe4443cdd59", "sighting--c029b237-d474-4e32-a9f1-d167818c33a6", "sighting--9e810be9-0c1c-45c5-9f72-1a65b8b8d760", "sighting--4e88e49f-6732-4c48-81f7-8441f46f5118", "sighting--85329e25-b36c-4ddf-aed2-38c38a7c2148", "sighting--2792acc5-1c4a-4e4c-a22f-79ff9ecbfb90", "sighting--f07e37dc-619a-40eb-95d2-4ea90aa19752", "sighting--09751ebb-7a96-4683-8496-1320b58f49c4", "sighting--77d5e64b-7d1d-46a9-8ac4-ca4fac4fa970", "sighting--18a7af7e-ee31-4266-a27c-06163b158e43", "sighting--c1eae378-9339-424c-a0da-edd00cd2369b", "sighting--fedc295d-c992-420a-b629-1f5861251550", "sighting--082112a5-66d6-4279-ac82-dbec0ad64285", "sighting--aa47e2dd-0b22-4223-b294-2a3ebeaae80b", "sighting--29675efb-dea2-4620-a365-4a21fe30a802", "sighting--9018bd55-ed77-40a4-9211-7390471e6cdb", "sighting--8d987b01-5c86-49b4-9259-7460701e47a4", "sighting--e2877e84-e1c4-4225-846e-053662f9aadb", "sighting--4df8642e-b5be-4572-98c3-791f5ebbd1f5", "sighting--9e86b351-ed04-49a7-8d7a-06f2678e6e35", "sighting--d77a5178-0caa-459c-80ba-9566d27ac240", "sighting--8470a91a-4e91-4495-b91d-3905bfd005bd", "sighting--0e84d7ee-143b-4f4f-80c9-03b94e6f7ec2", "sighting--3182def0-9b2c-4636-a069-3ad4bbf0f3d2", "sighting--6b110cb5-b086-4250-8805-5119bb675f79", "sighting--80f82e56-69ce-4752-936f-25579483bb59", "sighting--8816af56-bb3b-4ef8-86d5-0d2f1ce66b4a", "sighting--aa895c47-c811-46d2-96dd-a60e6d261264", "sighting--fba5afa2-e4cf-4f1e-b76e-bb7ae8454347", "sighting--9c48291b-d26c-4547-9c21-df49b919d5fd", "sighting--ac6a792b-1a39-46fd-895c-19596c1b8ce2", "sighting--936dfb14-e7f6-447f-be6b-61142a59078d", "sighting--a6dedf40-ee24-4f56-81ad-e65e62922356", "sighting--93219cf6-9744-4681-883c-4993a4d7fc4f", "sighting--8667ec50-ce10-48a5-8192-9bfab3dfc36f", "sighting--ca94471a-8ab1-4cb6-a06b-3623874435bb", "sighting--285582b2-cac8-479c-ade6-09ac70d8de2c", "sighting--4c6a994b-19e3-482a-951a-8b72ce4556f4", "sighting--6ac3a493-2e5b-4a94-b689-cc47aab632b7", "sighting--7b5eadae-80e3-47db-81f5-8b3581d57d82", "sighting--ba6cc1da-9173-4a41-97a6-cab2668db097", "sighting--11813193-b6a0-48fb-ad16-46f20f5bfaf1", "sighting--abecca13-20b6-42c8-9c94-3fafd2e94489", "sighting--56c4953d-d581-4721-8c8d-4c0cbc22979e", "sighting--c7d7d535-ff7c-45bf-addd-88f97efe10e8", "sighting--95d6dfac-2fc6-4ac3-833b-9623f48dc940", "sighting--fbe2588a-d7bf-4e51-8f7c-ca0af09e74ec", "sighting--c2bedfaa-0e27-4b57-b2eb-ac4923edf471", "sighting--478a2da1-e2ea-4a0b-a72a-216aa4c31828", "sighting--aa986b02-7157-4fbf-a897-aa7927091489", "sighting--4d7e43f8-93d3-4250-a776-b586f3d915be", "sighting--b53eed33-127f-47af-9ef4-4bbb4e04ab59", "sighting--b8ed9c73-c0d8-4331-baa4-59712b6988a9", "sighting--7afe8045-7c39-4eff-bdac-b0fb265b76bb", "sighting--6ffa37f8-2170-44a3-a814-9e0687362cd0", "sighting--ce2d3d1f-7f9a-4825-b193-2e9968aa1292", "sighting--e01ab8f6-7c61-4e19-ba53-383728723f69", "sighting--51c14d4d-7292-41f7-923f-1bd7b08cb717", "sighting--dc6044cd-b872-4f4c-9d9d-f71ab4143f2d", "sighting--6a7b8cd6-c269-4370-b51e-13bf3545118b", "sighting--169944c5-7c2b-498a-97f7-0be7e77575e2", "sighting--7a2b27a6-1300-4167-8f26-5c099a89316b", "sighting--bdf12d32-480c-4504-bbac-a8a2ae82c20e", "sighting--cb6234d8-0d1a-49b6-b13b-c4956258febe", "sighting--f7ebf7f6-4391-4449-9d32-d5c9e93587b9", "sighting--c00c46b5-0e30-4aa0-a807-51f218ae41bd", "sighting--1351bc03-7c1e-481c-a126-18478a8c6712", "sighting--71c07a26-b806-409a-b47e-601db191ae44", "sighting--01538f25-18c7-4b5e-af80-f1a76568457b", "sighting--9473a7c6-a7a3-4e6a-be2c-9ac009d20ae5", "sighting--a793508d-5df5-4811-b4cd-4262777d4e73", "sighting--3a047ddd-f10e-4bda-b04e-bee2bc76d1a9", "sighting--6a87fbda-66ec-4b26-a38e-9847bde8b9ce", "sighting--e93d538d-a02d-4ec1-891e-23bc0fba783b", "sighting--268a30cd-9e4c-431a-81b9-2fe50868b58d", "sighting--a4183df8-6bb3-4e95-987d-f034ab9ebbf5", "sighting--11211bb3-7e38-495b-8d4a-50d8838be175", "sighting--a575d6bf-e8ac-4978-bd2f-701321fcc30b", "sighting--6066702d-3835-41ad-b270-8d968efc0915", "sighting--6e05cda3-381f-4413-b9ee-9d742edeb83a", "sighting--5253536f-daed-4c57-922d-e0642d8800b3", "sighting--eac6d510-2977-4d56-8475-e5b26c4c60f5", "sighting--357cdaa6-2ec5-48c4-a7bd-a6aa192e2688", "sighting--5fbc0622-86f1-4019-8d2f-cd613d364ce9", "sighting--0e6c3a80-f511-4907-a29d-6de379dd5a27", "sighting--3446362c-6211-41cf-b46f-6f34e870c33d", "sighting--e1f92f54-6fa4-4119-ade3-4958d2ee9ef9", "sighting--dd9fa06e-3cba-449e-9f6b-d39208278004", "sighting--d4a7f5f1-de87-4c8a-94e4-d27515b96b24", "sighting--de8bc584-7835-4ba4-aa53-41f2538c5e0f", "sighting--f2b2b77d-68cd-4fb0-abe1-12fc4305f427", "sighting--1c2b5af1-c2d9-44ad-a39d-70d7426c24d9", "sighting--b615e92a-9fd9-4d40-aeda-040c0dfa9847", "sighting--228a6027-3701-4cbe-a50b-e9b42f9652ae", "sighting--a7c32d1d-32c4-4c15-8fd6-57f234abf48d", "sighting--cd29c8c7-bf53-4f98-9336-58c64a1b1e73", "sighting--8cdbc839-dbf3-41ac-b2d0-d4f643a2a834", "sighting--c04527f4-3e2d-4f12-b7f5-7c647383d7e6", "sighting--7718bde8-20dc-42cb-9e90-d90a9996f31a", "sighting--2a6488a3-c1ef-4786-9333-d6d96090bec4", "sighting--daa6caca-216d-414e-bd5a-b10a4bbe6427", "sighting--a8932883-07b4-4d72-b253-2e90bf7b93c8", "sighting--873ce08e-1099-4d76-9022-efaa538e0910", "sighting--8febc7af-61ec-424f-bfbb-c444472b4b52", "sighting--41abe344-5fef-4457-9a48-18535762cfb6", "sighting--f5033a54-7470-4278-b7d2-1bbb8a52c596", "sighting--09270e11-3744-4c55-9112-e92c6775e959", "sighting--1049f54a-33d2-4c8c-bd3f-326b35aa5d81", "sighting--bcf2d415-fe08-4363-93a8-f714806edded", "sighting--3e81619f-43ae-4474-b685-48310528f818", "sighting--6f7dbfce-a32c-437f-af63-831b4ade7be4", "sighting--976eea77-74b3-450b-ac8b-545091645568", "sighting--31c08c2e-1c88-44be-8cbe-de64a4c3ba37", "sighting--ccaa80c8-15d9-4898-83e3-80067da675d1", "sighting--1f62696d-a355-4b77-8ec0-7dab9b909213", "sighting--44329b5b-171a-4059-8f8c-1d448b16dc78", "sighting--f96bfb2c-59e4-4e5e-a72e-9006eab0606f", "sighting--2cb7d14c-832c-4590-9808-b756b4108aaa", "sighting--591d2aa4-dc59-441f-8344-76089aabee38", "sighting--ce28e939-3003-4228-9b0a-8dad11135172", "sighting--d58563c7-87a4-4521-9143-464a41660c40", "sighting--f7c08548-b0cf-4d88-aee0-55ed6e9b6cea", "sighting--1602e7fa-a21c-48ce-93f9-c9fb030e46b9", "sighting--09000001-9990-4b94-a818-e22eaa99c3c7", "sighting--ed6efc5f-5904-4204-b2e9-47762986c30a", "sighting--41d89986-61c3-4502-8e10-e7a65e08a1e4", "sighting--03428f97-67d4-4f76-b40b-712c842105e0", "sighting--4f476203-165e-4829-bd4e-aa321bae60c0", "sighting--490d9c18-c01c-4ec4-a773-bade08c30d29", "sighting--20a2b48f-a926-44a2-9998-3b6076ff6c19", "sighting--7f493e32-00ff-445b-859b-b300f73f1e68", "sighting--3cc1a75e-3f27-45d5-a773-307d2aaea67d", "sighting--8d8d9d42-425d-46cb-8d9d-6da88dc664ae", "sighting--f311ded3-9a1d-4d90-8335-bc905bbff51e", "sighting--2045fc71-f65b-469f-9c01-bda0c4b9d1af", "sighting--0eee2ce7-b5b6-4832-afc0-9166c20a15bf", "sighting--475d6300-1a89-4bc8-b1b0-78b159bf0e69", "sighting--328628ad-8201-4e50-b6c7-3202984458f8", "sighting--2ed23ad6-95e0-4e03-b607-7fdf53710b08", "sighting--9ef7f003-f45e-4015-82ea-8351b6c473d1", "sighting--a415cd3c-0e15-425d-9a21-e5247fb18482", "sighting--59d52dad-c32f-4b20-8ac5-bde1899b2c06", "sighting--3b858a50-38f7-4dcd-b854-6ca1ed68e605", "sighting--f78239d6-4e9f-4b9e-8408-8d40b10faf2c", "sighting--cf54c4b8-bb99-4f50-9cc0-e13862720a20", "sighting--a8cb62e7-75be-4114-a77c-08dd37f5c337", "sighting--62f28103-a53d-4310-8512-efacf2e368a8", "sighting--344c1b38-e586-476d-8c1d-0b82581dcfa1", "sighting--02e1a425-bf6a-4139-9088-2a01b68dcfe3", "sighting--a9c68791-5c24-42d4-9142-120969d5ac14", "sighting--ac8eeff8-5bd6-4198-bcb8-4ca39974b3b4", "sighting--36929570-0a0f-4c3a-97e0-a4b4b6d93bd3", "sighting--a1b1e8cc-b358-4274-a6e7-d9b16896d855", "sighting--2dcd796c-1f4c-4510-97d1-c0044e08e256", "sighting--5869053b-3a70-48e0-992a-ee76d28b1262", "sighting--ec68e8d3-a0c0-46a1-b425-a8a990bb1141", "sighting--9fe8bdd5-9d49-46f9-8dd5-c2d61b568023", "sighting--a80a7ce3-a749-4769-bccd-73e09742cf4d", "sighting--5bfa6bdc-af46-48f5-ac90-5b630c1ec26f", "sighting--a6b68b98-2f80-4484-8e04-f83d954e63b6", "sighting--ee34631a-c891-4c70-b377-84f971a5ecf7", "sighting--0bf78b6f-77d2-4e46-8ce6-bca76303e0cf", "sighting--e5243922-dfd3-4040-adbb-bc27fe9bb069", "sighting--116c21b1-2008-481b-a77a-a6828a4bc419", "sighting--92984e31-fbd0-460b-b60c-02243eded24c", "sighting--71159d00-2a17-4904-b36e-3eded3129473", "sighting--04889b96-59b5-4844-9664-bf6ceef17aa1", "sighting--412346cf-4a45-4bb5-803e-478ec52a4b08", "sighting--7462c70a-b0e2-43b6-b0ba-a0706f61ae5a", "sighting--438a0380-d814-4013-a75b-2a93967c7a44", "sighting--cafb527b-48ea-4908-9494-94864cf5137a", "sighting--b98d2d7c-defd-4546-b7f8-00a74aaeec45", "sighting--c0ab605e-e057-40ff-8996-1921610e8261", "sighting--b9803d50-c328-410c-ad7e-3ea1b2c807c2", "sighting--ece5f457-84c4-4169-ac93-f61e3946ae0e", "sighting--4af21a4c-8f46-4c10-b10d-a884fd97fdf1", "sighting--78010f6d-c6a3-473c-b684-2aa4a5462c9a", "sighting--3c2767ae-7ce4-4506-a050-ec18cc18d94b", "sighting--2494ed62-6dfc-4d59-8bce-f147d9b03f53", "sighting--0cf5ad8c-3c82-4250-a261-66ee5d835c1d", "sighting--ac503c79-68ff-4366-81f3-bb67628efe47", "sighting--976213c9-ed36-446a-acf8-f8d6decdbbd7", "sighting--57e21769-8c2e-4474-b9fc-2cce0b8253aa", "sighting--48c1bf97-9849-4664-ace8-61d1e67aa5ce", "sighting--4f4b5f8a-4990-4649-9b8e-8b05b2a5cb55", "sighting--ef0fda89-340e-468c-8205-df0106d7aa96", "sighting--14b9168c-59d6-4110-9957-f11ec5b0d4fc", "sighting--f9c3e906-a35e-49a6-b7da-bdbb774ea05c", "sighting--7bf983ac-9642-4422-8a5b-cbfaa0db9bb9", "sighting--c6e4bbf8-687d-4c2a-a682-c3a0651f156a", "sighting--16c6bcfa-d5f1-416c-afc0-39f8084a4193", "sighting--0c74863e-f52a-433b-9201-ed75682bc28e", "sighting--cd5550ff-c8ab-46b6-bf3f-9891dc4e5ec3", "sighting--1a98b7a5-f354-4ce1-b977-17e0f9e17a57", "sighting--1e8ccfb3-74df-4e80-baec-c8ff3567c8f0", "sighting--75ea2c62-a757-4f3c-915d-edba86c15e7f", "sighting--1bb16247-6b17-44df-a07c-d37733f3bcea", "sighting--ad893d19-a45a-4544-847d-42038f4a6eba", "sighting--103f7285-e5b5-4fc2-ad3a-feb9fc14dcf1", "sighting--e8b87603-8a46-4a1f-a836-04f926dae1f6", "sighting--5714c67f-9e08-4388-9088-28ceda30257e", "sighting--11c7845e-65b3-4666-b9a3-9c424a6f948d", "sighting--5cc345b0-f8e2-4f89-b72e-f899124e03be", "sighting--e006b2c1-80d4-451e-bc35-8b1b8df5dc3a", "sighting--2dbfadbc-bcfe-45ae-b21b-3729aa50008a", "sighting--095cf1c9-fa04-4ff2-bdca-17a7491e97a2", "sighting--2a2ae18a-ead3-4778-9ac6-1943fb403e1c", "sighting--636f1c6c-1573-4eaa-a0f0-fc304d1af822", "sighting--e4bb2e8e-baa0-4c66-9bd5-673e792cb1fb", "sighting--c73a7924-a7a5-42fd-a081-33433011265e", "sighting--f3f64c86-8054-458a-b3c3-3ac90b3ba33c", "sighting--08eb5a2f-430e-4ab3-adf3-c3b83b7518c1", "sighting--607115d8-58ef-4ee8-8040-8948ba5134c5", "sighting--1a702bca-d89e-453c-adc2-cb0c9590251b", "sighting--8f1c70eb-869d-4dcf-a048-2b98d997b5c9", "sighting--2699c292-6ced-468a-b8e7-67e55dc90bcb", "sighting--4c0e60ee-9d91-4dbf-94e7-e269626c190c", "sighting--210eb8f0-d77f-467d-b715-2375b0b7637e", "sighting--e293d6fa-9a8d-41a9-8178-0aaa8c85cfed", "sighting--501e6e05-452b-48c7-83dc-a9bfc997f7f3", "sighting--f672b855-cd64-41ee-9848-88856af04917", "sighting--419c08c1-0d0a-4e67-bef1-6b8049d7e578", "sighting--8ca23c5c-94ab-43fd-b5d1-1e2ddcb33436", "sighting--c0d0a88a-f66a-49bd-a5e6-836542a48e43", "sighting--9adf4eb8-6b01-4b1c-89e8-f19672390308", "sighting--8f33a978-fd79-44c9-a8e3-766e210ef489", "sighting--5c7e9011-20eb-4ff0-bc35-7864fd145bfc", "sighting--43f19850-d4cb-44e7-a92b-efaa84133744", "sighting--26ea60ac-6c45-4281-a927-3d6c7ade52b2", "sighting--b6a0f1f2-3e50-4135-8c92-04579bbfd86b", "sighting--903b088e-1f48-45f9-b8e7-918040f6981f", "sighting--accd54b8-e358-41c7-98bf-924b767cb4c3", "sighting--971c61dd-9145-4bb0-b6a6-e8b8be130e00", "sighting--be36c121-94ff-4f6c-8ce2-32ee8b613add", "sighting--3c8ef548-6a36-4d86-8be9-2365c76d81e8", "sighting--7e3c99d4-a143-4be4-92e7-201f1151853b", "sighting--ef1d8c6a-78e6-483f-bea3-9878a77e4586", "sighting--6b179595-1c08-4dd4-9ac2-c54adaedaea0", "sighting--3f77914b-8da5-40ab-8233-fdec1b7f9703", "sighting--c2f8f94a-d73a-44c0-b2ee-8ac8bb54a90f", "sighting--5f76bcdc-3e46-4396-910e-64bc1e6b8383", "sighting--d452b97f-fde9-49cc-be24-f0215b8a0f89", "sighting--48fecfa0-acbb-461b-99ab-cc4ec08e1f70", "sighting--c34fc1c3-2999-4557-8bb7-3574fc29b0a3", "sighting--2c05fd27-eb88-425e-af45-dad32008497e", "sighting--59241cfa-6f7b-4c8f-888c-77bb8df5c3e9", "sighting--6f2232cf-eb8f-47f8-9c22-de06199575e1", "sighting--1903f2a9-8754-43c3-909d-d0e78da64667", "sighting--72216d11-bf1d-4de1-8446-95e6a418110a", "sighting--d1749025-48e5-4c67-be36-0ce7d9723140", "sighting--11bc7570-795c-46dd-b9d2-402d13e17977", "sighting--06a96230-4536-4bb1-8839-2d0155774662", "sighting--6fe88b45-952b-4d7d-b133-c139b86cf071", "sighting--39ea9409-1d25-4e1c-b819-3d88e5072426", "sighting--97e0c267-0035-48ae-b080-b4cb5b30ba9f", "sighting--d3e6b600-4daa-4463-8785-e8520fccea14", "sighting--af7aae19-e40b-4422-a096-b06d658ddbe9", "sighting--ed057385-3d75-4ea5-9a2e-286767120fff", "sighting--beecf32d-a19e-438d-82c7-73fea9a95f40", "sighting--8735f23d-990d-4b2c-b670-78706ec329f3", "sighting--cdf71b5a-10f7-4b1f-91d0-1b54e317a2c4", "sighting--a2f7086c-23c4-4120-b570-00eb38f7a117", "sighting--9d5f3fa2-43b4-4ca0-baa5-36e2feb20f19", "sighting--7905f139-1807-44f8-8d01-b15b8317bf6c", "sighting--c8bf0e2a-cc8c-4a58-985e-0fd2340cff13", "sighting--3e3e7841-ef44-4af8-bc6a-f46d81b57b92", "sighting--b14347ec-210c-4109-a9c9-1075f0ac7d9b", "sighting--9aca095e-747f-49c6-b59d-154a11e0198e", "sighting--5416caca-cba5-4403-aacd-a927eda57e28", "sighting--2f1ac758-78ed-43a0-9ed6-2252a7078471", "sighting--4f00bb93-3ad9-4999-8d20-fa966c63a0e8", "sighting--47491565-1363-4ac7-a7a1-c7afccd317a4", "sighting--ce643ded-698a-46fc-80a2-ff04b54dfaa0", "sighting--3d39df17-d0c9-4646-a711-35de0b12c722", "sighting--88053960-f5b4-4df7-bdf8-36574392ae4e", "sighting--be20abf0-baf8-43f8-b7eb-dce66df7b535", "sighting--ed09a9ef-a7aa-419b-ba47-5d951eb26e90", "sighting--97ec3f0c-1ed2-4a68-941e-d235138eb34f", "sighting--27da7ad5-0a01-4aa1-b67d-f830ed23bb0f", "sighting--16418f75-1b37-413a-88f3-4dfc39bb30a1", "sighting--7a5c749a-7a8e-477b-9c74-5b9bb0c0e254", "sighting--ee036a53-eab0-4a63-bcff-9602989661cf", "sighting--9dbbfe23-d283-4f92-a9b6-a875d84d25fe", "sighting--8229d919-5295-4917-9057-22c830f45c57", "sighting--2443c16c-59b5-4095-99b4-f20b6e9429d4", "sighting--99b8bdbb-70fa-4b42-93ae-7835f4caf884", "sighting--ff949a08-e6ef-4a88-a308-4ffdba1cf292", "sighting--f0d4e1a7-0577-4657-9f82-ee8f0c7e11af", "sighting--7c236cdf-0bb6-4af4-ac11-72bb1aa276f4", "sighting--0786ed48-c295-4a1f-a990-19fbee3655ab", "sighting--7886f850-d9dd-4638-b31a-cdf37bd4ba5b", "sighting--edea3510-702c-441a-a360-c1307f9f54fb", "sighting--35fbd7e1-cc68-4c9d-a42e-0215c5f29392", "sighting--c0d70370-982c-4614-be31-f61e92b11b7f", "sighting--cef565f4-3c4f-4385-bf04-bac12185897c", "sighting--9396688c-f370-4675-beeb-15ebb07ebc48", "sighting--85337b45-2feb-43e5-9585-05f5fa75ad55", "sighting--b195ad02-97d6-475a-aa83-fedcabc3b56b", "sighting--984201aa-c340-4770-914d-bd8f0eddd18d", "sighting--4197916c-ac38-4302-bd2b-66ea2386bbac", "sighting--81b8999c-6bcc-42f0-88fc-07e62acfb76b", "sighting--7327913c-9729-47f7-b62c-7fa1bad2bc9d", "sighting--0db7b5f8-6312-47e3-9d61-488a79aa681a", "sighting--22c4088d-9fbf-45ab-bcbd-0fa8578cd8f5", "sighting--b74c8910-c15a-43e2-823b-61817be1079c", "sighting--05b73b95-67ea-493e-9dcf-945cbe871e06", "sighting--891039f4-6959-4cf7-b25e-b436e9c95a0e", "sighting--6effe65b-54d8-4b2c-8da5-10cd4681024a", "sighting--d590370e-090b-4154-b4fe-943606c35aa4", "sighting--aef966a4-80b7-478a-9dc9-4c0d64802432", "sighting--8111149a-5584-4fc7-bcd8-a4abaab2f6dd", "sighting--fced3a34-e431-404e-8984-9b6f9b3d604c", "sighting--9f491289-7339-4b25-b938-8951e1a46532", "sighting--024a1da3-59d2-4d62-9c0d-08c7aab3ade0", "sighting--f6046ef3-b12c-4559-809f-497e3b601deb", "sighting--aec99720-faf6-40b3-83ce-1473a9c177ea", "sighting--906098a4-39fd-422a-8bc9-32e80b9d497f", "sighting--b16a60e3-a240-4c36-bfe0-8016f6ce5e99", "sighting--1ffcc3ae-af52-4be9-9a44-9c746978e45b", "sighting--e46d9f5e-b836-4d21-806b-3988a233a5f8", "sighting--356dc0dc-a6a5-4a75-a6ab-655450a5e9b1", "sighting--c876eb60-bbde-4793-8eda-470c4705bdff", "sighting--d11c7681-f212-4c95-90ca-cf96cb18fc37", "sighting--d06aa190-d777-4ef0-877d-ba2d1bcbcc6b", "sighting--73c9f7be-6189-4a6d-9d0b-bfc2173265ae", "sighting--3601b136-fbda-4d58-9a49-eb70bd10b0b3", "sighting--27b2a8ca-20b2-4f60-84ee-27a2add0912d", "sighting--2dd1b696-d490-4066-b3e5-00aa269821dd", "sighting--093ac07c-8ed2-4bae-8d12-a2241ab2efa0", "sighting--0bf6f24c-3521-498f-829a-9ab549feb89f", "sighting--90a72de8-0106-42d7-8365-aa7570f92326", "sighting--fc03240d-79d8-480e-b09c-2dc297b19cab", "sighting--956d1767-5585-45c2-a331-cffb01308c3e", "sighting--6df79531-30e9-459a-b1de-4f5cf37ad845", "sighting--943f39e9-3fea-4526-b082-106a851482b9", "sighting--417018e2-66a6-46ea-9ce2-859baa7e1141", "sighting--5a237d31-a00f-487f-9ab7-2dc816ca2725", "sighting--014afde0-d882-4a60-8110-b79106e55853", "sighting--51f178d3-32f6-4099-9f3b-2db067b42118", "sighting--4935ace9-ccc4-4686-8258-1128bfb2a7f1", "sighting--ed5d5954-3e75-43e5-9623-60217c5a114e", "sighting--6a030974-6fe0-43ba-bc6b-b94b8cf08522", "sighting--10dd2081-e44f-4a25-a438-3d5a6c2b66b5", "sighting--d19ed9ad-7d74-4dbc-9e61-62c62404f561", "sighting--2e1cab1f-6cfa-42ef-89ef-00fb6723eef4", "sighting--8192c75b-8df4-4cb6-9477-3205a0a18d22", "sighting--6306b000-cc89-4f18-aee3-26df77679b57", "sighting--e2c77c02-8bab-47c4-af4a-67af2339d527", "sighting--d4f20141-a208-4b5d-abbd-b1bb4980c1c2", "sighting--1760e32a-d5dd-4d4c-b296-4f47a81b3cac", "sighting--bc7ffca6-6b0a-477e-8778-103649e48fee", "sighting--8e546e2d-f440-4a7f-92d0-76aac209173c", "sighting--f845495b-7563-470b-a9da-7168ccb9cae3", "sighting--606ae83b-9969-4872-a215-8159fb5e1615", "sighting--0aca2513-787f-4956-ac21-6e03d6302e66", "sighting--5568eb45-1709-42cf-8033-8398b8a624da", "sighting--29c92886-6534-4e3f-a5e1-49d03bb28144", "sighting--225daa6d-bed5-4e02-a671-ecb3054ed0ab", "sighting--a97ad05c-f542-40f8-951d-12435727a928", "sighting--170ba3a8-176f-4b0c-9de6-b52cef40b2f3", "sighting--5bb41787-f79e-4e38-82c3-9a7848fde40c", "sighting--dd203f68-e8e3-422f-a6ee-5a235b8d728a", "sighting--3f9c9435-0339-4abd-9b2a-b3965878a480", "sighting--d670fc71-f43c-4b2f-b876-b686f01624b3", "sighting--dd5f6663-94d6-46da-a810-ee6a85099ba7", "sighting--4ed8d7b7-8ece-4f37-bd38-4cad961c5f18", "sighting--d5dd45f4-45db-4fa8-bc5f-7c9719d5142d", "sighting--bdf1fc79-258f-42b9-b342-9858f408ff30", "sighting--29757ea3-bdbd-4375-93ac-9d5a32854247", "sighting--32090bbd-248d-43e9-aabf-66f724c0c848", "sighting--17aae9e2-e68a-4327-b3cc-a11371df6cea", "sighting--3ffac794-0a90-47e8-987c-0bdbceb8fce6", "sighting--012032d4-edeb-4f61-bdb7-23c1203eae25", "sighting--0837ac96-9c07-41d8-9b15-aae671fb66bc", "sighting--d5246653-3c11-4c2e-95fc-9c245b611328", "sighting--5673c311-ca34-4cb5-b27e-e6ed5974d847", "sighting--419300fd-2ca6-4346-8de4-27b01494c8d7", "sighting--cbbd212d-40bc-4d5f-b11a-789a382f7228", "sighting--2e8b38dc-f064-42f6-a4df-4b437d3197f3", "sighting--fb42efa7-2de1-4cc7-b39d-86ef06d2f711", "sighting--af665814-b82c-4710-bcb0-ac798b774ba9", "sighting--3686a78c-1c3f-4d63-b03d-24d409a339f1", "sighting--81916909-fb69-4da1-84f5-5bf40f9bf2ba", "sighting--1bb14c2d-c908-45b7-b140-5859461a0b3a", "sighting--d633ea7f-6ba4-4640-9fc9-5b3b0f160372", "sighting--c109a36e-d41b-46ef-8f6c-df509a98f17b", "sighting--2d0e862b-4d7a-4067-a5d4-b579f5f2934a", "sighting--1f2943cf-d4b1-4cec-b2fe-4c7f48315b79", "sighting--5b22f1bb-eee6-4183-9f5f-5918ccd4bcf4", "sighting--66a1656a-64e4-42b6-91c3-76b8cafcfd9b", "sighting--2468181f-831d-401d-b30f-635bc0790508", "sighting--3b95ccb4-6ecb-493e-86cd-2005613d5e22", "sighting--bd550892-92cc-46cd-b258-5b9a5078f7ed", "sighting--48038c3a-7877-4f31-ba7f-70ce0a94dbe4", "sighting--d1654deb-6751-4be8-8382-784eed8a124b", "sighting--cb563938-30c2-4f8c-ae37-e2c284c51aa5", "sighting--7aaddb4a-99ff-4ac6-903d-00ca9fe44ccb", "sighting--7bf1e7dc-2395-4549-b7e2-62da1110c836", "sighting--29ad70d5-1203-4c96-a506-1522ee6f3d0d", "sighting--38880aaa-7c64-4204-a035-800011ad2f5a", "sighting--6a7ebc8f-1ab1-4890-b0e0-3fa416074f63", "sighting--1a094ec6-d473-4fd1-af0f-730135ee13bb", "sighting--7f3877d3-1b61-466b-8dbb-aa099ca04657", "sighting--3c78a1d5-4822-4f81-ae2c-ce1b247db453", "sighting--d009977d-de23-4557-b688-7ea3cacfd46f", "sighting--3c1bd0fb-ea43-43da-9219-4cfeea738204", "sighting--7f67c386-b545-4510-ab9c-370ccc6192ca", "sighting--6aaade24-ba22-4ccb-b61c-5650a105050e", "sighting--700db05f-83e3-4259-8cad-8d37e27afb88", "sighting--84e2378e-33c5-480f-be8b-07b132028768", "sighting--03b9bc3f-47b6-4929-ab9e-7aa31effaf3c", "sighting--e4ed3ad1-8404-4fe7-afaf-de90871d637a", "sighting--0d0d65a3-07ac-4df2-9752-35d4f3529dc4", "sighting--caa1270e-13ce-4f8c-af10-3b53b385fef5", "sighting--fa417ae9-84f7-4a36-b708-d805f60f355c", "sighting--fab13cf7-0419-41a0-95c5-b208f80e2ab5", "sighting--a765fac2-555d-4203-bea8-4a4f9ad75969", "sighting--afc96ac4-d609-47a6-9d97-6c3089d65fa9", "sighting--236e7e13-f11d-4fd8-9c52-dd54317b2ecd", "sighting--ec676fa4-430c-4763-96aa-55da9fbb221d", "sighting--60d0ad81-5231-47b2-a9c6-7762d6a6c2ce", "sighting--0245b4eb-20a9-48d3-a7a7-95d0c0e7cb1d", "sighting--a066c8c0-15a8-4dab-b9b4-c6dc9c31a44d", "sighting--f8dffdf4-97eb-4b39-90f1-25e67d311f13", "sighting--bfdf4e82-5bf4-4722-899d-19500202b450", "sighting--9559c407-8aad-4656-a3ed-8a2e3933c605", "sighting--39346d90-a07c-4068-b7bb-c2d027537c57", "sighting--82f4fb19-8958-41e8-b36f-cf3c1b5add04", "sighting--9435ade7-bf4b-4f84-ac3c-63c721b09b88", "sighting--48cfd082-a499-420f-a174-c3a5887aeeea", "sighting--6b089c07-9027-4b6f-be1e-54c91b32a93a", "sighting--c0a44d68-9872-4263-9721-42c973ee5f9d", "sighting--66633afb-3064-4b68-b548-f92bb05fe0bd", "sighting--d0548b8e-4e56-4a02-b2ff-34ea0d550b6d", "sighting--e2a2b76c-2a34-4af5-afa6-b9edfbf6f28b", "sighting--59b6c7b6-50e6-4de6-8b9e-767987564e50", "sighting--cfdbd4ef-19ac-4024-9fd7-2648fb6633fb", "sighting--42ca8c96-3355-4206-9b42-e887b0ce9dc1", "sighting--0bfea90c-082c-4261-97b5-b8f27cdaf35a", "sighting--7fc75241-70a8-49ef-8942-7625e3787e2e", "sighting--517dea0b-e235-43d3-a523-cba5c33caf6c", "sighting--4c902471-8800-4560-97ae-752774328f0f", "sighting--01041965-9327-45b1-862b-2a2caa4234a2", "sighting--9c59c33c-f676-4d25-8476-3671d9ff08dc", "sighting--f44b70c9-e756-470b-8b19-fd4cb82d70f6", "sighting--f56827f4-31a5-4878-9020-291b4b4e3942", "sighting--71dc0c83-e065-4e9e-bd46-a144fe334368", "sighting--cc5954a9-81e2-4181-bea8-84ad78acfd3b", "sighting--0a3c43f9-f05e-487d-a0e9-7b9b5821ab22", "sighting--9026737d-ae58-47a3-b042-6ba7d8502598", "sighting--4ec8b0a5-61f4-4282-bb6a-807878cf783c", "sighting--4733cbef-83be-423c-af58-daa1be1e87be", "sighting--b9f1e6fb-3efd-423d-97db-a73e55c7eafa", "sighting--3d52df53-fbe9-4f89-b3bd-5eeb5583abb2", "sighting--b276dd2e-55b9-4a9a-a006-8d5ba84cb62b", "sighting--3d191151-a269-48a0-8655-2c8985e4e7d3", "sighting--64aa12ed-0c96-49cf-b65d-e9c8a6bfc774", "sighting--5b8188c9-bd0a-46d5-b6d1-ab50fc3e1396", "sighting--51c6f389-f870-4011-89ea-07eff38ca918", "sighting--040730f5-f06b-4242-9046-8eec7983f587", "sighting--84fd7a32-ac85-49fd-9e20-637f389e0eff", "sighting--6d513304-5a56-44e1-9010-23fdd6c6ba46", "sighting--a724bc97-47ba-41ab-8b00-51e3e1041ec1", "sighting--1ae49c8e-4c90-46f0-adb2-1f4625db9f38", "sighting--27208535-07e3-4455-b7cd-ee588aa9ccc0", "sighting--3ba3874e-8cdd-4c9c-bd0e-d82aeaa0d314", "sighting--4b222e11-9567-40a7-ae4c-b8f2f5953f66", "sighting--d578b519-e41b-4e87-ae82-a73528ba58c0", "sighting--90700bd7-a1b9-4fe7-b377-bbdf68a96247", "sighting--1543e686-3cbe-4d35-b00a-446ee8f78ec2", "sighting--1bdf0d0c-190e-4540-a7bd-44cb25ff05c1", "sighting--2f410a74-0a72-4035-8923-bba6db73e3de", "sighting--5a5387b8-8ebf-487f-9e8b-4152c25e9216", "sighting--feab233c-9518-4627-ad79-12c71f114b9a", "sighting--a6916778-768c-4cf4-9019-96e0fcf6383c", "sighting--86b98757-268f-43a3-b2b7-701c83452404", "sighting--d3fc08f2-9d39-4ca2-953e-252d7c18b990", "sighting--42b77024-e63f-4ef3-ae43-693b35f7de48", "sighting--d151d9a9-469d-4017-bd88-0fc8d461e2ce", "sighting--eff3b623-99f1-476e-8330-1a5cd08c8f5d", "sighting--b646bf81-2780-4121-a6e6-b7e5b4098fad", "sighting--3d512887-a161-401a-9db9-192691c861e9", "sighting--2b052559-b540-4375-b38e-4dc41b829d3e", "sighting--f9d179ee-acb7-4795-a1ac-03261547aa15", "sighting--ab9af6b2-f61f-45ed-bb2e-2807a51bfbd4", "sighting--642f3dd4-e043-43db-b6b2-b2ddb8f3722d", "sighting--fe759150-5ba0-41e9-bc29-33761121a6d9", "sighting--d2b32d7d-17a4-4b2f-b918-371e510a5d5f", "sighting--75592a81-5426-4adf-a5e1-8529de3042cf", "sighting--fa2aa0c4-b77f-438d-9776-583ca1c820e9", "sighting--6d2f7175-67cc-49d8-ac72-d8d0d07ffa2b", "sighting--a2fe8a03-c59a-4a7e-8f88-2b5e3d468d27", "sighting--0d810aa4-d6a5-4a91-a2dd-f7e64ce878f5", "sighting--28cfd8b4-0dc1-4fb0-b519-6220eab4a179", "sighting--735cf2b6-0ca8-4d16-bda7-173ef98ab81b", "sighting--f6cf25af-0b79-422b-a2cb-92a6e8b17b3b", "sighting--36678add-6fea-4dce-be6a-b67ad5f6f708", "sighting--458b3af1-977d-4d9d-bd2b-5638ec9f7925", "sighting--ed5f2c35-2483-4358-ab42-cc55ff79a46b", "sighting--df816188-c49c-4327-adf8-dfdfa369aaf5", "sighting--c5462f83-b6c0-4019-94da-3b13abc83ab7", "sighting--256bb357-1f50-4d13-a2eb-b1be8cd726fd", "sighting--1db186e9-6037-41a6-b3cd-dc3b11e19deb", "sighting--e1ae02cc-5994-411f-b65e-aab89d936f06", "sighting--e5da2df9-8c7f-4622-ba5b-8306f73f985f", "sighting--de46b47f-7546-4888-bf16-a6a23ee4da6b", "sighting--bfcb641a-cfe2-41de-9c42-22d75f0fc3ac", "sighting--c5d08d9d-a7ea-4ef9-a85d-0c2bbb5daca6", "sighting--067c45eb-7f86-4952-9e4e-06cecbc032a8", "sighting--441a8206-e077-4b47-9fe0-f59d13be1a83", "sighting--96b83b4c-c678-41ea-b478-af2c17847e31", "sighting--cce0fec4-3ada-4cc6-9d56-2275188732dd", "sighting--2f9e5caa-7364-4560-8c9d-86e322896c1a", "sighting--eb4af3a0-fb7f-469d-816f-e1de554cb7b2", "sighting--2ff96434-181d-4210-8b3d-db67cddec164", "sighting--204c79d0-f225-41a6-9fd7-5993508960a7", "sighting--d1449310-4040-44e9-9ecf-cea80dfff127", "sighting--3492301d-e4e7-415e-a0da-8a6768a6251a", "sighting--c458c7f2-a743-4440-9d2d-33d514fa9d50", "sighting--258a383f-cb6c-4756-a6f2-017d089e33b9", "sighting--a89eed06-27a3-4714-aaa8-315cb3059748", "sighting--a9b9d455-d000-4f7b-927a-9a25f0f84420", "sighting--7c303d6c-de5d-414b-9a83-3963a1123406", "sighting--a7d1e41f-510b-4dcf-bca4-0bf3bedf49c3", "sighting--57123ce0-6097-4caa-8023-2c42fea4efce", "sighting--e7d8f405-e027-420c-9e60-e94f0fa139ef", "sighting--ff6ddd1a-7b7e-4ea8-a5e0-f85d95d748be", "sighting--cabb9991-e9cb-4fb9-93c6-053c8c340b5a", "sighting--40248b2c-a4fa-457d-b5b6-337c104655dc", "sighting--7d291365-76a7-4095-8dff-0b8b69976d20", "sighting--a666e6db-da08-44b0-92b6-b79e6d05e783", "sighting--cad2d4f3-47d4-450c-82b5-21d778be5320", "sighting--4237bb26-4d2a-42cc-a269-2fa7daa68754", "sighting--296f4c1b-8523-44de-bd7a-9915f9351c4d", "sighting--6b7021ff-90f1-42c7-adfb-2ae8e032cac3", "sighting--b06aefac-9c08-435e-ac13-bbf1752556dd", "sighting--55693dd6-59e1-4780-b191-5b03cfaaa1ae", "sighting--9cbda9f9-f799-4b4c-8445-afa68b85d795", "sighting--9e6e8cda-60c7-4f34-a007-f2220db602de", "sighting--0ea26915-08d7-41c8-a4cf-37b390bb9306", "sighting--15fb0a8e-d6b5-460f-a58a-aeb8bb5a9a1a", "sighting--1997988d-16a1-4299-b999-4d4ed426edf9", "sighting--95ca2691-c8fd-4432-b8d1-dc6589630e05", "sighting--f506eb1b-98ef-465a-9421-e3365828ebff", "sighting--b3429a07-1f21-4994-99b0-30b7245ae160", "sighting--948d414a-b564-47bf-830c-33b4c8a2bfa3", "sighting--17355b56-cb7a-4a91-b6a0-d7a81fab4218", "sighting--e1fc685c-6787-43d5-ad83-c0a6fe290992", "sighting--0ff36ee5-adaa-499f-9d08-0d9ff59b249e", "sighting--d98197d2-f39c-400e-bafa-c6e5a582599a", "sighting--4e797fcd-2998-4e5f-8717-7a44f5a3f55a", "sighting--a5f9f617-c3bc-4ccf-ab5b-04e3c994609d", "sighting--431568d2-d9be-493f-904d-3480a52bb9bd", "sighting--a4812418-886c-44d3-8d59-4809013d8327", "sighting--b77a507c-c5ce-4168-8d63-dd07607e4568", "sighting--8d33ccad-d067-4c9a-997a-43ab0b84cfad", "sighting--753f0a5e-1fef-48c0-9473-e49761de8980", "sighting--6cb84607-53ab-4d17-92c1-4386d87ab8e1", "sighting--150015a8-4be1-46ca-87df-e9691ccdabce", "sighting--e2981fad-12ba-4e6a-bea7-f1cc0263b077", "sighting--e74f1950-6c1c-448a-9af4-4de2967aba39", "sighting--2da12569-4b6d-4af0-b4d2-af99007dc6cd", "sighting--2a6cd4b0-e411-412d-9d80-dca74835b7a6", "sighting--6a874f38-1c0e-4695-9afb-30d59dfaba3d", "sighting--4435c9fc-2b7b-4e38-b5ef-7e3c0adf6956", "sighting--91211898-a926-411f-8967-33d815b0ae6e", "sighting--bde8f53a-7806-453a-8b96-288c60f36458", "sighting--42215229-ef3c-4116-9589-c5955355b23e", "sighting--bfc98b18-3a4f-4e2e-a64a-b7b1bda36593", "sighting--2206dc1c-80c9-40e8-b7db-6186a5c5f205", "sighting--d2f286fa-4fa2-4234-b4fd-cf64f8f19533", "sighting--6533cf81-ec0e-49f4-a542-a3cdc9bcb569", "sighting--53432e9b-4f54-4c7c-801c-e5c372f55848", "sighting--537a2c9b-3578-4237-8838-7f9a7fe099c5", "sighting--f9e16b1a-1314-41c4-96ff-23dd8760ef94", "sighting--42b569d2-24dc-434c-b839-60dbfd86cd78", "sighting--99afeab0-9322-4931-be2a-6961ee1d8af4", "sighting--3cd5f1c0-bdee-4587-8bac-0863e61082ed", "sighting--6568cf58-33f3-42d3-b2e5-dde0fbcc1bf8", "sighting--15d264cc-48d5-4652-8223-39bf744ba2d7", "sighting--ecdfde72-4b66-43c4-bd8a-37d7227cdf1f", "sighting--127ffbc2-91da-4b91-9ddc-7b526ecd7177", "sighting--21ae37ca-4313-4ddd-bf5f-986896d04818", "sighting--a2dc4e4c-70e2-40c6-bb84-8007e4b9c978", "sighting--17935273-6077-41a9-a6a5-7c77091f9f56", "sighting--7d1adc80-8830-4cc4-a685-223ac098e668", "sighting--11b7150f-d1e6-483c-8125-d6c070324683", "sighting--285d152c-799b-4f2d-98f8-cd2fd53a5622", "sighting--3ba3a6e3-d057-49a4-a8be-4a4a95260fad", "sighting--b89a1b0b-90d6-460e-a282-31ecf8af5ffa", "sighting--3e8ea22f-4d80-4dd4-b893-dbea862bb9b1", "sighting--aaa39730-a749-4ae9-96b0-f66b88be7fde", "sighting--2b8d2df0-facc-43dc-8037-d3815afe7c6e", "sighting--bffa0bd2-65e3-4892-accd-1e18d02306e8", "sighting--3bfca280-5adc-4eb3-a082-eddd2b3bab40", "sighting--df079192-1248-4695-8f86-2bd667e287fa", "sighting--2e70d0ed-200f-4679-bba1-ccee74bf219d", "sighting--4d92a33b-180e-4ff2-ad15-29c3c0a4b0b8", "sighting--9c37c1a3-8fc0-458e-ad3a-1f042fb2b04a", "sighting--55ce9edd-cf55-4dc1-9e25-5005b1b44970", "sighting--3c4073bb-a2b8-42fc-a693-f6bb18490544", "sighting--156768b6-9d9e-4e7e-8344-3dfecd1f8470", "sighting--37d3e4d0-7522-4f9c-8e18-ef55f947b02b", "sighting--284659a2-59be-4b70-91c7-58c83fe82b08", "sighting--8eaa6df7-3496-4e43-b8e6-cbf2706e7751", "sighting--ae01c539-1509-4f29-87da-c9b7402e53ce", "sighting--036c3dc2-5166-439f-aa38-dd2117040c4a", "sighting--6be9b8e9-5fde-4893-9eda-4c5623eff1d0", "sighting--8bcb04fb-c67b-4fc0-b49b-7e957732280a", "sighting--933c350c-1fd2-4f61-8c47-93ab0e84a2da", "sighting--9b8798c5-902e-428d-96c9-fbb1cca4cf5f", "sighting--b5494bab-b39e-498c-b3f4-18d4a0cc8ab1", "sighting--97ff2917-6d71-41b8-966f-d1576667c4e6", "sighting--1cc90c15-0c5a-4bbc-93ae-639ed98c8b14", "sighting--1fa4e806-4579-4670-b798-de356830fc50", "sighting--6814e1da-4d12-4290-ad58-2ef2fbfce000", "sighting--2c2ca2e5-302e-48f8-ae9e-4da34191e9eb", "sighting--38eaef47-2dd0-49cb-9d42-b7b01c059934", "sighting--3107ba51-99b7-4d08-8093-f7e9c5146912", "sighting--a06511b2-0151-4658-ab8e-4e72fa52f82d", "sighting--99f8734a-c029-45a7-ae70-37dcb5e3a9cf", "sighting--66db6968-4f84-479b-8083-71fd8ef6a02e", "sighting--5c66e393-f3e6-4530-9278-b7f87ad292ce", "sighting--04a1242f-edc0-4b91-aa75-187e3d04c5ba", "sighting--548b12ae-c664-41ef-a96c-a29a256b45f1", "sighting--f0343126-c21c-4194-a060-6b83a3ce43d7", "sighting--1556930a-378f-450f-8306-f326ace04ec5", "sighting--1c57d80c-9a94-4d22-b7f6-a4ee3e4a670a", "sighting--a74119db-50a2-4863-8841-c8f4cfa868c9", "sighting--e58e37ea-3c8a-4fb8-a7dd-70ca97507304", "sighting--f553f7ba-5c0a-4cdb-81b2-5e74f68b8cea", "sighting--83e97b19-1a8e-4ba1-b771-83482f0e9c74", "sighting--b1226dd8-a3ad-44ab-9716-2057d533bf37", "sighting--63c21c34-77b7-461d-b70a-621ec1d2aca8", "sighting--8644a75e-bd29-4d44-9b2e-b88886ada0e8", "sighting--2339f8b7-5dad-4048-a133-ec896cd9617c", "sighting--1b947055-a457-4680-ae0e-944505aac7df", "sighting--7576462d-1baa-4fe7-b27c-feccfe4b06b2", "sighting--8bb61f43-5a84-4a53-b8de-78e1893e7767", "sighting--1546e1c3-bf33-4f9f-88b5-e7067bb17de2", "sighting--b23a419d-6623-40f6-9ae2-8bf993e4614a", "sighting--aa5c1536-84eb-42e8-bfb5-572c6263918d", "sighting--96a24d08-0acd-4f78-8065-5c046e2edbc7", "sighting--2503240c-bfd3-4f0d-8ed4-625c2561720e", "sighting--bbdbd6c8-ae46-4621-95a0-3baf34b6b682", "sighting--2a5b6ae2-9acf-4530-80ec-c9582ac88d1e", "sighting--79ab7b88-db2c-482b-80f7-f04fb50368b5", "sighting--b0a5cca1-300b-430a-826e-1597eec6990a", "sighting--3d59459e-8083-4f56-8a71-e92fc4ee3161", "sighting--b5d1a012-7b50-4977-b8a3-9ae8472791bc", "sighting--fe92d628-11e3-4945-b1ea-6951bd009702", "sighting--d819732a-539e-4b3c-8e78-ae9cd52dad0e", "sighting--00be437a-bc95-49bb-a392-9d83c091caee", "sighting--cdce69bd-f8b1-4cf7-9816-547423aee7a9", "sighting--0db22553-3d4e-40a3-b4e0-851035e63526", "sighting--492ce024-81a6-4d12-8d07-98b1724e6b00", "sighting--a51fe11f-2d7a-4742-abbe-19356c63e4ac", "sighting--91367c4c-fb98-4a18-aa98-b0092bc91935", "sighting--f18828cb-2df8-4f84-8745-18c39d40e9cf", "sighting--432777bb-99f4-440f-bd8f-4ed2852bab01", "sighting--f6d3ed69-83b7-4a7c-84bc-703d7fa29d80", "sighting--fd760749-e966-4368-9508-66a279e22cd9", "sighting--3739e8e0-bc1d-49eb-ba6f-739e072d8ce1", "sighting--12ac1a16-02e1-4d2a-8eca-3bd3c11d539e", "sighting--68ea52f5-6270-47cc-8d69-c3917c252e33", "sighting--6003c924-180b-41dc-baf5-febf3aeed020", "sighting--f07e4ea4-83d0-483c-9884-bf889130408e", "sighting--65f733c1-40a3-45d9-87bb-98181bcfb89d", "sighting--2c1b03ae-0367-4411-b076-681465c15618", "sighting--66d4428b-2b55-471f-a38d-fe988ea7dad6", "sighting--a25faadb-5b1e-4e14-bb46-8678445d4c50", "sighting--9c0478dc-e426-4b52-9627-2a60e11746d9", "sighting--6f205a5a-0b6a-4ce3-a309-13e37815d90d", "sighting--37cbb7c6-454d-44a2-b832-cd34d2ca50d1", "sighting--b29e2cbf-2501-4f98-951b-f4c506cc363d", "sighting--6f8e7761-ad59-4939-8cc2-40c356bfd9bd", "sighting--c4cb894e-81ed-4879-a0b7-f2b0f901cc42", "sighting--75976750-c63a-4dcf-8947-535cfc17a952", "sighting--2a39e383-4cf9-4b9f-af6f-be16c9f63530", "sighting--fdff68b5-2075-4592-870c-baef17817559", "sighting--7490dbd3-d501-4253-8c2f-d295e6ce5cf2", "sighting--f46301cc-45b8-4383-ba4c-74d659345dc6", "sighting--70c9755e-1818-4a97-84c3-6a19fb0ec16f", "sighting--96b63e36-8888-4673-ac67-767ee4d0a363", "sighting--7659fe1f-1716-4bc0-9669-7549ae25d488", "sighting--81754fbb-ae9e-492e-922e-f29807678b94", "sighting--af300587-af17-40ee-bcb5-a529fc96d7c2", "sighting--41d871ea-7d3d-43e6-8628-bd7ccdcc4952", "sighting--f60bbde4-b53c-455d-82f2-29ef9bf9800c", "sighting--cad8f310-c550-4e1b-8cea-dda21255ccea", "sighting--369f43e4-f398-4642-a03e-f71e0b762960", "sighting--b17d4819-c727-4b5b-b70e-3616d77fc1a6", "sighting--769c7c74-1eb9-4b61-848d-9e8f0c4ebb36", "sighting--3bdef17d-02c6-4b80-8daf-1a95ef0c9fa8", "sighting--578e9210-085f-4566-b5d7-694def72797f", "sighting--743f8035-290a-4a92-9ed9-d8132a63cdac", "sighting--4fa60b1d-0907-445d-ba24-67328a6b48b6", "sighting--dbfde551-8082-44ac-aa19-14912f61ccf4", "sighting--f13de531-a948-401b-9aeb-8b5e27deb9f8", "sighting--fae27b89-cd01-4cba-b00d-0a9fab3ea790", "sighting--427c36bb-5a8b-4e38-9055-83449be207b6", "sighting--c6c291a4-a720-4afa-9866-eda96c3b49c8", "sighting--0ceb385e-5a60-4a00-bc24-f89d98290a47", "sighting--ef48f90a-75f5-4d93-b062-81d0568e039c", "sighting--6fdc012a-77ce-492c-8a07-8ac4fc8843ee", "sighting--4b48e21b-b88d-4d3a-9bb6-e565dfb6c218", "sighting--bd866a6c-82fc-4c10-b2d6-056147533bdf", "sighting--0a279331-051a-49c1-a354-43ec8c72080b", "sighting--b16027b8-612c-44cf-ab26-52d6cd9f934b", "sighting--5e13343d-bdb7-48af-8511-43cb56f4c5c9", "sighting--cb6692d4-80b6-4d47-b5d6-211a23199833", "sighting--e75e9528-362f-43b3-9b8a-36ca1cb785f1", "sighting--9d01e958-4b35-413f-99f9-4f32e68cb224", "sighting--d66aabb5-4bf3-4642-93f2-558ab0ff0a12", "sighting--4546a80d-dd1d-4b66-bb13-7c37d0039aba", "sighting--8ee1b3ae-3dd1-4fa5-85ae-fe7ceb214ad8", "sighting--4d19e892-1d52-4a0f-8537-435fc32dab95", "sighting--a4b7b34d-70a4-4f6c-bb77-5f5180069ef7", "sighting--6d2a5d54-a14c-408d-9f7d-5cef30a524a4", "sighting--0c840d0f-50df-4e36-9a92-320d83340707", "sighting--f560bc11-7f9f-45bb-9442-8be315579921", "sighting--c669b0ba-a823-4a8e-bf61-a1242f24033f", "sighting--900c0813-49cb-4244-8f35-4acfb7912ae2", "sighting--29001d5b-9de9-4b14-ad0b-2dccae7c690a", "sighting--545e2558-92dc-476b-bc6f-82531a23d717", "sighting--56376517-5787-4a46-a60c-703ecf27c305", "sighting--682a9260-7967-4fd8-b470-dd444c1cd550", "sighting--cfb295fa-0c66-4266-be4b-e32437247971", "sighting--ae6f2f40-b4e5-4953-9509-dc39dee78bff", "sighting--0760f143-29cf-49be-b667-91854ca3533a", "sighting--86b4b49e-75c6-4b2b-bc87-690da009d3ac", "sighting--3602bd10-11eb-48b5-8da8-6e0bde685c9f", "sighting--24148d0f-fb44-49d8-8ed7-db264d42e501", "sighting--bbbcd596-383f-4ab9-ad5a-e316f5f0c62e", "sighting--2e02d3d6-4302-4573-92b9-fb4965632668", "sighting--9440a5b0-13cc-4517-93af-7c6e73f0df54", "sighting--0e7d5831-4695-46d8-b9ac-aefed470a098", "sighting--f845e92b-da0c-43ed-bf3d-e82aee2e8a10", "sighting--97911fc4-1d79-4a33-83af-74e37024bdb3", "sighting--7938c1ee-822e-49ce-8d82-2e86442e2318", "sighting--71011947-56eb-45f7-970a-a98fb927adf4", "sighting--f572f945-47fe-4d81-b619-b4dcd2d78e1c", "sighting--5dbb9216-ebe1-4547-b4c0-fac7381311f0", "sighting--4335f3ce-dc82-4e81-bad1-635a4164014d", "sighting--7c8cb499-3cd1-4a34-b890-7b4ec4ddd7e6", "sighting--69b4b1b6-a4cf-499b-81ea-7c17f69c698a", "sighting--ee56c12d-dea4-4fd3-a3d5-e79d59750481", "sighting--fd328f26-2904-472d-89cd-0054bb44c252", "sighting--b572a5f5-d1ce-4902-83b3-af7bb30607b5", "sighting--571773a0-617e-4a9d-9a94-a03230f568d3", "sighting--18197f17-4c09-4e4e-9716-9a921ec96dc1", "sighting--8b3b0f91-9645-4ba6-bcc1-116fba945c36", "sighting--0d802ae5-c4bd-454a-8e6c-f5fce72b81f6", "sighting--16282d55-8ad1-4d77-a3cc-9c7614d72557", "sighting--21985f98-479f-49e8-b495-111c52710d11", "sighting--cdd011f0-c8f9-44db-8033-edaaf64c9b66", "sighting--22265d76-eebe-4e7f-81b8-905833bf512c", "sighting--3d924a88-439d-4df4-bc86-3396628aa7dc", "sighting--329b6b6d-48ae-4c2d-bf4c-c83bb0977ab6", "sighting--e732be07-c154-4256-92b9-575d01866b6c", "sighting--6806d749-c414-4f1c-9973-d4f61a2cddba", "sighting--07fc15d0-59bb-4b5b-af6e-552e4efc2b13", "sighting--3a179a62-c019-4165-9125-085d775a72fd", "sighting--82f54db4-72aa-44fd-9b1c-f100b77ec1eb", "sighting--590c2a47-41cf-413b-845f-1a87b34766bd", "sighting--82618a91-46b5-4131-b502-b52e04a16193", "sighting--f00a64a3-d7a5-4493-8604-c5d28487c040", "sighting--a9a7214f-db25-4b30-a487-84e0d953909e", "sighting--7f5fac6f-ac84-48ec-a5a6-e380c76d71e8", "sighting--3e7abfdf-00da-47e5-a4e5-7c06690a4754", "sighting--fb3512cf-c111-4b1d-b565-9be0df5e4e80", "sighting--c8157013-8c57-49c3-b579-a9fcade05f89", "sighting--1e11fbb5-b9ae-4182-ad9e-ba21dce39a7c", "sighting--58d41383-7c48-47f8-9876-c489e372b1ca", "sighting--57aa9fe8-1b54-40e4-a3cc-bf805573c779", "sighting--8ef16af0-df13-45a6-9ad7-7866b40908c5", "sighting--d80e418b-21c9-4fa5-9116-e717f9a29bbb", "sighting--7f609629-d333-4714-9dc0-ab06137b3d15", "sighting--39e53fd2-6635-4c1f-943a-9d5fcbd2c52a", "sighting--b21ad3c4-a417-44c0-bcf3-453f628a779d", "sighting--d8636a37-67cd-4b76-81f1-b748dc9445f4", "sighting--9432b507-0bb4-4b24-aab7-c8b62dec6073", "sighting--bebfde2a-87e9-4910-9cd9-2529c8b6f1b3", "sighting--90423558-9537-4816-9622-d973def9f3c8", "sighting--4fc5c436-51c3-40b3-8908-db0de4ad3faf", "sighting--4d3044ec-a1a0-4d0a-af5c-63f6bec11240", "sighting--a0159248-59ac-415c-80d0-a1e3be6dbaf9", "sighting--378288ff-e0d8-4f79-91ff-5d88c4d816d5", "sighting--6b95d5f1-09d1-4344-8e45-3e63c86eb477", "sighting--b5eb6f9d-bafd-452d-976c-ce283e43f29c", "sighting--b144d8f3-2b02-45a3-beb6-c0d5b0ae427e", "sighting--b8b58424-a4f4-43f6-8df8-252281566b5c", "sighting--116f75fe-6641-4062-bad9-6de08ca91eed", "sighting--e8a8a066-8330-46b0-8480-80f5a5158e8d", "sighting--500c9523-c454-4788-b594-d8191c30ad05", "sighting--6661ed06-1951-4b7b-ac6e-69d86732200f", "sighting--14e927a6-a9d3-4908-9aef-20e5c44245c9", "sighting--569f88f2-a966-4204-a8f9-46b38989b933", "sighting--ff5a0a5f-c55a-4d76-8d99-8344d09ddcb2", "sighting--133c465e-4b8e-4f60-8ad9-7a86a8b9f556", "sighting--9d32767f-a920-4f2f-8d2c-15ef4d72af2c", "sighting--2cfcbc7d-76d8-4ece-b540-34e84683cebb", "sighting--f0d9b9c8-b1a3-4791-97b2-3d6318f5b592", "sighting--960d9110-8621-4044-aab4-6919a900251b", "sighting--43708b26-c544-4869-9a82-f613da8d2adc", "sighting--2cac0b48-583c-4f26-8734-1672a804ff19", "sighting--3b907d12-8daf-4294-a3e1-b37e856844ec", "sighting--bce0b92f-dd22-49bb-a6f3-bfad3d133997", "sighting--2651321d-46ac-48e7-851f-cd4158795825", "sighting--7ea887df-9497-4b62-b1d4-e51ccddc7477", "sighting--01e725b6-44cb-419f-98cc-50d8ae4b7148", "sighting--6830d114-7004-476b-a9c9-024623000421", "sighting--25017eac-d71d-4ca4-ad36-216b61d6d161", "sighting--e631860e-a676-4101-bf30-acc336dd0ea2", "sighting--13e258d8-4761-47f0-8462-ce8efabeafc9", "sighting--ed86ba2c-0a5b-4b5c-87da-bb1102596b1f", "sighting--269121c2-8724-4f36-8003-227f187c844b", "sighting--9c0e6897-4352-48db-92aa-398a5a5af81a", "sighting--102d03fe-1bce-493b-83b1-f3fdd089d683", "sighting--674da044-e55c-43ff-81a8-0df355c8d794", "sighting--0edd2bf8-1c7b-42cc-843a-8e9e520ba72a", "sighting--b1923cc0-66ea-433f-ab7f-56e85d9e402c", "sighting--9619e5a7-bcd2-4c7e-9dd4-6a33812d1d16", "sighting--c4f5edd2-bcd0-4495-a62c-25177c8eb931", "sighting--a5319bb0-71d4-4c01-9a6a-f9f08faefb5b", "sighting--ba9d59ac-35b3-4aba-8419-79d068421a80", "sighting--3fbe9fcd-abed-4f97-bf77-6decae84c5ad", "sighting--92505e3e-9146-4c7f-a248-3d10f6971128", "sighting--2a98601a-c3b6-455a-8026-457d89477056", "sighting--f7914205-061c-4e65-900d-0a029dad596c", "sighting--ae082172-ff27-4603-be7b-d8a4b0fd312e", "sighting--f818fdf5-b51e-4edf-b1d8-49b7e28402e1", "sighting--c00aa6cf-5c99-4a79-85ad-9ffb72916ec5", "sighting--e97a3e74-0f3e-4438-9060-b92635887b68", "sighting--10cbc5dc-a4f7-46c4-9302-ca51043fb46b", "sighting--ef422f40-7d3a-49b3-885b-229eb650115c", "sighting--876cc02a-a8ce-4e8d-910a-bdcb9586f183", "sighting--3134eb5f-b914-4de2-afc0-936b9577413c", "sighting--0e5fb2f9-7a47-49a8-bdc0-4c63b27a511c", "sighting--f0d2bad6-aef9-4985-ba1a-ca4c2cd1f6a2", "sighting--bd7c200e-6bbd-468a-9e81-a894a1fa28a3", "sighting--b3ad12fc-daee-4a29-8216-d6d355909672", "sighting--4879f7bb-4808-4cb8-ab04-6d58d3b0b717", "sighting--efebab3d-0d26-4b6a-b4f5-df59ef06d113", "sighting--349f611f-091f-4323-8462-9c2c2886dda6", "sighting--fd68ec66-b6bd-4f01-a212-e598bf0c5885", "sighting--c0ac55b3-8d99-48ec-96e8-8126fb275132", "sighting--e0df7fbe-0c90-436e-bc27-8fe78dcda32f", "sighting--cf87788f-3980-48ae-a917-e8557a7ed8f1", "sighting--bf3a6b10-3e7a-496e-8b32-bfab394513b0", "sighting--f292a81f-cbc1-44f6-bf0e-deb80beb71c7", "sighting--de99658f-4031-4cd1-b564-e3a7d353bbd1", "sighting--811a01cb-d9b3-4b00-a93d-e683cdacd831", "sighting--185c76ad-d8a6-42a3-9f38-1ca78c2a5ba6", "sighting--3b31d67c-630a-4570-bbc9-02664af73024", "sighting--c3d955d1-50e0-4c3c-80b0-47c6539971c4", "sighting--485275ac-ca75-4bc5-b6e6-fc7f93d55ebc", "sighting--3bf7c471-a82f-4f1d-b59d-fcb55ce61fa9", "sighting--65da8853-3964-4335-b92e-8a4092ce0846", "sighting--bc401c3f-64dc-4bbd-8e9f-6b7c71305fa6", "sighting--a8852872-4081-4ea2-bc86-86faab43b404", "sighting--6bca5451-2424-43b9-8ab3-0c52836c3197", "sighting--73912d99-d2dc-4b50-9a17-4bf730cb8e59", "sighting--77cc8556-0650-4596-9da1-fdd1afe557dd", "sighting--be82d40d-810e-4649-9407-3bc67fa05ffd", "sighting--3267d404-838e-4c8f-b48b-e1b983df4e90", "sighting--1ca89ad0-5590-4a08-8f81-1205e12299f1", "sighting--89ee9bd7-6898-4d00-a5bf-f566d48305d0", "sighting--222add14-a796-4147-bef0-44e13c742dd1", "sighting--fc2b5472-d781-4cf3-a530-2c69fa04626e", "sighting--b612fc15-ec07-4661-be17-a71e9e046cb4", "sighting--c7df1938-9c7a-4b6d-a62d-dcd9e0b8af6f", "sighting--2fa8cc87-05b5-4e27-a763-8fedca1a4579", "sighting--60bda879-04f4-444e-937c-453c78a727af", "sighting--352c173f-006d-40f0-8f08-4aace781ff1b", "sighting--f1bf0d4d-8bf5-488f-a934-39fd9eb62b7a", "sighting--9ecc81e5-19b4-41a4-bfd6-5f3ae8634523", "sighting--bf94a78b-06e6-4859-a915-c2ca0219b89b", "sighting--3f63f926-a3c0-412b-b2d6-5d8bad4a5786", "sighting--83814657-311a-4a54-b66a-3f8505c1fe8a", "sighting--121a5a0a-4f72-4596-b904-cca8c043e1cf", "sighting--35cc18c1-3d60-42fd-b902-c20b2bc36cc2", "sighting--ef452d1f-3e64-4070-b4c4-0d9a00373730", "sighting--9c2b0c3c-19f0-4b49-bf6b-a79749542a2b", "sighting--55032e6c-94cf-4b43-87ea-615869e614b8", "sighting--bafc1a61-cb20-45b9-a8fe-eab264a15b99", "sighting--ae161101-a646-4d7c-ab9d-cadb7e2e8569", "sighting--2b0545ac-6e05-4f01-9c5a-3e0a04302336", "sighting--edd444c5-3daa-4ff2-8ffd-8c4227da6273", "sighting--e75e30cd-2ead-4016-bcbd-b6e2ddecd7b3", "sighting--122b8be2-b473-4fa2-9f46-94f8c86bb165", "sighting--ea7b4016-f1c5-4d98-9390-79ad4a0c4447", "sighting--fc170d0f-77da-42c4-b706-50809b3ffd35", "sighting--caa5b189-80fb-4a30-8ece-533a61f03058", "sighting--82b2e87c-4c47-4e83-aebd-6c1b5f085fbb", "sighting--0bc49a1c-fa0a-498c-a637-b092717a5150", "sighting--0dad494f-e52d-45fd-b544-15c267157786", "sighting--5d997283-8242-4ac4-b716-894a8d39359d", "sighting--d9eac136-294c-402b-965b-935f160ac209", "sighting--0cfb7066-6eea-4061-9db8-2ad56e117316", "sighting--731f597e-af17-47ea-b032-633e489d04a7", "sighting--9476bfa0-e0be-47eb-9cf6-c755489f7f73", "sighting--b54d9cac-d757-4b6b-a3c7-2e3877c63708", "sighting--026c3805-e562-4ebf-a980-116ca0c909d2", "sighting--66992506-cb8d-4aed-a625-2d4a02db158f", "sighting--49126c6a-83ad-4384-a08a-8f0c28a61318", "sighting--1509529b-7cf0-4dae-93f8-fb66e2c06c76", "sighting--4cfb13dd-e1d6-40cd-a7c7-64307eadb4b6", "sighting--60961e0b-eed8-4256-9f0a-3da49be1ca21", "sighting--026ab70d-42d3-4ad8-8c12-bfb949583a4f", "sighting--3b88a732-4026-4523-a39b-6e1000792483", "sighting--0429f7d8-da5d-4079-a521-08d18c797018", "sighting--b02ddede-8a32-4be0-8920-ca98b19c6036", "sighting--e8126ac4-2778-40c0-9bd9-93191bf7aac5", "sighting--5e9c5eb4-be5e-4b4b-80bf-13f5102eb04a", "sighting--7e2fcba3-0e6c-401b-aaed-203a5c0a7d84", "sighting--210840dc-383e-408b-8539-cae1fa7d5bd3", "sighting--bdde1c2c-e2d0-4aad-ab21-761f4b3d5249", "sighting--0992fe26-b365-4f1e-bf59-eab7850bdcaa", "sighting--f1311e0e-830e-47a3-aa6a-e638ce900f55", "sighting--9e5d76c0-c1b6-41a1-b242-5804b827f429", "sighting--f5c5c197-e099-40a8-88cb-3d3787582731", "sighting--26c68ee0-8407-404a-866d-d8eb36203e8a", "sighting--5f24a022-3089-4d7f-895a-f849ef0a5501", "sighting--d84dc387-cae2-4866-ace4-31fde4a0e0f6", "sighting--400a449b-83fe-41c5-b09c-d6712bd9535b", "sighting--d462e0d3-df30-4352-a360-1813c1386dd7", "sighting--82762530-6e84-42c4-9604-81c8d8f98223", "sighting--d7b41953-04be-40c0-b76f-8397b8e43a78", "sighting--75c8ebeb-6aad-43b9-9e9f-04e0cd44eafb", "sighting--de7fd9f9-7601-45bf-a2b0-dffcee2ef590", "sighting--7dfb2c2c-5115-4994-ae80-7a4ea8e3920e", "sighting--b7dc7363-e58c-4a15-ab1d-f6e3ff6bac51", "sighting--98052c43-438c-4127-94b9-f4a7a0280eca", "sighting--5b1f5bc2-a65f-4a75-9b36-2bdd1901002a", "sighting--81e6e226-5d08-4c73-b874-64afca1b55a5", "sighting--c5a03e26-1188-47fd-8de0-25f93cd998e6", "sighting--8b847c97-80c6-4283-8dc4-5e8f0325033f", "sighting--98fdea05-53f8-4e98-bdea-5c305cf35907", "sighting--3eb396c6-3844-4b1d-a000-667657a60ccc", "sighting--a3d5f4c7-8660-4ec1-b6f9-b1ec6e48189e", "sighting--7c04fe0d-e2bd-4abb-ba96-b740a61f0b43", "sighting--966eadf0-da17-4942-b453-60f3af7ad6b5", "sighting--b0215cac-249a-4b44-91a3-4e5042c65b3e", "sighting--b4aac609-7e1d-477b-aef7-f43b58c668bc", "sighting--d4e6a573-df95-4c62-a557-16d3000273a7", "sighting--accd0db5-7cc9-4c54-99a7-02f309af665e", "sighting--6b4d316d-a358-4eb2-8eef-48258f8d4f67", "sighting--9916eb6f-1817-4b0e-ba90-22ca7ce4537b", "sighting--2a2630eb-c7fb-4c57-8050-0b4cc123bd04", "sighting--80026097-d1fd-44a8-b916-37873395a2b6", "sighting--ee424915-88c2-4227-b5c8-16bf59c23819", "sighting--83f8c23d-b85b-4321-a4e9-99ddd1204d4e", "sighting--49003a64-01d2-421d-a6b7-ecad84ae3963", "sighting--fa41b6f4-b5fe-462c-9a42-1476cd7c8958", "sighting--52e09208-1e8e-4e0d-be20-3a430cc266ac", "sighting--9dc93e62-1f68-414f-aebb-7ee07ba07adb", "sighting--20efe71d-fcf5-4b51-baaa-e694c9f9a2f9", "sighting--ba185fff-5ee3-44ce-bf45-cfef7eebabd2", "sighting--16ce01d0-9e91-4305-9130-4978a620eb7b", "sighting--b1274c68-6e42-4885-a1b4-238d903f47a0", "sighting--28ab7552-dea9-4d9c-bee7-8483c31e253b", "sighting--40a236b3-cd0a-4c33-9b18-ee8365d1c9a8", "sighting--b4195bef-c754-43ec-8d79-7fce19997aa1", "sighting--3894f998-37c2-45c9-8b88-13703bf6cb84", "sighting--cc838b5e-44d8-40a8-977c-62d6083db436", "sighting--161f7e46-7490-4c94-ac04-0b7430eea88e", "sighting--001e1fef-8599-4cb4-9d4b-5c2e5c4341fa", "sighting--4f2f6682-b1fc-4061-ac34-c0a2d362807c", "sighting--a0dc0dfc-382d-4e50-8e0a-501ddc758df2", "sighting--7753206d-b26b-4bb1-8d60-d333f96874a3", "sighting--3c75febd-ddb3-4df7-8805-ab32437cba50", "sighting--5c736d8c-68a2-45e9-a4b6-83b1691afee2", "sighting--b822bb05-e260-4498-8c33-24f35100860c", "sighting--aad71bc2-bf41-4a7e-8fb4-5191e3834468", "sighting--2d9a24b1-4c5d-4980-82b6-4d3e7fa1b27a", "sighting--fdb33c9f-2320-450f-a383-99a27112390d", "sighting--28b0e54a-c393-4639-af72-d2369c89f7a1", "sighting--1e083c1d-5a9e-4fbc-8818-542acb6e1ec1", "sighting--a4b9b269-0924-4c09-982c-b986e0875443", "sighting--1d761589-da3e-46a8-8fbd-6f4e810303c4", "sighting--d9f5e1af-c5af-4dd8-960d-52c2c395c148", "sighting--a42be979-f3f4-4441-b08f-d698805bea88", "sighting--3473c1dd-2ea2-47f1-9a53-84561ebe969d", "sighting--4f86f84c-45a3-4795-af07-f55dcaa46b0b", "sighting--3ddb567a-ce0d-4005-a8bb-63e6afa13886", "sighting--3b764b94-71af-4e51-b118-796156e1ed9a", "sighting--8c9797d6-41ba-4f4e-a3ed-5c97ad9248d3", "sighting--36b9bc61-dc46-46d3-a302-2c1d2343bbde", "sighting--276af5ff-4f23-4f84-ad2a-6e03170c062d", "sighting--ebabd468-d77e-40f2-beb3-d5e801b86bb4", "sighting--fb14088f-fdc2-4db8-bee9-65e4fb273457", "sighting--cc04bff4-c224-4387-bbd5-dc39a1165900", "sighting--20a42e1a-c122-4b44-b4f6-afafc8f21909", "sighting--89126166-6a60-4ddd-b4b0-7c68b40bbc3c", "sighting--7bc4be87-2705-4535-9bc8-8a6d3f8edbaa", "sighting--95f9e1ec-c6d4-4329-a580-0e48e156ae94", "sighting--0bedb21f-2691-44a7-9ecb-c8d1638688e7", "sighting--16271ab0-efe5-4230-b2aa-a28154962661", "sighting--e62cd05e-6998-4f5b-80d8-5a662c73b45c", "sighting--a85a53b4-882c-42be-8052-92eaf17c82ea", "sighting--b233d2a5-e80e-4585-9bbe-3bb4c6e99e9e", "sighting--ce1d282c-c474-4b5b-b748-952972fd538b", "sighting--a227b02d-c667-4659-8fa4-4cb6c1e3b876", "sighting--05c1c245-5deb-412d-af65-7ed28aa664d7", "sighting--a350da66-c086-41d9-89f1-b9eb78a31af5", "sighting--00225c2f-0c9b-4f21-99fa-268ca7ebb5b8", "sighting--6c3978d3-d53c-4c33-9d3d-84c61bd10b62", "sighting--4358ccbe-ca0f-4712-bff8-d4764a514311", "sighting--a67d2419-307d-4e25-9224-1f18e1aa0987", "sighting--65362843-64c5-4d81-a60e-f79e11700b84", "sighting--5d844722-add9-4a39-af30-21a15387b955", "sighting--363c81b1-5f82-4847-b650-490b511d981e", "sighting--bccdf1bb-730b-4398-a2ed-23a058087608", "sighting--46693da0-3dce-4b66-bb4d-b54966595298", "sighting--5f0f883d-2c7b-4eb5-af64-670acb7db164", "sighting--5e72ebfc-804a-44a1-817a-c7ce4851fcc3", "sighting--0759dc9a-92bf-495d-8ab8-a669e08d995a", "sighting--0b66a7b2-f72b-4e5b-ad2f-65b3fbcfe8cd", "sighting--e0cd0ed4-f119-419e-a193-6438203398cd", "sighting--4d781f84-7676-4065-b271-ee5390f50e43", "sighting--ec828326-7642-4eb2-adf7-3029e4357d7b", "sighting--81118588-1bc5-47b3-b7ba-d99c5d1a55b0", "sighting--83440faf-68a0-4f48-8a35-e6929dd22ac9", "sighting--cb0bd6aa-f6d2-43ce-a132-6171573742f5", "sighting--b2450820-2517-4755-abef-215d80fc0fe6", "sighting--0561a82a-9ca4-4c40-9455-6ffbb64dca28", "sighting--e1e2d221-cff9-43af-b0a3-720c5fcecd3d", "sighting--67333197-9b1b-4f4c-b689-6765cdf2d334", "sighting--fbedc013-ab73-4fcd-86fd-b899a30078c8", "sighting--8a60099d-8513-4d75-802e-9361b804c5e0", "sighting--b3a285d4-55ed-4676-8f35-c988f25cf243", "sighting--ca6aadc7-0036-4542-98f3-758e1e6cf97f", "sighting--bcd0c34b-4797-4ede-9569-1c4b44c4b052", "sighting--2d788a99-6a6d-48ec-bab3-91d02b027e37", "sighting--3c67f972-e9f3-456d-bfb3-6d00db3cadfa", "sighting--aa4aadff-c9a4-42ba-840c-2c752904bf97", "sighting--9973ed52-3998-4721-8e3d-334998f9a779", "sighting--3580619b-7cca-434e-9ef1-94d26f809f7b", "sighting--47201778-8a72-45ab-ae30-84d2fb39c708", "sighting--035455c2-69d3-4c6e-8fd9-8bf71527c6e1", "sighting--eb7cc842-b9a8-46d4-9d04-45a867e74f44", "sighting--cb0c4357-30cf-4abb-8b86-de8982f1daa4", "sighting--90f44bd4-4a01-40a5-8730-432bc899c893", "sighting--5c3ecaf3-629a-4f83-ae0d-81ac8efc57ff", "sighting--3362eda3-4d7f-4779-b8a8-9a7f86ed55b3", "sighting--d0364e39-a1c1-4263-ac2a-a4f1ed04dae5", "sighting--d923697d-8ad2-4a00-98f7-501abe8dbb3d", "sighting--719cb4ac-45b4-471d-9133-0cc1bca28475", "sighting--688c55af-4d79-4de7-9a4b-a3d196e847da", "sighting--b8db0453-ad11-43f5-b186-209ce0388fe1", "sighting--2c19e7ac-a909-4d32-9a7a-fdf0d65d2860", "sighting--f204c7f0-661b-4271-9988-0ecf31bb7a96", "sighting--f873f4fc-795a-48e5-95b3-5203d9a172a7", "sighting--8ad2c2fd-e5df-471b-8aa6-a4c09dfad5cf", "sighting--bb2734b4-374d-47f9-98c1-25cdffaf9176", "sighting--7fc91a74-80a8-4b0a-9d50-58f9c127807a", "sighting--5c780866-7967-4da7-a6dc-4bb9d6b0a7c4", "sighting--01681229-1005-41cd-b321-cd73f50b795f", "sighting--4cdbdce7-fb70-45b6-af68-de4efe3d95ef", "sighting--7e40ba65-b694-401f-9ce0-c976a20c61d9", "sighting--1fa1eb63-dc69-4819-a495-cfcb9307747e", "sighting--08f67788-1952-4851-b81f-73e1a0580630", "sighting--25a0360f-0800-4891-ad90-204d7b8d8d48", "sighting--016178be-3fcf-46ae-bd8c-07081e2f67bb", "sighting--091bd007-a0ea-48a3-ac23-a32edd7b2657", "sighting--7fcfe132-e7af-498b-906f-98ee2373366f", "sighting--a8c21096-5afe-497a-a9cb-9a865597d4e8", "sighting--2960e856-fc32-4fa0-b47c-5c2dc58f622e", "sighting--f214fe55-4369-4a43-80e9-a32fd75f4b2f", "sighting--3ca0e12d-cc4b-4a06-943c-62248b1cf604", "sighting--2c8aa832-f3f0-41f5-9687-1fd5609c1fd9", "sighting--748872d2-f9d5-466a-b0fd-cf38797569e9", "sighting--88646700-bd14-491a-b816-38bca4f6b183", "sighting--6da45ba5-ff49-499c-8e93-7660f777c997", "sighting--bb05de21-1905-4185-8815-a93d3a802056", "sighting--d4b61097-b9ac-4447-9d65-b586e742d5c6", "sighting--e5f0d3a1-2d30-41b2-b3d9-c606f90f5d53", "sighting--34198799-bed1-496d-b70b-c39939a56e08", "sighting--352abf5b-a634-4856-894a-486d1a208050", "sighting--74215f78-672b-448d-bdd2-50ca0b53d59d", "sighting--22b67452-cbe5-4d96-b99c-84b1b2474aad", "sighting--64e156d5-9077-4d0e-a110-dd20038cb3e6", "sighting--5e337ea7-6176-4b4f-9ea1-942b9f733fc8", "sighting--74bcf439-2384-4048-bd81-4be8a0818c17", "sighting--9e3e837e-8fd5-4295-85fd-aa7845385cf1", "sighting--8c0e691c-777b-492d-aa98-3cfe039cfc0c", "sighting--ec12bae9-dea1-4916-9f31-b8e4bf30b0f9", "sighting--ab824393-873f-4ee2-a369-8dea1cdebadb", "sighting--46fcfdc1-3336-4433-9a44-590e71608842", "sighting--569a7794-6c96-4af3-b0b4-1b0d8d813aef", "sighting--c4abb17a-4623-44f9-a6ff-4b8125515bae", "sighting--2c7162fa-2f21-44e2-990f-e858b1abf651", "sighting--733000cc-38e7-446c-b61e-cb4f33934d58", "sighting--9f7fcf93-202c-4ddd-8405-99c36b7c514b", "sighting--ba2cf02c-70c8-4625-a7ed-8cae981ddf00", "sighting--09ec1da9-b974-4a57-8853-d337e8de8190", "sighting--ca2b01ac-d981-4421-97c8-8aeffd4d5aea", "sighting--c4ca0d4b-2c31-4e0d-9759-46b6ac515fc9", "sighting--54df0bf9-6b7f-41dc-a18e-f949990ede00", "sighting--78d200fc-1606-4770-aab0-c19c926f57a5", "sighting--8b5a6bd3-5a17-4f94-bafa-44661c6d6c03", "sighting--38263969-615c-4393-be44-73e357ce90ae", "sighting--33561ed7-3bf5-42cd-ae72-dc273ef564ef", "sighting--de42ab23-2c92-4a06-99fa-d00bb73b6ccc", "sighting--11e1ffd9-e117-43c4-b431-48b1abfefe38", "sighting--75c16680-5efc-4432-a813-a4a74eb3f128", "sighting--eafcfbb6-9715-469a-aec8-cd106b5b30e9", "sighting--fa2a1f41-8e35-483b-be8e-de4ba82efffc", "sighting--f4d6e585-bd47-4d3f-ad3d-26a4062f5d35", "sighting--caff565e-42b7-4acf-9dbd-eeb5c4d42a76", "sighting--cf5a4a70-1f64-41e6-b19d-c95c21e76280", "sighting--34d8c8a2-1205-4e81-84ce-4e503732f308", "sighting--7ab74926-d3ef-4f1c-b45d-4a26e849d810", "sighting--bd324ef1-36ce-436e-9b24-ef4e6776e9ee", "sighting--03bbffc2-09d0-421b-9d28-6395be1fd24a", "sighting--a1160d14-a52d-4c21-9957-2c7d42d945cf", "sighting--8fe4a861-b5bc-4583-9469-bd66e06bacb5", "sighting--60e89a89-c89b-4c7b-abd6-4fb44e55a899", "sighting--d3b40f3c-fbcb-4a75-87ba-41593825e0d4", "sighting--499d7cf3-f105-4bfb-b380-e4cded6208b4", "sighting--ea65870b-b7f9-46ae-94c0-301e53dd6598", "sighting--502f8196-1b29-4c9a-8d57-e9e19e85b2f3", "sighting--c98e1ddd-2559-4e10-9c00-8ac95b8ac252", "sighting--ba45113c-1650-43a9-806e-ace760b842f0", "sighting--23706339-288f-414f-ab10-422a1cd3ad22", "sighting--5f871ee9-1c72-4f63-9fda-0041bf167a69", "sighting--3248cfd2-ae5f-4d7c-a389-9d8864adc0f2", "sighting--50e49706-6fe8-47c2-84bd-5c519a30b20d", "sighting--15e377bc-0eb9-4550-9bc2-bf1143d889d1", "sighting--ead1f3d2-119e-431f-8057-244d52dea14d", "sighting--8386750e-69a4-4a5f-b3aa-b2579ee4a33a", "sighting--ebb73d14-25d2-4bd0-b9e1-4c1f19ec370a", "sighting--9ec46541-a5f3-4276-8bee-f0fdf4ad7f90", "sighting--e75cf858-7262-4f08-8d46-2277d329ad9a", "sighting--3343fd45-312e-4e7b-af77-1d797f13a19c", "sighting--9193cc17-fd3c-49d4-8951-660a5a8e0105", "sighting--a3ca9615-aa85-458d-afb5-d309d6b70e8d", "sighting--91a0e70b-73ef-48ea-a3e6-733d6697d115", "sighting--0b45cc52-fb7e-48c0-97f4-a632eba4e5f2", "sighting--7e3c767c-d3eb-437a-8211-824fd50d0d58", "sighting--dd1b499f-4ea1-4d3a-9c76-7f3d79e81e88", "sighting--49d909c4-b352-494f-935d-c3ac1594b9cd", "sighting--07dda873-83e8-4f50-93ab-150cc01b7c7b", "sighting--d6db4b78-6f43-443f-9abc-5f7a4761f78e", "sighting--e36ec470-cf01-4ed6-87cc-01c644aed06f", "sighting--4a4c6546-7332-4228-a9b2-b98fe756abad", "sighting--14e8da88-b43f-4428-9fcf-ebf6004deb02", "sighting--20b2579a-5abb-40f4-b5b7-638919ddad7c", "sighting--2b34a644-7fa9-4fc7-90b9-39d99af82d0a", "sighting--bcfc5713-0a30-4862-b397-e869bf9c1888", "sighting--4a151fd3-22c5-4cde-aba1-41aa61eaaadd", "sighting--53bdfad0-0da3-410e-b5d0-029b0c161bf2", "sighting--e76a4fd8-eed1-41f2-8637-0054f6fedee7", "sighting--25f21e76-a0f2-4b47-88d3-9e86eeb9c32c", "sighting--2e58cac7-443a-4d4e-9d69-20903e4b5ac1", "sighting--4c99a45c-778b-462e-b687-28916b1e12ad", "sighting--f4611acd-087e-4dee-be7a-28cbdc922ee3", "sighting--f302c611-59f3-4e8c-bca6-832ec9b8cfc5", "sighting--cb0dd3ff-a335-4747-8b3f-9f14a41cde05", "sighting--56946b36-fb1b-4365-904f-4d46f4719d56", "sighting--27d1fb7a-ceaa-408f-a392-adb272368b65", "sighting--6a6bf8da-fa72-4165-8b49-fb0de7e32536", "sighting--16dc0d34-988d-4674-8751-384d45b542e8", "sighting--a6151832-5af1-495d-9ddb-e7c0c1df7439", "sighting--6442ac2b-bff7-45c3-a41d-c765c7fac722", "sighting--50f64026-8fe5-4612-85ce-42f0d55b45c6", "sighting--4857a6b0-e200-4e70-8688-b62700a9f666", "sighting--6c8b9b1a-b2a3-4bcf-8c20-e27950f7ed10", "sighting--c6eb2b01-83c3-4533-af7f-970b10980c67", "sighting--ad9e051a-cdc9-4272-981f-c39060f755f3", "sighting--33c07833-c06f-4a75-b0d5-f694ec792cc0", "sighting--8d602449-2e34-49a2-be40-8c5e931945dd", "sighting--eed94caa-25cc-45a9-ba17-590d79d94f64", "sighting--5f3e4ffb-f917-4d14-af94-2821e6ea66c2", "sighting--087230ba-e6e6-44c4-8f8a-73cfc4883c23", "sighting--7ab4abd2-d56e-4bc0-a240-2bf0d0408f03", "sighting--8f2dbb44-8f16-4d55-91e2-ad1838d404d9", "sighting--8ebe7481-bf7b-4348-862a-b562c2a9cbc0", "sighting--bcf2c3e1-a9de-49d6-a562-183563cbce22", "sighting--36d31808-3a7c-41d0-9d89-98aef69f9e2f", "sighting--a2af74a1-e793-4259-8c13-cb3d82250c48", "sighting--a9eee50a-66a0-47ed-8370-8047bc034bdf", "sighting--810a7eb3-64d1-4815-8d73-1a7028fbb343", "sighting--3aefe750-1a68-42dd-aa04-796667f39591", "sighting--f010b8be-a799-4cdf-a130-0dded8ec7d3c", "sighting--06e17776-e1d5-4f30-abf0-e9805edec731", "sighting--aad3a965-713e-4276-baee-c1a685f395f1", "sighting--3626191e-9cc0-400c-82d7-0afcc19d1c4d", "sighting--645a08c6-8b80-42b7-9296-c79fe71b500e", "sighting--65f3c104-20a8-482e-bf08-b2d895adbe18", "sighting--7a7ca270-5c1f-4339-8d77-a90d1c0a16d4", "sighting--fdf51516-8c96-4fad-9584-3b4841c0f24d", "sighting--99c9b494-f640-4065-95d7-a2d9aaa92bd7", "sighting--f0c48a9e-8368-4071-9c5d-0e10fd0c83ed", "sighting--680e213a-78f8-4265-afd7-7871e84f4a3b", "sighting--eee5aeac-3edf-41cf-ab39-76bc586dc711", "sighting--290e50a1-1adb-45d0-9d45-c0a6d59e00a2", "sighting--879886af-edc6-45e0-b4d9-c5ec6416042a", "sighting--90b2da2b-effd-4eb2-bba7-a38db72a245a", "sighting--26ff7a51-933b-486d-b73a-a0d438ec3a91", "sighting--41a59b52-cc43-4c8e-8c23-d94dc78b0202", "sighting--3eada9b6-1c0a-4f24-9d06-03a14f7a98b4", "sighting--dd97c459-932f-40fd-8ac9-514ac487ed05", "sighting--0341dd4f-26b9-404e-a663-707f0978bd4f", "sighting--21b9bb54-3c9c-4fad-96c7-e44695c8d658", "sighting--016a51f6-c6a5-4a3e-92e1-d53069e121b1", "sighting--6eae3d16-395f-4d1d-b2ed-54765b3ab7ae", "sighting--772023f5-7740-403c-9ee5-e749366b961c", "sighting--1080b0ce-b0bb-434d-846c-f316e0a10f93", "sighting--5c4ce984-bfc6-4ff8-a80c-1705932011a3", "sighting--6e723375-b8b5-48a2-bd3b-9d25bb9ac9f7", "sighting--b22e79f1-2427-4609-81f6-e7194fdfb043", "sighting--a219188b-dc64-45fc-b19c-b73382f6fe30", "sighting--bc20d2d9-ef4f-495c-81ef-dc3d53ef9f65", "sighting--655f6a8e-bdaf-44d4-970a-b7175347d853", "sighting--ab9db391-1e8e-41f4-96ab-a6d66e4d23e8", "sighting--228db6d6-7a47-41dd-ab69-f750ef41c373", "sighting--b36c9098-1842-40e7-8aee-884d79a34995", "sighting--47bd7b70-0f8a-40be-9d21-8d1693814cc2", "sighting--710f9086-b3d8-4ed2-a78f-490a9e122caa", "sighting--e5e12f0e-abeb-40eb-99be-296125007242", "sighting--11cc9bb7-6a4d-4358-b08f-d325d2e9f2c4", "sighting--1f93d22d-24ca-4506-bd8e-373bcd16aa0b", "sighting--eb931460-08c7-49e1-acb5-c99281f148cb", "sighting--18e6cf2b-9c9e-46cd-8b2f-a20d9af411c1", "sighting--8a8c01e9-c4db-434c-94a6-ca907626a2cb", "sighting--83054d83-33e9-44e3-96f5-fb4c3de4aba5", "sighting--1decb6f6-754a-446c-b72e-611ce186bf9e", "sighting--fe264e91-6e1c-45e3-8ce5-aea50f14167d", "sighting--96bb0496-e85c-4b0a-bd27-b6636931e2c1", "sighting--c283cd20-557d-49ac-9c13-beed895add86", "sighting--17b19e0d-f8c4-47f5-8c9e-e39604bf08b0", "sighting--f0e076ee-da47-43c4-b51e-7a0d4cf6e2ed", "sighting--35417a22-ea23-47a0-b6df-9e21e1cebdb8", "sighting--e529550d-1a5e-4815-b809-063ecc83a376", "sighting--156f5433-9c3c-40db-926a-705d1b4fce05", "sighting--3964d036-5e52-4325-beef-f44bafa9debe", "sighting--cd097b53-6e78-4b23-b370-6841dc79da78", "sighting--2eed268c-dff7-45bb-8b0b-b679342910b1", "sighting--eb38a0d6-b109-43e5-8f57-fbd98444a6a5", "sighting--edad3986-8992-4b1f-bda4-a4bcda44b8f5", "sighting--41227c94-e405-438a-ba8b-2e75096397d1", "sighting--a91a818f-14dc-42dc-acb3-f2719cf154c7", "sighting--d4b69379-852e-4fd8-9047-4acce9e0924f", "sighting--02f7e8ac-1f9e-4d52-a401-20e73df4adb9", "sighting--e3dc58d5-572e-4282-833a-2c89a0d11cb5", "sighting--1eb2e2ad-ad7b-416a-993e-c473004b7005", "sighting--c49f9a6d-14a8-40f8-ae1a-b1ad3bd292f5", "sighting--d107a24f-464f-406d-b375-9c352a348551", "sighting--b4b77332-6f9b-41c0-8472-79a0e9b208a0", "sighting--e28de343-7012-4231-8e9d-a190c91e17a0", "sighting--9ffbeadf-5eed-4723-a5bc-9ea27fc36096", "sighting--aa255873-71e0-47e2-a123-2ad87886b0bf", "sighting--27aff122-123a-452d-a3f2-6ba13590e268", "sighting--c1f8b6c4-a6bd-4523-9fd8-aede2505bb58", "sighting--2b75ffb8-d2f3-4179-a264-211faddc23fb", "sighting--69721549-6a45-47a9-9e0a-27fdc19b60bb", "sighting--b96bdb14-e531-4cd0-9f4c-fedaa172060d", "sighting--fd46a7f7-5d7d-492a-93fc-ea280199ac5e", "sighting--5ec3e5ad-2896-4bd4-a982-42f6fc0ec81a", "sighting--2b00e0bd-bae2-4b2c-90be-4a07d810ddc4", "sighting--31a05683-6b5c-4ebd-9db7-1e6eba940882", "sighting--b1ca0c3a-830e-484e-81e1-bd8f8b052e1b", "sighting--7ad267e7-0f66-4830-b1d1-1360c13e111c", "sighting--6b654e84-0c90-46c5-a423-1aa90442f9ae", "sighting--c26de64e-54f1-4c8e-a7a7-8b4deb5071f6", "sighting--08e8e0a8-51ca-4b59-af22-51d121a25474", "sighting--72ed0bcb-b10e-46cd-96fe-29fed9f320e7", "sighting--1c19d44c-d5bc-44f1-916e-e0dc62141dee", "sighting--710786c9-7090-4eab-8375-700e77514681", "sighting--c0e8f471-d712-413a-899a-2a89da5b0e10", "sighting--0e75df9c-dead-4194-b62a-4b9ec2fb0654", "sighting--e6e2948b-4c13-49e6-aabe-e53d0b19c85a", "sighting--57f53fe9-dd17-4c6d-92fa-7f428248efb1", "sighting--c423eab1-5f96-4fe0-bcd4-8a7beb8131b7", "sighting--25eaeb30-62df-4a79-b999-df578d0c7175", "sighting--ac108195-4e86-4801-9a33-ed5e6e672437", "sighting--a4e9ecb7-ce3d-45f7-bc63-ef5e92c8a4d4", "sighting--eeb92677-513c-401a-a30e-0691d32ade25", "sighting--6f506b94-8819-4411-90ea-821244e65097", "sighting--1de8940c-d5c1-4e88-8860-81fb074534d6", "sighting--fe442f78-c992-4bfd-8ab6-a2b35ef287e7", "sighting--b889d798-4040-4bb3-86c3-1011d3624639", "sighting--3e7a109f-a524-45ed-aff6-91ec66610f0a", "sighting--cadf2a06-357c-4c4f-bf3c-72e8d35dbaa1", "sighting--00b0babd-ad5d-42bf-b0fe-8a55d0c2045f", "sighting--0ddbfdc1-594d-40f2-993a-76d6d8d8a443", "sighting--406d27aa-4e11-4456-91b0-243d2d87167c", "sighting--5db522db-68c3-429e-bc7f-5685d6677d63", "sighting--7e07c907-4fc0-4dbc-8080-83c6777edae7", "sighting--3fc30d45-3fac-4931-afcd-08d5fe13f074", "sighting--7a3df9dd-c862-4f84-a15d-51bacf35b95a", "sighting--5fb50d6c-ad8c-4eb0-a3c2-8ee054e6b3c3", "sighting--7f1ff08b-b3f4-4786-8e17-982d075156b4", "sighting--08039640-264e-4727-8d4e-e9a59271152f", "sighting--9f8197b4-3879-40b6-9ae0-084fc72d2182", "sighting--b911696e-90ae-49e8-b19e-6424f3834c6c", "sighting--b8731f95-6103-4ef7-9761-4f5f35aab6c2", "sighting--9721d455-afa6-4e11-a8ea-2cabd80b43b8", "sighting--feb3805f-0343-4bdf-beb7-8a2db9342a37", "sighting--54490a4a-175c-44ae-82ab-c50c576c5ef5", "sighting--f0d05b3a-e727-4d14-a074-f15e36a7cc24", "sighting--4b869a0c-49b2-4ce1-aedb-e5b911f29ad1", "sighting--c8182dbc-1ceb-4fcd-a352-802ee7b600fa", "sighting--89716700-c885-4157-9335-c5f30587e820", "sighting--3908d377-4aec-4080-adab-f116605ab33c", "sighting--bf9bc82c-0e62-454b-adaf-09c7199352e5", "sighting--eb215897-9224-4e44-af79-5789f1efa07c", "sighting--d6a5bcf7-0fdb-493e-bb6a-5c9e7734bb0d", "sighting--bc38fa41-fc17-4b89-a1f2-5543a2938cae", "sighting--44d8cbb7-6a6f-47e7-bb39-ebf9f90f16a9", "sighting--00bbe53e-a153-4916-8827-406c03c7203d", "sighting--659576d4-fc85-44ab-8886-cd477e23d555", "sighting--67a618a8-c259-4269-8966-43dc5daaa91f", "sighting--da2f2de3-fe11-402c-adfd-c81c2308af61", "sighting--88ec67f3-f371-47b1-af19-6f515a382b84", "sighting--7977f508-4297-40ce-bee8-0b4c350c8689", "sighting--df71d790-40ef-4799-b27b-fd52fdec701b", "sighting--631b406e-08fc-414b-9e36-26214d5c26be", "sighting--2b79ddaf-8fdf-4dc8-af70-f32b42722689", "sighting--93273812-0ce9-4f39-83f4-a5a3a0e38a32", "sighting--0b5e50a3-0459-4bce-b695-5e03bc7c489f", "sighting--34d93877-9a87-4cfe-a19b-651eaeca699b", "sighting--1cb44d53-6c26-4eb6-a8b6-022e81e34f99", "sighting--36fdb392-75c9-4f00-bafc-a6cc431d1815", "sighting--5dde2374-fee4-464c-880d-a65bfcade043", "sighting--bfb38bb4-33eb-4903-bcef-67bcbdd9643e", "sighting--2f288c35-1ec1-4dc8-b7b8-f2953a898e67", "sighting--7094af73-bfcf-46b4-862b-3121592e7ac6", "sighting--73024ec4-ed3b-4646-8bb6-4ce0a7dc217c", "sighting--31f08a97-6bab-41be-8d42-127880185f8b", "sighting--25e8240b-b8ba-4283-8e90-815c762cf32f", "sighting--e58c7763-1e7e-42a0-aeef-9ef22cd2137f", "sighting--b0d11e71-0ff4-4cc6-819d-96c4be61fa36", "sighting--0709ae30-bb51-4456-b6a8-301b549a0eae", "sighting--7d376126-61a4-4316-b089-cd0d20bfa643", "sighting--d930f549-cb8a-4c0b-9130-b8c647f36aec", "sighting--bea2eb9e-9c71-4ac3-a23f-15b7fee8b9c5", "sighting--1e3d944b-1b17-403e-999d-0accf59f4370", "sighting--cc5e5c6d-e9f5-4602-81cc-7ab5352960ed", "sighting--0e76c376-e8ae-412e-8512-02cc832a5a29", "sighting--a931ec26-8098-424c-a357-bc48c1af8417", "sighting--b7c0967f-373a-4d4c-9ac7-7714b015a4d7", "sighting--e1458cc5-d03d-4fd3-994a-add91314fe6b", "sighting--832fbf2a-78bf-40e1-9180-75d2ee5e3f51", "sighting--8882eb84-94e9-4624-8040-17f6dd90945a", "sighting--53ad41b0-1677-4749-a088-37c4316ca4c8", "sighting--65e4354b-6a64-47d6-a50b-7353c8497f38", "sighting--8bfb6833-86b6-42e7-8e41-d5fac6d53516", "sighting--3d31cbd3-d2e3-41c8-8db5-8d1ca4319985", "sighting--cfba4c20-8e6e-46aa-8249-af69c79a03ca", "sighting--8ef09278-d1e6-4008-b1f6-867e57348bfb", "sighting--61e3104c-ef7f-4192-8ac4-ac2438110237", "sighting--059288f8-9557-45cf-8fac-5ba15a29f97b", "sighting--ddf9bbb8-da19-471d-bc86-daa557f78487", "sighting--e4f07ddd-ea47-438a-97d4-276fb458576d", "sighting--7a1adfeb-e955-4374-ba14-910ccd8a30db", "sighting--f943d21b-f15f-4c2f-afa4-c747302d8560", "sighting--32bc6e9a-4698-43b8-a67e-fc036da11762", "sighting--7f9c0ac7-8817-4469-8cdf-009c3dfee959", "sighting--cc4c60d3-3053-4a32-be55-b6c319ea69e0", "sighting--1ae954d0-74ef-4a5b-b3ce-eb218fc2776b", "sighting--46e5b683-65c4-4403-a2c8-2e848c14efa2", "sighting--d3dc4fe2-c8e4-48cc-945b-9c5698aa2803", "sighting--d0743650-f78b-487e-90b3-2b4befe176bb", "sighting--b8af3a0d-631c-406d-b54b-996b83b33a1d", "sighting--fb3a07b3-2f4d-4639-8fa8-61a40cf23d42", "sighting--86db5983-e834-4d27-b37f-ac570af13e07", "sighting--85773151-83be-4f48-89bb-c10edb07572f", "sighting--a7ab70a8-4cd1-41c6-8fce-9ada3e4d69ce", "sighting--e8fe7cb0-25fd-43af-a213-f246a8247b7d", "sighting--5285ac6d-fd67-4b66-8eed-8be9ca89ab80", "sighting--297f16cb-c3f3-44f2-ba83-5f82cba0f752", "sighting--b4b1f58f-90b4-4c6c-a4bc-44ef7a8afad7", "sighting--94606668-1ae6-445b-874e-70906612a60b", "sighting--25594237-31ee-4ca0-9c7e-28d1a4296973", "sighting--3dcad857-c6d4-40b5-9bb2-6b2a5524c693", "sighting--ee9cafca-9406-4d8e-bcdc-5b05703f5f5d", "sighting--d9036cfd-3dc4-4a60-9a48-f97c1f14cd9d", "sighting--20619685-e097-40bf-bc2a-77b58b3ee46d", "sighting--73e1d3dd-ea38-4797-bb30-09e6dd88b0ca", "sighting--29fd21c5-53d8-4f45-a01d-859b3c4c0ce1", "sighting--4358886e-c9f3-4f62-adc6-4854e10d70a2", "sighting--21a3692d-1add-4030-a1c1-e4b7cb7be42e", "sighting--42d2eefc-7374-492d-aaae-79b7c2154b25", "sighting--fc971189-0c85-4e44-9d57-498d6d4902b4", "sighting--47cfd2e1-e55b-4c31-b078-8db6a4c1680b", "sighting--118f6c67-5a6b-451f-a46e-1ad06cccfeff", "sighting--33dbfe81-03fc-4308-a7eb-6427b33b9adb", "sighting--5619742f-7722-4c15-85c4-129da650fd12", "sighting--9f62aa92-e2cc-45ad-9074-ccfecdcae5fa", "sighting--c25a4a2c-f10e-4604-9daf-acb05405886f", "sighting--235591ae-f984-4f9e-8469-a2c572ce9ae1", "sighting--32432016-7f25-47b0-b977-a078826da9a1", "sighting--3db2b77a-8828-43fe-ab9b-3602900397a4", "sighting--02a6ec2c-2d03-4c50-8206-3fef2dabb39e", "sighting--70005f36-2cfc-4266-b5ef-e9dedbf02374", "sighting--66626e72-d986-4d18-93d8-3f3b13bd0707", "sighting--ba2b77ab-b9b6-41a0-8715-f0504aa38bbe", "sighting--9dd470ac-d604-4062-b517-c3c6fe99a2d9", "sighting--768b082e-dbfc-4c33-9a1a-6687400929a5", "sighting--d370e0e5-c968-49b7-b035-a54e86464612", "sighting--0d6acef8-d160-4c8f-b132-5bacac9793f9", "sighting--6912cfb9-641d-412f-9816-31ae628c41f9", "sighting--b8688a52-bb51-4d3e-807d-66691c16d8ea", "sighting--9f4ec803-0ce1-423e-a0ff-a6ced1adabc9", "sighting--a7823a16-a116-4ac1-a6a6-f212752471c9", "sighting--3c60bf51-e964-4a04-b4e7-4575791ebaff", "sighting--c887771a-c272-4ab0-80ea-71c5d194cd1d", "sighting--49989477-4def-43e3-8716-acb54b6ff95a", "sighting--a2210df2-aa04-467d-b387-30e7a67d8228", "sighting--1819535b-6271-49c4-bd9d-d330bbee05b7", "sighting--2d3cad01-4dc4-4b26-9c3a-25e7e5e9c301", "sighting--01eba4ae-1652-456c-aa76-2513f7018761", "sighting--560d8311-0813-40ae-9495-de94123eb7eb", "sighting--865507c2-8c41-428e-80e6-31ced59f05be", "sighting--4c3d5fda-fd05-4d38-baf2-4a6d70abea7c", "sighting--b0816f48-6627-416c-8fa6-c80bc24d2ecf", "sighting--96e01ce3-a54b-4005-b158-97e9d877e9ec", "sighting--c9c475c3-984a-4f8e-b333-0d3565c40398", "sighting--13602b20-ec7b-4330-ba5f-fd1d630ac13c", "sighting--7768c032-5043-495c-b0d6-982b7892f497", "sighting--85ab1806-c047-4239-92d4-a5c20da2bf8b", "sighting--8471e22f-894f-422e-b809-3a84c816c248", "sighting--ea2866fa-6599-487e-8d8b-a0b5985c13b1", "sighting--06fdffd8-cc18-4f52-a906-c0096dd38215", "sighting--a7f60b87-b231-4236-a346-a4f20fea92f2", "sighting--d683ac7f-9533-4d95-809f-ca59c88dd97d", "sighting--c3535075-5d34-43e2-a6d7-ad4922d7678a", "sighting--764c86be-627a-47b0-a516-4427080481a8", "sighting--2b890f4f-d1ee-445d-81ff-c502f32816dd", "sighting--beea8f26-378c-4b49-964b-2014d171eb3b", "sighting--20faf3bb-bbd1-4724-8d78-ddef06543ce1", "sighting--ee15cd6d-1e3e-4f58-aefb-cc6bbf896560", "sighting--cdf55672-6c7d-432c-9f02-58ce54c5131e", "sighting--e3ecc323-23df-43cf-8dfa-c768ab46132a", "sighting--276bf95d-f2e7-4a4b-83d4-436f0321b0a4", "sighting--e646e8a9-2704-4313-9f84-d79b9b00fa0f", "sighting--9220cb2e-c605-4918-b9b3-1a9ccad6b8c9", "sighting--966bd858-6d37-4625-bd14-1a5f9d0b58bd", "sighting--663ef003-ea57-46fb-a98b-92c75f7d13c4", "sighting--5ac9cc9b-2d0e-49bb-a764-3ca6faf038ff", "sighting--335d11aa-8668-4da0-8e8a-c5506e7ae379", "sighting--4b260979-c127-4e32-888c-fbe5e4d94414", "sighting--c99c1fb5-7435-4539-a21b-8e8d42e4c17e", "sighting--e15de116-f2eb-4c3c-bdad-391d9cdda7cd", "sighting--2a51d315-1a06-4095-abaa-37e0dcf3c5f9", "sighting--8414acaa-fe77-400a-9712-0b753932548e", "sighting--9f96fcab-6674-4c67-a50a-7034b60497cd", "sighting--d4d37ed7-dc05-40c4-a054-da81ee5e6c80", "sighting--7059dc08-272c-4355-9a6b-6c67f2be7fef", "sighting--4de904a3-2f66-4181-9d86-793758871099", "sighting--ee3cbc6e-77bd-4a33-94be-a512d4617e53", "sighting--6abbaf2d-e926-4f32-9b36-0b54c1666661", "sighting--a5f60fcd-6e3c-4754-ad1f-c89b8491d1d0", "sighting--94702d7b-ab21-411c-9b5f-43c12eae03ae", "sighting--330b992b-38c8-4277-b366-9060b32a372b", "sighting--28e4bd5e-c86c-4c02-8448-2d22bf63ed56", "sighting--ea338eb7-3fc3-4508-9258-4eed2207a108", "sighting--2c149a46-a3fe-4a54-90c3-575cc93db725", "sighting--1872cb8a-38e4-4eba-b72c-c14159eb521c", "sighting--e80a365a-9533-45bb-be4c-9ffcfb4f51a3", "sighting--321a664b-df81-4cfc-869b-ee3fd94a2f04", "sighting--ec74c1de-7d98-44af-ab7d-7cec4a5f8338", "sighting--886d96c1-9af1-46d0-90cb-b097d7342813", "sighting--ef0c22f2-2674-427b-93c5-b41c7d46695d", "sighting--ed914a6b-73d9-476c-a06b-0a20f94d5b57", "sighting--555a3270-46ac-46e1-87cc-68f098944197", "sighting--4abcd903-2748-473a-9442-894e3d107e22", "sighting--a9f3b60f-25ea-4c5b-ab94-e8ff2036dcc0", "sighting--9df5fada-1776-444c-bacd-82782325be05", "sighting--6b10e459-3fa7-4f7d-9e0a-77b59f55321c", "sighting--d2a691d8-b36c-4eb7-abf9-f7424cf3c759", "sighting--ebb31407-f34c-4b8e-ae68-bacadd79609a", "sighting--6655fda2-f406-4ca7-9c0b-4f00da99a718", "sighting--23a5f9ac-3ff9-41ac-9a51-5fb4a47b82e4", "sighting--06258b88-6357-4bc4-bcd0-e4e143c4fcd8", "sighting--efd9b995-3d2d-43f8-8763-3d4ce5816616", "sighting--7c97626c-6684-4d73-a18d-a7a6136fc755", "sighting--a2ed2029-9f06-4528-916a-ad4b8fb8f8fa", "sighting--c3eea7ca-b5ec-4555-8b3f-32c5688d27fa", "sighting--60a1eb7a-da8f-406b-aad6-43a39bc7011a", "sighting--96a50de0-7965-4fa2-ac83-ef2e25fb5add", "sighting--231fba88-1462-43bd-bbac-88a622bac69e", "sighting--81e3beb0-f8b6-44dc-9813-2469f32fa641", "sighting--f77b6fd7-2bfe-4c68-8d75-8d266e4e7986", "sighting--4d2d7f2e-425d-4eff-b2a5-770ae285166f", "sighting--d503bfee-9a3e-426a-822b-2002df589399", "sighting--d348e6bc-5569-4096-a0aa-d1ff3ad55358", "sighting--5b9addda-53a6-4729-a869-3ac780247fce", "sighting--4346960b-5b8c-4b60-a1b3-a61f13a2ad35", "sighting--b1d452ff-06d0-4432-8060-4ffa142f27f7", "sighting--6c5e7249-cf59-49c2-b472-7113070e66ed", "sighting--34dd74b2-c1e4-4597-8341-389691136f59", "sighting--06bab569-1264-4ec3-8088-56ce64d81ecc", "sighting--28f557eb-4ad5-4b4f-b565-a339c9a606e2", "sighting--fc859ba9-c9cf-47c3-9617-3fcff4ad28aa", "sighting--1ac5fcf1-9e47-45e6-a1db-49925eb79ab9", "sighting--c4afb21d-42b8-46a9-b647-c2d0b26ce029", "sighting--9fc34df3-0f19-4778-907c-da78e0e9a126", "sighting--886e3cc5-a7b6-4190-8cd7-9f06123d8959", "sighting--85d1a566-778e-4195-b49c-08e0e96f3453", "sighting--74796dae-d014-4ce1-8670-dd68325a2312", "sighting--4259bdf9-2907-4325-9c6a-69d0f6c48928", "sighting--3c62743c-d2ce-46f5-ad9f-d4b5639d6119", "sighting--078d3887-18a0-4929-9b7a-4d13edbba4d1", "sighting--5a3a6f20-8793-4065-920c-35f75f4fe382", "sighting--ae669a32-5922-4258-8236-6a5116bbb5d8", "sighting--c5ecdc6e-0824-48bf-aaa0-2dc81a9b1543", "sighting--8607e664-7f6a-4fea-90e0-142396f64d51", "sighting--d4c9b69d-3c4d-48ab-9c85-c0e409ca3256", "sighting--fa0df9ce-5953-4df3-b603-e4a48560e69d", "sighting--aaaa709d-5bc5-46fc-bc13-448d6ad1800b", "sighting--00b33e03-e6d8-4bee-9427-b810defc3c14", "sighting--3127dbc7-1922-417f-b94e-0bab9e0323d1", "sighting--f72caed1-bdcb-4ac5-a1dc-b4f9506017eb", "sighting--da68aa68-9449-48dd-a1aa-53d70a49a38b", "sighting--bb53ccda-c52d-4eef-aca6-b67d89d53588", "sighting--8c54998a-4ee7-4bc8-8353-ea08f3beac8b", "sighting--b3da40e4-31c1-4a1e-8422-d9f392e0cad0", "sighting--ec80e0c5-fb42-48f4-b233-ce148b069ba2", "sighting--c145d71c-3adf-400c-91eb-40a48b4b3209", "sighting--43bdedef-f7ad-4d87-872c-8cb6c63ac716", "sighting--9c89d5a0-7042-4811-8851-3259233cd0dd", "sighting--a98c742b-20b7-459f-bcc8-30dd3bfe8254", "sighting--49004500-4485-4a59-aa36-b9583817b657", "sighting--66325d7a-b9e0-429b-a63e-3c06d62f6f1b", "sighting--bbd9da8e-9197-4308-9e33-ba7bac76bcc2", "sighting--a42c4b5c-15d2-4de7-9a50-867f8bcfa8ec", "sighting--41fa433c-06fd-46c0-9754-022cd59ad357", "sighting--0a4b8372-acf5-480e-8887-33ea6ef9239b", "sighting--3ce52710-2bbe-4bbf-b4ec-63a95a5813e8", "sighting--ed6b7ccd-aa66-4c56-9b73-3aa499506a7c", "sighting--2283405a-7ff1-4549-99b7-0cad65a14f6d", "sighting--89e19ef4-8d21-4748-be5d-e6a4c5e917df", "sighting--6c4412e4-3beb-4aef-8239-e4dd531ca6bc", "sighting--7fff3b79-acaa-4ad0-834d-3389e371edf7", "sighting--eefd22e3-aaec-45f2-9cf0-662bcf5b9467", "sighting--6ed7e611-a72e-41ac-86d2-aeb85bc75bef", "sighting--ac695bb9-3faa-444b-a2bd-3a354df2d705", "sighting--4711d7df-952d-4936-a3f0-723f4d12f2a1", "sighting--632dfcf6-d40e-48d8-98f0-b48fab6d4f17", "sighting--49bb4b8b-87f4-4fd8-b214-b5d2977dc218", "sighting--cfe840e9-82f3-4cf0-9137-11e02f10ab0a", "sighting--4a63d7bd-dac6-4adc-a64b-7d5fb1902ced", "sighting--fbad7ec1-133a-47f2-9341-1d08e6c7a22c", "sighting--5d7f2912-55db-49bc-ad78-dd0b19dbf263", "sighting--3116d8d5-521b-4f77-8125-134ebf158ae0", "sighting--18da8ed6-b99f-40ac-b343-16a4cb5549d5", "sighting--982174c2-f767-4116-a360-1d3cee508333", "sighting--7fffd2f8-2628-433e-bfd9-ca02a5999501", "sighting--1f8d362b-2bf3-4b4e-b27a-62c2cacef2ca", "sighting--74b994e4-772c-444e-9e2a-ce5344c51654", "sighting--fb9eb2ba-46f3-4e75-9ce8-4e31aafd2222", "sighting--f8e4472e-9d99-4b7b-a229-2e1610c52298", "sighting--f5f6b3d4-4039-4a76-9030-91973b16b96d", "sighting--a100a1bc-5d21-4be2-81ed-9a282099fa18", "sighting--b6be086e-3ebc-4469-abb2-164d4de25faa", "sighting--e0a18270-7ba2-4158-96ad-84ef94aa39e3", "sighting--f24cd3d3-1b67-45f6-9d47-6f1dcffb1082", "sighting--955caa91-6a9e-4ff8-b869-31b3b95f4e43", "sighting--8fd391e7-59ad-48fc-9a18-8817671e8dd6", "sighting--496214b3-b408-4a07-9ea0-1f382ea5124c", "sighting--c1b7dd90-7648-42c6-8b46-82f7399d9ab9", "sighting--2c643392-2d18-4938-be5b-b90bb44ac901", "sighting--4af83e7a-f700-48fb-b7a0-85292b48fa5f", "sighting--a835e408-81b8-4314-9bfa-616a111fb9e6", "sighting--86b27b86-9c91-47f3-8153-6fdb9bb9bf07", "sighting--e79c5321-ea1c-48a7-8919-80e79368ee34", "sighting--404d003c-b712-4f7f-9ee4-6fc3fd90f522", "sighting--cb35dee4-740c-40dc-9bb5-6b221e236e9e", "sighting--7b1c69c8-e38f-44d1-8106-22af95459402", "sighting--705e5bf8-c48e-40fd-893d-3703a9b666d0", "sighting--bb31c150-7109-4367-b2e7-fa9b5b3c8047", "sighting--a0183646-30a9-4ad3-8dcf-743ec19ee352", "sighting--94134be3-6850-4c77-a94a-026b935c3a9f", "sighting--e6c16eab-094e-4dba-852d-a8de510ea566", "sighting--f64481f1-e2b6-4366-bb73-79bbd533ad79", "sighting--8f1bc932-c25f-477a-9bad-9dbf99f324ec", "sighting--e32ec933-a17f-4c45-b3ae-c1e969fb370f", "sighting--c3853e2c-1416-4193-88bb-1c71e35cd23e", "sighting--c4ceffa9-3e91-4e28-aeba-846e69cf4e5d", "sighting--3ce30b16-727e-47b4-acee-803ad66194e8", "sighting--0e487498-8fe8-45dc-b767-240f7d0ff1ce", "sighting--e85f82c6-df8f-48ad-8ddd-f90b17d3f62d", "sighting--034b54f7-066d-4c6a-9cc3-d1b33cee9f6e", "sighting--be84797b-f86c-4bee-9511-7b0c79724377", "sighting--0b320095-5506-4b5d-b8da-b427ae9456c8", "sighting--de381803-5bbf-44bf-8fa9-a9d3ae64a0fd", "sighting--aa556ce0-3881-40bc-84e3-0e69d96b7763", "sighting--1abfc608-4587-4800-bfe2-cd49e20426a3", "sighting--0a5fd2bf-2421-4376-8964-319078e04d4f", "sighting--d216900b-efc3-4c7d-b6b4-c0972b506a0d", "sighting--358b3f8e-bac7-40ff-802e-b9771993e2d2", "sighting--bac3aa06-08db-4a89-9eff-2d86aaaa1db0", "sighting--8dd08fd8-b48f-47cc-82f6-bcff9562faec", "sighting--e9b00da6-340b-44d5-927c-d257be47f009", "sighting--a056f3bd-2b44-4cf5-9823-c53ca80d10e9", "sighting--3aec1876-1186-4c9a-a37d-5f8e212d84d5", "sighting--71e44ea2-d025-4100-af0d-bce31cdc99f8", "sighting--cf5a1fb1-e010-4c37-ae61-e8eec930ab84", "sighting--a0f69af4-8fcc-4c3b-b80f-ab9f1d90b57e", "sighting--9615941e-2f2a-4a1b-ab9a-c7ee0bcd24cb", "sighting--c84abaf2-ec52-4503-9c7c-9dc62d8c4db9", "sighting--b6f07524-14c6-4f2c-8bea-d41655b3c44e", "sighting--8d58c421-1567-4df1-b07a-3841061b0bbe", "sighting--822041a2-5764-48b2-8c5c-1c7046ce2770", "sighting--a478cf53-36d4-4851-8843-caa517032058", "sighting--5643f813-6061-4d8e-b8bc-e9d882f67492", "sighting--30020402-83c8-4f26-b2bb-fa1cffcd188b", "sighting--b78a4057-3a9a-4a9d-be9d-647c8a2b22c9", "sighting--4e1ae71f-d1d8-4cdc-9667-923d18d4f253", "sighting--0b78609d-92b6-46da-b600-ef60f95f1e8d", "sighting--75c5b0da-6752-4b8b-9132-62fc26a0265a", "sighting--c340b776-a074-41f0-8196-a5ca9804ab68", "sighting--470c31ec-e258-49a0-ae68-bc617114a936", "sighting--dca1627e-c461-40cb-bbd2-33e9dcccfc25", "sighting--482205b2-790b-43ca-8ea3-4b21f6c125dc", "sighting--4e34382a-7540-4593-90ed-899dd155ae2e", "sighting--92bd1e10-d331-4cf0-8d27-574021114b69", "sighting--ef639230-3147-4285-96db-69875ca2b23b", "sighting--366e9b15-2fb6-488c-9ba4-9ddbc6d5671e", "sighting--f82328a8-e450-466d-84dc-07197f2031fd", "sighting--28e08725-cd0d-486c-9392-48f12dbac517", "sighting--018f7327-53ab-4606-9a39-bdef7b6e187b", "sighting--900e4c96-2e45-4ea0-a542-edebe915fe69", "sighting--0dc748d2-c42c-4b51-bcee-971fd1bd92ec", "sighting--8f7029df-ab88-4ca3-826f-448164f21937", "sighting--59d6d5f2-51a0-46b2-af3e-f122e7ed0ace", "sighting--dd972c58-0ac2-45f2-b950-a092010a558d", "sighting--61a04712-689a-4391-a1f2-5eb1c125e393", "sighting--f491a1b8-b9b5-4eb2-9c55-e66a6bd70687", "sighting--696294ff-3fdf-47b1-a5b7-e18851324191", "sighting--baef5c04-9005-4c2b-b127-715e510a1e56", "sighting--b8738fee-8789-492d-b698-127a297ec562", "sighting--fcb45741-0d91-4f2f-b674-2812c7b73593", "sighting--bb6f9fb1-2464-44ec-b2e6-6a08044f6294", "sighting--df09a609-e063-4e5f-8aa5-13af8eebfeab", "sighting--d5132527-9904-4261-8d9f-7188113de91c", "sighting--89aa7a5f-6333-4645-9fd9-8d80245bd8e3", "sighting--199d1538-ffcf-4335-87d2-7327b0605f08", "sighting--19009034-9f53-4caa-b891-51a2c3342692", "sighting--e1748861-bacb-40fd-9ce5-e8624007642b", "sighting--b48719aa-4ee5-4bac-951d-976bc59e5a3b", "sighting--680afb55-4a30-4167-8de0-8163408ade29", "sighting--445189e4-afe4-4049-a3f0-e05d1693148f", "sighting--8a85c7e3-6e8f-4948-9630-a7f5fa237069", "sighting--2a20c3d3-9457-4280-9847-5849de432847", "sighting--9b27c168-a797-425a-ab30-19ca1b8fcdfe", "sighting--5329d4f3-bf33-44af-81af-e019e0ffb884", "sighting--85a91e99-d00d-4cbb-b2cb-7084ca70ca3b", "sighting--a84c29af-21bf-49d5-b6c4-483664058cff", "sighting--645d03a9-5763-4b2a-81b9-59696227631e", "sighting--658409a1-4dcf-482d-b520-9676bdb78b0d", "sighting--8991fe84-0817-4c22-8b65-261f20059b1b", "sighting--08ed628f-59bb-4924-8607-c98cfb041a62", "sighting--82c8ca37-5d05-4549-8788-61cdf0cdaeeb", "sighting--a71f9791-fe41-4590-ab75-3dd538b16c3d", "sighting--b3868500-4724-4f3a-9c2b-4ba4d9160c72", "sighting--6ee8b2c3-b669-455b-9181-58a615bff135", "sighting--63baf8e9-1df2-45b2-b120-f89a04a65f21", "sighting--4c4626bf-9edc-4de3-8f0f-a35ac94fb0bf", "sighting--9c1c3585-4198-4dba-9191-c7e8082028cb", "sighting--2e1c317a-b503-4a68-8ccb-9fb852660654", "sighting--5f895906-ac80-4e1c-bb7d-e5510a22018e", "sighting--f45a37f3-5f25-4539-adc8-d0fba31ee761", "sighting--0117c63e-7291-4afc-aa83-8f2e0b0ac4eb", "sighting--500bd5e6-b744-40d5-928e-7d6a4de8d536", "sighting--4880cff2-620f-4005-b207-b4b75b6d1562", "sighting--8c342111-7661-417f-a328-8aa9f2b0140d", "sighting--5001fcaa-d538-4d49-b7b8-3d8c83502abb", "sighting--1c0ad01e-8a75-4138-907c-3311e87e63ff", "sighting--e3454974-b4ee-46ba-b65c-077f2f79f251", "sighting--b764e08e-4fcc-4b4d-ad81-751d51866938", "sighting--d5b9f476-059b-4bf3-8053-ee5f6d8f90c1", "sighting--a53d6eac-129a-494b-bccc-80921c5475e2", "sighting--3b35ce8f-6978-4ed8-8246-ce9f614c13ff", "sighting--af408f13-4c26-4d06-ab3b-666dfc113322", "sighting--61dc726d-1c21-4053-8351-2fe5f6f80f4f", "sighting--a5fbd63e-fe1d-44f4-a12a-043e8eb3cb1a", "sighting--72402174-d7d4-4c60-b15b-195a81ff7f07", "sighting--51c0c744-d53d-484e-85a8-ac5fb8747a66", "sighting--d2dddba9-4d79-483a-b1c4-4971041f17cc", "sighting--02d087f7-a312-4db4-823e-64adb9a4e375", "sighting--5035791f-39db-4f51-abed-5a5657461b28", "sighting--f901a402-bece-4e21-84b0-61b58eba32d4", "sighting--db734e40-baa6-4039-9723-e4cdf13960e3", "sighting--52517650-ab67-4b24-882a-d26d8d38e4a8", "sighting--57d4f3a7-4dbc-47e2-98c5-d61043f36d68", "sighting--1e3eb850-d5cc-49ec-a4a9-b84b49fd165d", "sighting--9e331ded-ac4c-4023-852b-e04c7824d2ac", "sighting--44887761-6a0c-4141-a60b-f63ceedf0927", "sighting--a277cccf-5398-482d-b915-0f809fde5ef0", "sighting--5d1225ed-b9c5-43bb-a25f-643979d6a2e6", "sighting--1e277800-39d0-4efe-a177-01e5e49f61eb", "sighting--1f7372b7-29d4-42b5-a839-d0467830cc73", "sighting--8fa9de4b-59df-4a6d-a677-b5b1256d2aa6", "sighting--a9fe19aa-1a64-4c12-80ba-d72e21cabc0b", "sighting--67bcd7e6-dbdc-477c-bf05-691faab5aeae", "sighting--bed65241-f356-4892-a1d0-51b83edac798", "sighting--bc3c8bfc-d79e-45fb-a05f-0016647d10d5", "sighting--b2cbe665-de08-44b7-af3b-14c08ab1e758", "sighting--4b2b45ae-05f8-4646-b48c-6d95c3e1ee53", "sighting--1bb3a4cf-572c-425c-b88c-64b991a4ceb5", "sighting--3c5b2624-aa0d-4ce8-823e-5f44331ded40", "sighting--1cdb8d08-3f5c-4c88-83b4-18ad1585c3b1", "sighting--2773b0b0-92a3-4286-82a3-080167c9ba84", "sighting--3063ce41-44ac-4d91-b0b0-5e35e0d09d07", "sighting--9138d2a9-7f30-448b-b6f0-6c39cd64dca5", "sighting--c86fc4e4-8e0f-4be6-bd12-4a35f0735278", "sighting--dd533525-0933-4764-aa75-840343425a05", "sighting--32de5786-fbd6-463f-8e93-1bc10e9cf8aa", "sighting--071250a0-e2da-4b83-9aa9-6c767d3a7ae8", "sighting--fa7f8b75-8d50-497e-99f0-d56d07b34d76", "sighting--e7bf9c4b-915a-465b-b8b2-9200b44cd738", "sighting--2f2cb929-9680-4086-927b-5cb57f5528ae", "sighting--192a905a-fa82-445b-8d2e-80a34f21575a", "sighting--e809a7ab-09af-4a8a-a0cf-3e9f53e571d7", "sighting--84d94474-1b39-452c-810b-da8b6b8d7604", "sighting--0b330d12-91d7-4d48-9025-d313d22f7885", "sighting--b164e7bf-091c-4380-95e2-f48872808b65", "sighting--10a69c3d-02a2-40a2-9dfd-5d87796597e8", "sighting--12c51d1f-d837-4cb3-9762-29cfb4316992", "sighting--56c9de8a-0609-4418-bd68-d2068025310b", "sighting--f0f05be3-ae8c-4208-8594-93e3704b3226", "sighting--af56946e-40f4-4fa2-83d2-648035cb6f7d", "sighting--a00cfd1b-c16e-4873-a116-21eb108ddf28", "sighting--a9962ae6-39e5-48d5-b421-9b46320b85b4", "sighting--62543f44-e926-4524-9141-ca2d43cfb387", "sighting--e5b6a3ff-4126-46b2-b530-55b26575ec3e", "sighting--dca97689-2638-4598-9f6a-604af3488140", "sighting--c13b3c12-50dc-4e41-a312-815886127c1f", "sighting--501fd789-63cf-49f5-b4a1-b36388b85372", "sighting--244da729-3334-432e-9eba-35d186fbe65e", "sighting--5fbdff1a-f41a-4ac0-b08d-52a7f0b0eb82", "sighting--d43129f7-12c9-4e54-8970-7291cc4f287b", "sighting--18cd1dd2-2d6a-4b4c-b1ee-2549e6bb9e54", "sighting--bb858d2e-fb48-4477-91b7-7070cf965752", "sighting--cd5e1340-2185-435a-9fa9-6193f21fa347", "sighting--d0ac58fa-c538-4afc-8551-4cb46b0f2342", "sighting--ee493505-f281-400c-9da4-b5f99043a338", "sighting--f041e254-d5f2-4883-b74e-4f6cd3d73123", "sighting--f3a91006-29a7-4d03-adf9-d44cea422467", "sighting--e9309d6e-d935-4d84-b533-07ba92bb1d2f", "sighting--f38d850f-391c-45c1-8d3f-c9a4ee9706b3", "sighting--f9f2f6f1-a254-4262-9bae-e19867501c36", "sighting--3c3fa6a2-30b1-4c05-99d8-d7130fd99df8", "sighting--68099b9c-c644-4942-a17e-324d290595b2", "sighting--ae5e4c47-f700-4e44-b178-0457d0139360", "sighting--59d8d8cb-b65a-49f7-9d07-95c3591bf6c4", "sighting--0a4166db-f06d-40db-b422-bd713a5ed993", "sighting--15eba84a-263d-4487-8e6b-1b6bd5088748", "sighting--62c12702-6d57-434d-bb92-c169fa3c818d", "sighting--005f0ac8-e288-4126-8ac8-8c5890ac34e6", "sighting--63dbfe41-3cf9-4d33-9fbb-94cae6ea62ce", "sighting--014de6c5-e555-4fa4-9b2a-cc393a160f67", "sighting--02c6e4b7-34ed-4b28-8686-90cf8dc7d383", "sighting--1cfc820b-049b-4954-83de-7152264a51f5", "sighting--69794e0a-605f-4a67-a7da-d3f3b8af7e02", "sighting--f4841e09-7c51-414b-ab81-e9d304c732a5", "sighting--c119db37-510f-4b2b-90d1-2c5cf3887dac", "sighting--2f37c67e-86bc-486e-870e-d6bc20405a69", "sighting--180f3672-10d3-4cbf-9e0e-1be2cf946a88", "sighting--6fdc28b1-8d71-430d-a6d0-da105ee7e1d6", "sighting--41839131-12e7-41ef-ad7b-233b0e409ff0", "sighting--4520b3b7-641e-4925-82c8-414f89ff4977", "sighting--db00ac01-79e7-4b80-9e35-e1fa43722472", "sighting--369c87c8-1b0b-4aae-8888-e6d7aa851157", "sighting--64230a82-a412-4723-8b7e-8e9ca30beaf8", "sighting--28ba6b3a-70a9-4094-bef9-15b42fb6df1b", "sighting--7eeafb52-84a0-4c41-9e43-3631901ea7b8", "sighting--607fef77-a793-49d5-b8ec-751889420f7e", "sighting--a7467e39-728f-4482-96ce-a40abc5d1496", "sighting--6bd82fbd-9fbc-446b-a84e-5e1dea41412e", "sighting--4b3821fd-c723-455b-90b8-6a1d2a72a1df", "sighting--c173552d-2997-49d3-adbf-5beadd6e9027", "sighting--6e43efc1-e3d3-42fe-95db-36dd13948b04", "sighting--6dbfb7b2-52ef-4718-92e7-968470298d93", "sighting--6188cb5d-2d23-401b-a42d-b5228cd8f80f", "sighting--3f21adab-c264-4cd5-b4f0-97e5e09eb374", "sighting--7187f4e5-8f4d-4653-8f95-fa10353738a4", "sighting--53d01a5d-77da-4b9a-a61b-32b041082c96", "sighting--0991f970-a04e-4669-a19e-9738bc2aa00a", "sighting--72e30c5b-2562-44c7-a1e2-41b095875598", "sighting--a7162736-b562-4146-b62f-96128a590466", "sighting--ee7029a7-f0ca-4ca9-a7e8-1fd30e137703", "sighting--13363f54-7373-4508-8bdb-eec075270021", "sighting--cc430478-96fe-4cfa-8833-2925c8d6abf5", "sighting--82b38375-15d0-42ff-a4eb-6102fb8e9783", "sighting--426ee233-9281-4e25-bf73-cf17421c30d6", "sighting--721c6d95-c606-477f-8929-d1b557b987f4", "sighting--f79448e2-653c-4c05-ac65-5ec9e448fd64", "sighting--bc17f6a8-8b1f-4778-814f-7a849771fa5b", "sighting--8a9c232f-0bb6-4978-a357-837c215eecb7", "sighting--16b15f36-cc62-45e2-ad52-470f2bd77614", "sighting--a6adbf98-22b3-4c0b-9c1d-44438074bacf", "sighting--fe4fbc7d-0240-4f83-ace9-2ae71a615b4e", "sighting--c7685e4e-82bc-4f50-8eff-be335b141646", "sighting--87ab42f4-963d-4b00-8659-005d72e7a7e0", "sighting--241c1de1-fc29-43b3-9258-1ccb9c427688", "sighting--9dd77139-95b9-450c-85bf-ecd3f8b91eb2", "sighting--ab0d136f-14a9-40e0-8b5e-4caf5972aae4", "sighting--7ef63eaf-e41c-4bba-9529-c32e11c60d15", "sighting--ecd0da96-e08a-42a7-9067-b5c04c8a0b39", "sighting--893c957d-543c-4933-a7f7-aa42fcb39b78", "sighting--7b814a74-9c5f-4e97-b300-ec1efe42b4d3", "sighting--4abc991d-11a8-4107-8049-f6d11e521334", "sighting--a7da2b96-727b-4d0c-8be3-8cd61a43af30", "sighting--52ef7c40-31b8-4898-a902-ad204a031533", "sighting--89c0aa5b-2407-4721-b29e-d7f78851c0f2", "sighting--94125cd7-a6fd-4d5c-93ef-05238dc8297d", "sighting--83cbd2ed-890e-4665-ae46-274509139b22", "sighting--2ef60a2f-95f5-4e21-a43b-27c32bc1266b", "sighting--9877f58a-7786-4aec-a6ce-d0101581b94e", "sighting--e0a26bab-fcf9-4305-9cb8-fc5539654baa", "sighting--ef411d7e-d13c-4619-ac79-6eb36e27bac7", "sighting--0b4bd634-3c56-4cc7-88f8-b58106fae170", "sighting--e730bbdc-d156-4957-827a-e46146b8be6d", "sighting--d7a99998-67ba-441c-908d-5ebcc8e77d69", "sighting--933e9b41-d098-44f6-8506-cbed49f85d06", "sighting--23778039-b69a-4133-a3a7-f8b1bc34247f", "sighting--9468bc89-b601-414b-90c8-4eb951222ebc", "sighting--35ffaa87-920b-4d55-8f11-02111e1d94be", "sighting--01ccd87e-2170-4d88-943f-cdebe14ce7fe", "sighting--07c9028d-8ce9-4d54-95a6-8b2a491b0e36", "sighting--45e8f5e5-5c41-45a2-a6ce-45b3e6990f19", "sighting--d41f3e9a-dab4-4876-a125-e2a78a59cd27", "sighting--79ce17f4-4ece-43e1-9a4a-eae39f2e2298", "sighting--c9e33159-b211-4e6c-a695-9bf9fd65b27e", "sighting--a87c47b9-8e76-4a09-be0f-b05bee689fed", "sighting--13d682a4-e2e3-4f1d-8636-53162ce5fe4f", "sighting--f9ae6997-5243-4b5c-bba8-bb6068ec38a0", "sighting--04f98de6-3cec-44ff-b46e-c48ba47ba112", "sighting--9bb42b79-f878-4f25-baf1-d6f1026fb620", "sighting--04fc4042-4386-47b4-b306-ab021d7e943b", "sighting--f50f2c09-706c-4636-a6f0-333a9bc33131", "sighting--f63461d4-e886-4fc2-8f78-6247df8d1349", "sighting--aad02d2e-1cf7-4c8b-8460-8412169ebe76", "sighting--91ad7e5c-1642-4cdb-8bc4-780128b92067", "sighting--1adc5552-641c-4c6a-b53e-e9cca702b8ae", "sighting--eb2e85d9-7a6e-4951-9512-317ae00fdb22", "sighting--97bbe3ec-32ca-4cd2-8e90-a7464865e326", "sighting--53f9a83b-7408-48c7-b357-88bbdf83a2d8", "sighting--d15b497e-cd76-4a0f-95ff-97ee9a156edf", "sighting--2b96c67a-0d5f-422d-9e88-64d76bd55314", "sighting--eaa81c61-c593-4283-b81e-dac054fffb3a", "sighting--d0f454c6-1b7b-4f59-af6f-1b595be5a36c", "sighting--b215bbd2-1e82-4c85-89c2-c8d8a6cd1150", "sighting--8088eea9-cde1-4a59-aab0-6d564610501f", "sighting--6669cd06-13c5-41a9-8ee7-abc32c97efcf", "sighting--6c726b97-7701-46d2-9250-3022394a27f9", "sighting--1a82ae52-d6a9-4a47-b8c6-70523375c20c", "sighting--6af4eccc-33c6-4eef-b8a8-b785fb447de5", "sighting--818eb9fc-6a6c-4fad-9ca0-dc5d792ad0f0", "sighting--6b71ad9e-eca5-4334-87bc-205a513f5034", "sighting--f53cd909-c36a-4cf4-86ff-9e8af9b1e869", "sighting--c8c65d74-ef5b-45b5-97a3-abd2e915533b", "sighting--b7aeb2b0-8a50-4d72-8fe3-719dd0b7e70c", "sighting--9250cbbc-93f5-4066-a5a5-192b9d545cb8", "sighting--edcb5f45-631d-48af-81ee-c3486de5c422", "sighting--813a58eb-7394-4233-8c24-104e1c88e6cd", "sighting--018623a8-4008-4327-b817-0d8389dd4c9a", "sighting--260b2849-5332-4f25-87a9-72dbbb8e3e41", "sighting--438e9ea6-f8e7-4fe5-85f9-e67929444e8f", "sighting--ef9e5bce-3090-4d94-a1ed-7fcdd7e86e06", "sighting--e0b5e00f-6244-4ffc-942b-d690340f3f53", "sighting--b7ba8542-a2e8-4208-8d59-9187f9d098c1", "sighting--a2ff6322-282e-4a61-9c7f-d21186440b24", "sighting--0bff67be-4b19-4d32-b44b-c35b5a63805e", "sighting--f02e8e80-a4ff-42b3-8000-3724dbf55af1", "sighting--c27ec98a-81db-4b18-ba7c-e1978b8046ef", "sighting--92a3ca68-4cf4-45a0-8f01-cfab73246310", "sighting--dea3988c-9b36-488e-913b-24ae6a28ed61", "sighting--44bd69c5-3919-4167-997b-05caf345212d", "sighting--0e41a540-ea8f-4b8e-8565-eb85249363ec", "sighting--42617163-5531-492c-b98b-a45edbbd647c", "sighting--d54d1838-5477-4d00-8e30-834298694f7b", "sighting--26b7ef0f-dafa-4366-912c-79ec8872b204", "sighting--26c1dd99-bc71-4eb9-83e1-ecd054c47d21", "sighting--2090532e-79b1-4ef1-9756-6422ee0ca93d", "sighting--c4f2a199-1acc-41c4-85d7-17b12708c358", "sighting--339501d4-9b61-4619-b3b1-9e07de8761b5", "sighting--5153d57b-2a76-4914-8d2b-d49529c15587", "sighting--e47f84e5-af33-4d4c-bb17-46c98bc25d7c", "sighting--16e4e969-01c1-4817-8456-3803f8b881e1", "sighting--418b8376-27bf-4b82-8e29-3c8bfd732605", "sighting--0ed284fd-d397-437a-ab35-c1ca57f30e01", "sighting--419a600c-190d-4ae0-9fab-c0a40a9917c3", "sighting--b39c4900-0900-4182-b4af-e19fc63ac6aa", "sighting--44a537e1-ced7-4c53-beef-f89bf74b294d", "sighting--3edc249c-c790-45a5-af69-5da4779fd5f1", "sighting--9c47a5f5-0294-4e42-b2bf-6527311ab0cb", "sighting--12e60bea-b761-49b1-b5ed-24247cb700cd", "sighting--2d88bf32-02be-41fb-bf93-b98fa0915a04", "sighting--5582c900-645f-40e7-9d08-295dc53caa4c", "sighting--f6de7439-48d2-4c57-8087-f4c84ff68ceb", "sighting--bb7e95e4-4a9d-4340-b1e3-038cc272c87b", "sighting--afd334a1-1ccc-4e9e-842d-214d8ad10349", "sighting--be6129d2-427f-4b23-9f1d-862d0d150377", "sighting--d0ca2a20-56f4-4ee8-9490-5b2b2da340c5", "sighting--c5cde07f-a846-4916-a3c1-e76e582e4304", "sighting--c4f068ef-84a3-4561-b5e5-050ca840d355", "sighting--08271ae4-8557-466d-b663-0fe60da6792f", "sighting--eeafa6d5-bb38-4e37-90d5-af05cbd72a2c", "sighting--01ed4eab-bda1-49a8-9c20-f1da1f932c35", "sighting--aaf197d7-6478-46d4-9c44-1da052377416", "sighting--29c4496e-9c73-4125-972d-d8b8b8fa7831", "sighting--3c1f68c5-8156-4e88-a009-61ed10d283ee", "sighting--8ff1d6d0-d44f-4b43-88cf-ed519a7b7e12", "sighting--0b6a7881-a699-4538-b57b-5555cbbf7ff7", "sighting--86072255-b155-4b76-8638-2dfd70fbff6d", "sighting--62a67d62-b171-493b-895a-620454b1cf29", "sighting--84e282ec-47b9-40b5-8ebf-53457ec72337", "sighting--c5d791bc-4be0-4fdc-9afc-7d03a006dc24", "sighting--0070a0cb-d40c-4c85-8f44-5b02b7c040ac", "sighting--14147bce-6ff5-4571-a8d1-9c7b74426041", "sighting--d08f30e0-b17d-4622-8dbb-08f9dc72c47b", "sighting--c3d930a8-4e4e-4e58-832f-6d98cebafbca", "sighting--c6caeaa4-a1c9-432b-9f8f-fe5d13c5a65b", "sighting--0ba4dd4b-06d9-4625-a495-36afa8fe77a5", "sighting--da918340-63c4-46f9-81c6-8b4dabf9aaa7", "sighting--a3753ab4-28b0-4b25-95e4-6212b0703849", "sighting--53cb87d9-9a68-4f53-b82e-f2f12d75dbef", "sighting--de3e7939-a96c-424a-92c2-2595d170ecdd", "sighting--2e7e11dc-1287-4128-8f40-6bf090d60be9", "sighting--aed14bb4-1182-4687-aafe-a54e6745305f", "sighting--1fafe870-e91d-481f-945b-bcb9acc5dd6c", "sighting--0471a838-ebf3-4d00-b4ba-18f8be3c2f94", "sighting--c1c8aa0d-c615-4984-bd7a-ff4600f3e6b5", "sighting--efae6a64-f46e-4f22-895e-e198b1dfef3f", "sighting--d26d0b1e-2c2e-42ec-aa0e-ec584af37f6a", "sighting--9887ae52-4fbc-457b-af59-3218585bc0c8", "sighting--4e5371b6-690d-41b5-8bbe-a0bf5d9b2d2c", "sighting--a0cff035-5f0f-4a8b-ac6d-20c697f52e07", "sighting--7381b0e8-8cf9-484e-9dcf-aa75cff08840", "sighting--38485836-31e1-47fe-b7e6-5a0f80df7446", "sighting--9053c8b1-ee8a-46a3-9819-2dd2d7c1bd5c", "sighting--9680cbe5-fd25-4cbc-a03d-e142118ca713", "sighting--74b8aa03-3863-44b9-a454-6fa7416b584a", "sighting--3c66eaf3-4171-42a8-99eb-a4540028dd72", "sighting--027692a3-273a-40d9-85fc-9cb4117146d8", "sighting--3255c348-44e3-4fa0-af38-d0c46f997558", "sighting--ab235709-d677-44ae-85df-3dad6327dca9", "sighting--3584cc9d-1f82-4d76-8203-aa0135930870", "sighting--ab4634de-0cf4-43b5-8885-f7c5e3b147a9", "sighting--4ed6d0de-4dff-4ad8-9cf8-17d5f4a8cc3c", "sighting--aac13614-4a2b-4dd6-abf8-78c3450ac481", "sighting--edf67aed-8b98-4a41-8daf-0789b8ca6a90", "sighting--cf25e04a-e7f9-4b13-91b8-839846b6bfd0", "sighting--adf6a825-1b8e-479c-90f5-d02bb5781990", "sighting--b986955b-0d50-4eca-8dc0-122e9f6eb5e4", "sighting--120b78d6-2623-4233-981c-6b44877f9927", "sighting--2bf182c6-4e85-442c-b2e4-97b3a0020844", "sighting--c18817f1-145c-47dd-9940-2a3572b07712", "sighting--b06fe9c9-24b3-45b7-99bb-26836b4c1195", "sighting--4d876218-e93a-4897-9680-c3533a3e17db", "sighting--43b8e381-61d1-4b79-a694-03c5387940f0", "sighting--6d6ecb9a-c3fd-46bb-aa3e-26525fe4dd1e", "sighting--7b96287a-527f-4a64-9a5d-742eaddcb8d8", "sighting--eb7b39b4-5146-47f7-bfd6-0b967809194c", "sighting--373d287e-bf4f-4182-855c-b2846f60fdb3", "sighting--dc60e93b-ce52-4bb4-9ff6-4b3241b93f4e", "sighting--91ca7d0d-c701-49ec-9aed-e168a60ca0b8", "sighting--2b70234c-a535-49c8-bc9c-1c55b91fd607", "sighting--3b12ddfc-d577-4008-aae4-f6d39ba62250", "sighting--022e4e6b-54b9-43f8-a016-7e28d07f6bf3", "sighting--cac7812f-65b4-49be-8436-693743dbb5b6", "sighting--0d356c56-7509-4238-85cf-fadf265f1144", "sighting--4153f789-3638-4b70-b476-23cd82dfc908", "sighting--1f2e8ba0-603c-4a78-a641-ffe7a4fd8e99", "sighting--e5b41190-df53-4a86-910b-9fdba626c269", "sighting--57b053f1-3d5c-4860-977a-86f9ab4ddfb8", "sighting--71787484-bda6-4a19-89bd-6dfed5d047d7", "sighting--5d5f52bf-5560-4957-ae4a-2f5c1444b8a0", "sighting--b6fdff1f-b9d5-4f9a-b1ca-36f4cd0ed668", "sighting--07650942-24f9-43ea-98e6-feab2d138ac8", "sighting--07c3f026-222e-4a09-a91c-21cbfd7b959a", "sighting--50c565e4-4549-47b2-8f86-1f344bcc70b9", "sighting--6bf2cd6b-db84-4413-bea1-d44347d30486", "sighting--24dfd1c8-b544-4d13-8cbf-544b90d25049", "sighting--34765502-e0a4-40ca-bd94-c930c10ea282", "sighting--f5a24529-3ac7-43be-a931-f5d6e3aed7c7", "sighting--3cf3e47d-ffec-4dff-9e3f-b3be5609a865", "sighting--c8238761-0634-4f13-905a-28eaeb8b32d1", "sighting--d20e6318-baec-4108-8c47-01fddfc6fe77", "sighting--a184b65f-3e9f-429c-aa5e-9fac378adc7f", "sighting--ab36e8b5-8f10-4906-9760-085d6983e4db", "sighting--1c3f666d-07ae-4180-8059-66489130fb0a", "sighting--368fa4c9-237a-4805-b489-3354fd112190", "sighting--167659a9-4318-4501-bddd-617e53682afd", "sighting--20fab9a5-460b-4cad-844b-6d284e6050f8", "sighting--d3fe9c43-ce18-4a83-92a1-c0442fb6b3d3", "sighting--029b3186-e1a7-4c87-9a61-58162495dac9", "sighting--8655bd8f-148e-4bcc-aa71-a07c913ed637", "sighting--163bd8da-1527-4d23-8b82-cc28fba6464e", "sighting--b90e55d8-4a45-43b4-a7ba-768fb34c6843", "sighting--d3be83e4-b8aa-455c-ae86-d638ad881c13", "sighting--9e99113b-2c22-43cd-8385-6969df5e4482", "sighting--e57dc274-1f6e-4b69-8da2-fc763a6b6919", "sighting--294e3629-cb5e-4409-8161-5f74a40e9e1c", "sighting--9441d9ae-8a76-4c82-8748-17f0bbfc4064", "sighting--bffa9251-815f-4853-aa27-15396d9b8629", "sighting--d56f2382-d730-41ba-bd1e-ddb3e5a12549", "sighting--9c0e4f03-7ae0-4ded-9669-0f2326dbe798", "sighting--5a38f662-de5b-41c5-b1d2-058ecf6277c6", "sighting--5db3a319-84e3-44bf-ab19-8a571ded29e6", "sighting--37834858-bf03-4a94-838c-f56387876fff", "sighting--f6a71002-75c1-4920-8568-2e691b50a512", "sighting--a4b737ce-fd28-4e04-8d9f-ed5b381d8b9c", "sighting--bf28d63b-8b32-45a1-a038-30a7cc6cd3d3", "sighting--938250d5-86b3-407c-8896-2b81daa8b12b", "sighting--1721df48-337d-4d99-b202-b920328e007d", "sighting--9653c3ba-1c43-4920-a8e8-f42cbe098cf2", "sighting--0f1c2fc0-7c09-4507-ab54-edbc92cd50c4", "sighting--f9ac3cb6-60c2-4ec0-86f9-7896049b6b98", "sighting--26b5409d-3282-4a19-9887-30ac72a2ab2a", "sighting--e68673f6-097e-4c0a-9be6-b5e21b046b07", "sighting--ad5db256-72a6-4488-a29e-ecc59a784ca7", "sighting--b9697739-6ad7-48bc-a2e8-fbddbcf682eb", "sighting--7c2ecea2-13b0-43f2-a3ba-66dedc120857", "sighting--592acf20-a083-4b7a-9769-6564cde8e899", "sighting--e9fd6372-c868-4d76-abad-70fd7cbe0f6e", "sighting--73273ce1-eb29-4bed-a209-0aced61e44ae", "sighting--6ffdfa61-a21f-49a1-a977-f3ff02aa24ee", "sighting--950fd989-e353-4962-a747-ac7402cbf391", "sighting--be091dff-52fd-4d28-82d4-b113bc70dc03", "sighting--8d6483ee-7013-44fc-b11d-bfff58a1d797", "sighting--7f0333fb-dbce-46c4-8056-9050d22fdcf1", "sighting--21d8998a-5aa8-4cb9-86a0-98ef2d6897c1", "sighting--acade218-7139-46a9-b872-d9806c968091", "sighting--2e70387a-df29-4103-8b2f-bd1c01af2dc8", "sighting--c9598f6a-3d96-4408-a225-d51fc64065d9", "sighting--385fbd87-1159-4456-9f7d-35a41a3e8f76", "sighting--1ed46aba-6cb0-4d26-a119-16fa4d28c55f", "sighting--0515a828-e15b-42d1-a2ad-7b12fa3e570a", "sighting--076bf104-8aaf-401f-8181-757fc5fbf62b", "sighting--39905681-f2b9-439f-9511-6c4f8f9dbdcd", "sighting--4887a815-4f00-4900-8ae6-96d883c3d8fe", "sighting--5c626924-7bfc-4ef3-9388-fcdc1dcca3fe", "sighting--d848028a-33e4-4ffc-aaa0-4a897fb67e92", "sighting--73befd5f-b047-4c8f-8c6a-947482150f0a", "sighting--f14d4f4a-17b5-4ff8-905f-c25eecd213e4", "sighting--d9a25a2d-2a60-4404-b6e1-4976db63127e", "sighting--2bae5c59-d0bb-4388-a8f3-0f83ee42f0e5", "sighting--db42c2ca-c044-4a8e-a47b-69c0c0de9da0", "sighting--822f7713-70c5-48f6-a883-fb1f9b4c2513", "sighting--587436cf-3529-4e2b-a6c9-4c3265ab3da1", "sighting--ce9799ad-66cb-422c-932e-b0b8e0f04bcb", "sighting--d92fec5f-5e48-4a57-8010-bd835fd4ddd8", "sighting--59e06a60-f50a-4ba6-b726-18545adb9091", "sighting--f252a644-292e-46ce-9234-0d29f03633b5", "sighting--ecabf73e-a218-495b-833e-7008f631fe29", "sighting--d7fb7fa4-f038-4bd1-a2ce-28576de01659", "sighting--b1326dac-606a-49ec-bfc4-e9014a84e3f6", "sighting--5ec3915a-4a23-4ee6-969b-42d93ea5b1a2", "sighting--3aea3ae8-532c-482f-b0f5-bfacdc21b0d7", "sighting--2467fd2c-8b7e-4602-a5a3-70cd575e2174", "sighting--6129a743-c1da-4eee-acab-628bf0e6cc5b", "sighting--ea1530ba-1d14-4248-aac3-b7342cee0ea8", "sighting--7586e944-9c56-4ca4-8b4e-0bdcbbf45585", "sighting--e6a2a329-d297-4ad3-bfac-44931b12bac3", "sighting--f9c4175d-fb2f-4926-ba0f-3a33b8016ff1", "sighting--f8ea7b41-ac90-4843-a06e-677fec42c757", "sighting--c5d47d15-3251-40b3-841d-806122c783f8", "sighting--738cf9d2-6893-4738-906b-1ddeea9cf7aa", "sighting--bf1961cd-b002-411f-98e8-16cd93950129", "sighting--2045914e-0e18-4276-8124-84f5de887bc2", "sighting--38e29474-e8ee-4b4b-b1f8-ddb12e6fec92", "sighting--f04cfb05-42cc-42ef-ae72-6c9d516b8fc4", "sighting--c63d1045-3564-427d-9335-210cbe23e3b6", "sighting--3a50de58-8302-41e4-846d-a61ff66fd584", "sighting--d327240f-33ff-4462-a54d-af8d6cade572", "sighting--d2d7995c-fe75-4c1c-b895-e66fcd25a0ca", "sighting--b13a3573-35a1-43b6-9a7c-e4551881496e", "sighting--a9a4f9a2-31e9-46f2-84be-44b8f02bef54", "sighting--3ac4543b-42d6-4347-9cd6-0e93c55da4ee", "sighting--68324e38-21a1-4096-b5e9-793f2ff67d80", "sighting--4c01bd84-3f7f-4af5-82da-0a66679c974b", "sighting--306af8a7-9df6-495c-9af2-c99cf39071f9", "sighting--4fc51a04-7f51-4a5c-9b38-2ae169c53f71", "sighting--031c85dc-a464-48ee-9f5d-09ca755243e0", "sighting--2d209bf5-6720-4422-9d52-284bd29462af", "sighting--24d3fa26-95d1-402b-83b8-88941f004628", "sighting--ede19f53-bd71-4c5f-b7c6-df8d096c1e98", "sighting--1e678126-bb30-47ac-8e91-71631c49c552", "sighting--316b1d6e-d811-45f0-8c74-31e99fe7765c", "sighting--586aeeca-896f-46a6-89ed-4c10a80d40d1", "sighting--4f0bdff1-e813-4059-ba5c-ebfa24dd3728", "sighting--563722c0-f989-4ad2-adb3-93c85b4d1125", "sighting--d1bdbe64-7acc-4c2d-9e1f-22db70139510", "sighting--b02e3ced-8ccf-4526-9496-1872352b4117", "sighting--7a5efad8-efad-4403-963c-9161aa1f5b90", "sighting--91c6f3a2-2b16-41a7-8681-ac351b612d7f", "sighting--97018e72-ce1f-4675-9243-b8cb218663d3", "sighting--01abebba-5eb1-439b-ad26-ea610c04feeb", "sighting--67c5bd4f-0114-4bd7-9b05-6244d516e1be", "sighting--59569b74-7d18-44e9-a178-10820bc20e7d", "sighting--dc41efd2-cae4-43db-8830-6873b72c8d5f", "sighting--327e0562-9cc4-4bd4-9812-fac62bd679fb", "sighting--53cc554a-9e9c-4bfb-b0ca-e04602d13b31", "sighting--6e4ed0ec-9d95-4640-b448-c08d6ac92d1b", "sighting--d34d0de5-674f-47d2-bdfc-9649823ea455", "sighting--053101be-d895-4658-aad6-c8dca8109215", "sighting--df467c5d-2d07-4b5a-8c57-055e5a0a2735", "sighting--aafcd78e-f2a5-45c3-a31e-fa7f654733e6", "sighting--532618fc-b8e2-4b04-bea7-c1915673838e", "sighting--296234eb-780a-4ebf-9b1c-7bace7fd7722", "sighting--8c706398-40f0-4b64-8726-ce79822c9e3b", "sighting--096a2ac4-c69a-4422-b76c-ca28ea7e6094", "sighting--fba3cb9e-aa86-4ec0-a294-18aab207628a", "sighting--d36eeb3a-1e4f-4a26-8eeb-778e34b99084", "sighting--d276f205-9777-4bdd-a9b7-87c116ce9277", "sighting--69c6429c-6cc0-420c-aa1a-a5bcc4fdb965", "sighting--6babe3c2-e2c9-49df-81d4-d681768825fc", "sighting--8ecce571-099c-4247-979c-5a15772ba289", "sighting--7c78c341-c2f8-42f7-b297-bef5b87b406e", "sighting--416796b2-b38d-469c-9f70-2ced9b92b220", "sighting--a9dd5b5c-595d-411e-8cc0-21b8beaa2e0d", "sighting--0d89aa6e-a0fb-4e89-9dc9-de1594394a94", "sighting--71b8df33-4130-41ce-9b2b-de4b5ce94fe2", "sighting--b56f5d47-bbd5-4237-a1cb-48543e1466ae", "sighting--f2d0b0ff-a27e-479d-b669-1da55b53a969", "sighting--57bd2791-8f49-4963-856a-b8a72204840a", "sighting--6c2e5131-1c44-4741-9693-31cddd8960ea", "sighting--85e21d0c-7136-41c5-a515-b7863522d393", "sighting--c812031a-42d1-49b4-9696-ea3454ef23a2", "sighting--5512eda7-dd9f-4d38-baaf-554e884b1c79", "sighting--c4de9033-cde7-4ab6-a675-94ac3fa6255a", "sighting--e8244b4a-fd28-4203-8f9d-2bfff7bd646d", "sighting--2e629e5e-c2be-46ef-86a5-960749b60fb0", "sighting--1af34aa0-5227-4f26-b9db-4d469acef4f7", "sighting--15f94f2d-bc83-40ae-9333-00ad4371744b", "sighting--c570bdf1-1e99-4b99-87a6-d567a8867c42", "sighting--3b431815-1348-4c19-bf88-7f3d8ab148aa", "sighting--a1d77578-9085-4f9b-a2fe-05d4b43d29b9", "sighting--0451a1c7-c0ca-49a1-9095-c6edc9021b5b", "sighting--921e768a-052f-4188-9195-aecad6783c8a", "sighting--f1e16fc7-f87b-4238-a9ac-56b978e7871b", "sighting--63772112-4ea3-4ee5-9b21-a74666a8bd3a", "sighting--30939d27-009f-491c-9873-fab8f567e564", "sighting--bcb933ab-96d7-4c1a-8b5d-e360b19f69e3", "sighting--70d156ed-040a-4653-b239-9c1e11822bf0", "sighting--1bc31358-e4e4-4190-92f0-996bc9b7d4ca", "sighting--266055f3-6f38-487c-b0b5-8f1580e2d2eb", "sighting--8e2123f2-3319-45b0-9714-acb521063ce5", "sighting--e0a4ddcc-7d56-4a39-9246-07f19080f685", "sighting--518f23db-352a-47c8-8f22-dd782b391103", "sighting--1c4e4adf-75d2-4d8b-9392-4464c1c98f73", "sighting--2040c724-8f65-47ab-9b5b-d6c7059e2781", "sighting--06512aff-564e-4bcd-b4d2-bb6e6b1134a4", "sighting--02ee9a4f-fa55-482a-a16c-b973ca4ddbbb", "sighting--e7bd8723-e2c5-4534-8311-40a844a7ab28", "sighting--7cd1a90f-3db4-4bc0-83e7-75fffa4629d6", "sighting--43629d5d-27ee-4ab0-b77d-2942db99549e", "sighting--9a31f79a-7f48-45de-8bd1-5d4fe2cb7b3b", "sighting--a9eccd44-0274-447f-9ec7-fc5b618170b3", "sighting--f51f2c46-df4a-452f-ab98-e08fc8aa853a", "sighting--a0c02a7a-1995-4ff1-b673-c8f6524f6f1a", "sighting--51fcb619-c362-4883-b4ac-8342fd1505fe", "sighting--637304bb-7adf-41b0-a72c-55ac79e96d03", "sighting--ef890a85-6345-4d8a-bfce-43d2b165044c", "sighting--a9f746b8-cb34-40cf-a922-820f5fdceb20", "sighting--cee89637-2d71-4be1-adb6-270493c15be2", "sighting--e5109edd-f5f0-4b0e-b1a6-fe6044256253", "sighting--6511ba7c-d48c-4044-a90b-b92919ce627a", "sighting--3ff4b703-d1f1-461a-82b5-d11c89adfe1b", "sighting--bdd69ecf-4171-444c-93c2-aef63519607d", "sighting--2034712c-d585-4db8-a011-4b15462559c8", "sighting--710cf2e1-f542-416b-80a5-7648016c7354", "sighting--708b84c8-25ec-4a00-8735-b969c0b0414a", "sighting--1e2cbdc8-0814-48f4-8dee-c9f34ca4b8ab", "sighting--6f0a9218-a559-4059-bc9a-abcdd9a51088", "sighting--7c492ff9-51ce-4b1c-b669-55a033d1b61d", "sighting--b671d00e-1457-4af3-9cc2-42f1b551eeb3", "sighting--c1e0fa08-f994-4a1d-9ca0-f3ee8e7eafd0", "sighting--34cae637-5337-4a62-a089-45b2c9194211", "sighting--e3966436-92db-4f32-aea0-ad580ba395ab", "sighting--96b80a4e-9e4b-4054-ab04-a41630ae7685", "sighting--f85e9f62-4810-4641-85c2-3bb662fec365", "sighting--ff6bbd86-8215-4483-af93-c587f561cb76", "sighting--a5ceeb49-1176-4d00-b334-22ceeeaea83c", "sighting--9709873d-d6d3-4fdf-b1aa-42620ac2bc8a", "sighting--2e6a705b-14b8-4c34-9a31-5bbc3dd4af03", "sighting--4d81b4cd-b20f-4afb-acde-b116c1901d26", "sighting--429db9a5-4dd0-4fb3-8786-3116943061d9", "sighting--a9904a50-73a5-4525-b43c-a775585ead63", "sighting--0ebbb8a9-4195-4728-8f70-96738e6e192c", "sighting--c3051742-88d0-4abd-9fe0-78bd87f2eed1", "sighting--b6332aa3-a29c-4aa5-a966-54d368188f50", "sighting--c8853121-b94b-47d5-8ab9-7104e0094dba", "sighting--7e4585b4-5117-4a00-8493-61c987995e28", "sighting--43538cd8-22ce-4496-8c9f-8afdc7a6925b", "sighting--8267719d-ff7b-4073-925a-481f27627cd7", "sighting--50230fea-2fa3-4bb8-aab9-b5fb7586c2a3", "sighting--c2b9b173-81f9-45b9-8bf3-ea759b4d324e", "sighting--caa63a96-033d-4d59-854b-42dce871a119", "sighting--a3959384-09ac-49af-982c-83a59d29294b", "sighting--34638771-dabb-4a50-b465-5b2ec95ae2d6", "sighting--92b9275e-7b7b-4344-ac5f-cfbf924fd091", "sighting--6b89d171-9aa4-4490-963d-2add388f42db", "sighting--b2734294-18b2-4327-9c39-9015ef74b9c7", "sighting--9190baf1-4b6c-4f3c-8593-ba6ec048853f", "sighting--f7ab6ef1-77d8-4a8e-a311-9409166481e2", "sighting--b5b59e4b-d488-41a0-8fd1-e45fdb81d6f4", "sighting--2b254da9-5472-4ac7-a224-d8a582050224", "sighting--c808cbdc-4519-4d9c-8e49-759b6bc7fd45", "sighting--4f2d0bf6-d392-4233-8632-d683c7514a25", "sighting--7ff1981a-e753-43fb-80d2-16650228a790", "sighting--2682d224-a08f-4396-acb0-9d46d8bf30c5", "sighting--8be0ac5f-a814-42fd-ad2a-215fa1f3e6d9", "sighting--559e4e99-5531-467a-a1b7-7f3715d06c85", "sighting--3d671b2b-0fa9-470d-b6a6-d66bd90eb3c6", "sighting--d12a1acf-3536-4fd1-9494-140a80f752de", "sighting--fcf72046-3a3d-45a9-8d37-0071dde6f2d0", "sighting--c8f9784b-bdb1-4637-9f38-d0b0f557dd11", "sighting--61f71bd4-53f5-43b3-b5b8-301e5a7c3549", "sighting--a382c28f-a55d-4262-8592-8eaac39e6f62", "sighting--0a1baa19-43cb-491f-b729-4a2b31dd6036", "sighting--4a500a09-bf9c-496e-a37c-aa36b9addfdf", "sighting--e97f740a-ae69-48d5-b7c2-96926dba83c2", "sighting--c2b6ee9d-d0be-4ebc-801f-98ed3f276946", "sighting--3ec7180d-8350-43bc-9cb4-6f5c5f9b25ce", "sighting--9cd2f3df-f4ba-4431-aee9-d020436d324f", "sighting--edda91ba-071d-4d82-a8bf-f0dfb0ff1e4f", "sighting--8737bb24-bd62-487f-bf90-e5fff6fb7f54", "sighting--e9a6473c-b2f6-4104-b3cc-d4b0e4a68aee", "sighting--12de0c6b-d0be-45fb-8996-4573358ed07e", "sighting--b470c93b-d80e-4b57-90a4-83e179b6dae6", "sighting--9d74b64b-1afb-4fa1-95b2-d89a79fea2fd", "sighting--fe24fe60-cc0d-4b2a-b410-0df19e8622b5", "sighting--10709187-556e-4d20-be66-4c455a988779", "sighting--03e44f5e-add4-4161-a040-049205eb0b12", "sighting--d44a26cb-7eed-4866-b21e-c2781dfb848b", "sighting--7278db54-17ae-4da4-812a-2111b94387b1", "sighting--70513997-3391-411c-a7d0-a4f4804c648d", "sighting--7a669d19-bb15-4e28-ac80-04380bf890ac", "sighting--80a742df-562a-4ffa-aa6a-3affe6f6facb", "sighting--83c9b4b1-e911-42dc-9547-c2e9abd87db9", "sighting--e9c4442c-815b-4864-b958-8328e28ecbef", "sighting--7f0e28af-b58d-465f-8723-0d7895de2936", "sighting--9d6d08a6-5ed9-495d-849a-0af506282033", "sighting--754d9456-1a96-4ed8-8b67-81d35e7a2c53", "sighting--ed5e80d4-f983-4353-b4b1-3b8fda0b6d03", "sighting--fafbd0c3-0e0c-4bd6-b12c-a0f2a559772c", "sighting--4558eaf3-1a14-4efe-9c59-d38d488a2dbf", "sighting--afc2100d-9ded-4b09-a152-1028ffa50a05", "sighting--feaf089c-862a-4bf1-876f-429c73e3ba52", "sighting--848e6b15-c9c5-4451-917f-b00d86671b4b", "sighting--b96d816a-874a-4b93-958d-c6f2d927fef7", "sighting--dab52c75-ff9f-4266-92c7-9811a9fab3d2", "sighting--885fca1e-7d10-4b5c-8af8-907cc94fe0dd", "sighting--adc7f7af-6b37-4827-a9c7-a56ba70b319a", "sighting--87289b6e-67f7-4af1-82ee-c1812f591f50", "sighting--467b4be6-e9f5-469a-b776-35643ec88b4d", "sighting--4b520d31-0175-4af4-818d-3adc4c4597d6", "sighting--8b8c434e-a872-406b-81d0-c28123c13f16", "sighting--5f8e2e01-c7f3-4a4e-a9bb-33248d518046", "sighting--b0ef83f8-b8ba-4ae7-8a33-4031dce1394c", "sighting--b200150f-92c1-4a5e-badd-7f3057300d43", "sighting--ecd188de-d504-400f-8be7-c735be0aa3ca", "sighting--d46f43ed-3829-411d-a3f9-7004989b2987", "sighting--201edde2-3f97-46c2-91da-06cf08fe2457", "sighting--9c182ba0-b6f1-4424-8204-33214d5b55c8", "sighting--a8e22a76-9aae-442b-a71d-33d2d831d1cd", "sighting--35e8d4b7-a4b5-420a-8b32-77194dae32ed", "sighting--e8fe325a-3360-42f7-9e52-67f7fc1a67d1", "sighting--d3d66e61-2d9b-447e-8196-a4fba2767bc8", "sighting--09bd1e30-25f7-452b-9bf4-36d36cff698e", "sighting--eb206fac-00e9-44cd-8e1b-09d5c082b61e", "sighting--aa17e821-9792-4703-8174-7e5f3509506f", "sighting--acc08fec-052b-43b4-a145-4652543b2228", "sighting--f9983a74-eeb0-4f76-91ee-1e7ecb7b4ce3", "sighting--1fb64dc5-e14f-4bfc-be41-292898bf5c7f", "sighting--d4f623dc-1a2a-4c4e-a22b-d3b7abc655f1", "sighting--ab417376-ca88-451d-9f13-56834caf7c79", "sighting--26fb7df5-0961-43bc-8f86-b773453689f0", "sighting--ef6f105d-4db1-42cf-b23a-b486092383b2", "sighting--6704194f-448a-43d1-a3af-01d42f5809c4", "sighting--0c3b2280-8ff7-4e5b-81cc-c6bfdbbd41b4", "sighting--51c0b2c8-5ee6-4741-ab5d-77fba1a564cc", "sighting--62e5e654-0ba4-4def-9b99-3df4290f176a", "sighting--c468ce35-7fb5-4733-8236-df3dfbac093d", "sighting--5261d3f9-9523-4133-bd8b-421a30bf65cc", "sighting--f540a0b9-22c0-4c1c-9c17-5eeb63209a54", "sighting--e226d5f4-1015-4cc4-92f0-ec2de288e5fe", "sighting--d704bae2-26a8-4cae-91de-8853f3573d94", "sighting--5210b6a2-b475-40c6-b316-2683497ec687", "sighting--e171d116-03f2-4bf7-a5df-9e08e630346a", "sighting--51e01426-a86b-41c7-94c7-9f1ed7e8f9b7", "sighting--4033da4c-7304-49e0-8cb7-a6a32d561fd0", "sighting--d8b97d78-bb44-40e8-a94d-dc0dbb60d207", "sighting--d8802298-d669-4eb1-b543-915b54ec5c46", "sighting--2f194967-c670-40b2-939c-5400e92a98e9", "sighting--15c06519-2f80-4437-b7e4-b7df08cdc6fb", "sighting--0bcddff1-5b68-4a7c-8b54-44d6237b35d6", "sighting--4e9134d8-b3f4-48ad-9e53-c10ac508b926", "sighting--38231c5a-41b5-4d74-8256-d73ada95a8c9", "sighting--da5001e8-aba9-4251-a97e-3720af495163", "sighting--354b15c3-7da8-44ef-abce-485de6bca91f", "sighting--532238da-f65d-449e-b214-7684f0414693", "sighting--1dd0454f-82c5-48cd-9550-4b6939110912", "sighting--8ed33f91-a6c1-43a8-a1e5-20d72beccb71", "sighting--fc92d03d-a341-4a5f-8f6c-8dd15e754a9c", "sighting--ef3c68c8-5333-40b9-8d40-3be78569f0d7", "sighting--fe4f006f-15b5-4e9d-91a1-1f3e89625f40", "sighting--5203aecd-4767-47a5-b88c-1b31b8c2c693", "sighting--84cff868-ad5f-49af-9513-8861c123d44b", "sighting--0882b837-e10c-4e9d-ad28-1839daac5641", "sighting--45cdb4cb-5aa0-4e9d-b225-489d5fed05bb", "sighting--763c9c79-7c04-4a96-8725-48327b1088b7", "sighting--5d472b56-54f7-480e-bf3d-c4cf20135371", "sighting--1a824db0-8db5-475b-9ee6-bdb814dded13", "sighting--3212e027-975c-4b2f-8fae-25ae18830cca", "sighting--323a9099-0731-44d5-a6b2-3c2bab231489", "sighting--7acc4d53-5a94-4341-83dc-ac9f9772de5e", "sighting--b10027ec-6d10-4fa2-97f0-ccdb72587dc0", "sighting--781e2d80-4c2b-493c-8470-c514874ecd50", "sighting--cd7a56bd-8eea-43f9-ada0-a2073bbea4db", "sighting--4126f64a-8318-4344-810a-9c61434cab55", "sighting--317391c6-2a8b-4ea3-ad97-7966a61f5314", "sighting--9125cdfe-2b42-475c-80a8-8e0e223ea0a2", "sighting--e2583ed5-100a-42ae-9cdf-aa67ff599e79", "sighting--7b8cac91-5915-4e8e-b95d-6ae3451207c5", "sighting--cc78cf3f-fdb6-4f24-92fe-2cfd0c82810d", "sighting--2f40fc78-d767-4d10-9689-608e35210a58", "sighting--b9f240dd-0386-475b-acfe-89c440f12ebe", "sighting--3306744c-2d39-47ef-8059-aa8bb13cffa8", "sighting--9b22cca8-567f-47ad-85c7-51db86e723aa", "sighting--cdb4a9d2-f1d7-414a-b866-7804b7936517", "sighting--5999f20e-6167-428a-a926-699167e03307", "sighting--5af1cc58-fa3b-4b7b-a33d-7e7f4d9a7749", "sighting--43123c56-aa17-4003-a222-811ac8bb2d30", "sighting--b67cb3df-5499-45e9-9870-b46e9a310a27", "sighting--7551e02d-9b53-4096-be6f-6fd66303a6d9", "sighting--bb9db069-3711-4e27-ade4-c7e55a7bba18", "sighting--d98b2268-5c91-4d08-84f0-6bd1622500cf", "sighting--f2d25dd6-c2c2-4afa-890e-827bc2552cbd", "sighting--6a424333-e26f-4416-af9a-ad0055cd0a1f", "sighting--380a001e-4f65-40e4-aeed-a991eeafeb05", "sighting--a7dab530-b6dc-427f-a400-b85709615c30", "sighting--e9255ee4-9b88-4e7e-b8a1-92ee4e43d864", "sighting--f34ad6bf-e2bb-40e3-838c-6e849d02844a", "sighting--76e80dbb-7abb-4531-9fb1-ffe5e3925931", "sighting--d0156406-1753-484e-89f4-1f36e21e797e", "sighting--c64f4c90-c8f7-4c20-afd1-7f08d0526db0", "sighting--92c1f15b-9691-4687-9ebd-bdd3e0c2d438", "sighting--650c299c-8154-4c05-8d50-0c7bc6ad0a31", "sighting--9c9b6a87-2268-4c96-8188-0116857291b5", "sighting--b102fa1f-9987-46d2-813b-37f6cbc11d5a", "sighting--e2eace20-c1e9-4e13-90db-1afb8be6329e", "sighting--11f7eef7-3e7a-425b-be35-37e38546804d", "sighting--2781b1d9-cdc4-4397-a58d-9d111c1251b3", "sighting--3347d38c-6cb2-4af7-8fc5-c814e1f016a5", "sighting--467c567a-a48d-441c-b009-8541f454b985", "sighting--b20d6835-78da-4f0e-94fc-b104e145f714", "sighting--1fcb283d-da2d-44d9-9cfb-eb360b99f78d", "sighting--2e9dac39-fc66-4501-8f4f-661b3b20c946", "sighting--6ed186c3-b3cb-4bf2-9ab1-6d911de573e0", "sighting--d059baef-d36a-48ba-934f-1ffa3e90111b", "sighting--d75f945c-1513-4096-8d40-ced123480426", "sighting--b03b7a16-917d-4cab-bdd6-83d7c0ad1359", "sighting--c2c001bf-a8ed-4f8e-be48-1a27e09e557e", "sighting--a09082b0-ef76-41a2-93bc-e0eb55154891", "sighting--f28231ae-b7d4-4137-9984-88e27ad81e39", "sighting--ce55a63b-19b5-4dc3-8829-3178a298b4ea", "sighting--2126e526-0bc6-419a-affd-6d47faf9a86b", "sighting--68ad788b-518a-49e1-87cf-7e45c58bd388", "sighting--e7260f77-8f72-4bc9-936e-8ed7b72bbb2a", "sighting--d6b90d75-5f60-46b0-a572-45e4605f5516", "sighting--b1d68cce-cbe5-4fba-83dc-73f17444d1c5", "sighting--e492d0f8-1a02-4254-870c-c2a5e893cf2a", "sighting--c394eb3c-6236-444a-8566-6a12037a08c0", "sighting--cd8aea9b-97db-4897-8ce7-11ad28dc3da3", "sighting--d18a7f7f-f69c-4a67-a2c3-a92d107733a6", "sighting--ba7a15ae-b6b1-487d-88c7-02934773649b", "sighting--16de887e-44ce-40fb-8d15-276a4d4e563b", "sighting--acfd51a1-9ccf-4793-912f-ffe098897f8f", "sighting--fc1894cc-b6ae-47d6-a6e0-0268b1e9023f", "sighting--b63cb8c0-9408-4da6-9636-f9043f529d3a", "sighting--3bae5c41-c614-4b93-bcd8-c52003ddee98", "sighting--7ec3a767-81df-4101-b6ad-5ccedbad6585", "sighting--59393a0f-6eaa-4b50-85ef-64c1ac90ce7f", "sighting--96fad981-c7d3-4f90-9710-9122c07a7d75", "sighting--eee5785b-2c23-4ee9-b379-4ce8902a2dc7", "sighting--9c043ed7-dcc1-48d1-8461-e2b8dbe3e43e", "sighting--4efcd832-d859-4801-9efe-11ea4d66b3cf", "sighting--5ce0c7b2-a7f2-4a51-bda2-e6f921cd5362", "sighting--4ba7024e-e5ee-4c8b-80a7-03b9dc3699d3", "sighting--086b5635-1e5d-4dfc-9833-231c9687f3f4", "sighting--cca1a12b-b8b3-4c38-b518-f274026157e2", "sighting--f575a159-fa3c-4ad6-9507-cc4781203248", "sighting--aa899ba8-2e85-42b9-9d12-0a0f4f35789e", "sighting--893b0098-e0c5-4555-a276-de81799eb82b", "sighting--229a6a02-f36b-487a-9b68-364a9e0d6cd6", "sighting--ec520de2-c63d-4c21-8d76-2f5047cb52f8", "sighting--a80f67c4-6458-42ce-8cb2-b877a8b4b135", "sighting--efaaa1c8-54b5-4fba-9cea-8ad188948164", "sighting--f0145ba3-09e0-42a5-b2b9-73e756b5ff71", "sighting--bd37ab52-2935-4205-a40e-ac8d56050b13", "sighting--2995a7e0-6e08-4066-b263-ffde1b4c0704", "sighting--07e3e716-a18a-4bbd-b9da-015f72511d09", "sighting--1b586fba-baa1-40eb-a33c-a50b9219d83a", "sighting--12d8fc27-86e0-4f4a-8af8-081e29456913", "sighting--7a6da588-a549-4862-b948-64bc1463cc33", "sighting--c64b99e9-2262-473d-b66d-e16e9a1c1fa7", "sighting--36b82efc-513f-4276-b529-1dae429d631d", "sighting--1b2b0840-5ec5-447e-94dc-c755cfb99833", "sighting--7bbbca84-a475-45d9-b9bf-3d338f31a0f7", "sighting--0e271df6-9e3c-4388-8c58-25c66fd476b3", "sighting--d41f3a15-498c-4b58-b897-2f17b829743e", "sighting--97f6c05d-dab1-494e-9619-c83eef2147d8", "sighting--e3644da3-2198-4265-8459-04af8948adb9", "sighting--b494c6e8-e748-4995-81e1-2515f4da5d84", "sighting--fd147ff9-3591-4cac-aaf1-aa3b08d61836", "sighting--92f146e0-4bdf-42b3-9d93-59c75cd990d5", "sighting--8aacd349-d558-4607-9d0b-75a729b4bdf4", "sighting--b5ed87ae-4bc7-43bf-b0a6-2923530ba7c9", "sighting--781c2d52-adc8-495e-a1b4-80936fd3656e", "sighting--6755c4fc-b6c8-45da-af91-0c0d798da4f6", "sighting--c3a7a1bd-12e9-47c3-b5b5-eb36b5133ced", "sighting--c7c6ab0e-ce51-45bd-b4c8-1c7aad1de279", "sighting--d7a3d69b-c91d-45c2-a7a5-27446fcc83b0", "sighting--88026e55-dbbb-4352-be51-c78f4f962543", "sighting--754310ee-ce4a-40d8-94ee-1af0807b2aa4", "sighting--5021cca2-e950-46f1-bdcf-eca55862922d", "sighting--e705164c-84ea-4f21-b557-c892516cff1a", "sighting--6970619b-ec8b-44fe-839c-a70a64e4ba73", "sighting--069b861c-dece-4228-9c44-b70072e36af2", "sighting--1488aa71-d7dc-4ff5-8577-08dff2deb03b", "sighting--0d0e1419-550f-4f3d-b17d-d64d0d286f9c", "sighting--0f90dfa5-b9c1-4c77-8199-5210efcef045", "sighting--8d0710e6-3b15-45f8-ba29-1a1fa1d0a30f", "sighting--ae4c583c-8c0c-42ba-b924-5f110ceb59af", "sighting--951b17d2-1f67-42f6-bc91-c6392631ff26", "sighting--60029af7-722d-4fea-b2af-818f4e6679a3", "sighting--68da2181-e76d-4174-b9da-54fdf1b9a96f", "sighting--2078ee27-bfcc-4ec9-9ded-c74a67839633", "sighting--bb6b4e27-1529-484d-89b1-620a81bb0acb", "sighting--4e4375ac-60e7-46f1-bce3-6be6e213ab53", "sighting--2a300e1c-1958-43c2-a531-2a5aac6da919", "sighting--f05f10c9-2ebb-4a5f-8451-b188c5ad4121", "sighting--bbf7edf2-ff84-4b0f-a439-70ea2fd53d97", "sighting--510457f3-dca3-41b6-ac18-e9b568908fb5", "sighting--95bd8821-8b5b-4e97-8267-aac90b468511", "sighting--0a712ce0-f01d-4879-a512-f645fd73a429", "sighting--4241c87f-d1de-4ee6-8d60-e6471644dcc7", "sighting--0ca202f5-7b53-4ad2-8770-2220b2e10353", "sighting--78bfdcbd-7ee4-4d82-82a2-d59712aa8c34", "sighting--12ffa76f-3a25-406d-80e8-695118ac16eb", "sighting--ee72a566-278b-4c09-9503-625842a8a978", "sighting--a42725aa-aedc-4d1a-831e-a61c4af8a0e5", "sighting--4e91bcb1-24ce-42cd-8b09-a03b92b11cd0", "sighting--e684de96-869d-43cb-8c6f-1db1b360a022", "sighting--9adcd06f-39c7-4f89-ba60-05d073191bb2", "sighting--2496d7a9-17fc-4fdc-8ad7-74463f513a62", "sighting--8762b08d-252b-47a8-b24e-7e608bd1fdcd", "sighting--c0d16061-128f-494f-b54c-2133d1c77f3d", "sighting--f2d3c3c9-9d3c-4263-ad79-afd25c3cbe27", "sighting--aab7a6ad-54c2-4a94-a161-f558a49a95a3", "sighting--c26f5251-4e46-47d8-a020-dbcc885f4c0e", "sighting--84f38e9c-004d-4e96-834e-90d4ada517db", "sighting--d590e893-57de-4a5b-a9b6-4079a4193557", "sighting--c32db0ce-30c8-4f7d-808c-489dee9874a4", "sighting--27016131-edf8-4ced-8c81-342358f21dc9", "sighting--9ed2a997-1071-4900-aac2-55c44b3eebf5", "sighting--c31675ae-42eb-4c83-83f5-3846e94823bf", "sighting--af137aa4-f36a-4e23-9263-b8d463a1aa9a", "sighting--d909839e-e8ff-4a65-99c8-164cfef2315a", "sighting--e9a430c9-4669-42f6-a9c4-1e7c4f3d4989", "sighting--10a36c9b-83b1-422f-8a51-caf9c7a1e592", "sighting--a03d4f0f-c390-4896-a5c8-e8d31467c759", "sighting--db1060f2-5e83-4fe8-aca1-7c2018e38a56", "sighting--f16c1526-d95a-4d57-99fe-f39831625e85", "sighting--ce5222f3-ef88-481d-8988-8770d1850400", "sighting--a5821d96-1d5b-4af3-8009-8560ae2432ea", "sighting--e6e3c88f-a945-43c2-8c07-0176aa42fcbe", "sighting--b4fba8b7-bcde-4982-97db-559d74e3165c", "sighting--09835425-b4bf-41b1-b65b-089b0d7b903a", "sighting--5ba008cb-c514-45ad-b58a-608927d0d774", "sighting--c5b7db18-9493-4e25-8e42-cc29d323c7fc", "sighting--0ec3494c-06b8-4e23-ad9d-2824dccaaced", "sighting--45cb06f5-5e3a-413f-aba6-f37443442859", "sighting--e7fece35-af22-4125-b070-0dc9acac058c", "sighting--8d66f470-389a-4709-a4a6-189945a32a92", "sighting--ebf034fd-18b4-4efd-8552-b4f1068b0b5d", "sighting--f5a5708b-dff9-4bff-9403-527096e74e6a", "sighting--c906f373-fab7-4ad2-96f3-ec01435b7ba9", "sighting--1686ead2-810b-4460-91b1-ccb41f180bc0", "sighting--6141e391-b9a1-4307-86ae-ad72fdcdb66c", "sighting--da94d46c-0b36-44e8-91e8-d23c76eeabb5", "sighting--e4aff666-9bcc-4df5-ac78-7b31200fe904", "sighting--3bbd830c-2b44-4a7b-83e8-9a8a7e098a5b", "sighting--d5f2113e-03cd-4e11-bf56-7d5865bbb089", "sighting--596da615-9df2-4ab8-a3ec-290123bd35d9", "sighting--483366cc-6d97-437d-814f-fdf73ad63560", "sighting--d9f7f25b-2b52-4331-8069-3b1a75bd3f6d", "sighting--ceb0a4c6-33cb-430c-bb50-e8bd8342482f", "sighting--646802d8-11be-4813-b304-129c71385c85", "sighting--46f9e12d-c542-40a3-a635-b862cdfc672c", "sighting--6de68818-5914-4f92-a0a9-1d9e3aa333c8", "sighting--0979c3a4-aab1-46bf-bda3-3b15a206ad75", "sighting--fa5ec01b-2ba4-49d8-aaa2-e9599a91e009", "sighting--3dec135d-4269-4815-976b-adc1670e34f4", "sighting--d75ffaa0-4d1e-4669-b18c-92317b2fd9e0", "sighting--e33799b9-1b7d-4a96-9856-22be6c544bee", "sighting--76f5ddd9-5613-4e2c-9b76-9c0602feb097", "sighting--875d6ae9-9d04-4376-a9bd-456b4020602b", "sighting--e182b076-1108-4cfe-bf5d-5044e8837a27", "sighting--8bac1933-7cd3-4b3e-841f-06d5704661b1", "sighting--4e84ae4c-a109-4846-b579-77eebc94037d", "sighting--2dbe91ef-78d7-46dc-901d-75e8f4c695cd", "sighting--6d5d0da1-9324-4a95-92c5-81a48faa4e67", "sighting--cdad7015-ab2b-45e4-9b83-df3164770f3d", "sighting--848a1838-5847-49da-a50f-77d0c0953a75", "sighting--976f9a2c-c968-4424-9094-c3c2fce4cd64", "sighting--4d08fdf4-59c9-41c5-b880-8faeb41670a0", "sighting--a04bd6b2-a5ad-4b58-bbf3-e2d022252bf9", "sighting--4d5a6a74-e4e0-4fe8-8806-24a97552e7d9", "sighting--a63ab636-c9a5-4cd2-8b05-e1f67d56096c", "sighting--3380432a-36f4-4839-aa90-dfcdd37f9945", "sighting--23be337e-e37a-408c-a6b1-a10de5a674d3", "sighting--4ecca3ab-109a-46e1-9d32-a57045ed572d", "sighting--78991917-06b7-4707-a446-b7c8a0a01597", "sighting--bb94bd7d-dbde-4333-8564-cd5ab9b9d201", "sighting--78f171c2-c4a5-4ac2-80c3-5d5817acdd6f", "sighting--5a614622-ef48-4b7a-8228-16c468f41c07", "sighting--e9b8df06-0455-4dc3-a9dd-07fd38925dcd", "sighting--b058efbd-fba3-4a74-812f-156ff1e0c348", "sighting--6ef108f0-6b3b-48bc-b23a-3c216e621320", "sighting--b4e7cd76-d726-4df0-99c5-33465f9d2701", "sighting--b496dedf-44c6-4683-b004-b3fcee6b3dfa", "sighting--a7b046dc-64e9-4d7c-926a-a49ef9db3982", "sighting--33c685dc-0fc4-411d-941f-22bf3de09e4b", "sighting--53f4d8f8-b144-4601-8613-588caaf44b5b", "sighting--68cc5d1c-c244-4474-a44b-9c5de3a0370a", "sighting--0385029f-64ae-4612-9b7f-10019e71d489", "sighting--6b4b015b-cf15-4f61-8805-eb3041a5e3aa", "sighting--dc42d1fa-8bc5-43eb-80bd-c184505f25ee", "sighting--12ad731c-dc7f-49da-8f42-56ee43d3003a", "sighting--09df2b96-20f2-4d45-8075-aaf43dbc66f2", "sighting--5ac41a67-953a-44a7-9f67-d36e570d5044", "sighting--439ea686-7208-4c3c-baca-fa982334fc7c", "sighting--ca7f5bfc-4802-4f82-9581-585c7935bcc6", "sighting--0f8b067f-1053-4307-b1b8-3e3cb49c50ef", "sighting--92af79bc-474b-4f0a-b968-e8f45359efc9", "sighting--a22b4ff6-3248-45ba-9cab-95697450d9a3", "sighting--ebfdecd4-43b3-4f10-9338-70ea107fca39", "sighting--5adf4539-eada-429d-9aa2-96d03d6a570e", "sighting--f8bb6bc1-2fac-4fb6-93b9-51e2ebf49dda", "sighting--a7525441-6245-4d01-ab21-48f72d06c01a", "sighting--9bcf1d84-0db9-4f30-b780-61063b4a596d", "sighting--173d736e-8278-49c3-a8c7-053578ea3d71", "sighting--2cc2e181-cac0-4252-a7e9-6644be4ca6a7", "sighting--f35ab562-a439-4ab1-b066-0e919debe4a2", "sighting--34770cbd-1c08-4917-9523-698e212d6407", "sighting--fda2b10e-cd04-4a11-beb6-7c66f88b9f42", "sighting--9e8ce8e7-66d3-4781-b0dc-aa044b3c0a54", "sighting--21d1bb7d-06c4-4814-b4ce-73a51c1f7dfd", "sighting--5b66a065-d7c8-4a5b-8fff-6d8e749f0454", "sighting--51b800df-ea7d-4de0-b9de-80fdd27d2c91", "sighting--b47b4de3-32fc-461a-8630-12e58dd6f5b9", "sighting--b0a7a6bd-618e-4dd2-b2ae-baa2291623bd", "sighting--68a8ec4d-e50e-4cee-ab07-b8f58a706490", "sighting--44b75078-4825-4235-86d7-23d74d486af0", "sighting--0e67da29-5ffa-4f10-bb82-eb8acb1a5f9f", "sighting--ad8c70e8-a046-40c4-96d1-15f8d62617c5", "sighting--4767efa4-645e-48fa-a952-01ad965d7f86", "sighting--edaded50-6fbc-4ddc-a5eb-4287098e9a68", "sighting--1ad85fa6-c467-4811-b9f2-0774df41e9b1", "sighting--e13ae412-49bf-489f-996c-a69667856100", "sighting--83a667ba-a16d-4d9e-af26-da3a1a43ef47", "sighting--1c6031d2-d26e-428c-a502-44c173afe518", "sighting--a04e2e8f-5e29-4c77-a7d1-8988902e56b0", "sighting--5c0fd744-99fe-45af-87e5-d5816230ad64", "sighting--672b77fe-7ca7-445f-aaa2-2e40739e5ad1", "sighting--754870d2-dc24-4628-8697-572015c13147", "sighting--e4f7ec9f-232a-48e1-8606-7339faf2541e", "sighting--69cdca93-bb4b-4724-936c-b331fb0edd96", "sighting--d1f23169-7eea-4b8c-a332-b86bede1cd70", "sighting--63cab801-c7e3-4ee1-8864-17836bb399fc", "sighting--8261a752-0de7-45d5-83a7-d157d77b121b", "sighting--65f37340-c0fa-427b-b41b-40921a08e1a1", "sighting--0a4833eb-bc92-45fa-bf7c-815c9a1b3d0b", "sighting--cae62267-a89b-4155-8483-2c6de4e77304", "sighting--82e48f32-f88e-451b-85d1-a6121e947df9", "sighting--9efab2e8-7caf-4d8d-ad7f-23032c32eb85", "sighting--84717b68-273e-4c97-bd3d-313ff22a98bf", "sighting--5d502fb9-5451-415f-bdaa-ed5839e18a6c", "sighting--c1527103-576e-4dfd-b1d7-1682eaaebba3", "sighting--f11282b2-418d-4f51-837a-8bf70c955ab5", "sighting--25d58cba-b397-43d5-abd0-0d5b3567cbaa", "sighting--bc871b97-e6e6-4108-b2ee-ac8e3a7d269a", "sighting--2f411a71-33ad-4d61-9ca4-78a69e92aeed", "sighting--693775dd-f349-4ea7-b34d-a622aee88f8e", "sighting--1f882ea5-3783-4d80-9d92-08197ed68688", "sighting--e3e60081-ff41-4dae-924b-86de30ef7f96", "sighting--04bf45e3-69b6-43a5-9696-b25f8b51bd2c", "sighting--b5a0e1df-3397-41f9-8cef-b86b00345584", "sighting--c2e8578a-f7ba-48aa-b482-fab070c11f1a", "sighting--00973010-f3ee-4ac4-96b2-4fa4ba1af35f", "sighting--ca3a1526-ec2b-4a99-9725-6cd631abbf14", "sighting--3f62f8c0-5c98-4da0-88b3-f16d784520fa", "sighting--0770d386-4a4b-4315-822c-d46143625fa8", "sighting--c65de13c-f288-4c58-9490-f56672d7ca39", "sighting--9b1eb8f1-9e87-4127-9e16-5198e1cb78a3", "sighting--3274655f-a0ae-4d92-aeaf-05db624defac", "sighting--40cda0dc-f8a8-4724-b638-99169a46402e", "sighting--0d5785ff-9012-466e-a98c-9f3550a382d7", "sighting--21b63d03-020f-4896-9336-33dc1094def2", "sighting--241fa984-7365-48fa-960c-8e0b4eb8bc8f", "sighting--823d4f21-18f4-4835-8736-f8d731c99ef1", "sighting--e03d2b33-db68-48b8-bfc0-de7fcde226a8", "sighting--2e6bfc17-cf10-423e-be55-88cfd9b12de1", "sighting--cf45f318-c241-4cd7-9dc4-81f3de90fe67", "sighting--dd577f72-ef52-445e-9540-be084c4d16eb", "sighting--fa7282c6-09b7-4878-9154-e52020c19850", "sighting--7bb07d46-d4e2-477c-b24a-f96fd8f3c331", "sighting--02b96868-49d1-4574-80ea-5a602cb46ea0", "sighting--21ed69a6-a6cc-4828-bf72-5048de55d7cd", "sighting--01d2d8f4-4c9e-483c-81d9-d91432a30844", "sighting--7d59ccd3-3690-42be-90d4-01341da0c069", "sighting--00cfac13-4e5b-4ca8-9769-c80c31992642", "sighting--19097eae-6824-4dd4-ba2b-25df94f831a4", "sighting--444bf665-9a77-412e-948c-5c921f870b6b", "sighting--5a81baf4-e683-452b-9cde-a137ecd1bf22", "sighting--609c1c68-c454-426d-91a0-c5dec4ab52a2", "sighting--7838f12c-3622-49b2-9cda-f01f0a38b07d", "sighting--78a1a07e-37b0-4fbc-8de6-52dbb674ea57", "sighting--9518a21b-e2d6-499d-af76-1313ee74853c", "sighting--0dca90bf-50ff-49b9-870c-a1f1557ddefe", "sighting--c10f66b3-cf22-49cf-863f-cc6c088c8851", "sighting--1192cd4a-a0c3-43e4-875e-26d55bb1d4de", "sighting--df86ccc7-217f-4304-b8ca-b57d7d4a7d0b", "sighting--8fcb2fd4-32c8-4635-8512-0dc199b65d36", "sighting--b1553b80-4c02-4080-b70e-b4c45eded0c3", "sighting--823d61c7-859f-4755-800a-03716ae0be2f", "sighting--d7bd9287-78f5-490e-bde2-75b25ec367cc", "sighting--4c81cb7d-113a-4fb9-a8de-542857c5fd8a", "sighting--fab2e4fb-4ddf-4d30-b883-36af4301e335", "sighting--c9b088f8-15c3-4b5a-b25f-c7d11ef2b585", "sighting--49205daa-af81-4ef1-a6e3-52b5983d8644", "sighting--b43c7be1-3013-4b9b-9866-863a7a458970", "sighting--2b45250c-41f2-4bfc-9294-2f81f36c6c4c", "sighting--5b57852d-f4b6-445e-9e93-3e0e11a0f29c", "sighting--eabfaf42-e7fa-4ffa-891e-1b645dbf2149", "sighting--8f0f4fdb-9088-40b2-8fca-26c87466b3c9", "sighting--fc40e708-b0d8-4f57-87d2-6a759e73a6da", "sighting--03adc536-773e-471e-a486-ad5c8c374e81", "sighting--22cad3cf-59dc-4769-94ec-bfd8b4f00785", "sighting--954e7861-0410-482a-9d0d-faa65c741d1e", "sighting--5face04a-3524-46fc-b91e-653ab4921913", "sighting--cd13943a-1599-4c80-9a1d-16f6c639cb60", "sighting--5e90a019-9ce2-4b8c-aca2-f792f9482fd2", "sighting--948c0e97-3827-4259-9d7b-ba32516c3a0c", "sighting--64557561-e0d9-4e3d-af5e-be022332be24", "sighting--9abb8a39-9981-4233-b27c-7e64a79c3616", "sighting--151b5ced-9139-4224-bf89-b6d0fcc0755f", "sighting--1bda8eaa-e13b-4d5a-bb47-104d8448011e", "sighting--388a2cfd-c3e2-42ad-944c-ef8d858e0ea3", "sighting--8301729f-5bf4-4aeb-a268-cd4a7981c6d5", "sighting--b3dc071c-a8d2-44fe-8081-298590969c39", "sighting--b964b7ce-6b0b-4afe-a49f-7f9c74df9cc6", "sighting--b4140eb9-b3a4-4837-a10a-7297fcd46a6b", "sighting--4f2c47eb-56ed-4760-80bb-8647abacddbc", "sighting--e3a925f1-9e36-4578-9315-9d9fa6c73fb5", "sighting--5d28ec09-b6a7-4e36-b31c-5275b9009cc9", "sighting--c037c27a-053f-427a-b333-7baddbb9fbaf", "sighting--4fea03de-bb27-462f-9e22-6e202353cd2f", "sighting--f4bcf3ed-d07f-4b00-8343-23cfcf16d56a", "sighting--10313bbf-b03f-4a15-8cf7-de91a4fbb8d3", "sighting--fd1ee6ee-5a9e-4e07-b6a2-6ef298f3549f", "sighting--a9c67021-8672-4422-ae3b-28e5c1bb704e", "sighting--fbca2890-b1a3-4b7f-ba95-fd1c8c3adc65", "sighting--5e239bb9-c308-4b1d-94db-4b8ed6aee5d0", "sighting--6fc07321-d5a5-4424-85e7-0f0209846100", "sighting--43b750ac-bde8-4a39-a0a8-b52fc772162a", "sighting--3e0edff8-f746-44ac-b860-b8d8745772f8", "sighting--0ab654f6-453f-4372-9e19-dfb98fbac1e9", "sighting--f75ed7dd-6dcf-4f0e-af7b-5df18a320c55", "sighting--156d83b6-8547-4883-b53f-446202f1dd09", "sighting--bdec0802-7acd-47cf-8285-a3b22c4e9269", "sighting--12219e90-0d01-4f24-943c-3b54e395faef", "sighting--96b00c8c-bfb0-4c1a-9826-be52a30c611f", "sighting--fb9ac7b3-26f2-4401-994c-7e6e0dfbbbb4", "sighting--e1be298b-0425-4d19-9da5-70196c5cc706", "sighting--9e830fa0-a71f-4431-8433-0b0182e0d8ad", "sighting--9bce90c1-2c06-4e1c-93c2-6b2c684a41c2", "sighting--3db8e063-3698-4e20-be04-4401f359c814", "sighting--9baa1f58-07fa-4d59-9caf-19c8d569839d", "sighting--38b5a5a5-20ef-4c21-aa0f-89600a5177d8", "sighting--4e080795-c61b-458f-a437-7e619a994b26", "sighting--1a3defa7-e55a-483e-a9bf-89c7af38b635", "sighting--8610fb04-17f2-4905-8e09-0451c7caa2be", "sighting--64ce8235-7460-4afa-ada2-8cc70e5e295b", "sighting--809e84a4-0719-450a-bd26-760f0446967b", "sighting--283a7980-43c5-4a35-9d9b-1a8d430276db", "sighting--28430edb-a5f9-4aac-a6cd-721bcaf567d4", "sighting--be6cca08-2948-4080-9498-7cf6774cabb2", "sighting--e81d3def-4040-4f2a-aed8-7a888d6160f5", "sighting--b8ea99af-0b3f-493e-9ec6-3b4f8a2df0c0", "sighting--c2bc8ff8-1c10-4364-abf5-1989d1777495", "sighting--76a55a31-d861-44d8-8f72-d9f070f64c92", "sighting--dc84cb7c-4721-462d-aa90-2e5bdc0ac280", "sighting--98bcd601-fe0b-4c19-a1a0-5de7d6dafa8c", "sighting--0560ee2e-8f21-44c8-aa76-e3ae76b34790", "sighting--80f1ff42-6040-4ab6-b059-a30f91027997", "sighting--54ccc941-900b-402e-9e6e-44bdb4e3dfe1", "sighting--fa4fd089-b947-4b13-bd80-206b0f5f2bdd", "sighting--e23d2f09-9c85-4fbd-97d3-7e3ddb50c710", "sighting--a5935c9f-cd29-4534-9243-fd2de10a4f3a", "sighting--d64f59ab-75f2-49d1-b0f4-939ba12e7c05", "sighting--4b77b161-9946-44ad-98fb-f6a09b284fca", "sighting--b2c57fef-44c0-4ae3-b0e9-64e73ca5474b", "sighting--3a273bd8-1a16-4fa8-a7b5-6422cef56166", "sighting--0a12d0ea-893d-454b-9e99-6c0f55ce30b3", "sighting--16e64641-5c1d-47e3-a227-43c9d6b617c3", "sighting--f0213882-010b-4bd1-bbed-0ef17b4e5d7c", "sighting--fb4349b6-1955-4c5a-a7d3-87b81617a492", "sighting--1109ee53-7b75-4911-85ad-ceacbf96ded2", "sighting--25f8c945-ba98-410d-b2e2-45611e79fad0", "sighting--a9cb278a-6d58-430a-8bc7-3a140d93a04a", "sighting--0c50d8bc-c021-4809-8f4d-998633fc349c", "sighting--2a006827-3f85-4810-9281-b6e03f7a6322", "sighting--941c394b-260a-4c7c-b56b-1bdd9619e568", "sighting--569f1a3e-c6e1-47ec-8ed7-e61a696de0ee", "sighting--706ca562-0a3e-494e-9cbf-ff885f5746e3", "sighting--295d2658-94f5-44e1-b330-992c9a59cac8", "sighting--705980f7-c289-4de6-af7f-d83338ce80e3", "sighting--71b6998d-1c81-4815-88a1-bc008bd946ab", "sighting--16ec3ef5-3d05-4c90-94e9-123f58120ecd", "sighting--d17f40c1-20ae-42a9-b0b7-05181b0e40d8", "sighting--f511569e-a533-4576-8d30-092cfd0de178", "sighting--fe6198be-f57b-49a3-a8fe-9c3063870c67", "sighting--f1c18841-a524-4492-9593-e852744358bf", "sighting--a9be6a31-b767-46e1-baf2-058906b31b27", "sighting--c5f807f1-740d-4887-8138-1aadeb08b953", "sighting--60fccf3d-d10f-4d88-a5c1-ab93c19fba11", "sighting--411607d0-6a4f-4991-9b8e-581219848e7d", "sighting--aaf4ad67-5a68-47d5-b7f9-c7eb4b6d6f55", "sighting--647a482e-8dde-4664-8ee2-3ddbcc1e2c89", "sighting--f972707b-7a8b-40f9-bde9-64466d358770", "sighting--35aac2ea-1a33-4f33-8d4d-d986a12cbd2c", "sighting--856c7bcc-3ca4-4e09-8d11-c6e4297b8a32", "sighting--8eaec67f-6324-4201-b092-a061b3fc2021", "sighting--3760d2fe-2baf-40fb-87eb-d779cce554aa", "sighting--52b9a639-d98a-471a-8ee5-8d9092d2959b", "sighting--5fe5297c-6252-434d-887a-bfa61970f145", "sighting--541e3958-ca35-48ac-a540-eaf0806bad6b", "sighting--5bc5fe3a-c9ee-4494-970c-459cf0faec6b", "sighting--96c7cb3f-3dd0-4d4b-bff1-93901c1a84e1", "sighting--85eb4ad1-873e-4126-adb3-ba929ca72cc9", "sighting--86e995f3-ab8f-452e-9483-18aa319c9ac3", "sighting--533ed1a1-f51a-4deb-934a-2045007a669a", "sighting--76a8e74a-8217-4fcb-bf04-989837b299d3", "sighting--68497cd3-c6da-4042-8132-ed691761c070", "sighting--9f36791d-cccf-4065-9364-e798d00778e7", "sighting--90f84223-61e2-4db9-9ecb-3eccefda8fa4", "sighting--500a2e88-95b3-4660-8f20-1f1c41e0307a", "sighting--c2bf3960-8dbe-4b86-ac27-af1675239fd3", "sighting--f3c29463-dab7-4857-9d1d-55afac5b1da9", "sighting--d78c37e4-8961-44b1-9758-332c7587caab", "sighting--cc253f85-e09a-48fc-9192-7676666565e8", "sighting--5cef883f-5776-4722-8c2a-1f31f8179b01", "sighting--1805e412-5ab8-4372-b3fc-014c5112217e", "sighting--d44df163-aaf0-4648-a944-fdad159afcfa", "sighting--0ef43121-cbfb-4623-bb29-faa7a2cfa959", "sighting--4350a5d3-3a95-4044-a524-7e5414746ae6", "sighting--2960d7d4-184c-4c89-b408-cdf05cde9244", "sighting--f3b3ba82-e2bd-438f-836d-855cfba8fdee", "sighting--9178886e-3439-4700-a8ef-2e243dc38104", "sighting--b76687f3-eeaf-4df1-b9b8-8fc3be917441", "sighting--427eb3f8-fa15-49e6-aad7-58329eb0aabd", "sighting--5572cc15-d687-46c6-a71e-99dee752eb6d", "sighting--06b88564-4fc7-4cef-992b-33fe2fcb668f", "sighting--779caaae-1dc7-4212-8d5d-6b5aa62d78aa", "sighting--9fa6fabc-305c-40f1-883e-56e71b16f81a", "sighting--6ad4c3d9-6bea-457c-85cd-0add9ed4e536", "sighting--bf510ea2-63ab-4f74-aabb-48828f53ba4b", "sighting--b4f73ec0-d7c2-4efa-8ac1-c22b068796f4", "sighting--afa34c92-145d-48eb-b978-ed918a0a528a", "sighting--db992ba7-f3c1-47eb-a98b-d80dd7052a0b", "sighting--b5ec94c1-dabf-408a-a603-edca88fa13be", "sighting--4c509a32-9957-4f76-a7fb-01281da57330", "sighting--845cec00-c4e3-4b8c-b499-905d0064bf7b", "sighting--d4e3a4f8-d7a7-4e66-8de9-089e7194a2a5", "sighting--087de0d3-d176-4458-8cf6-b928bcc13c7b", "sighting--dedb5d6e-be30-473c-99c7-a15056a335b2", "sighting--957759be-9171-4102-8ea7-a68801ee486d", "sighting--f56b2b32-b7e4-481d-8287-fe150c77302d", "sighting--1ac699cf-7d4f-4d22-8dcd-5780e588d87f", "sighting--a424eba1-f03e-4d51-9186-14f3d58b04f5", "sighting--ec859413-e451-4cc4-8664-deb106ebc253", "sighting--81a09fc7-fddf-46f1-9440-83c11badb04f", "sighting--f6cb1a35-e14e-48e8-b15c-8b33cc12a537", "sighting--ebf4813c-119f-4a7e-8f77-8de6ff73b0f5", "sighting--326eac3d-7ae0-48bd-bd9e-45d5e4a04853", "sighting--7f7ee77d-dc24-48c8-82d5-fcf604aebc36", "sighting--fc85e0f7-9505-4bb8-8738-e5c07f398f0d", "sighting--13534e98-0575-4f1f-8c1b-3bfd92f4bf51", "sighting--92402ebd-17a8-4ad5-a70b-6b24ea1541c8", "sighting--b6ece53a-fe36-4506-9869-ded515315fc4", "sighting--797b378d-d764-48fb-9a9d-ed229d640013", "sighting--c3944cbd-59c4-46ba-88ff-8dc59a62b245", "sighting--db59ca1b-c66a-4e15-b1ab-720c896da339", "sighting--020e4d9b-caa0-4846-8875-c761ef579931", "sighting--02f0aced-b4ab-49d2-98aa-7079004b1b7f", "sighting--31a0d38d-732f-4544-af43-7fe3bd5bd5b8", "sighting--242410be-524a-4efd-a1ca-8333b9900ba8", "sighting--061b3f42-bfd9-4923-8107-43c5179edca5", "sighting--32132f4e-0108-4eef-8ff4-5e9093696c11", "sighting--aa398170-2fe1-4d0e-872f-ac471773fb8a", "sighting--7654d0f2-fa94-460f-b8aa-a056eb26c2f1", "sighting--0d2c96a0-cd6c-4d58-9295-137938b41297", "sighting--d7b12340-1565-4216-bd17-da77592a63f5", "sighting--e57db00d-691f-4395-972a-5cec1a9cfdd8", "sighting--ea56c8a7-4926-43fe-a984-c339299874a6", "sighting--0ee76d03-40bd-4b8c-9df4-75e5c95b20f5", "sighting--8736cb87-2f89-467d-ab27-b8fbd76a0caa", "sighting--1b7661e2-093a-4d54-b303-9a315295d245", "sighting--137bcd6e-770d-4837-8d01-e26faf6f256e", "sighting--87e0d539-449d-4079-8e80-230babf6598a", "sighting--eba0daaf-c012-4020-be93-b9640b21cbf7", "sighting--c148047a-59ce-4e7e-b535-8df0bc48acb1", "sighting--346ec2d7-7691-4d4e-819d-94c93a076742", "sighting--fcf05983-2696-42b5-b37b-5f8a4e63c724", "sighting--71d9aa1f-5d23-4243-bf37-6b5cda7b41cf", "sighting--9c94568a-fbd8-475f-bbb1-e4a6f9bfb4ad", "sighting--9b2f1468-dbd7-4e86-a2ce-d03469937962", "sighting--38f6b050-c75a-44b6-ac63-9632de651595", "sighting--9499e000-66b5-4828-bba3-4604611b2e62", "sighting--8b1ac5a2-ac3f-4f0d-b8a8-c972e2b840cf", "sighting--8b25e5bc-06a4-44d4-8776-ead999800716", "sighting--e8ac5603-3781-4cd3-bd35-b4651c5aed5f", "sighting--a5562ab4-72da-4326-ae56-a95cefe77fc6", "sighting--ed074d99-f5da-4380-882b-49bf535695d4", "sighting--44f5d103-61e4-4a26-a9b7-e646c206725a", "sighting--4d2dc0e9-7cfb-49c1-9e16-e9989318a17d", "sighting--66142199-2ad5-4164-8f96-19ed674683e9", "sighting--dc0e422f-cc3e-4534-8480-49f9c0b080b8", "sighting--5c4f38cb-d29a-4beb-b98e-276ceb6db99b", "sighting--3868f77a-bf78-46a0-a445-307f52c879e6", "sighting--0341a1b3-4703-498b-a620-f5aba4ee1a6c", "sighting--7c4c9f0f-e101-4be4-8eb4-5442bbdcff12", "sighting--3e3e7113-ec44-4d4e-987d-55dfe35b6818", "sighting--d7f7b8da-6bae-4d04-9639-3aed71aaeb26", "sighting--abd531aa-1c95-4888-ae8a-f5b3b858f5b5", "sighting--ed135263-05af-44d1-bd69-2ae9ff2caa75", "sighting--fa6c14d0-6658-47cb-a8ea-c458d57c629a", "sighting--339a1113-a236-4368-a2a5-27c0c7c4c221", "sighting--a3a91907-0851-4c24-94f2-a57153c54cb8", "sighting--e5ab1131-8387-45c1-a71e-a18d84ce6255", "sighting--35aef90e-ff0f-4658-9fbf-c328f1bf7bcc", "sighting--20de8965-e7e6-400b-b907-b5869c4ed7d6", "sighting--b123fe01-021a-4e63-b18f-fb2e842677d7", "sighting--5f9f174b-668a-4246-8756-df546286fb5f", "sighting--8e973e2a-98fc-4990-9d32-f621b52b48d8", "sighting--09cf7c48-e980-4ff2-8592-e2aa47bea2c8", "sighting--913d098a-5919-40ac-8cbf-f5e55f51025d", "sighting--7913ead4-c110-4bef-b420-68f8564af215", "sighting--403d2a7c-8e86-4bff-a107-834ffa1c6199", "sighting--b027df51-6dfe-45d0-9900-392b1bfa107b", "sighting--407124bb-b9ee-4e18-8f5d-640f9b086b08", "sighting--34c686b8-2f8d-4140-8684-5a2ab65fd81d", "sighting--e19ea502-3c39-4c59-8879-19661c62b9f7", "sighting--c8d06040-a9f6-4cc3-8ceb-21fc1679d9a8", "sighting--590cb4ae-02d0-4e0f-b922-354d664e765c", "sighting--87ff235d-a8f0-42bb-845b-220fdc06918a", "sighting--f246710a-ae65-4392-acb0-78e9025acef6", "sighting--4ca368d9-9a42-46b8-b486-76a21d8fc460", "sighting--6df263ef-45e6-4e4d-b3d3-0016bfd01122", "sighting--881833d6-b06c-4a46-9940-56d983036418", "sighting--e9c026bb-5238-47c0-9ba6-aa48ba62b7c8", "sighting--ce41248a-11b8-4647-aeae-4aff3139174b", "sighting--84c6612e-7aad-4d7a-9b92-15e00f7669c4", "sighting--9ea4653b-41ed-4c51-8e98-4196b9751fb0", "sighting--fcae3a83-cab4-413c-ae76-a3be3abcf163", "sighting--9e950479-1537-4f73-b62f-f0da907bed00", "sighting--f59f745a-c6fd-4074-87ba-ecb0be75c857", "sighting--a0299057-c4ab-4da7-ad0d-32930f1fe56f", "sighting--ecbf38e1-9678-45e9-b274-2eac4651cbf8", "sighting--b3c89e21-02f2-4176-bd06-5c01d00300bb", "sighting--f2d1844c-ad33-4861-84e2-125c3a57e5a6", "sighting--66823774-784d-4606-88f9-b345e27c8ba0", "sighting--418151ff-e2f2-4954-823a-de56934f2dc1", "sighting--049135a4-1eee-4ca1-9ed2-c8b42dd3b7df", "sighting--500c950c-f6b4-4fc9-b7e2-0cabd700a829", "sighting--2a177b02-15b2-4090-b5d3-aa2d13fac8ec", "sighting--ba34527e-3c02-4815-b626-569a6cdbb13b", "sighting--be9c6250-13ba-4527-8ffe-c7b9dabbb2a3", "sighting--b5b9dedc-7146-4698-802b-2403025a1c6d", "sighting--acc80c6a-743b-4be8-8fec-b5e9f8f0075d", "sighting--d58252d8-ea19-4795-87d4-a33bd22a835e", "sighting--162ba465-0c1f-4550-86bd-9a7803b664eb", "sighting--94d0f165-6ff7-4f02-a083-087fb226d950", "sighting--e63514d4-e53e-4fdc-b002-9351f0b99da7", "sighting--8b50ca2f-9753-46b0-bd58-047ef2a3630e", "sighting--b697bda4-0a15-4bed-a9c9-a83dba84b1ba", "sighting--f9c8c3c7-a922-4930-9442-3b1925af927b", "sighting--7e9b8033-d21b-4342-850c-00fe217c2d2d", "sighting--b4dff165-5e40-45e9-b2c3-06d8cf2221b7", "sighting--0844fb4b-e111-4e15-9418-6a6d13920265", "sighting--aad9a94b-dc75-4088-b967-f538f3fa2a5e", "sighting--3ba9c198-fbe6-4df1-a334-cba4a105a76b", "sighting--3f0aa5b1-05cf-43b6-ae99-5a7bca164f64", "sighting--c674b6cc-e495-4821-aaaf-a876e8dab67b", "sighting--e179f1dc-aa03-4482-8862-dc134697231c", "sighting--9ab2203e-1764-48d6-b9ac-3b2328484270", "sighting--982f71f8-66b2-4ae2-8fa5-3ee5a9dab47b", "sighting--00571a5a-8ccb-4789-a462-470faf34b841", "sighting--3ea08ab2-9f1d-4315-ba26-ebf4c69ca897", "sighting--5fe4b7c2-fe11-4cdc-8c6c-7f5734b43163", "sighting--7f6c2b32-5253-4093-85be-f30f888e0e1f", "sighting--ca36b366-5632-40f1-a823-970b9856e998", "sighting--cf153974-28b1-4cca-80b2-76c57ebd7197", "sighting--3b5ae8e6-e3db-461b-a2c2-02e8295f5c1e", "sighting--e1318821-3245-4461-a7ec-42260729fdbd", "sighting--17e244f7-7398-43e0-af43-a9570bc7384d", "sighting--afce5311-2adc-4594-9114-14b0683a5ebd", "sighting--57d275ea-164f-4aa3-86fd-45ba19c9091f", "sighting--69564dd0-18f5-4489-866a-10149704b2a6", "sighting--3c6a9cff-9ac6-4ae4-8d67-6881003a563e", "sighting--310f2fd9-efbd-4ab9-b4fa-474dd9454112", "sighting--0bdf4420-7162-4db7-9e38-4548e800a962", "sighting--13d76a85-4486-4074-8daf-94def1816d47", "sighting--ed1b8f14-2f89-4e2c-aa0b-4c5efc941a5f", "sighting--a2b924ed-587c-4ce4-8fee-ae852d38a02a", "sighting--0c949b72-05f4-4ba1-81fd-788f4ec377e7", "sighting--2a03df90-4d73-4250-9360-5080c8dc43a0", "sighting--94bf8c0a-ea21-4a5a-aa4e-644f22670215", "sighting--1bc258b4-c254-4934-aa8f-860a7af5e6b3", "sighting--5b105812-51ef-43ab-a0ab-e13dfa8eea03", "sighting--5cd12f48-bd99-4355-86f9-88488f91c552", "sighting--7c528712-358b-4465-9f94-b11c8b3a204a", "sighting--11e47cca-6dec-4307-aee0-066e4c8f620f", "sighting--e6393922-b544-429b-bd6d-d3eb1249d467", "sighting--76cdfe3f-0f33-4b06-8f7d-b39b80d9f540", "sighting--93474c00-adfc-4e9f-9160-f3e9ecc7c659", "sighting--e5863ab8-48c3-40a4-b740-2ed7145441a8", "sighting--71d887d0-7314-45d0-8232-d3cb9ae0b3ea", "sighting--82f0d22d-7f0a-4880-b8b6-6d87caba9d7b", "sighting--4acb2fcf-b001-4217-92d5-0168e8fd6750", "sighting--23e2ff6c-cf0a-40bf-9914-e988cd8ecc4e", "sighting--60baf332-9559-4adb-936d-45eef942e08a", "sighting--40253856-6708-42ec-8a19-b45a366a775c", "sighting--5116b786-8357-438f-acb3-49aff17dbde9", "sighting--67f377d1-75e6-49ac-8703-cd3155e32b68", "sighting--16fbe0ee-0763-438d-a148-ff64d18620f0", "sighting--e2374c7b-004e-4972-85d5-61919fe5370a", "sighting--957230ea-7972-4776-a1dc-7a90252e2940", "sighting--725689c3-f05a-4c89-9aa2-8964bf65c91e", "sighting--14d1fc2d-4e5b-4efb-bfe9-a54b04f34c39", "sighting--fe60390a-fea2-4bae-bb83-bae06c1e7054", "sighting--7e623bc6-9ee2-4ed0-9058-c01bfded7a91", "sighting--c8067f21-68bb-49cf-a363-5a3abebf53e1", "sighting--7b5e1d0d-9e06-497f-a9f9-30029fe8cc04", "sighting--28b0f247-d58c-4895-a367-51a8fe433663", "sighting--af16da94-b5d5-420b-b4c3-97937b3fcf7c", "sighting--103d683d-11e1-4d88-8dbf-a865a6c03806", "sighting--8e277f68-1e95-4d0b-a04b-dba22f7d1d8d", "sighting--86082bff-59e5-4582-90f4-71d73ac4dcad", "sighting--e1d20a71-4612-4b85-b8d8-53dd78720546", "sighting--537a95d2-13eb-404f-b654-d5d237f2c6e2", "sighting--37289edf-f483-44ac-b4b1-3890eb512bbc", "sighting--cfd9856f-22ac-4605-a1f1-ff553d17f6b1", "sighting--439fd5eb-b8b6-4015-8525-bc721b49b891", "sighting--0a14f5e8-de1b-4b40-b173-59076b0ef3a2", "sighting--c93aad87-f6a9-44ce-bd7d-2308554275b4", "sighting--3b4141e6-df5c-4012-8e7a-77305ba98c62", "sighting--0d5d3f6f-f0ee-4c58-92ec-fd9b51daa341", "sighting--95ac161a-1a73-4b1f-a418-35bbd1efd734", "sighting--d3527016-624a-485c-ba1c-02493eb76c8c", "sighting--6ecf876b-88bb-40f2-b2fb-7594255844ad", "sighting--a138f20e-c74e-47cf-ae60-acd214fb6549", "sighting--77089234-0733-4532-bab9-3c4e29c90f3b", "sighting--d578bfa2-d57a-4bdb-92ef-22f80c551a14", "sighting--cdce8eca-9ca5-49fd-94e1-221c3d85d3c5", "sighting--7dd177be-b2e3-49dc-b96e-375a90863650", "sighting--814af069-5b57-4ea8-8771-596754a6af50", "sighting--87d6ef2d-770d-484c-a4a8-1704218a2150", "sighting--f5340d76-f9d4-4640-89a1-f0ade28c9a5e", "sighting--564e801f-d62a-4a4e-92cf-440c5fbbbf7d", "sighting--a1074d9a-817c-49f0-847d-03eae8ee64e7", "sighting--207330b9-ebb7-4dab-95e2-94d1ed643c2f", "sighting--191034b9-d0d7-4e89-976a-8601386d7378", "sighting--7157ba48-c21d-480a-8782-561037183d49", "sighting--f56d636c-87a0-46c2-8e64-e63538a065b7", "sighting--9b5208b5-98d9-4a2d-8752-285da1d8f3aa", "sighting--a2a27976-8922-4a41-a256-8012db2032ab", "sighting--f2fc9ad2-52c6-4586-b63e-e6a5110c66e2", "sighting--bdf89143-a4bc-4a10-880e-303d47f507ad", "sighting--b7fb0d51-a757-4520-ab59-16c2f2592952", "sighting--8bb4486d-0f1f-4b33-9df9-886f187ac5fd", "sighting--ffbe9f98-803c-4667-9b79-50a837c36bea", "sighting--87146578-2c40-4e6c-9b48-85b3e0259f4c", "sighting--4788211c-1024-4118-82ec-99fb190d5e30", "sighting--b9e7fa9f-aa43-4bff-bc2a-5991a435ea35", "sighting--eb933dbd-2489-4d61-8afa-cb8440f3d328", "sighting--d26f59e0-a730-4afd-af13-b59b3146e44a", "sighting--62bf5a67-2670-4dd6-a04e-70dd92cce443", "sighting--a4f35dba-8453-4557-9ebe-575162c6df78", "sighting--e7d6d483-a7a4-482e-bcee-80e80785199a", "sighting--5ac7782d-392f-4a55-919f-9cf76abb2b9a", "sighting--e7622896-ce12-441d-ac11-da3f41dc7dae", "sighting--fee701fa-c690-4291-b25f-234c928234ff", "sighting--bdcb34f7-78a8-4e17-b827-5d767f4d5a8a", "sighting--2645d0d3-d127-44d6-a3ed-0261f24130bf", "sighting--0c006f76-5e6a-479e-b43e-e4c1e65a0207", "sighting--05c20e2c-80ec-49ae-a7e9-e2b05dbf45df", "sighting--81465d68-ded2-4515-a1b8-666987709845", "sighting--f7b685cc-e1d8-4b56-835b-68b8d59aafb7", "sighting--47014519-99f2-4a63-ba7d-ae1f28ed2fc6", "sighting--2f868c07-fbbb-4cac-b13b-a5c70cf657c6", "sighting--19fd39dd-7601-41f1-a08e-392a19de4fe4", "sighting--3d06764c-1450-4e1a-ab06-6b96c87942ce", "sighting--06d40bde-40a9-42fd-acee-cce277e86914", "sighting--295ef7df-3070-4969-9870-0b4561e9d01f", "sighting--7e71dab2-0563-455b-b316-eb6c05f5b5ce", "sighting--21cf2ee7-7802-4f7a-8d77-72ceb203b4bb", "sighting--7f3ce885-5dce-43f9-97a2-5c396f64f6c3", "sighting--2cf3f1b0-ed09-43ed-ae3c-5e3ae7ce3841", "sighting--826518d2-0bfd-4710-b0bf-a3fdce7624c0", "sighting--2539121f-80e1-4e00-9a70-f7669914a658", "sighting--b7464207-9b55-4894-8783-f8e5f8559d90", "sighting--84fbf930-9fa6-4b56-bb3d-ae22fcc8b0d7", "sighting--eb61ed84-c0a1-4da6-b7e2-b5faa8d9048d", "sighting--4cb79794-6b1e-467f-a407-6134bda801a8", "sighting--0b6cd661-29ba-477f-96fa-d94cabbd7528", "sighting--a025fc76-0696-4fe9-9de0-835e6105f132", "sighting--e7e3eb5b-3976-461d-9068-504b55b9aab9", "sighting--7347f328-8dff-43de-bf99-de4a856fc80c", "sighting--cb67a882-3fc9-477a-92cb-da63ebfdb465", "sighting--4b96e94b-0dd0-45af-be98-a3176c49840c", "sighting--712dfcaf-97d1-4a75-acfb-e16465886636", "sighting--2b012ab1-7a78-4819-8a0f-0e64ee3d3a08", "sighting--012e11da-3ff9-4093-aa6f-9ea5b43bedbc", "sighting--759ac2a1-1a28-49b8-b304-b451bff70278", "sighting--b7795848-341e-42bf-8b55-c087ec1a2f49", "sighting--0e8d3253-8272-4b7e-a1db-cee32764e6cc", "sighting--8380b683-63d5-45a6-a3f0-f29f82aeb86d", "sighting--3ca11a1f-8eb5-4e0f-87fd-3f814cb512e7", "sighting--151347ef-3b7a-4755-bd24-fc22efdfeb41", "sighting--565652eb-f2b9-42c2-b94e-9ea9deb44c6d", "sighting--9cc72c10-7b6e-4da0-8d65-02830757360c", "sighting--5290ca57-e863-498e-acdc-1f501812a85b", "sighting--b15eac95-d805-4268-ba16-3b1f592519b5", "sighting--43823201-3e73-42b9-8b9f-0159a4255525", "sighting--07bdf6a9-3a2f-4585-bbdb-17f77f500475", "sighting--0d7777f5-ed5f-41c9-9629-4f4b8c15eae2", "sighting--e39776fb-6168-4612-98dc-62a1fbe620e7", "sighting--e8d73f26-6514-43a2-a033-3ad118ae14cd", "sighting--022d64e1-4c5c-4455-88d2-e15874e2eaf4", "sighting--8bd1a637-e19f-46c2-acc7-d16bfb70460e", "sighting--98891d8a-0fb2-4016-9d58-5d97b33969a9", "sighting--bc8735e5-eacd-4b6f-b606-ac36c2a5c0ad", "sighting--8e0cf70e-e025-470c-bd89-c45f1e707e86", "sighting--f5e6753e-0d2d-4a94-870d-3a1fbbb255ba", "sighting--78f0e283-cd15-42d7-9fe9-edcd707695b3", "sighting--c4e0406e-103a-45ba-bd14-0e2c1092fbbc", "sighting--91769fa2-58c9-4830-b84a-f4eaad0867c7", "sighting--2b783bbe-871a-43db-937c-ba7aaabd8f1f", "sighting--e2f13cd7-8e2c-4cfb-90ff-9c18a8021271", "sighting--8aab1207-90bf-47fa-a16c-d20ee876443d", "sighting--f1440a71-ad0d-4243-8bc1-ff019c726cd7", "sighting--f03ea6ed-d270-497c-8bde-1315c4cb45d9", "sighting--82ea79e8-ff3f-42d2-8f2b-fed5fd385372", "sighting--8812ef65-45df-4b35-9a65-36762a1dac8a", "sighting--56327041-4c07-4b26-b71f-6ae952654550", "sighting--0861ded2-df63-4afe-81c5-fc271cc3e478", "sighting--5e78c026-4d12-4a4b-81d0-8a7b0198088a", "sighting--9f59612c-53e0-4537-852e-77ee701f1527", "sighting--a60fda46-3781-4bc9-9a6d-231f4e082684", "sighting--cb630bb8-7c34-4580-a7dd-5367afbc823c", "sighting--8806897e-4bb1-41ee-9b1f-94077d4e9a34", "sighting--972e0313-2da0-4da3-bfbc-b301cac008ee", "sighting--1f34b478-54cb-446c-b606-8c910a89cb0a", "sighting--8f4e46d7-895c-4069-b234-27db2ae7d118", "sighting--3f7d1e6e-1afb-447d-8e9f-1b90fe6c7392", "sighting--8539b4c1-05aa-4e2a-b404-5ae1e7ef0dcc", "sighting--ea5e7629-e6c7-4f03-908c-b41fbacb44f9", "sighting--97a46c31-baa8-411f-a535-934f6ae4d626", "sighting--27898e3b-8c0f-4d1f-a378-5d77ab928864", "sighting--d9e84384-6e86-46ba-9c6e-e0f5cc801017", "sighting--4a5214fa-4f3c-4f95-a0ef-8a51d7791faf", "sighting--eb23438c-7111-4f01-bb02-1f4d3be6f86b", "sighting--144bbae0-2a43-49d1-8e41-4d344a940f84", "sighting--039de0b5-7724-473a-843b-0e3d92e3f98c", "sighting--423375cb-d49c-4607-be03-0828a2987d69", "sighting--ae645787-71ff-4ad4-a912-e82aea0c688c", "sighting--2d188985-9f71-48b5-9872-7a1028cb3909", "sighting--eec1e6fb-41a4-42d9-a9b2-405a15d53bc2", "sighting--f2bdbde2-9a3a-40fd-8ae4-5af1dbc20c6f", "sighting--ee8eac11-6e9f-4e52-a387-cc111759a3aa", "sighting--b1675460-f90b-4252-b543-8ab86d932e6b", "sighting--9f826b6a-bad5-430d-915c-71c1bf2cccd5", "sighting--7d44ff32-4886-43a5-b2c1-a157a5d587db", "sighting--7d9b6843-197c-4bbe-9ace-750a60306e47", "sighting--7bddc4fa-f879-4f30-ad61-d949cfae3384", "sighting--8cc3652b-0c94-421d-a8a0-d85bb71683e2", "sighting--279f0c90-6b3d-4812-abe8-2c153c374475", "sighting--31ca6713-55b9-4128-b565-7dea1716066e", "sighting--081b211c-0cc9-4d4b-a3de-e4eb60a163ef", "sighting--494738a0-1c61-43a9-a935-fd43669c14f4", "sighting--8c0b8465-b2f3-46d2-afdd-951797c6de5b", "sighting--403dfeaf-52f8-4a7d-bc60-e7421c13fff0", "sighting--6602dc4d-2241-4977-a51d-688183abc16f", "sighting--0ec740ac-d4c8-463d-a8a5-3a0461d24e2c", "sighting--579dde5a-44cd-4cbd-908d-84ef326a9040", "sighting--11983d45-a47e-46d9-b6c6-2e89950520b0", "sighting--031343fd-b6c4-496f-9dbe-23ed0092b3ae", "sighting--caa5cfa2-c972-47fd-98dd-35918cf2beec", "sighting--bc0e4c21-c619-4407-872a-089757aa6112", "sighting--062f20c0-23f2-42e7-8c55-dda3eb3be84d", "sighting--98204329-b98f-4b6c-b193-63256fea644c", "sighting--b8eddbb3-b3a7-49f2-84c6-25c76fbc7087", "sighting--87fe5187-8847-4bcb-b2e8-e6c97e026712", "sighting--d841f445-1169-4b48-aa41-d6be282b92e0", "sighting--b89e7138-140c-4ad8-82e7-f5ebb6f677db", "sighting--0f2bab20-3d0d-4519-ade2-3f58839a3017", "sighting--8d50951c-8146-4d46-a369-65afeffd4c09", "sighting--667af1a3-4436-4381-8a84-1e9ed598e56b", "sighting--3563da17-d88e-4f2f-9677-5005956e70e2", "sighting--ea650f74-6aa2-48e1-a243-15ed8d51c95b", "sighting--95dca732-7dbc-49c3-8411-cb594e4234a6", "sighting--1afd1075-519b-4c06-a795-4859cbacfe5b", "sighting--4ea095ef-640e-4ad6-8a53-3276a32ac4ba", "sighting--f572109d-ad88-4319-8df8-46e638322f33", "sighting--4fa74131-41c7-4e75-b210-5ffc978a7eac", "sighting--bcd2e7ee-cfdf-4612-bcc3-c75e21fcefd7", "sighting--d46e17ec-18f2-4c0f-a523-f0300ce2edc1", "sighting--7d967d67-8653-4140-b60f-e3a701ade0bc", "sighting--9ef4085e-fba3-485c-95bf-ac54afb5bb47", "sighting--84bc5654-9b99-4ff0-98ca-7e4a231612fa", "sighting--c47a8be4-8519-4749-8793-c96b431088dd", "sighting--610c1058-01cc-4e2a-9fe8-dbdf0ef2528e", "sighting--4a73a88e-a407-46c6-b086-72966c0a5e87", "sighting--0d2908e0-7eba-4edb-bce5-f74eb4a8410f", "sighting--99e7626a-5277-4645-9ffc-d7cfaf65268d", "sighting--80cb4026-4a79-4764-8ad3-a9fa990e3fb7", "sighting--cd18c75f-3e37-41e7-b27c-54a4727a1564", "sighting--b8f593b8-b6c5-4c32-b388-ccbac4b60499", "sighting--6581f7a1-49ff-4ce9-b712-b94d04d03f42", "sighting--2b8e7fe9-2799-418c-9a57-22b785a66bcd", "sighting--8730bffa-d270-4041-b00b-b8104bf2655f", "sighting--89e339b5-d5f9-4423-8340-e4530165b237", "sighting--e0687c42-40da-4a8c-9ba0-1d0977a8ebf8", "sighting--a13b511a-e639-42df-8b3f-b701f0bc2384", "sighting--4e70debb-201d-4ffe-b8bc-1b1c508afa21", "sighting--753073bc-4b87-4e8b-bf6d-8f5db2027d41", "sighting--d12f7be1-a477-4478-84cf-dbccaa9a276f", "sighting--0eb5a2fb-d17d-451f-8e61-fc2933a6e4fa", "sighting--c2614b0a-2d66-4810-954f-be32553279a8", "sighting--c7a2cd1c-af87-4a82-bc5e-92ce02fca572", "sighting--0287eb79-9350-4094-a5f1-f6ac3c9d8616", "sighting--a4d73ca2-ebec-483e-959e-aa62ba5c19c2", "sighting--774c1438-27d1-49ae-8c75-aee260c81bf5", "sighting--922273e2-9230-4f1c-8e24-6a64b703abc3", "sighting--79735ccc-2e79-40d8-9720-81b913402d64", "sighting--38edb9c4-fdd9-4faf-b822-b8312fd167fd", "sighting--4d5ee58d-b0a7-4a6e-af0f-149581b45841", "sighting--a380922c-84fb-4f83-8414-59ca70d17447", "sighting--3c594737-e3e2-4189-a332-4fc885a46912", "sighting--27de1360-aceb-42ea-8535-66cc0c090ca9", "sighting--6572c086-7c58-4bc5-9e83-97456918b8c3", "sighting--521320e6-b1b0-4700-b2d8-29c35f5bf649", "sighting--9ba5468f-5d54-43f4-bf61-db91bdf9c5c3", "sighting--a3e4b09b-df9a-4afc-a247-b21054240d00", "sighting--bf43d05c-5946-4454-b10a-4fd7faebd1ed", "sighting--be0102e9-e35a-4d35-b55e-a33a9030a822", "sighting--5861e826-abe6-47ca-bd71-2ead71ba87de", "sighting--e2f8f546-6906-473f-bf97-4876e005a3a3", "sighting--fc009647-6c8d-480b-8ce3-d89a058fba4e", "sighting--8c5f46c0-0452-4428-b45f-7d17527c47a4", "sighting--583e331c-c8eb-47e0-9006-3d058946d000", "sighting--a3b3fa6c-e084-4fbf-9eb8-cd564db9916a", "sighting--df83bbf9-ac48-476b-96d5-f64a6be7cd24", "sighting--147dd08a-9e69-41bf-9130-951fbd658114", "sighting--4f9b35b6-163c-424e-937f-88fda3073919", "sighting--dcb8fb76-79d9-4297-b4f8-bd097bfb68d9", "sighting--d4deabba-5dc6-4067-a65b-83f4917cc577", "sighting--5d33afee-e0d1-4706-b5a3-c41661f3161a", "sighting--ee0de669-c5f1-4e64-bec0-5da5fac9b471", "sighting--050b0a1b-d128-44b5-9676-5b7ff6545965", "sighting--47000d24-4e31-40cf-89ed-56e16d5ca505", "sighting--1c1418c9-2393-4911-93da-6046f36e69c6", "sighting--db34d08b-2e44-4f28-b94d-751eb585d013", "sighting--f5be9027-82fc-497c-b899-07eb85cda066", "sighting--6185dd24-eb08-414d-b77d-e4332d451b89", "sighting--29ac7944-b963-43ba-a6dd-b96c898a33f5", "sighting--8a87eaef-c791-4a19-a3e6-afa981f2c909", "sighting--cd501c15-6219-451b-9248-4d429d01fb59", "sighting--1051d224-e40c-4467-9adc-8e5a1af811d2", "sighting--a5da1561-3f8c-4855-9a10-df4aebc444eb", "sighting--d78956f6-6bf4-4327-9369-67bac6b184fc", "sighting--c57f1c4f-0241-4dc8-94a0-1d0756fa7fc1", "sighting--5a55e99e-99c8-421c-adbe-25314084edb1", "sighting--46b739cf-def5-4772-9850-0b4d8c3b846b", "sighting--21800b8e-50db-4697-919b-86afc73f2991", "sighting--743a17cd-98c4-48f6-9c24-74d21f6437f2", "sighting--e9ae636d-101f-4979-89ab-f32a21135107", "sighting--7d97aee5-588f-44d9-a59a-843b626a5560", "sighting--c655f021-fbdb-47de-a024-10b1f1b68456", "sighting--9fc85e35-2d0e-4c3d-8689-d461b6c96b94", "sighting--175fd24b-f426-4caf-bbbc-c1d5596592ec", "sighting--3a6ffe33-bfd5-4781-bdc7-ccbbb14bbd5f", "sighting--3953a9e0-af72-40ea-8824-4b0d5221b103", "sighting--7a013776-26e9-4a0e-b115-5ef1d14868d0", "sighting--1928d8a8-f8c2-4922-a4a5-8598b9f5c3dc", "sighting--bc47bf4f-ad82-47cb-819b-049b55bfabda", "sighting--60ad9d58-915b-4cee-a06b-f7e418b31f1b", "sighting--35140ed1-5e17-4e11-9b41-8ce4b99ad83d", "sighting--66937244-1b3a-41d3-a9fb-e0bf794fc49b", "sighting--2c68ec3d-69ce-4b02-a674-e42dfb4bb0d6", "sighting--81789f9f-601c-4e11-bc52-9faa9a17342f", "sighting--6f1661c7-0631-4bd4-b7a6-0ccdbf60645e", "sighting--e30347b6-fd32-43c4-bed3-fbe71478b1c6", "sighting--1f8080c7-8463-476c-a7c9-3d2f3ea5839a", "sighting--df353799-a61c-4a64-889b-170a580cda9f", "sighting--d8246d62-6af3-4358-bd66-d29066962456", "sighting--33919920-c03b-4b3d-b74b-0115306aa335", "sighting--6cf8e6c8-dad9-4616-bd16-990531c5f1b8", "sighting--f4b86648-0c2d-46e6-a97d-1e8f8614e993", "sighting--18d19453-ffb1-476c-9879-a4e7e4a58107", "sighting--f98875b8-6b93-4604-8027-93df5a98b6b6", "sighting--95ea6a32-4a11-47b3-b364-c9ae43e01e6a", "sighting--b791d04a-16ae-401a-9ee3-3fd7af81bbfb", "sighting--63357af1-93e4-48b3-a801-e84e93740cad", "sighting--440062a7-04c1-445f-982d-47fa4e4c3461", "sighting--a2361667-35d2-4570-a531-d96cea01a92b", "sighting--a6fc2745-bdfc-478a-9174-743fb2612571", "sighting--c42fc332-3b91-4b37-bd4b-da170e76f9ae", "sighting--35fd0686-a52b-4a3a-a79e-8cf4d42ee551", "sighting--9c0bdb11-a784-47e9-bc51-ea4690e8570f", "sighting--45ba3931-676c-4f2a-808c-28cd45a3cfab", "sighting--9f902f02-2db4-4087-8b6b-b20fe8753187", "sighting--ee928bde-7964-454d-9bc8-f99ac51c1b98", "sighting--58018bd8-70cc-4ae5-b366-f44b8a224a0b", "sighting--1009d83b-3cc3-430c-b486-beecb0b3b53d", "sighting--59fb9c23-a41c-4264-ad9d-10f0062fc9fa", "sighting--57437a7a-3bba-4754-83d6-d10358a5207b", "sighting--b36df0d6-f8fb-4637-85d3-e704200c0de3", "sighting--ab3674e0-8517-475e-8c04-94075898b868", "sighting--9065381b-1045-4d67-953a-9b75ef16b35d", "sighting--9c6fd950-eb52-474a-a981-f9ea7814bd98", "sighting--b596eae4-1a01-4e66-ab4a-eb700e379aa2", "sighting--5bce7856-2f75-47c0-ba02-e694d942f889", "sighting--f8fe754c-7dd1-4828-a4b3-2200a1544480", "sighting--5543fa1b-ba16-4ebf-913f-221246fbd04b", "sighting--a5c29503-3883-45b9-945c-7b356baa1f78", "sighting--8ffa7ff4-4e76-42fa-b653-7a3ada0ccaa0", "sighting--4e4e9014-b87b-4404-9528-fd823bb179d4", "sighting--cb8d7e22-105c-4338-87b8-65286790a8c8", "sighting--d7dd8a33-db60-45cb-af71-8b936c44ebec", "sighting--0591bdb1-f31d-4be3-a565-77f38c8b74d0", "sighting--f324bd15-fb79-451d-9856-6213db356632", "sighting--ffd1e78f-127c-4136-ab00-df4c16e58cf8", "sighting--a424d7e4-dff4-4158-8450-b2d792bc558e", "sighting--93eb026e-cb1a-444e-b6b4-b2e50bdc1749", "sighting--d800c4be-6704-4dff-a115-fe2d4bfb83d9", "sighting--b46e6fe6-93db-474c-b60e-8cd30c9a9ee1", "sighting--3db54a2d-47b3-486f-bc8e-6ebdfacb7dd4", "sighting--d6ebcc6e-fc74-462d-8d21-c5fddc4870fe", "sighting--0be351da-7996-45fc-a8dd-4d547e74d964", "sighting--a996a56a-6046-470d-ac93-f62f9f62540d", "sighting--e06c83ab-8585-4fde-ae13-497a36dd0fde", "sighting--63d78708-124b-4b56-b951-2d8afea7da41", "sighting--4448fd36-f3ec-4da8-95e6-7286553a8a09", "sighting--d1f4f62d-14ad-49dc-8ab3-5417c888041a", "sighting--dc2573d3-0d44-4b14-8c4d-e5c7d24ef96f", "sighting--ef0e8637-5ca7-4305-8dcb-8686e9f860de", "sighting--ee0cb5d6-78d7-44b2-b90c-d0a793dcc8cf", "sighting--39dd2487-f9c2-4d55-ba74-9ffbda9eef6e", "sighting--af814a3a-2a5a-49bf-81d5-eda15cfd6a76", "sighting--caa0df72-7a50-443e-b98f-da6cca623510", "sighting--4baa7e6e-b258-4b31-af18-c9490b9dc2fe", "sighting--ff5d44b5-f4d1-4e5f-9cf2-a63ba547c0c8", "sighting--397f9dc4-3d5e-4b1f-880e-18249fafc9df", "sighting--d340072d-360b-4ecd-97ab-f187c8442921", "sighting--6e9b54f0-5e8d-4266-9e60-d65a1843ed5b", "sighting--9b0d213e-03b7-44c0-ac53-13c817b49ee6", "sighting--c584c48d-c10f-44ab-b48a-83294d540902", "sighting--a7c49417-0f86-4e9d-b717-f3ac17346603", "sighting--162e2529-c2a1-419e-871a-b8479b431bb9", "sighting--5c33cef5-5ebe-44ec-ac16-180a8e17dd7c", "sighting--651e2971-34e4-4365-b601-4080366124d8", "sighting--d687036e-a077-459b-90fd-19c8ce157451", "sighting--8058fd33-f183-424f-a8d2-4767b314971a", "sighting--91f1ea5c-b831-4375-807b-e3360ff3209a", "sighting--7b6ba47e-6347-41d4-9967-5e9ab677c8b6", "sighting--1e78c28e-5af3-4881-bb48-022a0ab82d44", "sighting--9dbd110f-106d-4b1f-861a-42651a059c1e", "sighting--7267a341-92b2-4b80-ad00-3c32f0f63578", "sighting--3fb84732-92ca-4477-9533-cb357fa067db", "sighting--46babab5-b3d5-4009-8fd0-ef7bcda6debb", "sighting--fa557f3f-c0f5-4541-bc46-91d1afe897eb", "sighting--f5301681-20ad-4325-ac45-c2e7a498c929", "sighting--14ee968a-2845-4ce9-8229-8e9da8e99d51", "sighting--0671380a-9890-49da-ad07-11e07bb9f9d9", "sighting--24d22743-b172-40e2-ad62-6c43b531903c", "sighting--d18c7421-cd53-423c-a0a8-4c729325dbcf", "sighting--96de475d-d66c-4424-bb71-3052e19ce723", "sighting--eef5d844-665c-486d-af8f-c95e8a2b4459", "sighting--68f65183-1687-400a-86a4-dd2cbab2930f", "sighting--529b2f83-ba71-487f-a772-e03c681c3109", "sighting--096276c5-f15a-4ece-8921-34876f9b4a9e", "sighting--cd2280a9-e466-43cc-a268-bf888dda8f56", "sighting--1f2dba9f-a496-4d86-aa90-52b97db19560", "sighting--3ddd6e02-cbf9-418b-b174-23c67ee9aadd", "sighting--245aad31-1d29-4d90-b86d-ca4cdbf41608", "sighting--b4f1c8de-f8b9-44bf-8875-094d4d2ecc81", "sighting--145debbd-11fd-461e-b125-6f8c5d8a62ee", "sighting--68408071-008c-49d9-a29f-1ad4c43406ac", "sighting--e03db1ab-b85c-4cb0-9836-4fc1fd025aa1", "sighting--5a1e802a-ce46-4e45-a132-995be3b87d27", "sighting--317ccfe0-b728-4be1-8fa3-99c2105f8d92", "sighting--17ff08d0-1fe0-47b5-97bb-5d40a95f4bd6", "sighting--60d78b16-f88a-448e-b7cf-a89e7707e68f", "sighting--d3b7b5da-03df-42f8-9f63-950312061035", "sighting--7fc6dff8-0413-4334-af49-42ecf5c8aefa", "sighting--6e87d7b3-61a3-4fe5-b3f2-ce3927e8f148", "sighting--f4c7fc30-840d-40c2-8e0f-86f79276a16c", "sighting--f9139665-4c10-4699-b176-335a8b282bfc", "sighting--a3f38f57-acbf-477f-8412-12e6209c2089", "sighting--dc7985a3-6921-43f9-a159-4949477c11b0", "sighting--d5439475-36fe-4ba3-8a92-3b5bea944080", "sighting--082249ae-e3f8-4af9-bdcf-a56bdd26dacf", "sighting--1e0ce708-0a04-4af9-834d-1c77426af2f2", "sighting--5bd1aa66-41fd-487c-a436-720645c8f0f6", "sighting--e1e807a1-e47d-47ef-ae1c-1f76745169b1", "sighting--3d120f3c-1574-49a0-8af4-4ca119765fdf", "sighting--8d9af651-79dc-42e7-820e-71187c0971e5", "sighting--b1f83a05-bde1-43cb-a975-5e66abc21790", "sighting--4a0f159b-f435-4d99-82e8-42cd029df093", "sighting--282d93d7-7216-4858-8961-65cda81cd880", "sighting--dfb3baea-f1dd-4245-b90b-54794d5fe275", "sighting--efea841c-650b-46e6-8df6-510c4a19286c", "sighting--38724ec7-fc9c-4d8d-9fff-b700b409c344", "sighting--aa201af4-538b-4852-85a0-6ade3b3aa3e8", "sighting--2254a000-253e-49b7-9a48-c519f9ba8ab0", "sighting--64fbac7d-f1bc-484a-bc90-a2c44964b455", "sighting--9ff486d7-3b2f-4e31-9148-f265d19d0b23", "sighting--05bd9e7f-4c48-46fc-aa66-dc688b2ddd77", "sighting--6735c672-c1e5-4579-ac85-94699f36e5cd", "sighting--25f68758-5bbb-4d1a-8ebe-88671fc72acc", "sighting--affa3996-397c-40e7-b848-d7705c9fa672", "sighting--292a01e0-319e-42e4-b372-568febd14c2b", "sighting--d3cfd826-3c77-474d-b0e0-1ae78e063314", "sighting--df9461e0-f664-4eeb-9f7c-fcb1a1c5d8f5", "sighting--deda2f01-39cf-41ab-a2d5-8b309b8ed3c0", "sighting--a5ebe845-53f1-4fa6-9b85-8ad96f9b70ab", "sighting--1d7131f3-e27f-4e2b-8897-7208cc860126", "sighting--04109f4f-9e53-414c-84a3-ccfae32ab733", "sighting--4b146502-d270-4120-9ff1-9a4e663d259e", "sighting--40d20171-a235-4fdc-a813-862698c7a654", "sighting--301c8e61-3fb0-4409-a211-5e1e01c708c6", "sighting--b54a188f-0769-47db-b909-d8b476689a69", "sighting--47af0ac0-ebda-4515-800f-120910332bf1", "sighting--56dba0d3-5436-48de-85fe-21ef95517066", "sighting--5e721eda-ca7a-44f0-950c-f5fa3516cda8", "sighting--18cc1c70-16f0-4bcb-b963-39bf1ce2b475", "sighting--dc5b96e8-4db4-4900-9ef0-087a5a638943", "sighting--bc3b03b4-51db-4720-a051-d05830cbbbca", "sighting--5a975d5c-22e7-4055-bf1a-4e63e231d711", "sighting--8f539c59-2f31-42cb-b62e-61f9502f2501", "sighting--7923e298-f0fe-4e58-bfb7-4c9540873500", "sighting--e104d6e7-0642-4b06-9dce-2afbd753e8a6", "sighting--805acc8a-91cc-4cba-af26-f5670234bb67", "sighting--bdf8f2e9-7969-45e9-9766-7e0576492c62", "sighting--5c7c1fa5-79f1-4142-9ac4-d3b98f96b192", "sighting--82d29d07-bdbf-4bbc-bf53-8418a896e7e8", "sighting--89d928d9-4716-40c9-b752-98568d8fc6a3", "sighting--7a902334-2d64-4f2d-bc5f-dd957b8223a5", "sighting--4ee1645f-17e6-4660-9ada-018a9b844c89", "sighting--41055eec-c44f-4883-8ee2-1afd8d7c2744", "sighting--28e80fa8-f69f-4d22-a636-237006accd20", "sighting--134e0293-c858-4b04-9fb8-62b9cf3a1084", "sighting--8114d033-6b51-4f79-9aee-0c81ccdcb770", "sighting--51cb0f3e-10ef-4b11-87e2-47063fb2a137", "sighting--40bbd4b5-946a-4301-a0c2-fc860c924a56", "sighting--5ee1197a-b185-4e14-b754-b33a551423ca", "sighting--488b9081-1d24-43f0-be64-8de607136fb2", "sighting--5bc82271-90dd-497e-a681-7d653b5be6be", "sighting--a81bcb0b-370f-4c1c-ad3f-f93f204f014a", "sighting--61fef992-80d5-4214-a7f7-c1bd20265dac", "sighting--0986265a-af60-4f99-baa2-0ebbbadc68fc", "sighting--c37b89a0-b280-4c64-aff4-e07988dc8654", "sighting--f7c0307f-d7bb-4bfe-bcb2-e7e11199ce01", "sighting--37f596ae-f9b4-4b78-b2a0-75dea09d9ca5", "sighting--263d546a-83a4-4f43-a0e4-494a08cc0637", "sighting--dfd426d1-f402-4940-8703-7f0b99bf3d69", "sighting--364c9816-2502-47c0-97af-5fa553bd5e30", "sighting--aaf20101-d914-41ab-9cb9-aa2270ecf0ed", "sighting--6cb1170a-3607-481c-aabe-26e13d6c453e", "sighting--7bb54387-c2df-4235-a96f-b7b674c973d7", "sighting--8d67d777-ce34-4a25-a902-d724ae79117d", "sighting--38337f7f-6da4-4c1f-98ad-073643f89776", "sighting--d0a05b2a-864f-43be-93fa-398b728c6130", "sighting--12e7bbae-4667-4b91-b362-1d26e8766b7a", "sighting--bed5eabe-79c5-430a-a330-849dd155291f", "sighting--9e474c3c-2f92-49d1-b012-63bdc0cada35", "sighting--9c389871-cd66-4c55-a81c-bf50af5b6318", "sighting--78980ebc-4d74-4a23-b3b0-aeb1e21f040a", "sighting--ea167e2b-b745-4ca3-8acb-edef16eb42e8", "sighting--278a70e9-9e66-4d8b-a425-4da7cf854f2a", "sighting--a5e4e864-2573-4878-b9d4-b4358141072a", "sighting--38f8c140-84d5-4f66-83e2-502d5f359531", "sighting--bb6196c4-e1a4-4dca-89fa-a219f92b6985", "sighting--7a6ea7fb-f0b3-470e-82a4-8abeb823259f", "sighting--6e83ce9e-7e5c-4487-bc22-5224e2dfdd4a", "sighting--c912b0fa-2748-4853-9d24-32be25601a0b", "sighting--a0870fcb-1780-4f41-8cd0-3638bfc9d3ad", "sighting--7bafb30a-635d-43b4-abd0-619096ae262a", "sighting--d74f5c84-725a-4b9a-901e-606e4369bced", "sighting--86bdb038-0577-4ab0-949e-b10a29a4508b", "sighting--9b760552-7363-4919-a7f4-1ba6d02837d3", "sighting--f8030756-680b-4069-857d-6e43f0ada41d", "sighting--9dd4a7fb-1f5a-4f5f-a1a5-6182982df9bb", "sighting--c5ad78ec-71e7-4ca9-97a2-b95a922eb1f1", "sighting--8df295b5-0a26-4eaa-886b-b84a5d513f5c", "sighting--71b68fc7-c9a0-4c41-ad80-bb38f8c81fcf", "sighting--012defda-dda1-4bf9-846c-e859c76b5ef4", "sighting--a4a83382-7b3a-4dd2-9755-c6d23bd54500", "sighting--db0c0391-0aca-4396-9ae0-c4dd49192f03", "sighting--f44e1c05-f91b-4f4c-b584-c8e5e05c3f4d", "sighting--71a4393d-4f86-4990-8a58-9e358b8d63bc", "sighting--7d39d39b-ef44-4949-a1fe-351052e83373", "sighting--7e779ee0-5f73-40fd-850d-9bf91e177ad3", "sighting--c7f4a984-5435-40de-b6ba-0575ae510c15", "sighting--4488c6b0-0d36-4386-b997-7d1a9b2b51cd", "sighting--a48aaabf-3e9d-4c6f-8ef7-418dc49a8c4f", "sighting--2b47aacf-ce61-4662-afbb-ab25e3bce844", "sighting--6cc93638-78d1-4f18-9d2d-5af660c4c279", "sighting--19c7e721-4224-4f06-8a5b-29eb7d471ca6", "sighting--44839ad2-f539-4eba-b8a2-05d20baae38b", "sighting--d6736ddd-dc7f-4b5a-9769-ec01488c6edc", "sighting--cb2d500e-f172-45ce-8de6-5021317b2284", "sighting--4cca2291-ebf1-481c-9ad1-98d6f0b624ac", "sighting--07be86ef-8024-4497-8e45-3ba0f1a2d5da", "sighting--910ece6b-32ab-4136-a2a6-53913c94e6ca", "sighting--22d57674-54b9-439f-bcd4-d3570c45e585", "sighting--fb3c1ddd-d239-4211-9e01-8c362abaefa8", "sighting--f757a0f7-7773-4b13-8cdb-cf2a2789e299", "sighting--579ea5fc-e8c2-4d01-a7dd-60adcb6a7c9f", "sighting--fa098c60-e30e-42b3-b4d0-554a337552a2", "sighting--9c9a8a1e-2f54-44d4-a7f0-ba69bc2f5f37", "sighting--67991379-bba5-4c7a-9a1b-2ef44609997d", "sighting--9f147196-5b49-4d7a-bfb1-1d9f5f6f0da4", "sighting--5ea11194-cd3d-40d6-9e4f-de163cf69c2b", "sighting--e43d1ff8-1457-41af-8e36-1277f4f32874", "sighting--31b72e46-0029-489a-a068-4d3bbeb11588", "sighting--b01c9196-1ef4-44f8-9e97-1b39cc6106c0", "sighting--eb1b46b1-0773-4b78-9c45-78db9b1526b9", "sighting--171b1654-c21d-4c13-854f-58501ba4d0de", "sighting--3d7d8e0b-8d8b-4078-8888-2a16cd8df0c9", "sighting--78c162b5-90bb-477e-8d62-5aa4433f485f", "sighting--c353c48a-83e9-4f1b-8df6-a29552e36a13", "sighting--2650d8e6-bbc6-4367-9740-cd54ba0b0652", "sighting--ce764c4c-efb1-4dd5-9359-5aeab544de08", "sighting--294cc0da-c82b-4bb8-acb5-6bf506e9c195", "sighting--e2cf85e1-7b28-4a9d-8a1a-ebfeba29cf9a", "sighting--ac485793-ad9c-4053-ab93-ab67f4b693b4", "sighting--b9950d17-17cd-4eca-aba3-16330c5aa50f", "sighting--782a9b30-cf21-43ab-9844-e75f1d1ea3f4", "sighting--ed2317ed-b1eb-4927-b040-6e8570f83f77", "sighting--df00cef9-b472-4546-adad-f541a23cba87", "sighting--15ee118c-1813-4e92-9b93-10f5322bfc92", "sighting--94f64688-f97c-4744-a227-654fbb77df6d", "sighting--801b24e8-cf90-471e-922a-e1354a20e445", "sighting--f5f0cc2c-8f01-49d6-a5ac-9cf51c343ed4", "sighting--b2c69fc4-9391-4f96-9f10-6a55e820827b", "sighting--1a7a5a6c-082b-428b-aded-54accf5f0ab2", "sighting--af569a0b-c5bf-4fe6-a491-87991eb803c7", "sighting--5efeeca5-ecfb-4d0e-9168-336fa6577289", "sighting--5225124c-76c8-4f00-a79e-26cc435d5b5a", "sighting--23039ea1-32b8-4ab4-ad57-2dce8280a437", "sighting--3e891a9b-a12a-4b3f-887c-736f24e27337", "sighting--2e47584e-7261-429f-8759-e8aba489b69a", "sighting--b0b251b8-3a35-45a8-ac1c-c2da4b89bb10", "sighting--948d32dd-cefe-4c2b-ba40-27f25aa9b60c", "sighting--66d081e5-4228-4d8d-b667-f181fc11e2d6", "sighting--032b765a-7a29-4292-b771-3d764284a00a", "sighting--2f5abc82-4a03-43ef-9543-afe3217db575", "sighting--28dde09f-1d9e-4a5a-b50b-fa9bfeaa4bf1", "sighting--ca549692-43f4-48ba-87f3-5bf22273fdaa", "sighting--a9d6059d-f154-4ce2-b264-ecc751527ddf", "sighting--b02e2319-b3ea-40d9-8d01-852b964a0f01", "sighting--73cd1501-a6b9-4e89-9bf8-ea887333d992", "sighting--97edac6d-57e9-4116-9341-0563b84acb88", "sighting--49a1d101-5c06-4feb-83f4-b4aaee92ce52", "sighting--95ecdd79-6355-4e12-abb5-6fe3f5eda94f", "sighting--d64b182e-8431-4b5a-8a02-042301a0da50", "sighting--b59eb1db-e764-440c-9a55-de87410e5584", "sighting--ccbb4998-8bf5-4236-b9f4-7476577276e5", "sighting--8d44c46f-0cb2-48a1-9988-36dcee87a9d3", "sighting--6e0b8a6c-d31f-49d5-ab00-8474a04f9d2f", "sighting--a12516a2-feeb-471f-8ddb-daaf8c1a62c9", "sighting--c5c8c112-ec05-4c8e-a52f-9368572270c2", "sighting--7657e099-204f-4d9a-9655-8b0c69a2cf85", "sighting--84428f75-8261-4b3c-9885-212e05ca40b6", "sighting--6315a60e-24dc-4953-9c3e-f688a42b2cfe", "sighting--bbb20df3-252f-4744-8b29-2c6017e1fb4b", "sighting--80732653-7ad5-4444-b92d-dc9dbb97886b", "sighting--20b1ec06-77b3-4243-8b07-bfbf0426ce5b", "sighting--bba91723-eac2-4cda-9db5-8bb26009bd84", "sighting--ab0f3914-0fc3-4eab-b263-d32fa65f8dd7", "sighting--d04a71c0-3a50-4658-9267-cc4f2d394b58", "sighting--8bd3d59e-39d2-48fd-bb85-3393e329eadb", "sighting--c6223b4e-e9ab-474a-b497-c83b1a345aac", "sighting--dd71fac7-69e7-46b4-b635-861cec35df08", "sighting--7ba2c0d6-af75-4780-af41-93b39ddf843e", "sighting--d4f53078-b848-4f56-a0b6-66a1b8fd4c04", "sighting--2ce34a80-923b-43b6-94f3-3741f7c8af4a", "sighting--65de4cdf-c177-4553-a6d3-8143302fad8f", "sighting--53d658f5-fba8-49f8-b45b-1fc5fb0957f8", "sighting--ada4e863-8b4f-4424-8e0a-cedf0cc7d895", "sighting--49fd75ba-8b70-48b1-89b1-0b87a5ff5f3d", "sighting--6c5c1208-2f2b-4fb0-8e0f-45e17a6d697e", "sighting--1240209d-16d6-43aa-9956-bd82c93d2e7d", "sighting--e7ac6c4c-8b67-4326-826d-d089bcbffb79", "sighting--f217ef39-18f7-44db-9f21-9b1970fa0001", "sighting--9196244b-2606-4ba9-8678-c28b1523955c", "sighting--690f6bc3-a0b9-40d6-8368-cbef7c57d4bf", "sighting--e8439a71-4261-4067-8827-f65971d19a40", "sighting--0b236938-2cd4-4032-8e84-f910d56158bd", "sighting--2afcf76a-5a9c-40ca-ac29-695062df664f", "sighting--b1e6b0e4-f047-4fbd-8610-c65d650a2e69", "sighting--1b500a9d-ae16-4e38-8691-8832849ce633", "sighting--1c05886c-0591-41b5-993d-8f5974638536", "sighting--e2b4a2c7-33d9-4371-8a6d-5cceed7ad215", "sighting--bc3b563c-9ea2-4be2-9a35-d124a25d0615", "sighting--97db3def-1543-4bc6-9d03-1cc394073eb4", "sighting--4acf96a1-7faf-4b3b-98bb-e06d9bf3cc9f", "sighting--5fff330c-91bc-41be-ae56-bf8e9ba75e95", "sighting--009160d3-952d-45d0-b480-88f4b38f7e0b", "sighting--1b5f377f-f67c-4ae4-b0f5-1a091af13d99", "sighting--687f456b-a14e-4e85-8379-f6673ebb82f2", "sighting--8138e86a-9d37-44c1-937c-71e1a4fca534", "sighting--690ed08f-fad5-4b00-b621-b516cce8d9c9", "sighting--ef297d4b-14e0-4e8b-b7b8-32d17c97c51b", "sighting--89fd78ce-f4c7-4e31-b895-c09334af5115", "sighting--e954c46c-7deb-444c-90d9-56252acc600d", "sighting--993fc9f3-2748-4040-ad70-70dfbda06174", "sighting--e54d3424-8021-40e5-9a45-cf1405a93bc6", "sighting--f3db65b9-6168-4e6c-9f1d-56197f21dca4", "sighting--d4681d9c-ab0c-470a-bee7-7f2a21cfc4d5", "sighting--e71a7a81-6b94-4071-9fb0-1291a4845fcc", "sighting--36fb4599-fdde-44bf-b8d3-7c8233aa4dcb", "sighting--b05b8616-130c-4f1d-8354-f4835239518d", "sighting--0c99a212-b6fa-4d5a-a5c2-98b6ed61cd1a", "sighting--c72fb02c-603c-43f4-a451-0c36ebfb6563", "sighting--4aa04964-18ba-48e4-a0f8-8e3f9344f441", "sighting--cf554119-cdd6-4fc9-981b-340b6999c7f5", "sighting--5e993e85-d009-44ae-82ca-5b2ee23b6c48", "sighting--09bd02de-6cb1-41c5-9f26-b8f8cf872ab4", "sighting--5dbf9a6f-8842-4710-aa32-8c5345216c01", "sighting--612d5718-5e72-4788-8a26-46b1c5824a02", "sighting--691094ae-22a7-4bd0-aeff-054dc023a3c4", "sighting--682fc15b-93c1-448d-bb4e-8b35a50c0c53", "sighting--6bba40ca-1230-4980-94da-956e48f3b278", "sighting--4246c369-1a48-4470-bd24-8bbc5ebc201e", "sighting--fcb888f0-aa0c-402a-92a9-dc573176ca14", "sighting--9a77d79b-8396-4ad6-9e9d-415c9519bb0c", "sighting--071cc65f-fd18-4204-b99b-62ab339fc92d", "sighting--81d4ce51-562b-4633-9eb7-87751073c9c3", "sighting--f182d8bf-80d7-49af-9628-987b29b24e0f", "sighting--85767452-27e9-4fac-9cde-8eed1cf08343", "sighting--fd256a19-46e2-47bf-a6e7-8483766cf0ca", "sighting--0cab7706-5ad0-4382-8bfd-b1688fe35bf5", "sighting--fdd30610-e7c5-473f-b5d9-0a057c3874c8", "sighting--81138c23-eaba-47ad-9c07-71051ac8549f", "sighting--be45f2b8-ce31-45e7-afda-9ce9d0ed805c", "sighting--acbaed81-96ef-420a-b807-70756595bb5c", "sighting--70505b83-a0b7-407a-8fda-9b1dc049bef0", "sighting--4bb94dcd-7ec4-41a0-b712-dce9264cfe5d", "sighting--a572bbb6-fdc2-4f90-aced-2101d3b5f755", "sighting--67d4cd74-77f3-44cf-a473-9e01cf48432f", "sighting--c8064880-0cda-4aff-9ba0-5d0aa5766ac7", "sighting--062c2edb-b5f6-4214-8dee-1b7f8e7ecd7f", "sighting--fab0b03e-20ef-491c-ac51-f8414fb1f333", "sighting--7a31fe1c-22c4-4a39-8459-8ea4bbf5efd7", "sighting--a21ac53f-4253-42bb-a20f-d5c8c66fb74a", "sighting--e0ef0d6b-98ca-4a41-9dbb-5ec64d20be67", "sighting--497a490f-cacb-4851-b9dc-06f6f07cbb27", "sighting--650c0bca-8e2b-4be2-b646-06ed5304914e", "sighting--debfd620-3964-41b6-80eb-0803d19f832d", "sighting--93af0263-b091-4111-81b3-71e4ecce5580", "sighting--4c5108ee-1544-46fb-8647-cc569223170d", "sighting--1006bb07-a16c-496e-8153-98e0bba64cf0", "sighting--9f3cf7f7-da9b-4d4f-ba3f-1675c4fa6e5a", "sighting--cdf08c31-cb7b-4db4-aa3d-d8ab6e4f97f3", "sighting--f80943ed-4c38-4a13-b2cd-62f3c287f76c", "sighting--a5539698-3106-4af7-9a0d-18ebe005b326", "sighting--13e51dbf-1448-44bb-81bf-503e92efce9b", "sighting--b1633d3f-58ac-495c-9263-87d7f968fbe7", "sighting--4b2b0964-50a9-4ee2-b738-f1cc4944d092", "sighting--a6447c62-540e-4733-86c6-f64a7b8f203e", "sighting--a966024c-c3af-4f4d-bc05-49a3b1e1d41c", "sighting--6a4a7cbe-bc73-41a4-be80-95630f9e05de", "sighting--4ee43691-6262-4546-8448-42c707279cda", "sighting--1d0b4f11-eb0d-4f50-9461-77823070ec9d", "sighting--cdf8b212-0a0f-40a1-91ed-a7a81f6c498f", "sighting--41340385-a143-4af3-a13e-d96a2bb44722", "sighting--df60373f-ca81-4551-9ce5-f39f8245298e", "sighting--f21da45d-29cd-434a-90fc-0cea41de3ae5", "sighting--64675e43-424f-407f-aec4-f264dca9c5bd", "sighting--2fa13787-ed8f-47e2-a9e9-1825464b3904", "sighting--e5c5fa86-450f-434a-bce8-032bbb1ca751", "sighting--3b6820e2-a48d-4915-90fa-822e5f3a8f75", "sighting--b4ab61f4-7022-469f-842e-a6960b05e012", "sighting--68e65acc-930f-4df0-930e-59ab55e55d1f", "sighting--f42c4703-47ee-4bda-860e-701afb76f723", "sighting--d28e76b3-e34a-462d-85b0-ae92d6ee7629", "sighting--9fce985a-90c6-46e2-ba84-467014eddc06", "sighting--4b852b34-ad34-44dc-94dc-91cb606975e2", "sighting--21b5b80e-b15c-4fa1-a2fc-dae861d05810", "sighting--a6d5ce30-b0b2-4b3d-b745-9d26ff4a426b", "sighting--c25b16c5-3571-499a-a10d-36cb0bf4c9aa", "sighting--1d592ac1-b1be-4396-85f0-c18d5ebcc932", "sighting--ded2d989-36a5-42de-afc6-7e3907175452", "sighting--3011d874-f978-47a5-ae03-82a2f51ca59f", "sighting--350663ff-4daa-40bb-a72c-5f7bf77ce9f4", "sighting--53ea7dd9-e10c-4972-8bda-71bafd4ad38e", "sighting--b4383102-306c-4351-abdc-28806b84819e", "sighting--6fa217df-676c-4f4a-8639-802e561ed496", "sighting--58697815-54db-4b21-b9b4-65a157dcad05", "sighting--d6ef7acc-9123-42ca-82f5-91b9bd27ed88", "sighting--41ecda52-7037-4ef7-9d38-c46bf4e13ee3", "sighting--adcbc24f-56be-459e-8e9b-63896cb38c17", "sighting--05801759-b0d5-4337-a931-5e2d89e5df43", "sighting--b0f4aef2-1fe8-46ed-b42e-fe37942eb699", "sighting--fce55550-d735-4fc6-9400-bf45c74fb896", "sighting--f925985f-8613-45a5-a111-37cc05a0db36", "sighting--cfcdd16b-0b78-4691-8517-ad41d9fbadd6", "sighting--26c6bc67-ae9d-4d5e-8086-419992fdf760", "sighting--b60dfa43-6c1a-481d-86fa-d21402568ad3", "sighting--ad501c1d-a54b-4526-a5a2-c22c67256b54", "sighting--f5358aee-c5a7-4444-a461-4ff10e94c5f6", "sighting--6b575996-f80f-4af2-8d75-e37c0aba57e2", "sighting--ea7fd05d-08d2-4d7e-8ede-1962c5f10b3e", "sighting--ec3b574d-1ef7-4b3e-86d1-470163f5e3ab", "sighting--079b7992-d9ee-4674-9339-b633cc3d4e1c", "sighting--5e7664c9-1a22-48d7-905e-3a8d585fa212", "sighting--0e6c68df-7a74-49bb-979f-f4f2e9ea1602", "sighting--cf3093df-7068-4b8b-9ff8-5863f7d98b40", "sighting--0913983f-29e4-4748-9b1f-82b12d05fcdc", "sighting--4c93dc70-a166-40e7-93ba-4d68997e5c82", "sighting--0727343f-05dc-45ec-9ca2-885ee545e075", "sighting--42f803dd-645e-4a37-99e0-26b6e475c34c", "sighting--71ee1846-7d3e-4d7b-b030-da686f9e2c1e", "sighting--c4fae632-d2ea-473b-853c-664586b7f622", "sighting--f3ddc8d2-34c0-42f4-a5af-95bd835e3483", "sighting--0be3fc20-4598-4b81-9011-2df533a20b5a", "sighting--4c9b51aa-12ee-4620-935e-c72a0108c4ab", "sighting--66390454-c6ed-4fd1-9aba-e384e040fb6b", "sighting--a20d8a39-739c-406b-9f7f-97ee788c1670", "sighting--4c9dac2e-2b1b-4246-8daf-15fea6a67f76", "sighting--21721bfd-25a3-4ef4-8fb8-dbe3161a4b39", "sighting--efb78ced-4f4c-4e37-a42f-09b5058b9706", "sighting--f5bd3e2a-9330-4c82-8653-fa0587164e04", "sighting--c9eaad6b-7e80-4723-8929-065a909263ad", "sighting--b1d08ce5-85d0-4131-937d-5cea9a66b02e", "sighting--aa69c945-9f94-46c4-afba-105fe0b520f4", "sighting--a5cf9a21-e2a6-4350-a19d-9e62cd6018cb", "sighting--b511e156-ee83-40d7-a42c-fdb71cdcc2bb", "sighting--c81ffa52-7464-412c-a315-939ec5b02abd", "sighting--4aa92554-4d70-4337-a720-389aeca3cb6d", "sighting--70a64200-2f1e-4b69-bede-fe62bc258edf", "sighting--3af45b31-e261-40c7-8126-ba1dd1136909", "sighting--bb8c573e-6321-4259-bdeb-b167b7ab3da7", "sighting--5a384f7e-9176-45d4-9672-4b43175c843e", "sighting--cdc2e870-c9b9-488b-8213-8e79213d6a0a", "sighting--3ed075c0-f33d-4f74-871a-ad56e7c42f3e", "sighting--0b6c4595-b318-4e9d-9adc-a4b57cb84742", "sighting--751c9317-b41b-4950-976a-4b00509d971b", "sighting--0c635ceb-96c0-4632-82a9-c6b1957b2b2c", "sighting--42483490-5de8-439b-a89d-40133a63dd30", "sighting--39b14b8e-b4c6-45d6-8b39-a4f05784250f", "sighting--6127fdf5-c4ed-45e8-b21a-09d1a554fd1e", "sighting--5b532817-cc2f-4149-91a7-3b2f44c0a513", "sighting--6bdab364-8a68-4bbf-8630-dbc514737349", "sighting--8e8bac51-99c7-4da5-b06d-3597565f8ed5", "sighting--52d4da79-6f30-433e-a271-50bc5a483c5a", "sighting--243e23a3-f4dc-4bc7-8033-e597095e9d0c", "sighting--6f32c86a-e08f-481c-a550-30f97418424a", "sighting--635bb7a6-01b1-42b6-a50c-b9a1cbe08167", "sighting--9dd6757c-560b-4358-884d-e26a99101cb3", "sighting--2237bc6a-814a-4122-8cbb-7ff59fe37354", "sighting--6f02f5a9-229b-4d25-bdf1-25601a2c5006", "sighting--d9801b44-4dea-430d-bce2-ea418fd27fdc", "sighting--568a7780-d764-4959-ad2d-e847564b7cde", "sighting--17380f9c-f917-4ef8-b797-6ee8a233cf2d", "sighting--020fe141-5972-491f-91f5-ff6be9b77357", "sighting--1f7e3891-e16c-4d75-8615-600d7ca40d24", "sighting--d8b70a7a-c6fe-41e9-8a93-714a3458131f", "sighting--f4f01081-1167-4b9a-9e55-bcf9fb0c9a14", "sighting--15768ef0-985a-434d-ba7e-0f989fc259f4", "sighting--705ee709-1440-46a3-b483-6c5cc0627b36", "sighting--d2bf8ae3-f3d2-4b85-a72e-30a7a3417c25", "sighting--29a0bd94-1080-4621-8395-d4f69a2c0172", "sighting--7fa4b05b-b9e2-4c0e-b48c-585e2b5a1dac", "sighting--fbc4c284-f1a2-4b06-805d-7b46703aed96", "sighting--d5614d82-1640-4528-8bba-59efb534b9d3", "sighting--1d680e2e-41df-4b88-b793-c2955df40b54", "sighting--08dcd82e-f359-4af5-be7c-9fae4b9d6f40", "sighting--4f4475ca-7259-4a50-b4a8-8b1f7ce73bca", "sighting--ccdf311e-7ff1-48db-a6f2-f74688265a87", "sighting--2a7120e9-656f-4367-b190-7df3cf306b30", "sighting--14235105-e908-4997-8ff6-5a5fcba2e4eb", "sighting--8646fbfe-e3d0-42ba-aba0-5efab43f63fc", "sighting--e778c9f5-f261-4e9b-9175-dd75f90bee58", "sighting--479520cb-d5d6-4a65-aa8c-ac457d9c4ce0", "sighting--9e7faf8b-ad3b-4d48-a669-0c3f4a480b2a", "sighting--eeb849bc-bb82-4ca5-ad1d-20d51a20cadb", "sighting--aa2647a3-70a4-42b4-93a7-c34df9848f2a", "sighting--1b625f1a-bd22-40f3-bb9a-78f285b59421", "sighting--8f2395cc-c415-4372-9185-5851237f6d70", "sighting--0d450737-198b-4f9a-b53a-33089c933f55", "sighting--b8cbb419-8d70-4ba2-a033-d82ed4433fed", "sighting--c0f3dc3d-b9bd-4cf2-869b-f3b7d2ecc2e8", "sighting--56fbb8b4-5c03-4bc2-806c-8d7764bab795", "sighting--2be5eb94-a659-43a7-975c-71cd1deb9afc", "sighting--9e92593a-a81d-42fb-942d-6071c7072d47", "sighting--f1fcee46-0669-44d6-8d6c-20e1a0f8ff80", "sighting--9db75226-9fcc-44b2-9fc4-a014bb73e418", "sighting--5fb536b2-f034-47d5-bd32-f0816b4eb287", "sighting--cdf5332e-0b42-41f7-a411-cffe6bd98c30", "sighting--1ff39e81-22c4-4da3-8439-f43b0cf860f1", "sighting--59aa41f7-2f49-477e-9b23-b67b26f296c9", "sighting--3c47215c-7f08-4e5b-8690-bb65cb978aeb", "sighting--24a2defc-7626-4828-82da-3df8b73c0a4c", "sighting--4d04ce65-4391-4ec2-a7cc-dcd211ca3e2f", "sighting--fe2b6bef-35d0-4824-8109-eefc00910ca4", "sighting--6c3db570-c379-4f99-95e5-eb32d8e3dc52", "sighting--f7f0d59d-a0fc-4c4c-8694-57ae9b6dcb73", "sighting--10b50c87-abef-4f48-9865-613ca91a3117", "sighting--5ed525dc-c942-4d4b-a2ce-172e41270553", "sighting--71982dc5-2ada-42cc-8cdb-bce0447e90a1", "sighting--db1014b3-e7ba-4633-b049-bf95360994a5", "sighting--01d9145a-4c54-4c5f-8585-f579ef011acb", "sighting--9f04de71-5acf-407b-8f88-a5f9d073b3d8", "sighting--ae376715-c023-497f-b48b-a0bb18289db4", "sighting--2cb05b3e-4b18-4e15-ba7e-f80189e364f5", "sighting--afaa599a-eee9-4efb-979c-131a9b14c44d", "sighting--67c6aa86-9b8d-4d83-897f-978ba9b2b74d", "sighting--0fcca5d5-1172-4051-943b-404340df65a8", "sighting--46f5f2c9-76e2-452d-ada4-5ba66a20854e", "sighting--fd2dc463-05e5-4223-a752-687ec46015d7", "sighting--3af9690a-10f6-41da-9a46-a8c0bcaea7f1", "sighting--2ab2329e-a410-4886-a299-d1de69a3a6d6", "sighting--c8f6345d-42e7-41a3-ae66-c8ed5b9e7d26", "sighting--f25b4d41-627e-4ae0-872e-837971bb25e4", "sighting--fa34ba5a-baf5-41b5-9b13-fc4d5ab1772d", "sighting--350395cd-de02-4ac8-b6c7-d1f25d9cf2f2", "sighting--b6d75fa5-4744-4382-af26-48dae2b76e23", "sighting--e87e9e17-8239-4e3d-b1c7-cd6088c5ab08", "sighting--35ad5969-d1b0-4513-ac28-53df239762c6", "sighting--d780cd5c-63b1-489c-9793-897bb32456aa", "sighting--1267c20e-7387-4f02-ae23-c6464df3fe50", "sighting--54ce408f-690a-4d49-b6e8-86d065619533", "sighting--45202063-765c-42fb-a0f4-d27b692f7a6b", "sighting--7f8770eb-e25e-4fbf-9881-20661a7d3672", "sighting--0e02742c-cc28-4c9b-923f-bef3558e1fe1", "sighting--0baf4aa3-7fef-4fe2-be2d-e9a383ea892e", "sighting--6203a5c5-282e-4956-b676-371a030f0857", "sighting--b343239e-5736-4d57-ad25-9c4e206b2caf", "sighting--ae8d0094-6a68-48b7-a261-a4e561e16957", "sighting--679f08a9-6993-4698-b531-73e052f1050e", "sighting--70c673e6-a283-47cd-9443-978ab6f11909", "sighting--a8e4a79c-7d20-4ec0-b935-0c7c07fa5c5b", "sighting--6cee5363-804a-48d7-9ed3-96631337bbbb", "sighting--9fa0e6ea-c03c-445d-8b8d-64ca6e1a605e", "sighting--fe3aa791-6ea3-4b91-b2bc-f2aa164f2442", "sighting--a2766155-0c0e-4740-a08a-1cbe3c7df1d4", "sighting--0a264755-e493-4ce4-8df4-8fbd7f6436fd", "sighting--846e4795-e11b-4df3-9e32-eb672c3fa466", "sighting--528e069e-59a1-411e-bd9f-23b0e583d48e", "sighting--e4df5b1a-bb43-480d-8af3-78c80524a268", "sighting--e1615e11-f61d-4042-be0b-9a554f12a94f", "sighting--82ed61ff-a4db-4332-bc87-43b97b59e52d", "sighting--caf24b6c-9d3d-419c-979c-a9cd5bd7df4e", "sighting--3f6d095b-56cc-4fac-890e-1a227deb40a8", "sighting--baea0d9c-8f53-49df-bcf9-d441ec07170f", "sighting--9bbd80e6-a6a4-4876-a877-7d2dae4ad4e3", "sighting--0753a43b-80fe-46e3-9169-49aa5c901b4d", "sighting--5489b60b-5e38-4bb1-87ae-4fe32a49753b", "sighting--190bf74d-b381-49f4-bdbf-6388dfb8bf12", "sighting--c733a166-0b5e-4bf7-a59d-83b85b7d95a0", "sighting--2b6ad92b-1967-42a2-95a5-bfa8f6a67a6e", "sighting--cea37752-70a7-4cee-b5bb-9fd6b6faeb95", "sighting--7fc14486-79c9-4cb6-bb17-4a6b7637ae34", "sighting--cc81d69f-8701-477b-a8bf-773b0a3fd835", "sighting--c4c1de62-6d28-4f05-b139-a206594c3c4a", "sighting--d5b8796b-3e82-4893-b61f-2424874e3fd7", "sighting--f4b7f252-91c1-4dd6-859b-ce2e2b04992a", "sighting--09c687aa-a8b6-45d8-b1fd-ac7c428df9a0", "sighting--584814fc-2d6d-444a-b155-95722587dd02", "sighting--410db46c-c3d4-41f2-8345-9c59a5835a28", "sighting--027ab968-fa51-4078-8319-02e311fd5623", "sighting--bf66bfa3-8007-4d53-a798-22db9a25a01a", "sighting--34ad1d8f-f535-47e0-a094-42cadc3d78e9", "sighting--d0cd6a6b-36f6-42e6-b111-8398580c783a", "sighting--732f1542-d6fe-48f8-b344-abac762df3f9", "sighting--85e99178-4ef8-4d4a-bd74-b23e678a2795", "sighting--c527861d-5bc8-489b-9afa-099acb391834", "sighting--23f520a9-d6ec-437a-bdba-bae896e37919", "sighting--44c6768f-2168-40ef-80b9-35140b25d548", "sighting--bdedf6b9-ecf1-4d09-9000-489217de2369", "sighting--284c1e9f-9113-4674-a8bb-3e88765dc10b", "sighting--a9986d23-9aaa-4181-afd9-edbfcc9e7270", "sighting--09591cd8-277b-4dcb-bcd4-7d0808dbb341", "sighting--6fc8e96b-2a8d-4675-940c-eb844c348bcf", "sighting--0df097ea-f918-4f16-9b0d-60a7ffa93035", "sighting--af75609a-d322-4bc6-81b2-a5f910b35ffb", "sighting--1a1eb004-dcbf-4585-84d9-c792fad22bc2", "sighting--d250dcfa-fe7e-432e-93be-c0695e6b23de", "sighting--298049e3-7b6f-4544-a098-f20d54cd2ad4", "sighting--c90a3eae-ec72-471b-8ea2-d762a7ae0f40", "sighting--d5d6b1f4-00ba-4dde-b422-4eaf4911e9bb", "sighting--3e55dd99-7044-4ede-8446-d583f74b1a66", "sighting--f9c58636-28ca-44c8-9b6b-a16cd583ecdf", "sighting--c50dc2ad-80ff-4420-8055-fa89d5d4679e", "sighting--e4389f1c-6982-46ce-9e05-ef42ded70c63", "sighting--bdc7a236-ca94-4f78-ac9a-6318d54d7692", "sighting--0c2edb62-6619-43c0-8900-fde5f862a9ae", "sighting--8f193f56-23c7-46a0-8b95-47e5f33c9484", "sighting--2742da03-1064-448e-8a23-e39fd8ddf49e", "sighting--1ea6822d-d830-4453-bda4-0eb31806b6b4", "sighting--e99bdb93-d0eb-4406-9c4f-9f869b224e33", "sighting--aeb83fb2-4a17-40ce-b211-9ea6a38ce8f4", "sighting--1bcacf06-6b43-45f1-95c2-b3d0ee5f554b", "sighting--0f280f57-7f63-40ee-bafb-59efa0e99c85", "sighting--38f33110-653c-4be7-8970-c59691da5867", "sighting--85524cb0-facf-4b3e-9657-54120b9ccca4", "sighting--b74cedb5-890a-41d9-8b11-7e32934c1135", "sighting--62b82050-9fdc-404a-92de-1a5cca8ef121", "sighting--ebc9fb81-a112-482c-bd6b-486d3751c389", "sighting--1c3a11ba-fb99-41cd-944c-333328a0c8de", "sighting--0ae9af57-ad0b-4e3f-af3e-a63b57da7909", "sighting--8d595988-774e-4849-ad61-bbe1f82082ea", "sighting--02dd8e19-9ab0-48b0-bedb-267910f4d592", "sighting--f438dbbb-2aa0-491e-baa4-e3155ab58cf8", "sighting--c4ec4a35-371c-42a8-bbb6-a85cfe063849", "sighting--041cd362-53a4-4f87-9e16-68bfbd0aae13", "sighting--b40643d8-bf68-4237-8384-b3aa2cfe027a", "sighting--65c8e8f5-3e9a-4604-ba44-d35ed70ca42d", "sighting--c7649f38-a159-473f-9dfa-45927c77e840", "sighting--c33b6235-58fd-4b23-a9cc-91bddf5cf16d", "sighting--2d8f7cee-a1ea-4829-9724-cb2d255b14bc", "sighting--024e1cdc-3105-4459-9602-f910d510af43", "sighting--a7d82e09-f22c-4574-bf7a-211bf0c1607e", "sighting--b13be820-db30-4d41-aaef-017600642a14", "sighting--8a4ce6ed-0ca0-491e-991f-cd62159d2bd0", "sighting--5ddc7d14-e393-4ad8-b3d6-8cd4679fa3fb", "sighting--0c5bd5ea-6bde-4c6f-8baf-15dd52ce5cd9", "sighting--d7461536-33f4-424f-964b-41045909a0e0", "sighting--65c73705-4065-4730-a977-4eb94084cdc8", "sighting--bb195a98-d2a7-4047-8ffb-701aab329778", "sighting--c00e2cb9-4ceb-4b24-a19a-4210e40f29aa", "sighting--7efb3585-ab04-4abd-ba92-5474292366c1", "sighting--f4e298a3-bf12-43f0-83f8-4cc54e48314c", "sighting--3d08ec47-fee0-4812-89e4-28fbb3e2a8e8", "sighting--f16d3142-5a0d-42a4-a816-50d7eca5ce1c", "sighting--7e5ccb40-6174-44c1-9809-51fc850a06ec", "sighting--ac29b8b7-d9bb-431e-8d19-67101bfa752f", "sighting--2a7d0686-a6a6-4741-b918-427e134165db", "sighting--79162b2f-0ce0-4a2f-82a0-3a0de73b58de", "sighting--f393a754-20f6-4d5e-b1de-eaaef0b6b18b", "sighting--968fc487-cf9f-4a9e-b5da-79ef73d4c6dc", "sighting--b76ada6d-e796-4930-b523-22be97cb3e67", "sighting--d23c9a55-354e-4544-95eb-5a8f4bb6dacd", "sighting--d00a09e6-1285-434f-acee-4f291f49d3ed", "sighting--90887389-2324-42a9-8799-53c798ea6fa2", "sighting--781778e9-3c19-42ab-b29d-a7e74eddafde", "sighting--d02a3bf8-f4cd-4fc7-a36e-abfa89a7b038", "sighting--46615d1f-79a9-4fcd-b14e-5d44943d6461", "sighting--b83edeaf-7664-4678-9da6-34e9f896cc87", "sighting--20542aa3-2a8d-4d5c-9639-285d50e41e58", "sighting--9654afaf-13b3-4d65-8ec6-85bfa2064089", "sighting--c5e00799-0e4e-46e3-9c0d-14d73abf62e3", "sighting--2831f40f-7174-4ed6-9f15-442bcfa156cb", "sighting--2e9015a4-bbfb-470c-93a1-3daf86f51689", "sighting--9fe2c825-aadd-4427-8587-57c882299e35", "sighting--898d16a7-eb8a-452f-83ff-f2bad4a1a5fc", "sighting--014540ba-a82f-42ac-b770-3b6516fb46d9", "sighting--a161f288-620a-46e1-99ce-63d8c96dfecd", "sighting--49d8d8cc-1d7f-41d5-9c19-a916465d5cbd", "sighting--85cdad76-d193-4051-abeb-be1ac9d2eba2", "sighting--df2ae14b-11f5-4d4e-8a0b-fd9e55d9ff7b", "sighting--dc68faad-d3ce-43c8-b094-b55e12647ffe", "sighting--04f14cc7-c027-4db1-b244-003526976ccb", "sighting--1ba665e3-126b-4164-b9e2-d9283cac79e8", "sighting--1f5d372a-99e1-4a17-9d44-2149270ecb6f", "sighting--42ee3f6c-e575-4c6b-a7bb-2b15046a0d5f", "sighting--13161556-5919-4375-a296-5f62a942eda7", "sighting--44c9a4f7-159a-4819-90fb-f67b04a6df5f", "sighting--da6916f4-03f9-4e55-a262-338339b9bb3f", "sighting--7322c828-428d-4565-a5d7-5b8a2a674372", "sighting--a8e8c9ee-3362-45db-bfe2-701affc2f041", "sighting--13ea8923-a5fe-42a1-8eb2-0a0b9985a236", "sighting--56e6a84f-2d71-44e8-b07b-69b8e4a7d6c3", "sighting--ddbf32b8-f094-4bdb-8361-04278ff2db82", "sighting--fcbd92d8-5004-4a2d-ba5c-6b38e0dceabf", "sighting--275f91c7-cc66-4118-bbdc-140aea26e572", "sighting--d8ccd1cb-ef0a-4bad-8c78-dadaa8f0313c", "sighting--a0b9ed01-c441-4642-8b00-2cfa8bbbc36f", "sighting--2b0c4fe4-64b4-41d6-9c74-03a0ab9009b6", "sighting--92dfb49d-36a6-4f1c-8b7d-b9567e9c9eb4", "sighting--554d0d9c-ca3e-4057-9468-a0f15847e6bb", "sighting--b61896e9-892b-4d67-a96f-115b96c633d7", "sighting--390203dd-3644-46d2-b2e7-7cd6cfa62e46", "sighting--449bb31d-a08c-4a22-a5c3-b9fcb934e9d8", "sighting--44b7475f-e993-4902-b181-ef046ca0f34b", "sighting--3ff39f88-de45-465e-892d-2d8037e7668f", "sighting--b250e50d-8036-43b8-ad32-d795af48ea10", "sighting--d92a47e8-a8b2-47ed-8353-eac4074c43fc", "sighting--c22ea0ba-1e4e-4d42-871f-509c383c5ffb", "sighting--f5f2be64-a906-4580-87fc-98779d524bdb", "sighting--c2becab0-33b5-48df-9aaa-b0a790b4a62c", "sighting--a70fec60-539e-4b07-bc41-69616a05de41", "sighting--b6fa6885-f757-4002-b8af-2382f07ac0db", "sighting--5a9f1f68-1d0e-4404-af24-c7146422d9f8", "sighting--20142ed8-19f4-417b-88be-0f5c74f2a2a1", "sighting--00b01c8c-0ef6-4797-b546-71e88f98056e", "sighting--3391a858-bfdb-4f62-a1e3-689e8eb1e068", "sighting--32125316-6f78-4099-9ee7-2c903632e629", "sighting--f944b3b7-273d-41a8-ad97-8336f368a78f", "sighting--8b50dbb1-1297-41e4-8d72-c8a98cd0e42f", "sighting--093027f0-fdbf-42a3-b856-d29de352d02d", "sighting--2a943ab4-6b42-41d8-b507-49877a5717fe", "sighting--0c958b39-3f1d-4f2e-8d13-9d7c181dc227", "sighting--63253c90-30cc-46f5-b4a9-35865eab06af", "sighting--8486a64f-cbe9-4784-a6b7-1035cb24191f", "sighting--7dc186f1-36a7-4147-8abd-c7b3180dd990", "sighting--72931c15-3a9b-44b3-8b6c-e78e9136a07d", "sighting--ca86b5ae-fc12-481b-ade9-f6819fb7aadf", "sighting--0dc0b5b3-668a-4e44-a358-bf91cc08a2c1", "sighting--8749279c-9058-46cc-a058-2c0fa7667628", "sighting--a7eeb2a6-c2f1-4580-ae04-3928ed19aade", "sighting--32f8216a-91b2-42e4-af0c-6771fbd33566", "sighting--6334ae65-c307-47d0-abe6-d698529ae202", "sighting--4554a3f2-3ecf-412e-b8f4-461353c7a943", "sighting--3f1e9d6b-6c5d-4d0e-931d-95dbb2bbb06b", "sighting--8933ac8d-59e8-405b-8b5f-047cb571c33a", "sighting--1f5b55c7-61f3-4b19-bcae-54a0603e136b", "sighting--be726de4-a358-41e2-8ce4-0a0d39dfd067", "sighting--cdb5ac3e-6744-4dda-83dd-9e5c2f26ecd7", "sighting--11ec6ccc-8618-43e8-8964-c5b03ce39da3", "sighting--7ed24b83-463b-4701-8271-0b5b0be0bd86", "sighting--bd41b855-71c4-43f3-a396-f6ffaabda50d", "sighting--9b1e6ab0-8051-420e-ac0d-7327cd3d5e58", "sighting--96a45b8b-e3ef-4a8c-8988-b2649b0ed6a4", "sighting--dafab7ef-87e3-4942-a2ee-ab425a100679", "sighting--83632a96-a24c-4c01-bf2b-29775d8f6ff7", "sighting--ac6135f2-9a2c-4995-aa6b-c2c388b537f3", "sighting--6f764749-4b42-4bbd-a6fb-2ea6938cbc18", "sighting--5854000f-3409-4882-a06b-0896defb90fd", "sighting--9fdbe37a-142d-494a-ad0b-71f55e839d0f", "sighting--0e189e7f-3ca5-4197-9313-a7804d177e36", "sighting--333e980a-acbb-4d91-82e5-d876c416d4ab", "sighting--846179aa-ba8c-4da1-894f-e55cd50d9ed4", "sighting--a6ccff5e-2ef4-4e05-9fb4-3f6a6f68d821", "sighting--bc61c7ff-569e-4d10-8cb5-f15d7baddfac", "sighting--2ce8bb6b-34e2-45c4-ac05-694c30f9f4e4", "sighting--ae9c0be7-0a3b-4809-b0c1-bba89052c615", "sighting--3a387646-677c-4dcc-bbf4-6d9525073fff", "sighting--1828b81a-037e-4c08-a3ee-b46c48805037", "sighting--76953b09-a3b9-42a1-8bc9-03dc458397eb", "sighting--a704e2ec-2be2-42d9-89ac-3e1cef50e6fb", "sighting--fe8fed11-6a65-4556-a831-631167885eac", "sighting--c8c8e9ed-1b2c-4cd2-8f2f-595b14764c7a", "sighting--6b165b40-26cd-4c18-9739-f82fafbbef0e", "sighting--9f1737a0-8bae-4fa5-b4ba-05ca29e5e365", "sighting--c6c4bc54-576e-44be-9781-c613e40313b0", "sighting--14ddd4e4-a02e-41b6-92d0-16f966059ab4", "sighting--5c4a24b0-c612-4065-9fb9-7fef9b83b581", "sighting--7ff4c9cc-faee-4828-8d7d-90e9a38a5a16", "sighting--185a1d6d-10b0-498f-9636-ad4bc15bb80d", "sighting--cfdf594d-11b7-4669-8bdf-346583076bf0", "sighting--e7a80f37-c2e8-4499-bc65-2b7fbb4155db", "sighting--083e67a7-5274-4ced-b63f-4d22419db3c7", "sighting--9b60c0db-40d1-4256-b521-c4677e58c3a2", "sighting--029a53e5-1905-46f3-8a31-948375473f0b", "sighting--7c04d1c5-9335-4d69-9c7d-6f4e7635340a", "sighting--3f2ee17e-e8e6-4ff4-b2ee-5252c2bd89e9", "sighting--061b0f05-9d3b-45fb-b64c-4b95fcb9171f", "sighting--3aa217f0-c0c6-48e3-a9c3-0e4a8b063f63", "sighting--69170bd1-0395-4b51-8134-a27e10d4fff9", "sighting--ca75e926-a602-4866-9aa9-edaa0222cce6", "sighting--144745e1-1e86-4708-b6a1-c1b8c1a31d70", "sighting--a7353f5c-e896-41ab-984c-02e1b36104ab", "sighting--210889e4-00a4-4e16-9300-375d6a3aa177", "sighting--40072ca1-3510-4694-8f4d-5e4b65fa4aa2", "sighting--255d23a1-bdca-4cf2-8d2e-24f2192a6af4", "sighting--103cd317-7467-42d7-8712-f69aeaa86d2d", "sighting--a95ea471-2968-4b24-9892-f8675d7e68e7", "sighting--3f3212fa-864f-45b5-979f-c11b963baddb", "sighting--e01fd57e-f5f3-402d-9dd3-9a6408d23b85", "sighting--1e53850e-e38c-44cf-aca0-e076be4b63d2", "sighting--6554819e-4a4b-4afc-bacd-efd4a6b6f1dd", "sighting--c8ee32c7-93a4-434c-969f-de93fdbcc1f5", "sighting--d5dc2658-1246-497a-b407-834f703d98e6", "sighting--a693bbc0-95f0-461e-9038-b60bfaf5f7c2", "sighting--27f9fe38-241a-441c-8210-f71e0330a78b", "sighting--86899f2e-e232-4616-b428-1f0ff7928559", "sighting--a8b60915-1ffe-4bb6-8c4d-2be2a341585c", "sighting--7d5c0471-150c-40ed-ba97-c708db17c297", "sighting--bd6056f4-1ceb-48fd-8b93-34887d89a2f0", "sighting--55b416b3-7253-46d8-bfa2-61c270337f57", "sighting--6e74ad75-acee-4986-b686-f5b35ba0fde8", "sighting--eeaadf51-ec04-4ddc-8223-b6b7a0469c98", "sighting--01875a64-5e93-498f-9a90-d521ad08d3fe", "sighting--91a01c1c-1439-4a5d-8d8e-715bf510820c", "sighting--5169a601-42e5-484c-80f4-126f2b293003", "sighting--167f2f03-14e9-4d6f-a819-e0668eec095d", "sighting--b26a17ec-ce17-4250-a012-2631957890cf", "sighting--527ff3e3-88a2-4ac0-a265-5d6a2d8f7d45", "sighting--f454b429-dc83-4411-92fc-7d0efc94fb71", "sighting--3e8db1bd-6ac8-4d35-a065-45444b8fdd3f", "sighting--34504c71-069a-4eda-ad03-d521cc144645", "sighting--efdd7c68-acbd-4cd4-bba0-107645c7a7f2", "sighting--8cfa1133-7ad0-4bfb-8711-a431324bf83c", "sighting--f47b6264-f21c-445c-b1c0-4186f7973445", "sighting--a3f172c1-086e-46be-90f3-0d82e5916108", "sighting--7ec922ca-7df8-4529-9b13-03072039f1de", "sighting--c1a17f7a-047a-4ea8-8428-ac51a3ee0ad2", "sighting--fb6f7b04-fa93-4384-a5a9-45477355089d", "sighting--aab16118-3ad6-4dc4-b352-f0edfba1317d", "sighting--dc1ff7dd-c704-4d43-bf3e-359a250cf629", "sighting--a18befe9-44fe-49b3-8fd9-ecb1346d55ac", "sighting--11fb90e0-e98c-4e37-975c-7ae523f1579f", "sighting--171c205a-f04a-483f-9595-5d99dcc83f2c", "sighting--69fd36b0-7d88-4232-a88d-ba60e4ba3736", "sighting--8e5adb4e-c226-461f-b1d1-bab31f2c8a42", "sighting--5dcbd0e2-b53c-4652-b233-7e92661246db", "sighting--635dc577-f0b2-48c6-b543-2ac5800f8e2a", "sighting--b791d63f-05b3-41b7-b4b6-b24bed784c2a", "sighting--c466281f-1c4a-4761-92a6-857e2140b781", "sighting--4041ebf0-1fa1-4a29-b1b1-6b834666f050", "sighting--a148980d-75bf-4086-b842-b9c7818caa51", "sighting--f3a34536-6d1e-45d6-8941-5353f0eda623", "sighting--f89e70ad-0ac7-4418-9d36-303af4fabe4e", "sighting--e150b0a7-e3ff-4f30-9198-3ddf4505d1bc", "sighting--e07a7a82-03d4-4785-8229-b6362119cbfb", "sighting--65678f4b-a388-4d83-94a0-31360965c576", "sighting--f6f554e5-03f2-4f7f-b8ab-b2bd238345d8", "sighting--78519e11-3282-47de-ace3-6495af384d6a", "sighting--ac734f35-1112-4e31-8a05-bfa2bc6fb5b1", "sighting--f3062ccc-bc70-449a-8c88-77f08dee968e", "sighting--fc809ea5-f058-4086-beca-51353b42c32d", "sighting--c949d489-6672-4bd4-8289-9772690a2ce1", "sighting--d6e24747-3057-4d13-8e02-b2534c5aa164", "sighting--312e7708-4929-49e1-a8e4-e4925c08cdb9", "sighting--9b08e112-e4d4-47f1-a9dc-895fc9120f9b", "sighting--d843571e-ad5a-44de-93ef-de0917bd3862", "sighting--b2bc1448-aaaf-43c9-b78d-947f149d97d4", "sighting--7adba766-5603-4b40-a229-b8e65bba6016", "sighting--b4fcd029-e9b5-4f5c-97bd-6451c2551617", "sighting--bd526b1b-b709-4229-be36-4a0befa533f9", "sighting--9df606dc-26ec-487a-9baf-25579fd59f2b", "sighting--b715694b-6718-4a14-b8ef-0aecdea48e48", "sighting--7bfb6da9-5799-473d-8fe7-51608b05a858", "sighting--50d28ef0-fb09-4d68-93b4-f7261cdcb3aa", "sighting--c1e8f741-f4e9-4d91-a52c-21f3b08223a1", "sighting--cc8b1745-6eb8-4dc7-8e3d-f9b78f49abb3", "sighting--7850003a-dd46-4ae3-9683-0b734b5708b6", "sighting--46ded0b7-e0b7-49ee-8fa6-a2748d970709", "sighting--f7d7176e-05d1-4179-b40c-ca6e41d984ab", "sighting--63127fd7-c1cb-40ea-8ab3-d0556a13369c", "sighting--79f017b6-b981-435c-ad3e-5dad74b74a46", "sighting--57d13d91-3e18-4c70-bf38-d457015077d5", "sighting--05c895a9-82fb-48d5-9457-083791cc3acc", "sighting--81bf1175-4dbd-4771-81b3-3a8edcf951fa", "sighting--47fdb76b-0ba8-4cee-b501-477c3e1ac453", "sighting--00f7c046-bbee-46bb-8c47-841a51a58040", "sighting--20bcbefb-9030-4b2b-aea5-8c5a8c565dce", "sighting--a2968b46-4fe5-4a39-b232-77cd2427166f", "sighting--993e7a0a-e36a-4c77-ab6c-6fb6b965b0c2", "sighting--8c6f1185-ff8b-40bd-a0a1-5e7997d31c1b", "sighting--dd506425-9f84-4dc9-b257-1aadc053a473", "sighting--5d71c588-633f-4eba-860e-d0559740700d", "sighting--b9e9d747-c9b3-45a4-b06b-0a10d02fa341", "sighting--73dff8e1-0976-421a-a397-1fa5bfa2c5ef", "sighting--0722be8d-f380-45f1-b691-48bcce0804ff", "sighting--661525f8-2ac9-48ac-96af-2bb5455afe5a", "sighting--a2ecea63-5222-4a1d-96fe-bd2778e4c552", "sighting--a625ab3d-21ee-4f5b-ba2e-d489546cb819", "sighting--250ce370-f7ad-49e8-ad53-6c4f946bdfd4", "sighting--2d29b9f2-00e6-4f5c-8e24-e3c2c47c931a", "sighting--23f477ea-605a-4a57-a732-a40a7b11681a", "sighting--fa31be30-aca6-45ae-b510-8d61bb2373c7", "sighting--c8f06e4c-a300-4d94-b5ed-13fd0d352bae", "sighting--e2169165-5370-424b-bb15-c3e56ec6a0d4", "sighting--c2300ff5-f87b-49a3-98bb-b5ac63265931", "sighting--b55d2c77-8949-4861-8d57-fa942844db18", "sighting--b56b288d-49a7-4f00-bfde-c5bebd1d4032", "sighting--3888369d-294d-4a4a-869a-f70bb088bf69", "sighting--1e5e99d1-c034-4d5c-97cd-8ca6b9b926cb", "sighting--e0a48274-57e0-4a27-9bcb-d12d079eee00", "sighting--3b05f7b8-6e1c-4f47-875d-cd53f58319f9", "sighting--4a0f00fd-8a5d-4e4e-9aa7-82a4c9ddd1e6", "sighting--ddfdef9d-5adf-46de-8cf2-717c212358a5", "sighting--3941fa78-ca86-4a0f-85c5-c66060a4dd56", "sighting--2f4c913b-d14a-4e35-a4fc-92e0392ca8b0", "sighting--bb7aec0c-52bc-47ec-a601-416cf00b881c", "sighting--13c38201-e274-4211-8e50-0ec00135af97", "sighting--6c7479fb-afb2-4d72-82ee-3b4046736044", "sighting--fa2bc8a5-2ec6-4e91-9a9f-9799133b3989", "sighting--f84b02b6-0529-47ad-8396-2908e5adcb0d", "sighting--1cbaccc6-7950-4caf-b030-17ee3e2af49d", "sighting--83970efc-8074-4cf4-92fe-804320dd8e7f", "sighting--644942c6-d197-4c92-a39e-fe9edae10921", "sighting--fad6a08c-7f9d-4543-875d-be37362e469f", "sighting--f21545a5-cbcb-4848-a323-14a4083325a7", "sighting--0bfa43ce-c797-45db-9367-5ca8eb19cd14", "sighting--e2e4dc95-513c-468f-9045-52b5d78f754b", "sighting--326f2d63-3285-4a11-80cc-f7a09d58b545", "sighting--1420e543-3612-407f-8cfc-ddb2ac5ee279", "sighting--807578e6-67cc-4cab-b691-ded8448b17d0", "sighting--d050e39c-97d1-4424-a55b-138051246b47", "sighting--d9ede1b4-2cbf-4651-9ee1-ecf40dad80ff", "sighting--dbd2792a-8ab1-4d76-87a5-db46c574e659", "sighting--5e04ee55-7b93-4175-b174-c404174d6853", "sighting--209c3705-befc-49e2-b649-671dc22b310e", "sighting--97aef2e7-aef8-4e8f-81ec-49db290fdd6c", "sighting--57727e04-747b-45ab-aab9-af6c3786bb8d", "sighting--5611aef8-808e-4771-ba3e-c58d79c825f7", "sighting--b6644c11-0555-49b3-906a-cc50f3668ae6", "sighting--8a55c00d-1b75-4d90-8fc6-b639eaf7c18c", "sighting--0dc426cf-68b3-48ba-89c1-c5039dcdefb8", "sighting--801811fb-43d9-4ee2-b406-7e08bc06050e", "sighting--32723926-0cb5-4b0f-8c8a-ba7964a7ee6b", "sighting--47dbf105-7248-48e7-aea1-f1e0dd8c88f0", "sighting--65da7b0c-4d06-4282-bd7d-adbe26e6264e", "sighting--eac25b14-0f5e-4db0-b59e-01ebbdc1d77a", "sighting--c49edcfd-a0e2-4684-8436-fc13276f07f6", "sighting--b729aeee-4859-45e8-995d-07dcf905b1ae", "sighting--7a56dc27-fc3b-4285-8089-645fbefc22fc", "sighting--3951f61b-256a-4a06-a614-dd6e1a50a7fb", "sighting--14efb5a2-f43a-43e3-bd28-5bf056e4be7d", "sighting--a40f7ba5-3ba1-49fb-86d6-9af90156e414", "sighting--1a7460a4-6471-47e3-b3cd-1a305b495c48", "sighting--75e89fe3-fd03-4d32-a8b3-415adb3e01e4", "sighting--bc8fb2d2-5426-4283-b1da-227e75e747ba", "sighting--c61b6719-811b-4c8f-adfd-64edf1d63786", "sighting--cfd232fb-31d4-435e-ba67-13674bff166b", "sighting--370c7b7d-3b67-416f-a5d2-78727b8d85cf", "sighting--3b7f5c0d-cea7-4370-bf57-2c5801c4264e", "sighting--c2be9117-5628-40ef-9b3c-0c567a307ac1", "sighting--8aa8345f-3f35-43e5-bee4-6803bfe07d87", "sighting--68f44794-daed-43d8-9a5d-547169d616cd", "sighting--ed9bc7a7-e28f-41f3-b160-4eef079bf81d", "sighting--85bc1d6c-fab8-40c1-86bd-5a367de1c3d1", "sighting--b6f0db5e-3ef9-4432-bf5d-f52f6d62d968", "sighting--102fd1ff-fefa-4847-89c9-af06c0dbdebd", "sighting--baac4690-9139-4c64-a479-95a72311c54c", "sighting--d4e09ce8-4ff9-4a10-b56b-be1d9be857c3", "sighting--170fffbb-b9db-40cb-9714-62b40669637e", "sighting--a4b67732-5c3b-4fe5-a6ce-ada48e8b34a2", "sighting--8aab9164-e3a2-4d98-b530-734b07dc734d", "sighting--1c794386-c86b-4976-968d-9dfdb2d68440", "sighting--32af7086-6d95-4b13-a4f3-fb4136ac5a26", "sighting--4392ae15-04dd-4174-baa4-2060da90b2d9", "sighting--38a9184e-c446-42f8-8d98-ea4f8c364d32", "sighting--eb568c2a-26ae-497d-855a-fecbd75e5824", "sighting--c72335fb-c43f-43d7-9c16-7848fd89761a", "sighting--f03e5359-08ad-4ff9-9dbc-0bce2361ac8b", "sighting--4d71af3d-02f4-4f54-8807-3f115143b9e2", "sighting--9eeb5ba6-73e7-499b-8d5a-d36410c3afbc", "sighting--586b5e3b-7263-4a34-82c2-c5d7acbb637c", "sighting--6ae054f5-28ce-4d44-a5e8-d2d5a83378d7", "sighting--1e39e89f-566b-4f5a-b5f3-8af40f9ea737", "sighting--4e613030-5796-429f-80d3-9704d0ea386d", "sighting--3a972c90-2d89-4483-9416-dd8630c25f15", "sighting--3fcb3e0e-734e-4416-9464-e367df1019a4", "sighting--2783cbb0-af13-4ca1-b166-27d430a08712", "sighting--444aac84-9996-4788-845c-ed501ffc580d", "sighting--1e654dfd-5b4a-4865-b6d7-048049112c91", "sighting--50947457-f4c3-45f6-995a-6a1e627c3f86", "sighting--53441d79-d355-4148-a0d3-b264ce69a059", "sighting--8af41d39-0802-4c2a-88a2-b4ac07488db0", "sighting--222bf4ae-25b0-477a-96e4-4872eeafde89", "sighting--05714161-e860-4029-a921-24eadf478f8a", "sighting--8774431b-2bf2-4d51-849a-10f363962bbe", "sighting--5503e4ad-5320-4377-945e-d43910839736", "sighting--28faaf5b-27e2-4b03-a063-f8a6b89f0526", "sighting--0eb3e5ab-39c1-44cd-b325-ea60d5614c20", "sighting--e1e3cc7b-da6d-41fd-8df3-2ef0e5567e57", "sighting--cbe21df6-ed32-463f-ae60-e259d4a14154", "sighting--1357e0ae-1475-4abd-9fec-7a2dbdff3a18", "sighting--75139af3-ba94-4855-980e-25c2a75339a5", "sighting--9c506b3c-e5e9-4c90-a963-53b6dc04ba4f", "sighting--5f4c05ed-02c0-4edb-8a1d-25209fa5a5e3", "sighting--78456e72-e65e-4e18-9e2b-9c7339a7b557", "sighting--768c9e2c-0b20-4a12-85fc-61d3240d9a6f", "sighting--31f39f64-6806-4938-9f5e-38d61c8f09f2", "sighting--2a68e67f-2b72-49e5-af27-f379d39e9e68", "sighting--f4c04f81-ec88-48c0-a3e7-7de6283a4555", "sighting--7ebd1a9f-7d55-482c-b976-81a17890ff95", "sighting--f53ee7a1-2c0b-4efc-a7a8-85aa0a1bb575", "sighting--906915c1-d8cf-46b0-91e9-6769dd523044", "sighting--351602f2-15f6-4c81-8344-6e90558f40f7", "sighting--151e539e-e702-4731-968b-bcfae750f28e", "sighting--815aa55e-84f6-4e6a-a3fc-bef0700ded16", "sighting--7cd5c24d-edb6-4839-99e5-8819d194b076", "sighting--86201e89-354d-489f-a936-85b225f89292", "sighting--b006395b-773c-48c9-8fe1-6d5c97b7c224", "sighting--ce69638f-1cdb-46d9-bac8-7b1e10769b66", "sighting--517bc553-5f6a-40e8-abdb-06215f8fb94e", "sighting--3328db3f-f95b-4a69-96c9-5c6508ce39ff", "sighting--b59ebc12-8794-4606-a875-776ead02e94d", "sighting--cc52b8a0-dafc-40d0-88dd-4afb1f73cded", "sighting--2484fd99-41b8-4442-97eb-4c0ab984bff7", "sighting--205a2727-aa4a-4c8c-92e6-bada8b6dbc5c", "sighting--764488b9-a433-497e-98b0-b042b1b8a26c", "sighting--35085e35-2604-4bf2-a628-013a1dcce581", "sighting--9329d327-f832-4123-8c29-4dd80255a742", "sighting--7c9d1aaf-773b-4268-bfe3-d7fe76ec6307", "sighting--2e58ddc0-af73-4523-8f41-674fbbf039d1", "sighting--77e7b2d4-3bee-43bd-a82d-98a505824561", "sighting--1ccf8ec9-7fae-43c3-85fc-977f605cd64f", "sighting--16bad46e-4edb-462b-8864-32b2000720bd", "sighting--37e0ff95-62cd-4ff9-a5ab-76d4ff54702e", "sighting--78e5aa8c-b85f-472e-82c2-d657d1a57f06", "sighting--0aff9a6d-8aac-45eb-b68e-8887ae3f928c", "sighting--b7e92291-6499-4179-bf4f-22641dc104cf", "sighting--b1d2528b-d9af-4e8a-98a5-0f0180c58281", "sighting--9258c028-d7aa-45e8-b8b8-8fab5ae1cc93", "sighting--a2cbee83-0ae7-4894-b091-4e127127f5a7", "sighting--9d81ce80-8160-4b1e-9c01-c5e7b625d5b2", "sighting--7e6caed2-4082-4ad9-887a-7fab0551ed88", "sighting--0f7d0376-8bf8-4da5-b5ea-ea873e90f2ee", "sighting--7db3bea5-e6c0-4aee-8c35-80040bfbf63a", "sighting--ba7f7155-34d6-40e3-a432-cadb87c67ef7", "sighting--53d1f1fb-3bec-4ba7-91a2-9c9d1b08f918", "sighting--b2b70572-922e-49af-9b46-b0a191671d17", "sighting--015cd976-b8ab-45aa-b41c-ac1092a90341", "sighting--954dc90d-55a2-41ad-8d04-23545f895381", "sighting--3c6e184f-521f-4e01-8c87-ba5eb3b0863d", "sighting--bcd60426-a04a-4d5f-accf-c8a164a097d3", "sighting--429e5cec-ea61-4879-ace6-24f45be5df38", "sighting--35a7dd82-2d53-4ab5-9241-e0ba69c2fbca", "sighting--5e965aa2-f3d2-4b63-aef5-8ca3e77b5fd1", "sighting--e82fde5b-6715-4a30-a31e-a805253569b3", "sighting--64067dcc-4867-47de-9241-5adaf23a11a5", "sighting--e01a704f-5584-4c40-80c9-215417202f9f", "sighting--f5d58c01-73d1-4b71-a3d8-15652564a562", "sighting--03866f86-27b3-4a04-a4a9-9cd46393b0d3", "sighting--90028ae0-b923-471c-a4f5-e358b3785e71", "sighting--522dc1d5-32f9-4ccc-a8d2-734f6664a403", "sighting--213f2646-bdd6-4e46-928e-f8ecae93b649", "sighting--28f3b4af-7456-4da5-97b5-7308e78ed037", "sighting--5f13a052-ab2f-41da-a2cc-278fba5e642f", "sighting--08301060-b27a-444b-9b5f-adf57b3466d2", "sighting--d148c18e-c551-4799-89cc-e5a12023ccb7", "sighting--28b9ea64-74da-4ef3-95f2-3a9ff9f5fbfa", "sighting--ea46cac3-e5bf-48e0-a396-076f49098585", "sighting--1c2da157-6fd3-4772-9815-b6fb35b2dff4", "sighting--bc3e11b9-9092-4b26-8b38-6dc54f4a4eb2", "sighting--f13e79f9-35c0-448f-b6bc-f9a2a17a297f", "sighting--bca9b022-92a7-4906-ada0-5a8ff6e28ff4", "sighting--2d6b2ff7-926e-49f1-84ea-0a22d91c1e4a", "sighting--26629cff-35a6-4e12-ad67-739b20d9f4cf", "sighting--2ca6ce92-a3ee-4184-9509-f549b7b37167", "sighting--ef23d063-8ca5-4827-aa3c-fa2c3255374e", "sighting--7965566e-c6cf-4722-9e7e-099ef036c3bb", "sighting--b57a4285-0a01-43e1-826d-cb811367cc03", "sighting--6749f0b4-fd20-4a27-ad7d-9160e049005c", "sighting--44ab2492-112a-47c2-9107-33d2b1f63810", "sighting--7ddcea81-30c3-4904-93bf-a2350e6cec3b", "sighting--bd671160-1e56-4e83-9884-9d1066e7860a", "sighting--19cd154a-719e-4059-a41f-b01e91965658", "sighting--5c4e64c4-a813-4efa-97cb-b384737dd9c8", "sighting--0116a1e1-3c36-4dca-b783-920cb722b09d", "sighting--b23ceb51-b3f6-44b2-8fac-18319406f281", "sighting--9968434c-9cac-4167-b008-b015f137a45b", "sighting--636e9a42-414e-474f-96cd-7b91a65cbe2f", "sighting--542c1b05-19ca-4c20-9e7e-aaed1612a548", "sighting--a100850c-51e1-46b5-872a-f9f06681d800", "sighting--941d8718-799e-48ae-b2bc-92dcd8bb5c0b", "sighting--2d54c397-4bb6-4130-a8ae-9ef48c565517", "sighting--a3604b8d-0aaf-4347-becc-d9cf9e32ad32", "sighting--6d7b0001-9efa-48fa-9ff4-5a0462946ed8", "sighting--e6f207c3-829b-44fb-a9e4-035b36f2ccd0", "sighting--3f2a1cb4-ccd9-488d-926a-d965dfe00d18", "sighting--e2daec35-890f-4a54-83d4-96deccd32fd3", "sighting--078c8093-64f2-4a03-aeb9-31434b34c302", "sighting--ade3b70c-ce5f-412b-aef3-6f400905d735", "sighting--bcb2da49-37e1-4312-8d51-231fafe25019", "sighting--155fddbf-fb7d-4a2a-8148-e22f083e8746", "sighting--cbd64834-8e8a-486d-afb2-46b58ad0b563", "sighting--72b9091e-de20-4c5a-807e-477ebe0bdfeb", "sighting--e67c12b6-ae0f-42a9-8944-8736ad27d984", "sighting--3db06238-0096-4918-a7ca-a4a59555a1a6", "sighting--14e5750f-5f92-456a-8883-4f08366811e3", "sighting--6ef79e1e-2280-43b9-a2ec-8f127dc9d9aa", "sighting--e11ce3c3-d559-4bd9-aa23-44005b3ad42c", "sighting--721e6422-0916-4182-8eff-70ee26030fee", "sighting--bc75e82c-5a1b-4e04-837c-32bb176ae5d8", "sighting--017763bf-4c4c-4683-a00d-ac0a6d6ed544", "sighting--9b7af494-3e30-41a9-90f8-157dcc30cfa5", "sighting--a60e073b-5554-4b18-8798-f242f3febe9c", "sighting--db7e4fa7-7646-45f8-9ee3-146c752d3193", "sighting--10bc8abe-6ba8-42c4-b1e1-607e1680c321", "sighting--53224eaa-dbcd-4f76-97ef-70571451dcd1", "sighting--e500e4d2-39b7-4ee7-9a28-f280ce1b31b1", "sighting--20800876-c257-4af1-91ad-0a80d75c42d4", "sighting--c5e6d715-e9d9-4c89-a569-d24bc044b902", "sighting--cabdca18-bc44-40ec-bba9-739187770b8a", "sighting--af3a0e6c-04ee-497e-9baa-6272a6746cd8", "sighting--b7376ed1-2255-44a1-813f-86d22fbb232d", "sighting--7f8d44c4-f8f2-4edd-bf83-55d2f3fc75f2", "sighting--3e26c08c-09d5-43c7-a9c7-23e4a14a64fc", "sighting--369edc5d-d0a4-4eb2-a417-bf1424e62e0c", "sighting--2f08895e-61ab-48ef-8977-2a049f853dd1", "sighting--20266ff4-aad1-428b-b21e-dfc9c03a4507", "sighting--86302e24-f16d-45a9-b475-fd431d7272fc", "sighting--5193c633-f5f2-4064-905c-0bdf84d7b6b9", "sighting--c5ecb9e2-469f-4e3e-9edb-806e63872072", "sighting--259a3ae1-aff2-475c-828a-f82c0ee3f4b4", "sighting--829550b3-47aa-4fe6-86a0-4c85471c1a90", "sighting--0b649eca-f53f-47ee-ad1b-7aeb75c66c16", "sighting--38814fe4-967c-4198-9836-5dfd25ad9502", "sighting--ebb25674-6009-470d-b6c7-a485ea6d80b3", "sighting--8a202b0e-08c5-4f0a-adec-a348052dc2c1", "sighting--558491bd-d794-4f3c-a119-c462bccb8f34", "sighting--b6071d59-9bb1-4947-979f-80d8c9d538af", "sighting--35ba4017-147f-4182-9d07-3f4d2d4c88c4", "sighting--d4ba7ab3-ea3a-4ac6-955f-59099d62e03a", "sighting--c2a0ae03-a201-42c3-8fdf-731391598a25", "sighting--b271f922-1abf-43ff-a359-29ea85041cf2", "sighting--b96a251a-5a8b-4f5b-bc2c-096e7570037e", "sighting--b11a6805-e154-45cc-b1bb-b405fce21732", "sighting--c85a2f66-a3f5-4381-8edd-a8918a9f11ec", "sighting--b174f982-ed08-423f-9399-79ca3e0a0101", "sighting--3f624cbe-86ee-4d23-896e-31403ec62ec4", "sighting--149400fb-7cde-4348-9eb4-7ed1471ff93c", "sighting--43ef08fc-ada8-4872-8152-4c3bc6bb9a6a", "sighting--d1066cd5-cc31-4eb8-87ff-4236584abeec", "sighting--31cfe078-ffad-4f65-bf43-6e85449006fc", "sighting--a7dc18b0-a2bb-4c1a-a5c7-61cbdf1d1338", "sighting--4c4e8fe7-8e40-415f-a347-7810c6021e21", "sighting--7f4880bc-3b85-4730-98dc-88bd2ea1b525", "sighting--d7bff6d9-bfbe-4395-9b14-a4fb71bdbd05", "sighting--da205532-095a-4884-90d4-07b900d4cec7", "sighting--5fd80937-9507-467c-8da1-f59e7150b043", "sighting--a8a270bb-2fda-48cd-806c-f06a3ebf92bc", "sighting--ff88a865-66f3-42a4-b5ba-fd2efb5de9bd", "sighting--885cd072-1012-444a-a409-142032899066", "sighting--f3b98b5b-fa60-4882-be9d-a0f421306d76", "sighting--413e5f34-6ca0-4bd6-bccc-4c92bf7851e8", "sighting--13f40171-02b6-45e5-b1a7-f3d3f0ca445e", "sighting--e3bdaadd-cc7e-46d8-ad53-a0a38165317c", "sighting--96f4496d-f2c9-47fb-b1d3-cd1049c72dee", "sighting--86bf23dd-9be7-4973-be6e-3a3fc70d7a0b", "sighting--ebeec338-5520-4a86-ad1b-2d75b2252f50", "sighting--719f2649-f9a1-4772-aa30-cadad1a802f8", "sighting--ee4808cd-57f1-4cc0-8fcb-31dc1c928315", "sighting--79014ad8-7879-48be-8fc6-185ee40adfa6", "sighting--49d94c2b-1990-48e5-bad4-3a9fa1a6f7ad", "sighting--17bde39c-4358-48c8-8e32-0c56da0230ae", "sighting--6da4b35e-a55d-4935-9aa9-b0a93e0aee81", "sighting--70abd19b-24ea-4344-9ed9-64e1e14795c9", "sighting--3bfad6e2-f37c-4861-897b-5b5856990b08", "sighting--c0bcda05-97fb-4691-b898-adede0a57dcb", "sighting--70f318aa-5a38-4ee9-aaeb-96ce4a6422b1", "sighting--86151196-14d1-4461-bfcb-994292439b04", "sighting--7b608395-ab05-4f8b-a9fb-8a9fc0c5af54", "sighting--7b6cfe3b-7c3c-474b-b899-3679c50a21c8", "sighting--3f5c29d1-8805-4d0d-b2fa-cc6c7989131c", "sighting--e562d658-84a7-4e49-8f5e-3c2fd7d05d31", "sighting--7a4a227c-ada5-4576-b840-ef1bfd4bc28a", "sighting--a5b996f1-ac9a-412a-8fa9-fa1825d00cd9", "sighting--67bd46c4-ea6d-4659-a6d0-7c01fb6a6775", "sighting--0d8eee22-ce62-4d2f-923a-25a80d4668b6", "sighting--4fa97a46-3c6c-4335-b676-20d9c17aaa23", "sighting--557a859d-0858-40cf-992b-52736c6fd955", "sighting--b4333fa8-3957-43ed-baad-0b91b937fea0", "sighting--81af661c-e696-4a0f-ba5e-f05456148fa8", "sighting--1e321c84-ea9f-4d0c-89bd-a04c0207f146", "sighting--e2a74865-4b45-4fb2-ab8c-7705c611fbaf", "sighting--a1c9fc7a-c74f-429f-b3cd-1b2e4aebfbab", "sighting--cb57ee89-3393-43b5-aa4d-8391cf59bbbe", "sighting--7e7c23b3-cc48-43f9-800f-e3dc4f505755", "sighting--089ae481-78db-4a18-9914-f9ed520f54fe", "sighting--f8d707ab-532b-4a58-ae88-7d00e98138a3", "sighting--3f43d3bb-283a-48e1-ae82-fe22d8d1f019", "sighting--fa2f52fc-467f-4385-b139-531549e4c345", "sighting--06b07a70-7062-403d-905f-3b2986be6293", "sighting--7b7f2560-3042-4540-ab10-6cbd0e6f3fe1", "sighting--55de91d4-3809-49df-9c34-b2c2464931f9", "sighting--aa602cb1-8b56-41d0-8a87-62a5a45c1dcb", "sighting--bd27e304-9f3a-41c5-8e5c-d835d238c715", "sighting--fb4f40f7-cb4a-471b-b774-87f96b8cc35a", "sighting--a0321d4d-8e17-4f1a-91e5-0ff59cc45d87", "sighting--8e995959-37cf-4bdd-9faf-b28185621bf9", "sighting--bcda26ff-4d57-4d46-8db1-49cc112a9469", "sighting--cb620bd3-3757-4e18-852c-d8f262cbafdc", "sighting--368d7ca6-d226-4457-abdc-8fc1dcfa3eb6", "sighting--5055c102-eeb7-474d-a756-e6985eedd610", "sighting--3584beb5-f423-4f39-899f-2e557c4224ed", "sighting--6a6d6ffb-092b-4830-aa9f-f84f3a8868f8", "sighting--0736228c-669d-4868-a35f-a113b70092e8", "sighting--079ae3b9-dfcb-4643-812f-efab5309051f", "sighting--3626ea86-fde5-47c7-9844-9febe474da7d", "sighting--1c6d801f-1f05-4fb0-b87d-62fa94787cf1", "sighting--e21f44b6-814e-4586-a2da-952479288c5f", "sighting--9c6bfde4-8df5-4933-bd60-7d3bbe404cd7", "sighting--e3ba7b0e-d675-4df0-8fbc-9b41b6dbb0ad", "sighting--3ad8ede5-91f1-4174-97a3-fa1b09bff999", "sighting--563dcbe1-8ad0-47ea-aa02-d0f845c1e931", "sighting--ceab1f2a-4037-4f05-8758-865a7905122b", "sighting--863b5d18-b212-450a-88d4-e7ef31197bc3", "sighting--9c1aed5e-709e-4f28-9cd4-e4d75ae277a7", "sighting--b05125b7-d740-489b-a8a5-881759096e7e", "sighting--f1d249a1-e713-42ff-9d2d-e73602a3fb8f", "sighting--76b98349-75a5-43d5-8182-7d1cae4d3de0", "sighting--8ab56709-30de-44a7-b19e-e0d63df0b138", "sighting--29be7c21-1596-4289-8b3e-13602fa2e790", "sighting--f28e071d-1651-4b54-aa8f-7616151e3fc7", "sighting--2ae00456-8376-4d13-9cf1-58f1108cca28", "sighting--2e36552f-8aff-4e88-b818-bf755964c4c6", "sighting--104ab4e5-72da-4749-a324-b864eba3d6b4", "sighting--c73be8d3-8255-44ce-9051-5b9dfd8a2046", "sighting--d2ac5241-094e-427d-9db2-85405d41c807", "sighting--23b85c6a-3604-4654-bd76-67f347ce3e87", "sighting--fbbbcf2b-d99f-49f2-ac39-ec3e1f4eb6cc", "sighting--3e16272e-1680-4c54-a6c9-5da221fac2ee", "sighting--e5d76f27-2f53-4822-bd4d-317f434021a3", "sighting--f9a20838-4101-4799-9d7d-3cb70aa97550", "sighting--8355e0cc-d91e-4b5a-910a-1b7bc2f61df2", "sighting--1e48966d-0c9b-477f-84bd-fc315e0d18a4", "sighting--7d32455e-32ea-4b2f-82df-e2d06589396f", "sighting--0d1f0e9f-660f-464b-b33e-adb612b3fe6e", "sighting--f05d88ab-557b-4350-891c-68158921ee7a", "sighting--9ad4ec54-8ae1-4a5d-883a-ce5d93263901", "sighting--21417cba-dc60-40e3-878f-5d1200901031", "sighting--3aa50c49-3547-4335-aa7a-496394b15ea6", "sighting--d2e34b4d-8fdd-4243-91a7-2740873efbd6", "sighting--14e4664f-7242-47d5-9907-e2e37f9d1435", "sighting--7d794e0f-098a-4281-9317-7cabba4d1745", "sighting--cae4b3a3-6f3b-45cd-a498-d424d5438c8f", "sighting--fd533fae-18cf-47e4-b5e9-a5199d6b0c8f", "sighting--7a1b0eeb-3f81-42f1-8e17-9a48334afb0e", "sighting--722643d9-e023-4401-aa1e-23ecdaf48270", "sighting--4e8d4759-baae-4b04-ad0a-e498a26ce4aa", "sighting--4e80ed16-8d69-4c21-afab-4a31bab090b5", "sighting--d2fdf175-99b6-431c-8f83-e24c3b183b4e", "sighting--7fe2d588-ead5-4bc8-893c-4f7c8d7467f4", "sighting--d371edc2-c982-4d23-9948-79fa77899d19", "sighting--badda71f-1028-46b4-9d0b-7f9ee5657836", "sighting--dae47622-c3ba-4841-98a3-4e3920e1f6eb", "sighting--6c1adec0-48c2-45a4-b5bb-3d7022db29f2", "sighting--2dae7e07-5d03-437c-a07c-ee68cda4d3c3", "sighting--1b51a380-c47d-4bab-a750-012d9bd3f5f7", "sighting--96285b88-9448-43d8-bde2-b76bc1b7e67d", "sighting--bb988483-d48d-4116-a5cb-32c33c350abe", "sighting--f223bff6-a876-4b10-8989-b4f58e73ab01", "sighting--81214344-157f-4294-9fe8-89054cd54384", "sighting--bfefd2d1-efe6-4b07-ae39-39d78d2f0735", "sighting--c193895d-7f8b-4900-b672-24639ed52429", "sighting--6ea01641-c859-47f2-ac67-618bbd938b4a", "sighting--42fcb76a-982e-48d2-912f-5a745e137281", "sighting--35fa72bc-3af4-4abc-988e-3170830006a6", "sighting--24947b0d-c46d-461e-ad36-6af424f65acf", "sighting--00614d1c-8fe6-4f0d-a10f-f8431ab4a4dc", "sighting--f5bb6868-0dcf-4f9c-9957-de2a0a5b99dc", "sighting--079cdf31-b483-4ab0-b079-69487bb43207", "sighting--ea994e47-1f69-4c91-8317-ef64bf2e1d8b", "sighting--944dfdbd-2ff4-401d-9380-0ba0719c8942", "sighting--aba46d54-a50e-4443-842b-87dd2360f7a4", "sighting--dc0be3c8-f997-4ec8-819e-3a7247d9ee7b", "sighting--64106098-eb85-4474-ae91-89ecc7be3f4b", "sighting--947658c6-8a81-437f-9a23-f289152e63d7", "sighting--e3ab1f97-4e4a-4dab-bb2a-6634c0b25644", "sighting--2e324665-d479-44aa-abfc-bcdc392f80a9", "sighting--285585ca-ad39-4336-a32a-7aa65696a6fa", "sighting--20f9d13f-877d-443d-a248-98fa69b980cd", "sighting--b9eaac89-0761-4047-bb71-7488efad912e", "sighting--4d5c6512-2e67-4df5-9c42-a4b7e6c05817", "sighting--a97f2dd1-cd0c-4f1a-bdfb-a2669667bd53", "sighting--aa63fd21-0e6b-49e1-8ea0-2468a7fad1a4", "sighting--36d91dde-7b13-4d72-837e-b67705a9f2cc", "sighting--5a29da7b-852c-4d0f-b52d-02da02a5442c", "sighting--4f33a1ba-c9f2-4ba5-8be9-60050cb59420", "sighting--53579de5-212f-4d2b-823e-05f6b7eab0d7", "sighting--4851e158-0b4f-4d38-a1bd-3eb8ffbea36f", "sighting--a9a44817-2068-46dd-9ed2-b129760f8c3c", "sighting--da61297f-53f6-4866-ae7c-01334a7f0b4d", "sighting--c6182ecd-e073-4366-a856-1201e871f44d", "sighting--ddf9a8cf-4f10-4cb2-8e63-23b53b8e4316", "sighting--74e45ddc-730b-426b-b4fb-c578e8e18210", "sighting--206aeb88-ed12-4a1d-862d-6f9ba678826e", "sighting--d2ac7c5f-1977-4bfb-a6ca-12712130877d", "sighting--3d2ed45d-931b-4723-bea6-afc58b653f35", "sighting--dc27a495-69ba-43ef-9a06-c2961db77b4c", "sighting--7f9ca5d4-087e-4714-b96f-6bc0de37f7d6", "sighting--90288ef5-aab8-4975-a402-1fa37fc529d7", "sighting--539f5385-14e0-4f08-858b-6e6fac2685b0", "sighting--13c8f983-f8aa-4633-a5b1-a88af114a011", "sighting--f0368152-ed09-4a4a-b5fd-1197d20d04bd", "sighting--fb9361d3-91a1-4cb3-8d37-b2ba092d3099", "sighting--0a8f7e63-f3ee-4177-935c-99ed9ce9e966", "sighting--ec63d90b-dbcc-48bf-a6dc-f80c6b859187", "sighting--32d25724-0196-4951-bd92-3ed7f77ef3b5", "sighting--03e0e5db-fc5a-4b51-83ab-a4c7d0eb5e5f", "sighting--03063b3a-15c2-4ae3-a637-fea7fa18b5ce", "sighting--9320700d-b772-44c1-a8f6-ae855e702682", "sighting--05534d6e-7b66-42e8-bffc-d0f334db286a", "sighting--3815a5fb-ccdc-443e-930e-3306d00301f5", "sighting--d476addf-d658-42d0-8d2f-82e2ad04c754", "sighting--f5aecd28-0d10-4d8c-8c6c-14b7fff19535", "sighting--bf788cdf-0b2f-4b6f-be42-00a3a62beab7", "sighting--4a64bf63-ed98-4bf7-abb7-80008f77067f", "sighting--df5c6157-9887-46c4-874b-de2b3a415d8e", "sighting--80de6a2e-d837-4095-9af7-97785b869885", "sighting--0f1418d5-8fce-4e8b-bbe9-00faedaff59e", "sighting--e52b90b0-ff9c-43df-9e80-2e5eefe501e0", "sighting--62ab3a9c-030d-4848-a077-3506e7b5fada", "sighting--cb35b044-b4e1-4ea9-b994-0196465e347c", "sighting--518d9e1b-ab36-42cb-be58-6cf3d9f07ac3", "sighting--33c021f0-c2d3-48f2-b081-a846b90a30c3", "sighting--fb9d9c7a-5bac-4bc0-bbff-2e73b0ac1b41", "sighting--0f7af665-781f-48d3-ba12-7ca5ba713a49", "sighting--7549bcbe-d139-4de9-885c-6d59e7dd8b6a", "sighting--e3a338e3-bb5c-4125-9b5f-aae30f98d693", "sighting--35154223-43eb-484e-be55-f8e3f3efb401", "sighting--1d18cdc7-e848-4eb7-837b-b87cd7c204bd", "sighting--972ba4a0-6381-476e-b52e-ed8c53592546", "sighting--9bba446b-c195-44ee-be55-e142549be561", "sighting--da34dd5d-803d-43d3-8418-e0ac3033ab16", "sighting--6cba4490-a9da-4e58-a036-6d6e4d90ef6f", "sighting--b75b86fc-456b-4156-9962-fcfcc4de3c3b", "sighting--95f5e4a3-c48f-4186-8ea8-46864b373ac2", "sighting--4ba7efdb-870e-4b7e-b7c8-66e6293b2734", "sighting--59e49aca-77d1-4eb7-a294-452126f4a447", "sighting--c522b510-12de-4590-8f38-437d4cc59389", "sighting--8879ab17-83e7-4485-99e0-851b84c08488", "sighting--6afccea4-2c92-43eb-817d-8c209eca1acd", "sighting--21e01b8a-85ec-433d-b17a-b16c513c505d", "sighting--a8cd357e-fe3d-4b53-9d84-ae86d70ff10c", "sighting--ae17d4f3-b989-4ff6-b42d-a15af08e9b4a", "sighting--d33c2b5b-ca13-473d-b551-980d9dbdf759", "sighting--ac0f204a-83cc-4dc6-94dc-6799c75cae93", "sighting--d9415109-e9ce-43e3-b2bf-87fd3493b15f", "sighting--7eb3a79b-7e72-4d43-b59f-5961d51959a6", "sighting--0f61b129-aad1-43f6-b8a2-0a01162d8600", "sighting--a007d49c-b8c7-4c57-af06-37a2281598a4", "sighting--be5bd0d7-ee9c-4e6a-b80c-ab319b675225", "sighting--b3d6f308-ed34-4b82-9a32-ea89dc4106bc", "sighting--8f990080-b0e8-43c3-b2c9-87e8005f2f0d", "sighting--f9189b82-5720-4782-b340-4224c8274941", "sighting--8f20e657-dce9-46cd-af50-6321e9e7355f", "sighting--b50ff5a1-c517-4725-b368-f9f0fc29bb09", "sighting--6ed39a61-ff2e-4912-9793-8143565e1faf", "sighting--3c47fd39-d83a-45ee-96b7-e74147624e07", "sighting--e08067f5-e904-4c9b-8f01-4462bc334d11", "sighting--b009a7d1-ad18-4ddb-8c57-3d9c3b22fa17", "sighting--2f619116-edcf-4b1f-ad44-148a78fc438e", "sighting--f18e0d89-fd20-4c73-b143-f9ada4eb9e63", "sighting--c73f8842-cce1-4060-bccc-7fff028ffb2e", "sighting--9110fa1d-0880-4959-916d-fd394f2f70a2", "sighting--39558615-23f1-4257-a7d7-2e13a28ef09a", "sighting--73152931-e6f9-47c7-9dbe-6ef0628e0365", "sighting--1b027ee9-53a2-4d49-949a-fd6c308be903", "sighting--250149fe-0692-4f94-9604-6431e54bc171", "sighting--2c65693d-4561-48ed-89d7-894c468e0f0a", "sighting--dbbc3ef6-3209-4215-b065-18723d898bd5", "sighting--fc205029-3b1d-408c-8c93-756b6aa3da06", "sighting--d57feabc-b081-427d-bb5c-2abfd7886e39", "sighting--0ada89e7-a5c5-4105-90bc-cd7f790a2906", "sighting--0b5fdbc1-c457-4a06-9609-41a65e957a14", "sighting--4af2b2df-b458-4f80-8611-fc3c1991cf83", "sighting--93808613-ee88-434a-9e02-9e91164b25e5", "sighting--8a4ea0eb-7536-4f56-a193-40d0a2d32bb7", "sighting--b987520c-784c-4abc-81a7-e389218ba94a", "sighting--68145749-9740-4bc4-8e32-30d3c2ed73a1", "sighting--2b32b126-d411-40c4-819d-f8733c874ef9", "sighting--f418adaa-5e03-4556-a770-d3d2931e2d66", "sighting--00a6f40e-8f26-4ee2-98c4-280e531a32cc", "sighting--8cf94d7d-b612-42fb-a9e4-fa6754ec2756", "sighting--60fe24b2-0404-40aa-9b6a-c948ba9d3851", "sighting--ddf4ee9d-6598-4704-bec6-24cb47e0dade", "sighting--a2dc825e-a5ee-49a7-8060-110ba2690abd", "sighting--6a9b692b-89bf-4eb6-82ba-adcd952b7e77", "sighting--8c1daf30-149d-489d-957f-e1ddfea1faf5", "sighting--8abbbfdf-bdf0-4f7c-97c6-2c35c64bb4db", "sighting--ea9895f0-c718-47ab-9402-ff4f1fbce609", "sighting--0007c760-bd34-489e-85b2-2814ea41918d", "sighting--591b849a-73ca-4a40-a79c-d80ce9cb71cf", "sighting--6294faf6-7138-4faa-b584-530188b153a0", "sighting--f934705a-da25-4d79-8e57-4e14a1aeb82e", "sighting--5c56e26b-bbc7-466b-b024-40ff65991b81", "sighting--fd88214c-2636-433e-9e19-662f84b807c7", "sighting--d17eba8a-43fa-49ba-b4ea-30f3bdc90be9", "sighting--84660198-b82b-4af2-91d9-7f0270515407", "sighting--8c0defc5-5621-4c80-859a-bb8189765537", "sighting--95ed6139-95f1-434d-b36f-effb73b1bb03", "sighting--d64c2374-408e-47e7-8c7b-ca375ba68916", "sighting--a96b79ab-b994-4fb0-9fdb-dd0b9db1362e", "sighting--e017aa96-4011-49c5-9591-c21631a31a37", "sighting--e800ad8a-cce5-40f4-8786-0841241f287c", "sighting--da3f7678-fe74-468d-92d5-be94f4cbac3e", "sighting--e1d58791-b1f1-4df6-b0b7-734778440a0d", "sighting--6d8ec0fe-916b-4799-bac9-cea3e7ade8cc", "sighting--cb8132bb-3ba2-4370-a8e6-3df09fd79870", "sighting--c28cf560-be01-4c2e-a250-64266ec16a91", "sighting--1ab86776-be2d-443a-8497-d46f10f5dfaf", "sighting--0c466393-7c2e-4410-a68f-d0d06e3aff2b", "sighting--8fd5042a-08e9-41d7-a235-5878966cfdd8", "sighting--9a3d77e9-4022-4e09-ae25-395f58087843", "sighting--1352e94f-db04-4c6c-b040-8474b0ae88c2", "sighting--2bda940d-ac5a-437c-9c06-7b1e24b709de", "sighting--35ee9b9a-bf8f-4b69-a4fd-7fe5fcefe20f", "sighting--8c9c6a51-a21f-4fc1-8b3c-08dcb1ebeb92", "sighting--1ee79a66-9e5c-47f0-afbb-b697b9b750d9", "sighting--7de3ca53-3ad2-4c03-8b1b-b072e31d1a9d", "sighting--12eb31d7-b8d8-4bbf-81e1-d28677117e69", "sighting--7ca2ad4d-ddac-4039-9b0d-3cd9fd676541", "sighting--82f4eb3e-659c-4f0d-8657-c16d00d536f0", "sighting--022ceae0-9e96-4f18-b063-ec72bd793180", "sighting--60b9d4a3-d556-44ba-b1a3-c606e33c5af9", "sighting--fa1cab2b-9675-4e9c-a5d0-4426ae3e05ad", "sighting--b34728ea-14ca-4e6f-b471-07eb666e5bea", "sighting--863a1139-3b8c-4243-9c88-8d1cffa16e79", "sighting--763fabfd-5237-4fd5-8d1b-fe97ac4ae324", "sighting--f2ec9ef0-9eb1-47d3-880f-f0e65eba76f7", "sighting--0e24ebcd-8cb1-43c4-baa1-c4631a6fee07", "sighting--9de60143-ac4e-4681-8720-6acfb370f11d", "sighting--3fe00e2e-adc7-4c6f-8826-3a9ec74d8408", "sighting--b8e5c2fe-bb6c-4f2d-9900-65be51fccec0", "sighting--50f49aec-6aa5-46df-8cc0-53fdc2005af4", "sighting--7737c0d4-7d69-495d-affa-874f416201be", "sighting--d0698f96-b151-42a2-a39e-4b8e44fe1e0c", "sighting--c1ae84e8-62cb-47bc-b1dc-596aad226ecb", "sighting--89be93fa-d61d-4361-9d8b-7ff9037bb39f", "sighting--dea7c701-ad60-475e-8503-1d1e19fbe216", "sighting--0c9b5540-1b9f-4b6f-9626-b163ba6697c9", "sighting--c8edcc04-9ab1-4d79-b290-b244f0ea3066", "sighting--e3fa16f6-84e0-4d24-ab65-69aa0cf19a5b", "sighting--58427808-fa43-409a-a869-a41d58c2d89c", "sighting--071d7e71-976f-47b1-b468-7a274a5e0ea9", "sighting--d51d9f7b-2548-40b6-9c92-c516962ea6cc", "sighting--ad139865-4429-4a38-b69b-67d7d5744440", "sighting--e84ce152-cf19-4c22-b52c-342e6af64b5f", "sighting--f9b27c03-3fce-4020-9927-3813088a1711", "sighting--b59705d7-65b3-4f8e-b96c-a9e63d4a1085", "sighting--7c00a582-45f4-4c38-bf53-6adb047fab1b", "sighting--4add0924-ce79-4e0c-9d74-c2bba26f4f78", "sighting--8dda5d13-488a-476e-96fe-39254e0579e8", "sighting--3d2525e7-31f3-4626-a25d-966a9e5a6bb4", "sighting--2d685dad-9831-4375-a730-6e71c80deaa7", "sighting--a37e0b7d-2415-4b8c-9572-b88550011569", "sighting--c5e8fcf4-c68f-4581-adc0-14b3b4feacbe", "sighting--fb0bbd21-2712-444d-ac33-5a76fd063d90", "sighting--edb0f22a-4c98-410d-b1a7-421d97626598", "sighting--ea9ad2dc-33d6-4b37-971b-d6d1bad31020", "sighting--3209b261-2727-474a-8682-62be2c728078", "sighting--59e6a0ea-de26-422b-9c35-695ab8fcc26e", "sighting--9eaf17cd-6646-41f2-b740-70d31078abe9", "sighting--e5cf5c9e-fbbe-46e8-95a2-845cb86f6767", "sighting--b4ca117a-d857-4ffb-a5a4-98f380abf2cf", "sighting--d1cd50c5-253d-4ba1-bdad-402544020a92", "sighting--d1d1cd33-947a-4ac7-9d67-98c97edd097b", "sighting--360b1a2b-efef-48d0-a520-def8a64cfe57", "sighting--ec0d89db-52c6-47bb-8bca-37745eda7615", "sighting--0f070292-19fb-41a1-8478-7fcaea8f1c8d", "sighting--e5abecbf-4d3b-481e-b1e8-dc0d5e6814d3", "sighting--37fb8157-d230-4706-8d98-aa0181a6d1d4", "sighting--53c5d22e-9149-4010-914a-2d37492c616e", "sighting--45181c61-d443-4743-9100-662f191a4bc5", "sighting--b6b1a78a-958d-4f01-984a-eded8c00e116", "sighting--3aa26b5a-02ae-439c-a45b-26a389e6cecf", "sighting--bb84f9e4-f8e8-450f-8b2c-f1850c137cb7", "sighting--98935dcd-b01b-40f7-922e-8c3f3785edf3", "sighting--86d77d0f-385f-440c-8a28-9d42e04fe7f9", "sighting--d1a2a26f-23eb-4663-9b61-e104042e58de", "sighting--423e5439-67c7-46ea-afb7-f1e933d2d22f", "sighting--96fe9dc6-3bb7-4b8c-b7f2-a2d6e0cbc49b", "sighting--89bdb86b-aa41-4d81-9875-e9ab11d5310d", "sighting--e009cdea-e4b4-4bd4-bd9a-691a3918bb58", "sighting--476f326a-a35e-41c1-8c4f-c1ce2b9b8d04", "sighting--a071a18e-858d-453c-98e6-d6c13a483e01", "sighting--0ab9450c-ccdc-46f9-af8d-159c9f9fc7ab", "sighting--73adaec7-25a6-4376-a2b5-3e179dbd2683", "sighting--44ff5957-4143-4fcd-929c-bb7150dc8083", "sighting--5855d380-9108-40d2-91cb-e40fb8279526", "sighting--8154ea46-151d-47c1-8d8c-7ed52573dcf0", "sighting--0c3f12a6-c579-4d36-81f7-8b6ef9c10029", "sighting--5c861915-e025-4451-ab69-d495d957fee4", "sighting--9b528615-3777-476a-9a89-8e273e0c173a", "sighting--bc6c5ff9-7235-4622-9f9a-bf57744296b9", "sighting--57f11ba7-0b42-424f-9b1b-1fb16fc29798", "sighting--d4e2f1e0-902e-46a4-8ad5-dd5f5bf40e48", "sighting--889914e6-d403-4577-9f1b-552eec16f0fc", "sighting--67def823-5127-49e7-a73c-4d427f5d27ea", "sighting--01a94314-ff8d-4b93-a845-6fe04aeeca11", "sighting--8e743055-85f0-4740-90bc-95c70f78cdce", "sighting--65426d7f-da09-4f89-a180-72acd1d1026b", "sighting--8e57ebd0-619f-4c31-b3b6-f67b32aa1e97", "sighting--f2b428fa-5271-4cf4-b945-251a49435850", "sighting--5fcec5a7-cf6c-4987-b6e8-a815563b8572", "sighting--5177222c-1053-41b4-a27b-4ebaed6c49e3", "sighting--7ffdb986-5f56-4bb4-a290-3ee282490319", "sighting--2cb26e3b-64c0-415e-b9f9-ec2965a6650c", "sighting--b5fcfc67-edd2-4703-9078-6fbac724e377", "sighting--4b4611fc-102f-41c1-80c6-68a7f6b37d2f", "sighting--94237126-578f-4567-9fc4-1de9b9378d43", "sighting--a9e164d0-af59-4c1d-8c6c-4cf805fc9466", "sighting--8ea3e87a-cd2f-4c91-a653-7e73d2f50d9d", "sighting--305b61ec-7310-4aec-8afc-f299eec41461", "sighting--83a69324-3c6f-4477-aeef-d63303ee886f", "sighting--07c064db-4d03-4b2b-8025-632501331c16", "sighting--e2885b8f-e4f5-4ccb-b729-4f1703274ec6", "sighting--156a9658-f1d6-48d9-a99b-7d40e64d0290", "sighting--ddaafcf2-774f-455b-9aa8-75e617eb4c17", "sighting--2783803b-13bd-481e-9098-c86efba079e4", "sighting--aab2a1b6-5bd0-4262-afa6-56d4781d9134", "sighting--3d043a98-05ad-4ecd-b7d5-fe1d4d63ae51", "sighting--a3d15bd9-d929-4548-9767-65ba78329272", "sighting--d925eb34-c56f-4094-825f-da8328baf01f", "sighting--c1ac6cda-ffd7-4e14-b13e-9359f570b5e4", "sighting--fe556ae9-1638-4bdd-a9a8-4222289ee9f7", "sighting--4e6dd1cb-1691-4d5c-949f-a50f505dfb98", "sighting--b4edba87-9212-4ff7-a83a-347ba074c1e3", "sighting--daf4d35e-7de3-4ba3-b148-6d21db86e4f4", "sighting--38c6539d-4df1-4176-8206-987a35d10cae", "sighting--81bf7f2d-b3b9-407c-ad26-c4bae6a10f19", "sighting--08f5e763-031b-40b8-ae49-93049e9f0d88", "sighting--7321d484-e396-466c-a724-303cee7cf467", "sighting--f686f99d-7efb-46e1-81fc-adff3199191a", "sighting--ce57e900-2c3a-492b-8297-4b4eaa29ccd9", "sighting--e19d5c8c-a954-4f4a-b064-e19df6dabde4", "sighting--09b98f3c-b050-444d-8e2d-251939c640e2", "sighting--a7c14871-a802-48cd-97fe-1376e3c7ecec", "sighting--4898d0e5-dc30-4857-86c0-81d6139d7ff3", "sighting--1db8d840-941d-4a97-96a3-09d6a1f57fac", "sighting--952839af-2748-4934-b3b5-404f65487e05", "sighting--0b9e0328-409e-4a98-acf7-529e2ea880ec", "sighting--888fe218-4129-4dd6-99de-639dc1023244", "sighting--f92a77a6-cf83-4564-aac0-f9b459e97c0f", "sighting--4df54a86-5b10-4bb5-ab8f-4e36192f63f0", "sighting--64919622-48d8-423e-8490-5d4f18d4ba46", "sighting--781092f9-9a75-4164-99e5-e82617db33e0", "sighting--77745682-554d-418e-88cf-a941d913eb71", "sighting--ab346635-fe50-4dcf-9798-d545b9af7e54", "sighting--9758d014-dd81-4d65-81b2-aeb8a155c82d", "sighting--2530ad25-567f-4cae-bf62-3dd3b4191dc1", "sighting--ed6f0073-7f19-46ee-a9cc-53b122f656e2", "sighting--88a48be8-c03b-48d2-a8c6-82bec970cb86", "sighting--dd25b697-3609-4493-9fa5-a4c50c1b9d43", "sighting--09802739-d475-4da9-aef3-434cdc649843", "sighting--500a6d9e-bbae-4727-b05f-e235a0ad5a84", "sighting--bd0b1f76-15ef-4e5b-aff3-aaeb9c97dced", "sighting--4e5ec4c0-f25a-4f23-8c35-b8343b7772d1", "sighting--a7d89d28-2749-46c5-a3b1-9f6211074b8f", "sighting--28c175e2-c6af-45c3-895d-f7e0ac31beba", "sighting--2ea5a4c8-92c8-417d-843f-6420cbf3dc10", "sighting--7be20566-6450-40fe-9fad-905b1bf9e28c", "sighting--b386c946-2bdb-4dcb-a12d-5ae5005f5f9f", "sighting--c3d1d36c-3a88-4303-af98-a92b841b83cd", "sighting--9ef4e669-a0c9-4dea-8f4b-d55cd5fb0cb0", "sighting--c9342b09-3ba0-4223-a031-880b593d84be", "sighting--4a425907-210c-4966-817b-74f04245bdda", "sighting--f2fabafb-1856-43b9-8b18-3b8baa6dfacc", "sighting--7bc3e84b-a40b-4855-86e7-7a8bd1bf09b3", "sighting--b5e12691-084d-48dc-b078-553b6ff1d7bf", "sighting--3c8ab260-13d4-4cb6-8a57-a2bb097e9203", "sighting--4666328e-169a-43fe-a462-cc2a7d2234fe", "sighting--454885b1-cd02-413e-ad69-354ee88c8a18", "sighting--a19403d9-ea67-42ca-a040-b0764ae8ad0b", "sighting--f7c8f683-2daf-4144-b92b-28ca7df0a96d", "sighting--ddbfe71a-3db8-4f70-88f9-06e13cea648c", "sighting--23f3853c-a2ca-46ad-ac7e-c4b7d0ce0a9c", "sighting--80245e2d-511d-4771-8816-e57bdf03d9ad", "sighting--ff3fc7c3-63ab-4f87-84b3-950c3cc47134", "sighting--991fb5a0-cd33-48f6-8a9a-b9bb9fa204b8", "sighting--d267b1cc-aa38-41f7-a05a-a8244b501933", "sighting--baf5eda7-8b65-4305-a505-f338e2bc3621", "sighting--5d901d15-e797-430f-bfae-a236946f9c98", "sighting--b2472e56-d19b-46ae-beeb-2318da7d2862", "sighting--372c6898-c43a-4afe-9df8-6d06d33d5aad", "sighting--65adb4f8-d805-44d2-bca1-31e6bf0169c7", "sighting--42417bee-80bd-415d-b20a-065a9ef6fa80", "sighting--3330fb03-9839-45dd-856e-f982a4cbb2c0", "sighting--970a5c67-abde-4a9e-883a-f9e601ce1ab6", "sighting--d5637018-e3dc-4071-9ccf-977ff8e894bb", "sighting--1cb3dbe8-2e8c-45c2-a211-4953929f98f1", "sighting--1304900e-a3f9-4c28-821d-7f0b03567e29", "sighting--9e5145a2-6212-49a9-8f35-89534955f1f7", "sighting--d17748a7-4a65-44a6-b80b-d415743e79f3", "sighting--7a03955f-7b98-41f0-bb19-f6a7b045860b", "sighting--d602e5fb-5b79-4339-99c0-2293b3efd19d", "sighting--d91ee281-9cf1-4f6a-9c07-0f0dcd191df3", "sighting--5f1cf1e0-6a44-42da-aa48-3466d4bcd36e", "sighting--221c41c1-99c2-4759-9153-86d7cc215cc3", "sighting--c4a53cf3-b645-4fea-86cc-410b423b603e", "sighting--2d7e55f8-49a5-4f5e-b6f0-731ee4ac44c0", "sighting--56a9165e-7872-46c8-a170-6f659fc66f9f", "sighting--c4f03a22-f822-494a-9a1d-32969aea1721", "sighting--3d1e4535-ac55-4685-943c-f3ca2190c250", "sighting--059a2ef2-8971-416a-8333-41c6140fdfde", "sighting--3a452f5e-940a-4a02-b5c7-4dbe35066af0", "sighting--cfcc2fe3-d163-487a-8405-8604996b3a22", "sighting--3dc68050-507c-4f23-b339-00c00bc9bda0", "sighting--3d089a87-0b52-40d1-8dd5-84d5d5de5387", "sighting--e1d84688-f710-4476-9863-4fccffa92174", "sighting--74d43732-b551-4ff1-a53a-1cb858edae29", "sighting--65db1d69-f8db-45f1-ac8d-27e86ca9341e", "sighting--115fdd4f-2381-4d56-b640-b5da3c748fdb", "sighting--a78ac3f4-b3e2-4f2d-b3f5-9f793ebdb371", "sighting--935853f6-cd35-4862-8824-29772b652b05", "sighting--c3c0c8cb-a78a-47a0-a810-ad90085b73f7", "sighting--30649c4a-6e83-4010-bf49-a6b97ff29ca1", "sighting--cd69d895-8cb0-4eeb-9d9e-ca1a56c01f45", "sighting--4ca3e88d-c5d0-475d-a95d-b82a39300603", "sighting--ca2898ff-4f44-4fd7-b9ca-d9942d7a9c96", "sighting--e506beb4-38e1-4c28-8495-7a9eea28d440", "sighting--d4bc9527-022e-43d9-b7f8-d6899bd4c8c5", "sighting--5ee09d2c-49a4-4f9b-a6ad-272df5b9f544", "sighting--00b97125-d4c7-4a34-a8ef-1184fda254c9", "sighting--45e33a36-032a-43cd-94a9-17306717c343", "sighting--4acb5148-a699-4307-9567-85a75be06f59", "sighting--69d66c6a-c93d-454b-919c-e24b14a96005", "sighting--507d1059-59fe-47fe-8066-1fdc3b6f541d", "sighting--e472d65e-1f78-4c29-87bf-495cd164738e", "sighting--31862d3a-8dff-45d0-b189-4b4d64de9736", "sighting--2f16391a-6f4e-4a7e-b858-85f59647ec97", "sighting--79f3b555-ec35-4aad-868f-7f62ae7d4e4b", "sighting--fa69a157-0a9d-4e9e-bdf9-881dcf56df02", "sighting--cb4f85d1-a1a0-47ad-b754-faeace3623d0", "sighting--360f69f1-2efe-4b86-9b0a-afcbaa96850f", "sighting--da79d75a-56b9-4e52-a317-9b236ca3ac38", "sighting--602814d5-d6ea-4007-b5df-3848f75b9bfb", "sighting--a79b8a5b-ad44-4141-8ca6-a9607db30ed6", "sighting--8279d7ed-e704-41e2-b659-78ef1ed08aa2", "sighting--67b4a388-7a66-4495-a6ae-83e7f57ffd7f", "sighting--7dd80bcc-9479-4d9c-a79f-2b143a526044", "sighting--5fb0eea5-f6a5-416c-834c-14db06934a5f", "sighting--e70738a1-10e9-4d5c-82c9-6323299d0e06", "sighting--a14c3a90-9070-4ad2-a7b6-f9af26f5e080", "sighting--a8aee5a3-9198-4870-9c43-8eebb82f8e18", "sighting--682e6789-a9b7-4e87-984e-df4d14305ee3", "sighting--436a16ac-a920-40b8-b922-5b60534d6ef5", "sighting--10e1721c-c471-4bc1-9dcd-e2806d4f4ade", "sighting--3eded631-a142-4597-9e2d-9de504e855ff", "sighting--c114e99b-1ae0-4863-929b-91c288f490f6", "sighting--f0ca8a29-21d3-449d-b40b-87b63fbc9f84", "sighting--214bd93b-41a7-4a51-b579-bedda8b34396", "sighting--a0937993-785d-46f6-9675-c140423de7a7", "sighting--7e816d13-64c2-417d-8feb-1b11ed2b14c2", "sighting--9e6cff1d-0b01-4491-890c-0e21a58edacb", "sighting--b1e86dfd-1930-42f0-adff-d17fb2d2987e", "sighting--2d3d174c-c71b-478e-a1e6-7070fcc9829f", "sighting--f426850e-a33c-4fb4-920c-f5fd487f843e", "sighting--27a6b635-d5a4-434d-a0be-c58bbab01625", "sighting--2ae21fa7-9a15-4d68-b56f-28d33b693b98", "sighting--90cf5a67-b07c-4e92-9b64-05b09975d350", "sighting--8982fa8b-b293-44f5-b49a-debddf88d0fd", "sighting--0a2af79e-fed7-4d6d-9a9e-a92e9eec8fcc", "sighting--f5e492a9-caa3-48fe-9f48-68a6473a495c", "sighting--47e98916-a762-462b-bb9f-9804e6eed3ee", "sighting--d1e6d07d-766f-4ce5-9c1d-6c912cbf5cb2", "sighting--df8193dd-7d44-4f58-84c8-067a477443cf", "sighting--1144b903-dc87-4a9a-892c-7256b59f67d9", "sighting--6de25fe7-86e6-47b0-802c-35f7b60f47a9", "sighting--ea9a6b82-77db-4b21-a5fc-5d59620433d3", "sighting--4f33c759-b8be-49d5-8717-65ce8195c38c", "sighting--71614a9c-e0aa-46bb-a6f4-be4d1fdbcabb", "sighting--d30834d1-b814-4861-84bb-f0fd1aa37f03", "sighting--3c31278d-a89b-4111-aae1-d9f74c3edcaf", "sighting--7a36811a-9154-4fdb-8b96-fc0d373a545e", "sighting--1f24631a-b6c8-4dc6-9840-cd0c7c368799", "sighting--d8e07281-abe9-41d7-8a69-dcdb7edd5cfa", "sighting--4149a385-75f1-4981-94c9-bd5b4ea14089", "sighting--15c6f0f9-1a39-43c7-8554-9ba1b8a85e63", "sighting--c4327b4d-3a6f-4ee2-845f-e9d8708b9d66", "sighting--871bfe9a-1028-4455-9953-bd89367d1582", "sighting--c9a6bcf2-86f4-4566-8536-37df7f5295fc", "sighting--2e3c07d2-b672-4869-8c02-3eb727915bbc", "sighting--cfcfb320-34d7-4742-b357-95d9b73e4912", "sighting--e1d7041b-fac9-4cbd-b3d5-1b037ba80255", "sighting--17988b29-1f68-42cf-be22-a6fedaceceb4", "sighting--e4f62df7-5125-43ac-928e-ad5e8e15a09b", "sighting--cb019b85-ec63-4bef-92c8-1425c195cef2", "sighting--65252e58-e84b-4200-82fd-df371fbea8a3", "sighting--d7f48fb2-69d4-4950-8060-9649ad2e20bf", "sighting--244d7045-108d-4309-8725-5d7f4fcd7cfe", "sighting--94bc104a-a3ce-496e-a757-f66bb089d573", "sighting--aa441347-8041-4db2-98ad-64fa1b0b01f1", "sighting--44bc7c8b-cb8d-4de6-a2dd-75687099700d", "sighting--78d60919-e9ab-4c0c-8726-2e3eae19de1f", "sighting--e9941d9d-6a3d-4a19-bf4a-2ed7ded1737a", "sighting--1fb5621b-9a9e-4e87-8e6f-42384a51f269", "sighting--b42372d7-32e6-4916-a9bf-264436b2d1b7", "sighting--26b02d87-d84d-4812-bf07-0bd7400fe372", "sighting--fea92c14-b3b2-4e08-92d6-a13c233aaf5b", "sighting--316f0a04-171d-4fa1-916d-3f396c82bd61", "sighting--d9d6ff96-ea1f-4429-8021-692eeb21f2b6", "sighting--7c2cc3ea-fd30-464f-90f5-ed383a94c0d0", "sighting--6ded301c-a487-45ec-b829-f5e119fb44d3", "sighting--eeede860-22ad-408a-a08d-b1bcffb64e87", "sighting--085fd3e0-5225-48a4-9831-fc3f56d91e06", "sighting--80d07179-fc79-42ef-8003-af125659c9e4", "sighting--fb82376c-78f7-4cb2-9ac6-14ee20f2e96e", "sighting--161fb8bc-50d0-428f-bb58-0e86f6f8dea3", "sighting--cd066d86-572a-425b-966f-56e33675d0c3", "sighting--d3d6bc0f-b07c-4aeb-b5c7-ec2cc285010b", "sighting--92727f8d-d97b-498a-900c-a0ef4fbb6d10", "sighting--69ba110c-a269-4539-a6cf-7c0ee5fec413", "sighting--7371637f-3911-492a-8343-99fcdc430393", "sighting--24a79af3-7f2f-4e1a-a7c0-6c8e941d7938", "sighting--4b23e1ef-a271-4a38-9ff1-d6bcae827a88", "sighting--1a79727f-7758-4b40-9823-e887c0d44bf8", "sighting--7af24603-fe52-4d85-9c9c-9b80f647730a", "sighting--33163484-a4b0-47bd-aa9a-c5046a86966c", "sighting--d4e72181-27d4-47b2-8670-0db92b76d948", "sighting--2d4551ce-fe0d-4c6a-a17a-11d97b3ede87", "sighting--a8de0885-436d-4ae4-92ba-bd950c8d088e", "sighting--9af163c0-b3b2-4268-a038-b35a1684823f", "sighting--b9d76bfb-02f4-430d-affc-6020bd8c1d97", "sighting--3d5b2315-fd64-4422-aa29-2a4fa7b593f5", "sighting--fecb35d4-b6a5-4386-9c24-5fc67f5d4f48", "sighting--5d961613-4e94-4449-8996-1cfbf1f3b37d", "sighting--fad89c3b-670a-4822-bb98-bf81a56f192c", "sighting--c73a8ad7-d634-47f6-a6ff-8c2cb128961d", "sighting--3c6b3d44-fd33-4027-98e5-5afe80a8d6d4", "sighting--7622e4be-12e0-44cf-b479-267f6c742124", "sighting--4b0a65c5-3af9-484f-82cb-c97c1c7d8afa", "sighting--302a1031-717b-490e-88cf-1716dfa31eeb", "sighting--fefc9d3c-07d1-45b4-b8fa-a51b678aac34", "sighting--2d82df81-56bc-4b74-a569-88f156cdb95e", "sighting--5095194d-b89e-48c3-8165-bc8e5745d3cb", "sighting--e41e11e8-7173-40bc-9734-b18de9115a14", "sighting--2b1cf585-48ea-48f4-8d20-f6b455b0d6db", "sighting--73d01d01-7657-405e-b12f-70f373bf259b", "sighting--04cde23f-c049-4031-8c55-cd66234595f4", "sighting--1548a1b3-cfc2-4f92-9416-1dfae966534e", "sighting--e3c1bf4c-6fc2-4d77-a9de-de482944844d", "sighting--4af89fae-4f0b-44c0-83dc-36d270a672ca", "sighting--caef8e03-b24b-4df8-a469-5c970bca70ec", "sighting--230eb4c2-ce73-4fc1-a662-8556d0d79b79", "sighting--05215fb3-bff1-442d-8d54-bca0390b6772", "sighting--5ef1ab30-3933-40e4-b526-dc7caa0d933e", "sighting--2d2c5cf2-23ee-4add-b0fb-d3a751007bce", "sighting--a85b5513-2cdd-4d0a-a340-2d9bce0ded51", "sighting--20b3d083-b907-4180-8a08-3a1a057d5b9a", "sighting--2eb16e81-82bc-4056-9333-c421c06f1a03", "sighting--125eef98-cd27-4653-b17a-dcc995679bc3", "sighting--2daf0221-bc45-4ed2-b68a-04839675fa91", "sighting--39acaa5e-55da-4a6c-b369-108f1e092220", "sighting--52476228-c7e9-45e7-bd47-7ca116db0cd1", "sighting--0ef2591e-b155-4e4b-aa9e-ad1d9bb909d6", "sighting--b0abe4ed-6565-462f-9e09-70995b4f0648", "sighting--cab0f715-e1b2-4c48-9f9f-3f763193a463", "sighting--bfe5841c-0553-4313-88c8-28a6a8196563", "sighting--968cbc7a-486c-4767-9203-f1c8faf63a06", "sighting--4aa696d4-9e9a-4ec9-ab22-37d539cb2183", "sighting--39bcf1d5-5da8-427e-a633-b360f00f6c9c", "sighting--171e60d5-aa6e-4c54-ac7b-2baf74dbf4fe", "sighting--0a4da2a0-458b-4917-8c00-d21414b5cd64", "sighting--d4a99acb-79be-42e9-bdb9-6c9b48a765f1", "sighting--ce8a0a03-63c5-4b05-b2c1-2b191b00b6da", "sighting--92a6836f-d80e-491d-a684-17dc8608ed30", "sighting--f0238428-d610-4324-b6fe-b368ea081343", "sighting--3f58455e-a9b5-466c-a897-afdc6ca5c660", "sighting--efa42c78-e02d-4411-b90e-9ceb4604c780", "sighting--4f75c9c7-6df4-4023-b2ac-ee14ea889a10", "sighting--3baf9daa-752a-4780-bd57-3acc9660a19a", "sighting--0792c51f-53b4-4c8c-9759-9643bf7915a5", "sighting--c0e98f44-a282-4efc-8445-d9f0423e8a84", "sighting--b4716080-00a7-4fc3-9af7-9aceed5b7e91", "sighting--9e15ff54-7098-493a-9f9d-a5a439b5b3d7", "sighting--5d55cd13-9ddc-46e9-85fe-39308feb745a", "sighting--3d94449a-7d1c-4e49-8670-fbf52fc2f6d9", "sighting--75b32c61-9832-4c33-96be-9ab696159943", "sighting--254bf7e2-3646-499c-92c2-a0a3cb9b37c0", "sighting--5e579767-2564-436a-9451-2a37347cd261", "sighting--2a53085f-5d0c-42df-8d2b-f14db8ca6976", "sighting--3cbc3306-7317-40e1-a432-4e2d0b77e490", "sighting--ee11bf43-6e8a-4f4f-8435-7d5c00fedc9d", "sighting--b7bcb0fe-13be-4f77-8334-2e5d488875ef", "sighting--97d2e463-62d2-434c-9266-712477f13ef0", "sighting--df380932-cadb-45b8-b317-1d178d43f123", "sighting--1f71111a-9047-48fa-ae04-a200967c5d50", "sighting--f705a58d-c6c3-47cc-a2ce-3c76be61f691", "sighting--d9f97b23-b048-40c6-a8a8-f7089448e92a", "sighting--b146bd8e-312d-4ab3-8e8c-acaebff208a8", "sighting--7d8f91f2-3c5a-4000-8933-a589ec1a1470", "sighting--a269f927-d8d4-4af1-8e59-9611d4971c19", "sighting--f2380438-7e95-479c-b6e1-ee3641d62d1f", "sighting--fac97cf7-e06b-429f-99f7-29d168ad4970", "sighting--5e308af0-42c9-4dab-b83b-13b386a94cd7", "sighting--8e53b725-6db6-4690-95de-45a48514fc6b", "sighting--03ac4b20-bb7d-4616-8d17-c8044fec44d8", "sighting--e317c887-a772-4e3a-848f-7e05b7404354", "sighting--693bdd7d-1d1b-41b0-971b-164e1edf8908", "sighting--b9aee284-3a89-4c11-b95b-aca956da495b", "sighting--4fb45990-518a-493e-aaa1-6c78fc264e67", "sighting--b2127124-2a40-44f5-a261-e8760bca3622", "sighting--35306e59-04bd-42f6-b7f4-5a47f2fc1a70", "sighting--78325caf-2a2e-4c28-822f-4bf4c467f815", "sighting--3d754350-a9a4-43d0-aa5e-48813851774c", "sighting--55263e42-7347-42ac-837e-4af17b1a298f", "sighting--c0077610-47ce-4c06-aaa4-c35782d2a6b3", "sighting--cf6fd651-18af-4069-aace-3859a2b9662a", "sighting--35443c58-4924-4404-9b44-18cf4c7ad433", "sighting--95211c94-9004-43fe-b513-c6abdf08792a", "sighting--4eb13853-1988-4316-8971-12d6133accc0", "sighting--279adfb2-9af9-4698-848b-3c2fee524b4a", "sighting--dd73a03d-b64f-4eab-ab99-17408ff38df0", "sighting--4fbfcc89-17f4-4613-9449-1b2dc0be0580", "sighting--8048a0db-819c-4294-a6d7-3e6560556d90", "sighting--c1438274-4109-4e07-a49e-d209663ca3a3", "sighting--2a7444d5-5569-4ca0-9ea6-5036c93aa4e2", "sighting--dc200ed6-b128-4948-b493-cf0fce2711bc", "sighting--2021dc40-70eb-4429-a220-c95a4b7a1e05", "sighting--9ea19610-ed6b-4369-9fb8-973843c41134", "sighting--3ea4da0b-eaf4-4bdc-8a64-0440fdc7571f", "sighting--6ba008c4-fc6f-4ead-9b81-9614bb71c3a1", "sighting--12f9d14d-b954-43e2-9da8-7f695508fd1e", "sighting--25771afa-dd0b-4cfc-b213-39884e0bdfcc", "sighting--d222ff51-84ab-45f2-9022-790504384ffa", "sighting--04a9b526-19e0-4c16-a4ec-8a516667315b", "sighting--e6c081f1-1b76-4606-b5df-6f68d0e70201", "sighting--dfa2a35b-fcef-435d-9634-e6ff156f5181", "sighting--af127ab3-88cd-4cbf-a3cb-221629581eb2", "sighting--663f5b41-1406-474f-8bb1-a4c2ffc2187e", "sighting--4a9c2c9d-da13-4c8e-8fcb-f129e3391f03", "sighting--7a2d0b96-615c-4098-8aa5-2479f2bf41c5", "sighting--f32afbcc-68d4-44ec-a383-04c439a96743", "sighting--a179fd8b-dcda-42f8-a6bd-2c6d4ac84c97", "sighting--be9636a7-4b80-4245-87d2-804f01c1ef65", "sighting--68392ce9-eb72-4fa2-b423-355534439851", "sighting--c57406c5-69c1-4b54-8e7d-dc8218932c9a", "sighting--661cd288-0128-47ef-bd8b-47c6d4ee7d12", "sighting--26727be9-bb35-4c89-9ace-a82c6234b04f", "sighting--d89817cf-eaa5-4aa2-8537-42f768ef78b4", "sighting--b522bb06-dca4-4e9b-903c-a770ed4e62db", "sighting--c361086c-2ece-49e5-9513-0399a49a2741", "sighting--680f6bcd-31ff-4a4c-949f-129c466f8ad4", "sighting--e2f8d7b2-554f-464e-96c2-6a8df3adf5c2", "sighting--98caf099-6740-4835-98ce-e113f92ab931", "sighting--3f38aa21-fa29-4d8b-84e5-f47362d5d066", "sighting--6af980ed-2ef0-4284-af75-a909f02f4120", "sighting--ead189ae-44da-44c8-a90b-1e8d9208e805", "sighting--75bc1ab8-1b92-4975-ba07-3506b1f5256e", "sighting--a188b38f-2035-441a-aa29-c024edcee9ea", "sighting--45813930-381d-4765-ab87-4b6d752af87e", "sighting--ea3359ad-d18d-4f1f-8988-8c90f9099830", "sighting--d7f2b251-eb50-4e09-a02d-5e6e65484e67", "sighting--7fb75862-fb82-451e-9efa-4f9951327996", "sighting--f3a4c7e5-c5da-4276-8737-d5b03e718f9f", "sighting--4d214f9a-4200-4f40-b0a6-35b31108e49e", "sighting--81f6fa8c-76a0-4736-9bb6-54fdd927c0d5", "sighting--415f3145-2639-47ab-b799-7937798bcde6", "sighting--8a414983-b86f-4020-a830-7f4391f4fe7e", "sighting--6d57d121-71af-42e8-80f9-44d980b539f1", "sighting--717e7ed5-b15f-4aef-918b-62cd26aa1039", "sighting--cab68f02-4180-49eb-a17b-24627166d319", "sighting--1922e6b2-d2c0-42e6-93be-fc3494506064", "sighting--375de666-a261-44df-b8d2-f5340722b973", "sighting--3513800f-39d2-4c72-b154-8bdde1433157", "sighting--ce6d3b93-ee8b-4fd6-97b8-87db0800a663", "sighting--4af3ed11-473f-48da-9c60-d6e3a7f5fbe5", "sighting--e05b1b11-e583-49fb-9476-cdc7b219151c", "sighting--f8cba500-e846-48cf-96d3-ee4064785ab4", "sighting--9ca33b48-4b93-4322-b89b-890f7bccd858", "sighting--7e9eee9d-87eb-4810-8033-b2de6c2de39d", "sighting--98f218e0-f920-4202-94d1-7b50d7b3d363", "sighting--d76a74ec-ff79-4b64-bbd8-ebc6cf901658", "sighting--d2a8ca17-92a8-4ef3-adf7-320aea518483", "sighting--0671beb3-cc5b-4842-96a0-30af23ef6cb9", "sighting--e438801f-bd31-4042-8506-ad0c518601a6", "sighting--3c0a38ad-2b4c-4b0d-b2ef-60d4ae8a2d08", "sighting--6dacc1f2-adfb-47c9-8255-dbe320909f06", "sighting--707dd8d1-1ec7-4ed1-a81d-9897818917d1", "sighting--bf1e7597-6b58-4280-ace1-e7e2fbdb5582", "sighting--e8640f09-57d9-4ec7-af2e-8addc19d47b0", "sighting--fe245dfc-074c-465b-9bbb-c0731dde6563", "sighting--f084fdad-3c3f-475e-b58c-51b1d526fc98", "sighting--e6fc985b-5fbe-4a4f-9268-1b37a98dcd7e", "sighting--b7a0cc3e-fb4e-4cb9-a039-bf99532528a1", "sighting--2818a681-107f-42dd-be20-f9b3e1c8cfa7", "sighting--f9f5e766-266e-4943-a264-492e585d7966", "sighting--dc4d650c-c9e1-44fa-bf0b-63342f462b89", "sighting--34b6ffae-defb-4a57-b5ef-e97062c416fb", "sighting--c0c2a380-1dd3-4512-b220-d914cdd9efbd", "sighting--b9559fda-4ebf-4f3e-b6d1-2986206b9f11", "sighting--768fcbfa-3172-4bde-b62a-8252968a5357", "sighting--7b4f83fb-a356-4ab3-b6df-128b686f365d", "sighting--1d078044-1a93-4443-b485-e29328c52d7d", "sighting--2708a626-4372-4619-8a2b-a5dfc1b5e455", "sighting--5bf504b2-f7f0-4cd9-9c99-1bff36178fed", "sighting--e3d28bdb-6c1d-4554-ad76-db3cb87bd9ba", "sighting--02329117-afa2-4408-a4e0-e374fa61e982", "sighting--241431c5-84b0-4ae6-87e5-188b0ca013c8", "sighting--7f7b981e-df84-4a18-a30f-4b7ec100afc8", "sighting--d6598698-0394-46e9-8a64-18689ed08340", "sighting--8cc1ffce-38f7-4dc2-a815-eaa1fd6ca615", "sighting--fc18798e-a002-4432-8981-fc17623d879b", "sighting--696bf79e-7b78-4ecb-a24a-2252b494d8c4", "sighting--aed3f5e1-982a-4205-9633-d7dfcc024068", "sighting--f50ec99b-66ea-4545-8dfd-dc90531849ca", "sighting--1fd783bb-c485-4e9e-aebb-7d900fecebd3", "sighting--f1eb6f56-75c4-4dcf-b06f-a001d448c81e", "sighting--fe5a707a-6f7a-47b1-ab99-3ed326965e19", "sighting--23012fdf-b2a5-4b8a-862f-2542b144a58c", "sighting--6c687eb6-6b3d-4b5a-9650-6e36869f0227", "sighting--ff76024d-e9e4-4f04-ae1b-2e6acd54050c", "sighting--3f2e443d-dde5-4faa-b373-e4535a44fc9a", "sighting--37b3e896-aa73-43c3-96cb-1551bee62395", "sighting--427cfa47-a126-4fc4-a3c4-2992f7a8cc56", "sighting--67407082-c013-45ff-bf44-c9953d958266", "sighting--db5aa701-130c-49bc-b8e3-5bc11ff2b74c", "sighting--63ca3194-2699-451c-bd74-82322b395a1c", "sighting--8284de37-ea33-43fc-b745-9917bf235728", "sighting--0af462ea-52ad-4246-81d6-af29ccd959e9", "sighting--63956a02-824c-4ad3-b253-2d4355df8abf", "sighting--dc29e376-1330-436c-8de7-f37a652d70eb", "sighting--13ffdd51-36fd-4846-ae1c-58ff2df2a59e", "sighting--a662f9e4-1929-4543-8e7c-f982c47b330e", "sighting--552ca811-e427-427a-b5e4-43ec3797ff0f", "sighting--d94dadd2-32a7-435d-aed5-3abf6901a2f7", "sighting--00182795-d67f-45e7-9a7a-58978baed6b6", "sighting--b08390df-7803-4ce6-b25d-dc77d380e6d4", "sighting--d5a9f3f6-253a-4589-9a42-c94794e37c63", "sighting--bb7ccddc-fdca-4327-b87c-18e1fd335d11", "sighting--8aa0465a-12b5-40dd-919d-ed24e12321f6", "sighting--bb1e07d9-07d8-4bb5-87cb-ecc355bec771", "sighting--f2b7e862-a10b-4ac4-8a8c-c83c9eafb969", "sighting--cf515bec-5c2c-4f61-aa8c-a6d5f5e2ee2b", "sighting--336093a6-98cb-406f-a633-9acb87a67cd5", "sighting--a138b1b4-2a11-420c-9f1e-5f868132ab63", "sighting--c9aedf49-ebfa-4f1a-aeae-800cd359f273", "sighting--771d7ce4-72be-49ff-a5c5-3f9f15a7f804", "sighting--2dcc6c72-a619-4112-8647-7efdcf3a85cc", "sighting--2c97c946-a641-44f5-8597-a7a2536d7ccd", "sighting--fc44036c-cf5d-4f6c-9b14-c9825a77fc30", "sighting--c529b132-d1d4-4778-bb01-bbc22a35b3b3", "sighting--8e9a3f68-71fd-457e-90ae-69c6e3c6621a", "sighting--e279de90-23ba-4758-bb4f-3b4da3153c66", "sighting--0d46997e-f6c8-437c-a9fb-95edda3b3959", "sighting--a3b533b3-4c69-491b-9f23-8c53f4d1f565", "sighting--faa01b2b-a99c-48a3-8340-21e35a257b8d", "sighting--8612cf79-9855-40b3-baac-d5232ec03db7", "sighting--613d7004-1d81-4730-baa1-4f0cfe380aa4", "sighting--0402c25c-f28d-49d0-87ce-38787209f6a5", "sighting--14b1551c-f7c3-41ff-9137-5f462bb4cd6d", "sighting--fc02294f-43e6-40d0-b5bb-29a21bed93cb", "sighting--78a83f99-12f5-43b0-a2d3-4caa4b922244", "sighting--dc6a7bf5-69eb-4d46-bbcd-acb320f9ac7f", "sighting--a32e24b1-c1eb-4d96-ad62-e0ac9eaf75f1", "sighting--80ef5174-fb63-4614-a9af-a327696179de", "sighting--65e1532d-adc0-493a-b101-244293954489", "sighting--0c28c84d-6675-480f-83b0-63f72df5f518", "sighting--42692498-44e9-42d3-99e0-8eb39b247c47", "sighting--8ba8f298-e2f5-4c53-9c8f-98113340ff0a", "sighting--9cba887f-024e-476b-840e-cb98a0ec99c9", "sighting--114ae432-f10e-4c23-b543-7b697b41231f", "sighting--55e0a6e3-0f1b-4dbe-8ad4-f8678b0b0723", "sighting--6e348b3e-e432-4615-947b-9af20d782d55", "sighting--82d51b72-5b42-4ee7-a152-2d09f8ef60ec", "sighting--94b3d61c-7afa-4aab-9aba-a8d259e3bc4b", "sighting--faef78b0-83a3-458b-b9bd-9e54262e2ba1", "sighting--70b5cada-d7ba-46e1-be7d-fe5cae0f3303", "sighting--e07aa769-0a7a-43ce-85f8-df7d83820a5f", "sighting--494b79d8-9135-4408-9d0b-4600ca4d1a64", "sighting--ceaf383b-b659-4840-811c-514985c7f6b6", "sighting--aa48f3fd-2205-4591-9b07-2d0f31764f02", "sighting--70f2bfe9-c5e8-4227-90df-fbbb662f4b8f", "sighting--de79ecc4-a5a1-42ad-a2b9-7d1fcdee79b4", "sighting--dcbc69db-274f-4fd2-884c-1a6ddf8d67b6", "sighting--5406fbb0-2c5f-431f-9b46-69a6385aec4e", "sighting--1023a0fc-ae14-432e-ab90-8fa19dbaf015", "sighting--4f2b805f-7a5b-4334-af31-0eaacb6d9514", "sighting--a0936013-e4a4-46de-8334-462153b42928", "sighting--5b9fb7cd-ad84-4f28-b6e1-b6e94240eb43", "sighting--cee4fe0a-276c-40d6-8589-eaba22dca7a5", "sighting--693cf942-178b-4b04-843a-d3243ff4a80a", "sighting--cf207c37-a7ac-4730-bbf9-e31cc909c2a9", "sighting--542f575a-37c0-47cc-8fe2-304592b91bbf", "sighting--48915306-2047-44ff-b6ad-8309df64f434", "sighting--385d871b-ae69-4591-a377-752bc03bb739", "sighting--bfd73eaa-db4b-4273-a290-f1590ca2b82e", "sighting--f15ebe61-178a-4cdc-9f9c-e9821a2e8e7f", "sighting--16cf31de-10d7-40aa-a499-837b2f4d68b4", "sighting--216d71e7-e0db-4510-bca0-45fb353ae040", "sighting--5353d678-bca2-48bf-b608-652940a753fd", "sighting--641baa81-c205-422d-a50d-92e593ac6287", "sighting--91ad36b1-b4a5-4227-96c4-ca7889e61c12", "sighting--16d597af-fb47-4bcd-8330-aef520a8cd99", "sighting--202f08b4-518f-44b2-b539-aff621924d1f", "sighting--bf3f89f6-7a3c-4171-ad48-de2835a80e77", "sighting--f01f9396-5320-4dfa-b9c2-05cfb56a4aa7", "sighting--dc337158-f76e-4dc2-89e9-23b85597d916", "sighting--5c557a5b-a323-45c7-8a4f-aeaab6f613f5", "sighting--1d3cafc9-9fe4-4450-8e1c-76b0dd658788", "sighting--86810432-7d8f-4607-9108-0ba5ad78a304", "sighting--86c680f1-0591-4ebf-88e3-6ea7193bca15", "sighting--e0d5bd5a-b1e8-44c7-a825-c8ab376bd64e", "sighting--ca939cfc-17b3-4df2-b57e-0dca90422524", "sighting--c9b845cc-ed15-473b-9164-cb737b7c0b62", "sighting--9ca61a7e-e8e4-488a-9781-6833c48ae5a6", "sighting--7cf5a96d-d367-4e83-b026-aa67bfe2eb4b", "sighting--b0745f2d-746b-4847-affc-8aa6bac60170", "sighting--b8370afc-fa1d-4a72-ae63-9d5dc668242b", "sighting--7dccc677-0ee1-4991-a539-363d5f1a0572", "sighting--4c1b3047-9eb3-4761-bbe7-fd334b61e5af", "sighting--53bae53c-4b1b-489d-9235-096a4a93739c", "sighting--a526ae62-3fba-4289-a78f-fdc5e321d221", "sighting--0082c6fe-cec2-4311-aeb6-c525e09bb409", "sighting--74a9f65f-94c1-4427-a976-a95a78a8eaeb", "sighting--8cf482eb-e1bd-4a88-8bca-3ed0303a159d", "sighting--89c1f87d-10f2-4793-8abc-fceff822f9a2", "sighting--bb5a9fe8-683f-4a89-9c24-b3e900288a1a", "sighting--f5ce9087-bfec-404e-8e58-bae756fcb326", "sighting--77628ba6-3c4a-43d5-bf6a-aa0b93a980c0", "sighting--2566e74a-2eda-4559-8a88-5e79b852e141", "sighting--72372873-ed38-4fc8-896a-f49a2d9b2202", "sighting--3b110d6a-9668-495c-a14c-fa11d1c4421b", "sighting--9205618d-8c68-4d32-9a50-116433be7b97", "sighting--361acc4a-dea5-4898-8ce7-49eda579b815", "sighting--c092b234-9618-4b66-bef0-950cfc7c1158", "sighting--873eb1ae-9933-434d-95ce-e5ddf96bcfe9", "sighting--3010bd83-0d32-4288-a3cf-c56724c1a4e9", "sighting--918554f5-ccca-4933-8ff2-84e66e0563ba", "sighting--417a90e8-7032-47b0-8809-f26ebc89f708", "sighting--0b61a8d5-7610-4769-b944-08c1071da117", "sighting--c716cee0-89df-4387-ada4-5a5fc30c5358", "sighting--9e37a4dd-84a5-4659-a686-ef995f9f901b", "sighting--fcebc548-23b2-43e0-9572-fa4fdaa41722", "sighting--bf86946a-c5dc-49ba-ae4d-d6fae84bbd7f", "sighting--43ffe894-9114-4764-bbbb-e93e2f6ab147", "sighting--f6489f05-a914-4247-9bd4-f86776caa1d3", "sighting--06bec591-ff1a-4b63-9d04-efe60aa5ec53", "sighting--3507d83d-cc4b-4b8a-a03c-31f89447e453", "sighting--9397b9aa-0d55-4500-8cbd-52d8ad841342", "sighting--888dee0b-13bf-46ee-89b5-5543d205f69e", "sighting--722b6704-20fb-4d3a-ba9f-c6aa28eaa2e9", "sighting--2d70fb5c-d24b-4012-a9c9-1ef90f3287ce", "sighting--ae55404b-817e-4c06-a258-5df5a5cc1aad", "sighting--b46d0771-b085-46e7-af3d-dbb7b7575498", "sighting--dc588787-aaf2-40e2-a8a9-d6e414b36aee", "sighting--3575890a-a0bd-4af8-bf86-d138afcb5fd3", "sighting--91985e73-47b5-4f73-b3e3-05eb7e0a474d", "sighting--7db7001d-c9c9-4900-80c8-0438b5043b3e", "sighting--d6445c58-fc62-4452-89f8-e363ac040c3b", "sighting--7fb24a6e-f7f5-4b35-be57-0ef723021bed", "sighting--bb198f80-b0ed-4795-981d-7d6a067bd5ca", "sighting--ebc62729-ea58-430a-98f2-cce1cff53465", "sighting--abf7b90b-2b93-49e8-a1ee-c66a7c157b87", "sighting--49254b9b-8808-4830-861a-d747d174cc91", "sighting--c997edf6-9bc2-4088-97fe-2fa9f22ddd16", "sighting--b7a9cc76-bc96-4749-adce-7df3a64585b9", "sighting--3de74f45-2310-4f89-a66a-91579b1a2e85", "sighting--27fbb552-461a-446e-9cc2-d11a1e34b3b2", "sighting--15824229-bfc7-49d3-aa5e-6051023dc50d", "sighting--3296e228-8f45-4a02-a7d8-ddd1bfe0e0af", "sighting--3f7a6566-7afb-4b24-9636-487ef05650be", "sighting--9d16b6d2-0793-480e-9a0f-4fbdc250e259", "sighting--1f8b837f-2490-46be-96c4-724ce75511f9", "sighting--557c97e8-6e87-43d9-8573-e85cd4de4e81", "sighting--6bb34da7-6de8-4377-a2d4-bb5af095c4ee", "sighting--51bd0e65-226a-4f41-abdd-e5e61cd4d560", "sighting--a9770036-245f-40cf-b52f-b9e5e174fb5e", "sighting--ba67accd-2067-4b66-b31f-b3bd1d16e682", "sighting--f309a9f9-f514-466b-bf00-03b0631483c0", "sighting--8e0006fd-bcb8-4be8-b062-ec23f2175c0e", "sighting--a7e3e2e4-a1de-4c68-a810-6098fa90f494", "sighting--993aabda-b48c-4df1-afde-f5ac00b9b52c", "sighting--93746656-07d7-4ae0-919e-9f7e7fc63b0f", "sighting--2ce05ab4-09a7-4b30-b561-addfa3cbaa3e", "sighting--aa8f66db-6792-42ae-b84d-5bcaaa27dd36", "sighting--07dbb604-b3ca-4e49-914e-b87a60e866ad", "sighting--bb61e0cb-af58-4e75-a209-37640ad352ee", "sighting--fdb9b252-3fad-4b97-acc2-55ea0fff5b86", "sighting--5bbe4c7f-7311-4d06-aa7e-6911991a9cf4", "sighting--c5f882b5-f1ca-44bc-a331-23112d4bc0a0", "sighting--c2a26205-6ca9-442e-aef1-d2d898a9dcc4", "sighting--0d908fad-bb74-49ec-969e-826f7d26e5be", "sighting--8396601c-21eb-429a-9b8c-4a22bc91e231", "sighting--df0386e6-5425-4571-9821-de4ff237a380", "sighting--c76297f7-f8d0-42fb-93d0-0d9797a9c114", "sighting--565d3f50-9c33-483f-b697-900833a56a51", "sighting--4f1eef44-5759-4f25-9fcd-6d038ac62e92", "sighting--44e2d252-415f-4064-9def-201539d48665", "sighting--e9a674f3-9e93-4b1b-8bd7-ee78031fdba3", "sighting--d6d39cba-8a6b-47a6-8003-3f5557c4e411", "sighting--2365d7b3-7047-47e3-807f-4498181733c4", "sighting--bdc35100-2606-40ff-875a-51bf8f625556", "sighting--68b7a7e0-5271-48a6-9b2c-e42025c4cda8", "sighting--0c7db64f-d684-42ed-874d-615448b3dbd6", "sighting--d7405148-d3ce-42ab-9b34-ba2199837bb8", "sighting--79aba69c-4f8f-4f26-9b7a-c929d3c2ecf6", "sighting--9a62919a-d3b1-4937-b07b-7f0a94573d7b", "sighting--156fde57-4729-4ef9-a257-b55eddf553de", "sighting--4d3977cf-eccf-444b-ab07-6ac69317c434", "sighting--40bc9849-1a37-46ab-80b6-8df19b75dc1d", "sighting--aa291c97-9120-4fae-bd8a-0eccbba30580", "sighting--ac843b55-15ec-4859-b819-33c01ed234f1", "sighting--cd7c9ade-4901-48c0-9768-13015d2b1f55", "sighting--31f51f47-510c-44f0-a696-53b9499ff82b", "sighting--b5942dfd-74e6-410a-aa38-003a8c58683c", "sighting--f0395f7d-bf31-4657-99f8-31475fbc0855", "sighting--e901b3a0-a75f-4004-851c-583a69521300", "sighting--73c385d6-d776-4cd4-8d39-640d59766149", "sighting--e8a2ee1e-ef6f-4232-a0a9-9d6d496cf9f2", "sighting--b3ff35db-6974-48e6-a867-10c08d25bc7c", "sighting--b2ce92dc-dac1-4b4e-ac85-dc1fbc170f41", "sighting--6620d2f5-81cd-4fd1-9f1c-af2cd6d9dbd9", "sighting--68a2a0ba-f397-4a24-a7ca-940626272cac", "sighting--2ee25127-0eb2-4a77-b0b1-f4fac22e3980", "sighting--18affe43-a99e-4fc5-b353-543f8d4efb69", "sighting--63968922-68a1-41d2-a677-9c1158a13680", "sighting--1867854d-4bda-48e7-93e1-d8f9ff14f1d9", "sighting--f97b5c07-b1bd-4b5d-bdf5-d877bad84d72", "sighting--374a2900-8f50-4315-bb48-103140c754f9", "sighting--070a46d9-a46f-4266-9f92-1a457a458b26", "sighting--7ce23fbb-b79f-47a2-bef4-761e5710f77c", "sighting--e1387084-6e23-42f8-a959-81df955c31b8", "sighting--8a816469-6e2c-42c6-9f10-9fa1c360c40e", "sighting--47089763-73ba-4f03-9f8c-82a33555e301", "sighting--95cb808b-6e3a-4347-8079-4a728dbcf005", "sighting--4cbc310b-2db7-47c9-852a-e3dd1a9583ab", "sighting--781b7cc3-bb7a-47c4-9172-8247df3b1341", "sighting--52f75714-ad74-4a03-b9bf-83c0b0db4339", "sighting--b5c2b86e-8601-470f-9c8d-c200aff5b477", "sighting--51ab89c0-1440-4092-bd67-209ecb2d6d81", "sighting--2a173c4a-f665-404c-897d-fac8229db29c", "sighting--e8fd9875-94e0-47b1-864a-e3bbb35e60ca", "sighting--b2a0ca67-02e2-4433-a98a-6824f9d32535", "sighting--dc17ae1b-d52d-49d6-b93e-0dd5d997a0c4", "sighting--c9f6bdf4-4fc5-4e2d-bc3c-53ef70a0615e", "sighting--666348c3-9f3f-4652-af5f-b308d23efe4f", "sighting--7242f59d-cb3d-4c62-a770-5116d592a978", "sighting--c6a0764d-187d-4f1e-beba-c3346eac9d15", "sighting--9947a29c-45b1-40c1-988c-377bd018c5af", "sighting--b19ab74b-8933-453e-a77f-7942bbb706d0", "sighting--91dd2b7c-2bf8-4227-bdf3-e24d613b0a80", "sighting--45c56531-d2f9-4a1a-94bd-e0dc39a43205", "sighting--ed5084db-7727-4cd2-bfd9-5cd4061acc25", "sighting--8f37a754-5c61-4422-8f40-d832c4a011bc", "sighting--85c23e67-41d9-478b-a70d-4009f4c6c6e1", "sighting--bb712eac-10e2-4a34-bdd6-ce5397d238e3", "sighting--974bbc7e-0b6d-47a3-af68-7a91f64135b2", "sighting--57c4a01a-9149-4d52-acf8-d46ecda6142a", "sighting--2970ac25-fde1-4147-b6ba-1ba7129a3b67", "sighting--c656d699-facd-487a-aef2-fea722c2da63", "sighting--2a18fc6f-257b-4539-a2d7-fd47d6b46fca", "sighting--433d6e54-54ec-4e3d-a084-06d661d142d9", "sighting--1c50f357-a639-4e48-b278-65270a1210eb", "sighting--e64fd1aa-7531-4be4-be6d-1916cace0ca7", "sighting--ac27ba8e-567e-4981-aaef-d360d6242506", "sighting--59dfa212-d3ba-4b43-8151-0a22dd93218f", "sighting--8c1cdcab-ef94-429b-8cda-9f42c3c2636a", "sighting--ba8b7866-1ba8-4229-891f-cce943b81fbc", "sighting--9a6b136e-66b5-437b-b5a7-b5d3bb3b8f9e", "sighting--a10c9cde-9328-4e1e-a2cb-c12898604b91", "sighting--60623365-fc4c-4c74-9d2f-b5e9d7af965e", "sighting--bb6a793e-a782-4d68-9561-e4611ffdbafd", "sighting--81b7836e-26e5-4056-a5dd-73eb5998d2c2", "sighting--66cf5eeb-20af-4ad3-897f-5c555010b387", "sighting--7f8fdb49-0d65-4479-aebe-149a9df68c6e", "sighting--2bc475e2-5e3b-420d-8749-7b6401241e0f", "sighting--60c8b87e-ded8-44fc-a17d-caca1bd77f4e", "sighting--c74cf61e-77e3-41a5-988b-dc85638dd61b", "sighting--aa77ce0e-4de9-46a1-9c2e-88647afaca48", "sighting--87cca384-4145-4d29-b721-70215b018cb5", "sighting--fb446737-9298-42f5-8ce8-3d603766c8b9", "sighting--976f8e5d-304a-42c3-8ea4-9c172f94e31a", "sighting--b0af77f6-4f69-4fd4-8907-871ed1490a17", "sighting--238afd65-bb3a-4569-922a-9c12e9424a16", "sighting--acba65a6-add2-4e34-8be7-c71b7bccdabc", "sighting--752036b3-7c7e-4b47-b9e6-30598147876a", "sighting--6e978d07-25b9-48b5-aab4-1e769672a0f2", "sighting--ef394ec6-a0d3-4d9a-b220-baccdeb31490", "sighting--84b48e28-8b80-4b91-81c5-5437fe9d14b6", "sighting--f6acabfa-91d7-43ba-9896-d6aa5ff717a9", "sighting--2e09f01a-5d1d-45dd-81cf-c0def1a0b79a", "sighting--3884902a-b2d6-4849-870e-a41a916c877b", "sighting--af318f1d-b04d-4b60-bc01-de3517adac90", "sighting--d9b6fb81-f147-4205-a88a-5121efeaa09a", "sighting--94ab1993-f3c1-468d-bc51-405b57c2df33", "sighting--e576b886-4a58-48eb-9768-acab8600dc30", "sighting--41e2fc05-97ab-4448-9bd4-48601baac427", "sighting--a9e6d9c5-13a3-4954-b6fe-1f5a4ed19fb5", "sighting--1fc26149-4e5c-43ba-bb83-c21e2cfcb471", "sighting--0b18b199-c86c-4a38-81b4-98329dc9509b", "sighting--4c893aec-7a74-4ec4-96ad-c390921f885c", "sighting--e6e2d7d0-4a92-4e5b-a368-ab2329762fe5", "sighting--81be43c3-3ec9-4b8f-955f-9244c7f4a2cd", "sighting--e0082082-cd72-494f-b38c-a630cf8a21a0", "sighting--0853481c-523e-489f-b05e-2a9950ce92f8", "sighting--d4f30715-5ae4-4e0e-a18c-60fead46262f", "sighting--1f7ce926-65b8-469c-904f-fa47b5f156fa", "sighting--f55f17b2-a0bf-4eea-8263-cf96eb607204", "sighting--11e33b44-c8d8-439e-a171-7b03832813d8", "sighting--20a144d5-39ee-457c-8959-23c10975bf8a", "sighting--d6c2548d-fa73-458d-bf78-6bc569166178", "sighting--4ee7fa49-c408-4760-866f-349a0c0c059a", "sighting--81e8d295-e4b9-434e-af89-f3408708b136", "sighting--bae0c54b-60b2-4916-b659-491d2de21d31", "sighting--c9cbbf68-0417-4a65-9d4c-d069f9bac414", "sighting--486aeb94-a2f2-48d3-a561-6cd9445b32cc", "sighting--1610aff0-5cda-48b0-8d90-50005307e22d", "sighting--421ab4e7-8179-4246-8acf-bc5876c3d6c5", "sighting--ef86e291-4ff2-445d-9119-fa9e6317d610", "sighting--1297cef3-f3ee-480f-87b3-044c9cb267dc", "sighting--334981b7-d9f9-4123-ad16-1dcb0a41bf27", "sighting--e8ad3205-bd47-4577-8fc5-29166b2a6623", "sighting--6a0b1437-14e7-4049-8b82-05bf141576d5", "sighting--15fdb08a-2add-4c4a-aca8-a9782d6a8339", "sighting--a2afec96-ced0-454b-91fb-c8af53f9f4d2", "sighting--3dc83d5b-370b-4324-ad34-cb82ceee974a", "sighting--dd2622e5-6f1a-4d8a-9473-6ecda3c92e12", "sighting--2e529293-9121-4977-9e54-20217773eebc", "sighting--ba0da3fc-a0b4-4a14-9c9a-14848dd674da", "sighting--6db31f14-c65d-4600-90e1-fda212282c1c", "sighting--ee442648-c36a-4359-a1fd-12f5e13fef43", "sighting--150187c6-b035-48c5-8d78-7bbab3f86e2c", "sighting--27ebc881-179b-465c-b4e7-462a6ef78dd4", "sighting--d099590c-1b28-433f-8ad4-a75b69c7942d", "sighting--25d1a8a5-9e28-4e59-8f8c-c5d5bbffe8d7", "sighting--1c070dbc-9021-480d-9d8a-dafa9a81e474", "sighting--aafdbc1a-6fcb-4ab3-b2cb-276dcb252dd0", "sighting--149e8a4a-da5f-459c-9013-00099b36bf55", "sighting--576f348a-8dca-4f83-965e-ba89fb5b40cd", "sighting--102e3bdf-9706-4c45-b7d9-79b5ef21cd2e", "sighting--1c4ce06f-fdc6-4034-b003-9b28471ac400", "sighting--22570bc2-876b-47ce-8730-f260f73b4724", "sighting--06b5c04d-8d88-4b89-b0ce-bcdef28c0577", "sighting--2d77d185-54dd-464a-8079-ef16e1b89594", "sighting--e1d56b59-b474-4303-aea3-047247094540", "sighting--0a7b53b6-e826-4f2e-b5c5-4141a66fc3f5", "sighting--8a82b3a7-8c85-49bf-ba2a-ff6c969f4b3a", "sighting--c4a51f9d-767a-444a-82ba-e1cee41ea654", "sighting--c39a798d-a5b1-49fa-b48f-78ca33b6365f", "sighting--5f11f82d-269c-4607-bc9c-bf893eb9fb92", "sighting--b8d48e09-e1f4-4814-bc42-fce35ec1258a", "sighting--d22f1f66-f440-4dd0-92a3-3c65dc0fa0ff", "sighting--025e8a38-3506-40f8-8fae-ac3e9960bf6c", "sighting--4fbfbb32-6165-41a4-a41c-b6a55f6e694c", "sighting--02ddcdbf-e008-490c-9aff-2063344e9fa8", "sighting--51a63c47-605a-476b-9021-6a3b347f09ca", "sighting--90bd5d60-f5e7-4cd8-9bb2-fe5efe04758c", "sighting--1c099974-e5b9-4e69-8f68-d60971e870b6", "sighting--3750137d-37b4-4c88-8980-545337d28484", "sighting--7b282f53-066c-4719-a53f-98a204edd0b9", "sighting--6e97481d-44a8-4084-95c9-fd1edc332e5d", "sighting--82832e11-cb4d-428c-80aa-b0791c0354cf", "sighting--cac3c051-19b2-48f4-8e06-630116b7b15e", "sighting--bd86ca73-8895-432b-a655-1e1d7b44cb86", "sighting--6cfbfa1f-5a99-469b-9be2-92b0a882027a", "sighting--0eee4c92-3f3a-4f9d-ab03-4b1b91495acf", "sighting--2d33ba09-c78b-4763-b616-02247680a010", "sighting--f47ccb43-9de2-4b03-a94f-0af0cf6206e4", "sighting--af4b8c57-cafc-404b-b9b4-d7bea2f1fa4c", "sighting--e1639728-901b-4e02-8fbc-865292cd95fe", "sighting--2888ff02-2104-4b3c-a36a-fe07aa26d9c4", "sighting--2e5cd8e8-15eb-4e1d-8ac2-73244438e469", "sighting--dcd04e13-43db-4190-a052-5b87694fbdf3", "sighting--90b3cb1b-d6a3-4ae7-b3fb-27cef099002b", "sighting--20badde8-bf70-4c54-b9ce-9a3c9d882319", "sighting--8829e09d-5c5d-4265-9989-366a6b894b23", "sighting--8e376cc9-3d5d-4657-bc15-b27c76cb1579", "sighting--5b9b13db-8b19-4443-b0b6-3892bc4b64fd", "sighting--b21ae99f-3408-4a68-b200-d3dde3b68f03", "sighting--98901c26-6bed-4e81-89c7-f0676e572548", "sighting--ed543d38-fed3-4c37-ae98-8235d85af645", "sighting--54ac9b60-b06e-4b35-9f86-57d73284cbfc", "sighting--03d63e4e-b223-4bd7-be4f-546a1a74af61", "sighting--599cc889-6e44-43d6-88d9-a05fb7c21f5f", "sighting--a6452d34-0c35-4e55-9383-3fdb71c3d047", "sighting--e9859062-3156-4909-992b-a25ba42a5458", "sighting--2128f7ec-9087-4b14-b8c4-bc725f895808", "sighting--354ffabb-ce22-4198-a339-96d8211f1f19", "sighting--3a7a7c09-6326-40b3-9ae7-076e0bb3cde5", "sighting--28b5c358-5273-4397-9201-56914ace1cf2", "sighting--b6103340-1a65-4268-8816-38ee703b1cc0", "sighting--223e8e0f-1ed7-40f3-bb07-eb65e5aa83b1", "sighting--1a3435e1-7e05-44b5-b1c7-4c18d58b9770", "sighting--f0da65b7-d1b5-40a6-b18c-d2948c57c8b2", "sighting--9b862231-b710-41d3-a081-17041d0c3bee", "sighting--16d349e1-8634-47b6-933b-5cd6320d9fd2", "sighting--17389721-43fa-4532-ae18-a9fdb1ca3c0d", "sighting--92039b44-609b-4cc7-b9d5-21017fb704c3", "sighting--364da567-fbe3-4f15-8a8d-4ac17722f26a", "sighting--71ad0b05-5633-4919-8dad-27aef3eee392", "sighting--00a79794-170d-4efd-931e-7d53c828a504", "sighting--e53f8246-cd19-4cdc-9c7b-12deb902b1ad", "sighting--07466dff-e609-4af0-a8cd-ef13e9f19955", "sighting--16108df3-c49e-4365-b3c8-0b23feb512a6", "sighting--818a58cf-172e-47a5-85a7-21835c745f0d", "sighting--02b168e3-71e6-4435-bfe2-f4540b7e7d61", "sighting--f1a78db0-50cd-404c-8036-e76b678283ca", "sighting--c00f7a5c-66be-4bba-988f-30a858482f61", "sighting--1a1c7d6a-53df-4264-bac9-ca24f0ac437d", "sighting--be51a826-0ec9-499e-9ed1-8c694b78a88f", "sighting--a4f892b1-1626-45f4-b280-b78870ff27f2", "sighting--0b983573-9d78-45f6-b28e-c4fb20755322", "sighting--a67d0d7a-f104-4023-95ec-9881edddc11e", "sighting--5b8acb27-e545-4e2a-8eff-d974a0c3471c", "sighting--b1f2de1b-c539-42fe-a53d-348ee65eeb07", "sighting--61c34cf7-a3b7-4617-9162-51d0bb228d5b", "sighting--97445e79-45c1-4b33-8ee4-44905a301fb7", "sighting--02f0af02-877b-4269-8c65-a53cb1d1cb39", "sighting--58c8f57c-7c9f-4fff-b3ac-537a6c0be610", "sighting--2f6a459e-b356-4031-8556-60394ec322f0", "sighting--9600971a-cbba-4bdb-bef5-e97c9e0257cd", "sighting--57fc8630-7cc2-47aa-a6a3-12dd8b1f3e93", "sighting--0480f24a-189e-41e5-a66d-b3f403a2e170", "sighting--dc11af6b-0a5c-43ce-a8ec-a14ffe439ee7", "sighting--05ee61b5-73be-4af5-9bc8-a316609b5bed", "sighting--78c3ae9e-ccb2-48ec-9058-767696e881a2", "sighting--8ef3cbcb-644f-4843-8467-cfd930becebf", "sighting--d261e48a-f926-4903-9675-a51c3bb9ff80", "sighting--6b684697-9a99-4448-98d5-734c720caba1", "sighting--d6142c0f-a0ef-431f-8d8a-404b248642b5", "sighting--e1d6c383-75c6-4c3b-9a9a-e6fa7f36cd9f", "sighting--7afaefa3-ac1d-4f85-9b62-d6ac3293182c", "sighting--e9614b92-4ada-44ee-8083-8aee6fe815cf", "sighting--73d03118-9ef9-4c94-9f02-97ee917e92d0", "sighting--798ad872-d0d7-4c9a-a6fb-7c8731b6d15d", "sighting--847999d9-4fbc-484d-8f9a-33d69e3a7554", "sighting--1adabe21-7acc-4353-b362-1ba95e0caa70", "sighting--c7ade1b8-2571-49bc-bf83-ea8399ac2f55", "sighting--71f4eb5a-e6d7-4627-af3c-ddfdd3a84ecf", "sighting--8778b169-66de-4a7d-8302-20ac8b0be594", "sighting--0e7df1b7-5aeb-4c9f-9e45-f728bddf04aa", "sighting--82c7c1cc-bfdb-4cc1-b22e-32a9a2d53676", "sighting--16da206d-ba80-45b0-898b-9ea6fd5c5e25", "sighting--a3be9eab-2eac-4d1d-836a-119158d08174", "sighting--7249d3fa-c734-4793-9469-af460353b77d", "sighting--fa44e7bd-bfa7-4b24-967f-7dff83bd30e6", "sighting--8820d3de-d6f9-496a-a63f-afad77855950", "sighting--5b57e36a-7434-48c5-b280-3d662fab4c94", "sighting--e62a7485-c2bc-4cde-8cbb-d3ec79672fd9", "sighting--2801f661-a861-40e6-9325-43b10845bed5", "sighting--26bcb7ae-a3a7-4c10-97b0-47c0d11e3f76", "sighting--db96d155-ee22-411d-9ff8-a193c8378c39", "sighting--1f7d9fca-beda-492b-8071-21e18e24748b", "sighting--03bcf7e4-b6f0-4d4f-a9d4-3a42350181b3", "sighting--d313249c-b771-4943-bfc4-1ffb190e7591", "sighting--a3176cae-75f4-44dd-b0cc-e31f85511d6a", "sighting--8efd4458-da76-4ece-b86e-1360d25dc431", "sighting--a708a029-4084-45d4-a1ae-78c502d582ea", "sighting--e20fb727-b478-40d2-b4ac-3ad1692b823e", "sighting--5b81b9b2-7efb-428f-8132-2bb1d1de9dbf", "sighting--bb21758a-e848-4b85-8c12-1f1df50d2cd7", "sighting--2fc6f174-ed36-46fe-bc73-f2f8e5d3edc8", "sighting--b2424745-ed3b-4a70-bc99-96b674a62fb5", "sighting--64b870c2-a08b-44fd-956c-db17bada155e", "sighting--df172a7a-75e3-4e20-839c-bc9ddd8ac23b", "sighting--1b34991b-7fd5-4477-8db5-b921e2b7696c", "sighting--7a506dc1-5981-4feb-a328-25851298c69e", "sighting--2faae9f1-f84d-49c9-86fd-1b6e8ad2b196", "sighting--e7848ea5-e7c7-419a-b7b7-30a9d611cea0", "sighting--93c9b485-98de-4fb3-8a3d-6e029cf1115a", "sighting--f2d511a0-04e9-46d2-98bb-5ae01ef56053", "sighting--659fe03e-a584-4d1f-9854-af05ffadfbe7", "sighting--c603ed43-4e9c-46b5-9de0-07e370a65a5e", "sighting--aaa41445-576b-4670-803a-516cf5a8fdd7", "sighting--2fb39a54-83c3-4301-8fae-66c6c96f9843", "sighting--223a8185-7b5e-47e1-bcf2-28f434d6ae98", "sighting--26591c37-e3c0-41fe-a321-c9b59cc0c275", "sighting--4a95d161-388a-4cd6-8998-4bef9e2dd896", "sighting--cc4df626-52f6-4ad6-8b54-210944ae2608", "sighting--536ac36a-c976-469a-ae12-40bbb0a48818", "sighting--2d1b3cb2-c6a9-4752-8a19-3da4a6ee19e5", "sighting--33798290-24cb-4634-ad00-698985ce0dc5", "sighting--47f60a64-ed1a-4a0d-9528-8f8832c21997", "sighting--f0838a8d-010e-48b4-adbb-f6e557d9fde9", "sighting--7408604b-5b11-4761-a70d-39dc8d2926e0", "sighting--30f7f2a7-d34a-4449-abb2-ef01b4b44c8e", "sighting--5723ee1f-e480-4287-bd37-df691a3b5bc4", "sighting--77a7d0df-3709-46b6-8694-5ece9ccba48f", "sighting--c0021cc7-1c82-42a1-9f5a-ceebec2a5de2", "sighting--0338ea0b-3615-47ad-b7c1-6859c2e7e309", "sighting--c66dca61-7238-43a8-8937-51b3362ae7fa", "sighting--bd22e073-dc04-4a0c-ba84-039592681525", "sighting--87f5ff45-27c8-4078-b6b9-cd13076a8cf6", "sighting--f3b47362-6022-4290-bb0b-c37a91839d3a", "sighting--342e020a-4a3c-4f16-9945-0f0a468248bb", "sighting--25af250a-2cb4-48a3-becd-5b893397f458", "sighting--d2752f6a-b92e-449b-b7a3-fb9c0932aa8f", "sighting--3906a593-8b29-4a51-9b28-e7c1af63c478", "sighting--51de68ef-a2f3-42ab-8d30-2ec4c1dc1b9f", "sighting--dc1af96e-4d4c-4b77-8e85-7cb66dd5dfc8", "sighting--651255da-cdd0-4653-87c2-c316947bed25", "sighting--573a3353-d080-4aa4-95a2-848686c4d8e2", "sighting--9f929571-e37f-446d-9888-da4f1560ba6d", "sighting--648d4617-4bfe-4b74-a23a-ff8270bc7bb7", "sighting--d544fc33-5f86-49e6-a1ce-04c55ecbb78d", "sighting--8d7baa58-9451-4cd9-88a1-184c2ca740bb", "sighting--6bce672a-73c0-4a7b-b49c-57de19faadb3", "sighting--ad81447c-87a0-48da-8fa0-61c4aa069fed", "sighting--dd9829f2-fa87-4c08-b82e-8b26031233e4", "sighting--147cda78-7398-4872-a2c9-9e2b25aeecbf", "sighting--5e359304-7d67-4199-82b7-5912b32643aa", "sighting--bd75393c-b019-4f96-bb4d-a889bfd52acb", "sighting--6dca5bcd-2004-4ade-8a37-3c0d95f37395", "sighting--e0d2c535-7545-4798-83f1-cd57bc16f8f7", "sighting--c99d583d-fa48-4b56-bc6a-aba148899e94", "sighting--abf9682e-3b1e-458d-a1ef-6f57d32549d9", "sighting--d51bf884-d779-41c6-8344-ea8769b98e5e", "sighting--727c3715-b214-4dca-8cf9-a657da9ea225", "sighting--2532b328-e789-4c14-883f-ee6860f2c932", "sighting--4d2816eb-3cde-4e79-a7dc-539763138f8d", "sighting--0cc90ebd-3abf-4fb5-af0b-47c1ae811eb0", "sighting--bbc41ce3-3fab-433e-a5d1-e123c3fa5fbc", "sighting--0d68620c-c59f-4a6a-a76f-75227b5b3ff1", "sighting--4c00a7e6-636c-413b-bbd0-c08ba33c568b", "sighting--ac03897c-d1a5-4737-8940-0c5119dede1a", "sighting--bb4e86aa-4500-4672-99ae-282169ca8b5e", "sighting--229e0451-5c96-45e2-8e22-c9db82ee4dc8", "sighting--b5fbc083-9ea6-40a0-8086-ba77c34d4288", "sighting--d60a1a6f-6cbd-469a-8c7c-75a5bad8fd68", "sighting--cfa0c473-f520-4607-b6a8-d570e8884462", "sighting--4d52bf52-ba1e-44a1-9ed4-afeaa32e4071", "sighting--0a9f0016-89d6-49fd-b06f-0d1bf2354e40", "sighting--661f4faf-f37c-4fe9-a46c-c0428461fc6a", "sighting--f3f3bc55-183a-4886-9b96-cfcde0a73c3b", "sighting--e8af6d62-9330-41a9-8089-566be1c05158", "sighting--cd245af2-c8d9-4475-ba45-4296513bdda1", "sighting--9f58a3b5-3ade-47b4-80e7-6899f71376dc", "sighting--0ec5b7b9-3912-4f30-8d81-37dc28cd19a0", "sighting--349d57e3-6999-42b2-a01f-47b25d70458b", "sighting--f336ef82-a6c0-4283-94fd-325ccb99b44e", "sighting--8ac9c66a-4773-4113-8b78-843d8d58f077", "sighting--b47354b9-7f4e-4b3f-8ea3-6c4ae742bcf5", "sighting--708eb8da-1517-4aef-921a-ad9ed294bc5e", "sighting--03e8624f-acbe-40f0-ba28-36728b82ba08", "sighting--82ca9182-c555-44a8-a583-dd5fa5d44978", "sighting--31cb2c7e-ecd2-4fc6-b0c2-eab552f49e52", "sighting--3e296936-87d4-4692-8bcb-73a640e34fb6", "sighting--4fccc42d-bd1a-4877-84f7-aefb9f35c323", "sighting--e21cae13-2f5a-4795-8c30-28dade4506a6", "sighting--7fd05fd2-c00a-4889-8b69-393291cbf37c", "sighting--6ad1ae63-82b8-4abf-aed5-ee1bff137de5", "sighting--b0c01794-84ee-41cd-b07f-4b157b960e21", "sighting--b9abaa43-bd76-4529-b638-294f2336f681", "sighting--95e03730-7c89-4e34-ae3e-4fe445c328ee", "sighting--b48dbc47-8593-414b-83b5-8cda371743d6", "sighting--647e2973-bf37-434b-8e4c-d737ddad4dce", "sighting--52fc8ac8-913c-4d7d-9055-3b2e48644cfe", "sighting--72ba2297-d96d-44a5-9703-cb5e0e7bd631", "sighting--202a8dca-e98f-46fc-aabf-99ef0836b65b", "sighting--e344a9a8-b4cf-4f32-8f49-145915371572", "sighting--44d11876-4898-411f-b25f-63f95cfbfb22", "sighting--b59da96a-abe7-40eb-b765-6e473d55dffc", "sighting--c59c7b8d-5f49-4653-90f1-f1995ecdd6f6", "sighting--b39659dd-fc3e-4637-a321-e2a3abfbb026", "sighting--18059a8e-ed2a-4eba-a381-d0b2b19f21d8", "sighting--1960b46d-2d1f-4d45-a42a-5c41c6b50644", "sighting--bf56a287-24b4-4a47-b6ce-a49d466e71a5", "sighting--c58dca4c-9b42-4b6f-89bb-1f9502c53b19", "sighting--f0f1e9c4-08b3-4bd6-bb7e-1d57cb1ba4a1", "sighting--252a4e27-c59a-4785-8032-c2ed7cfbbae5", "sighting--f6a5cf07-7fc8-41fe-9a95-e617eec45b73", "sighting--d151a487-f715-43ad-9c6f-6da401aaa6f7", "sighting--706f6263-053c-47ca-9f31-2e957d8803d2", "sighting--44a0cc22-bc29-4174-9cd9-529d9df0a053", "sighting--a1c5abaa-565c-48ba-8405-823aa63277c5", "sighting--2b2a82e7-d846-4b63-9983-efb5f0487bce", "sighting--4523037f-44df-4afa-82c8-d6df11050cc6", "sighting--3114e0fd-405b-411b-8390-015336c0da92", "sighting--0bcf9a7d-3eab-40fb-92ba-cf016175ef12", "sighting--bf5d62e6-90d7-44ae-975f-0a4c49eb4637", "sighting--11e7eb3f-3534-4f47-aeb2-ad31c6ae9ac7", "sighting--b7239bf3-55ec-4526-b830-28ab81c4c0f9", "sighting--8aa32696-e747-411c-a176-2d043b7e5ef9", "sighting--68b19ddd-7ae4-4772-b0f8-a97eb50dd9d1", "sighting--0abccfa7-6b8f-4d10-b5ce-dfdf007514af", "sighting--7f4ad42a-7401-4665-96a0-43d8a0b240d3", "sighting--7642eaf1-10bc-427e-9239-7f3696ebe38f", "sighting--ba44fcc1-534a-4f87-a735-23291ce81bde", "sighting--6568eb68-920d-4198-92de-027af54d01c5", "sighting--e2c7ff54-a804-4084-b1e9-c693cba1ba39", "sighting--b9364dbf-5c78-4bd0-afcd-53167d9685aa", "sighting--a4135647-9307-443b-bff1-584e1ae0b188", "sighting--4946c3a8-2268-496d-9d07-b88811d9ea21", "sighting--29a01fed-301c-4cba-88f2-45e779b78fbf", "sighting--bbc8f41a-6dbc-4d83-9294-8f2632f25f91", "sighting--6afa3cee-6d81-4fce-af42-62e15f719a76", "sighting--3777dc77-0cd5-4936-bcc4-a6dbebbe41b3", "sighting--1828cc77-17d6-44e6-a136-9b34681541b6", "sighting--c2e45144-3072-4771-a42a-d32bccb8931d", "sighting--d59beadd-6b61-48ea-baa7-985bd6b8704a", "sighting--73ec6d43-b356-4edb-83c0-62361f6194c5", "sighting--3fd0e43b-b9fb-4372-b7d1-7f4ea5a79371", "sighting--fb98d866-b4cd-4994-a96c-2fff00492a9f", "sighting--6b348bd1-052b-4d99-a4eb-bc983779ff93", "sighting--e7d3feb5-6245-4673-9fbc-cd0a8118e0d1", "sighting--3e0a53f1-053e-48d1-a565-b5c1f144781f", "sighting--45e880f1-11b9-436c-8309-a704c24f0fd8", "sighting--3aae2560-06fc-41fd-b5d4-1f0b55260e0a", "sighting--267a63ae-4b01-4464-a62e-a7e7e74eaa57", "sighting--2cb51d49-c542-49b3-b1d8-c8f858e2b118", "sighting--2fa6a56a-90b8-4195-8ea9-34f550e0f857", "sighting--7e4c508f-371e-4a22-a187-4e2da1a453b7", "sighting--258be38c-f6e6-4493-b9e6-7baf189b909a", "sighting--2413ca8b-035e-4d80-a877-1dcd7c21c891", "sighting--7ee71f10-8a00-43c9-9f3d-de6aed5778f8", "sighting--7dd5c58e-540b-4b13-a576-580f57035853", "sighting--e6af042d-8fb9-4613-9a04-90c9a5ebd556", "sighting--eceb888e-b843-46af-8007-2c13ed08ed91", "sighting--38ffce78-fe1f-4b2b-bb18-01b68c20627f", "sighting--6d90c7cd-3fd5-481b-8b51-afc75d8ee17d", "sighting--03a7dc3a-abaa-4be1-a234-9ec2b5f21c9a", "sighting--cc2176ff-8af9-426b-8cd3-ecc072c30530", "sighting--269e7ce1-bfac-4f09-a761-765d51b21919", "sighting--e24f3839-1e56-4ccb-a98f-96ae8c0e2251", "sighting--12f37f8f-9749-4f7b-9c05-40c25244370f", "sighting--11352ae8-319d-47f3-b06e-36bae5f67672", "sighting--a32036be-ba94-4d48-975c-5addd08321f1", "sighting--f8d5ea53-e2c6-4f07-aa67-4059184a443b", "sighting--495523ea-0704-4198-b885-a1f5aac5e82c", "sighting--e9a8e69b-380e-461d-86fa-eb349d980b93", "sighting--6c09a082-5e04-456e-a060-bddd63fbee13", "sighting--2e60bf52-9e70-4179-bcc1-2f79375e5597", "sighting--632615cd-2637-45d2-81d6-c0d6d771e66f", "sighting--f65cbccd-8350-4b11-8d3d-faf5ed7cc1bc", "sighting--eb8349ad-2bd2-4274-8be9-d3cebdd9a35d", "sighting--de2b77a7-b8ea-4958-a69e-987a39dee6b6", "sighting--3405a248-238c-4850-b65c-39a869872746", "sighting--7c2d8cda-b8bb-43ea-a593-d43213381c0a", "sighting--9469ab57-0146-4798-9f8f-226cb9022775", "sighting--5f3e50d2-56f7-4e26-b700-5e6b24c45b57", "sighting--9b23fba7-ccb6-4dbe-ac9d-cefcbfd3075c", "sighting--57b84bac-a35f-4b34-b1b6-d494cc17b68c", "sighting--ac55696f-1338-4516-887f-21958a6d6a59", "sighting--5b289926-7f97-44fb-8d19-ca7ba887b93b", "sighting--047e9bbd-5d13-4345-b02e-5f0aec095cfc", "sighting--e5a74503-7bae-4eca-b2b7-b470143006f7", "sighting--44aa1fff-189c-4162-8293-7f2c1d8b92a2", "sighting--abdd2854-d7ca-4b13-b080-b97e43ac7b58", "sighting--6a7d0704-791b-452f-928e-fa40f70745cc", "sighting--b7c229d7-66cc-46f3-9848-66c9ba2b283c", "sighting--084f21e9-880e-4ee6-9c24-b2ffbdebfb7e", "sighting--ae80f56d-7de6-4298-986e-d6a5556fa5c7", "sighting--e47968bf-36c8-43fb-8fe1-a4f057e44f73", "sighting--13fb05ee-4c19-4afa-8885-df19dc3d1b4a", "sighting--6a2c733f-8a60-46b2-b5b7-f74ea610c825", "sighting--8e4093f0-2e71-4358-8eb3-7870c7a095a0", "sighting--522599da-9deb-4f3f-bb20-84cfa103fe1b", "sighting--eca04310-d481-45f6-960c-9ab73f5a53e9", "sighting--6c021335-bb17-4d60-8f94-577fc07834b0", "sighting--328e31b4-e36a-40e7-93ce-1160e952b7b1", "sighting--a004d2a1-bfd0-45f8-b68c-f54ea9336890", "sighting--a4cf88dd-dfb1-4b22-8311-b7fab809c079", "sighting--167cf320-5192-4687-ad9a-aa665c196f6c", "sighting--e07949df-9cc5-40e6-a390-5271bc32447c", "sighting--74dc5d03-3b31-4bb3-9fbc-720a6128eeae", "sighting--19b528bc-7eba-4b71-8e81-5822908de445", "sighting--c09f6316-96a1-4a21-998f-a81d671899c4", "sighting--c7123d9b-9e21-4db2-960f-e207d6459794", "sighting--3e2931c8-6516-4931-b81a-dff779dc7a6e", "sighting--202dc84e-e945-4fe9-841a-a836471c0d36", "sighting--624865f8-f2b7-47fd-b28e-60f8528cc522", "sighting--64c23bea-ff8f-4c88-983a-49c33743f6c6", "sighting--5fcf028e-db13-42f9-870b-45a12df30637", "sighting--257fb76d-90d1-4955-a1f2-d08c49e52ca6", "sighting--84d7aeca-4e91-42e8-aef0-ceee7034d923", "sighting--025f6b93-fe35-4ce3-8469-03d73bb76af3", "sighting--0e3b7871-c941-40d3-af3c-07a8344c6310", "sighting--e2b8dbf4-7712-4716-a22e-d57c924e8290", "sighting--791b2ce0-0780-416d-8bb8-ef37badc47ce", "sighting--b634fefb-cf11-47d3-987e-e7c3830c4bae", "sighting--69160c42-855a-4c3f-bef6-cfdd41206b9a", "sighting--288c6d5d-e5ae-40e1-8084-329669b3987e", "sighting--8cc40230-5ccb-4641-9901-ea0e26c92d18", "sighting--08a13d33-52ca-4d5e-a413-76c22c3924fb", "sighting--a40a89e3-8375-4b5f-b8de-4fca01fea863", "sighting--790ef6eb-700f-45e0-88db-7c3fb2879c88", "sighting--0d3f8723-b0f8-480a-9ad3-df4682af96c4", "sighting--ccc6d7d9-8ab2-48b4-8302-944bfeb49962", "sighting--5fd29265-5b07-459e-a55a-827763b51b5f", "sighting--2786be58-f9b7-47fa-9472-3eb1cfa16593", "sighting--1dc339c7-ca89-4ac8-8fd2-3f2688c81828", "sighting--3cf9cf5e-a2ad-4c67-899c-d8ada9c08501", "sighting--60a4a0c9-5e44-4e3f-a737-75544e28dbbf", "sighting--49d78377-0b13-4a90-a6cd-a3bcd83fd5ed", "sighting--9399e440-52f1-40c6-b1c5-f2d505eb8332", "sighting--39beefb5-aa9e-47e1-ad84-362954532782", "sighting--be14f26d-4eda-4bde-b598-ea358d93849d", "sighting--afd4b6e5-eb4a-43fd-9090-69ceabf4a033", "sighting--4b5d0065-5a4f-45c3-8594-1ec8bf2f5843", "sighting--73239c78-04a4-4437-8317-8e4b49f50720", "sighting--37c2bd17-1142-462f-b513-1d83af9ede64", "sighting--187077e9-ade8-43d3-9e7a-f8b8851393a7", "sighting--70be583d-0f6e-4e33-8db6-b392261214a4", "sighting--38136fee-65d5-4e9c-b49c-fdc871fc03d1", "sighting--1daddba2-bf87-4986-b230-6625d59d28ca", "sighting--655051ee-69de-4958-8443-058e44a15010", "sighting--b7add0de-ddcd-4744-8da5-a0e360d128b3", "sighting--c48aea5a-e02e-4783-a885-b19b1c2e95e9", "sighting--79269744-c647-410f-b17f-8ccc3461e211", "sighting--96027c57-8f03-487d-8057-3d6e997d43c9", "sighting--e836b3c8-89f1-447e-a3eb-68458dd34174", "sighting--e73f42ac-d3cd-4f0d-8ebb-8976f9033395", "sighting--e8ddc1e6-4909-4c3c-8d42-ba704f446bc1", "sighting--8e54be7e-7293-4523-942a-22ecd2d020cc", "sighting--13bfee98-0dd0-4b3b-9c70-d3dbc15698ee", "sighting--a58bcc20-6d38-498c-8741-3895ad17d894", "sighting--8a8a36a7-4999-44e2-827e-fb1d92dbf03c", "sighting--b3d9be88-42ad-4363-a6be-66f19f1c0524", "sighting--998a8db1-6eb9-4a32-972e-d0d306906d00", "sighting--d26c065f-ebb0-4fec-a68f-3881de4f74c9", "sighting--e95b47ea-aea0-4ae5-80fe-8464d2b415a7", "sighting--17b64614-f56a-49df-a4d3-162adad8773a", "sighting--ed1ea0e0-a034-496f-9925-ba5e07188a8b", "sighting--0b3c8d9c-bb9e-4638-8f3b-d2e8aabcd615", "sighting--96c8737e-8b72-4675-8618-d6a32a204f80", "sighting--db21131a-c403-4448-8c86-b94c65f8c2d5", "sighting--d0f3eb6a-d995-4f65-995d-e8aafcc4b25b", "sighting--024c6c5f-ce82-4324-b6a7-7204a5001d42", "sighting--3f6021d6-fdb6-481e-b0eb-415a992ea6bc", "sighting--a110c60e-812b-48d3-aef2-6c00689a0f62", "sighting--56f49a2f-d9f3-4f47-9c51-b49cdff45362", "sighting--a4707d7c-75e5-4849-a7b4-2b50e8c268ea", "sighting--9ab3b2d3-11ce-4b80-91d2-414c684c8986", "sighting--44362b1c-96a0-4933-bdb1-8cf72c8d5981", "sighting--47dcfefb-b9b1-4c0b-adfe-365cc39c2bb5", "sighting--a558bf1e-9fb3-4d88-ac6b-9c2ce50ec07a", "sighting--e25ea81f-ace9-467a-ae2d-4e13d000ce49", "sighting--5e8d50e0-b011-4b42-8654-95f328c00f2d", "sighting--c9aa79a4-074d-43e2-b35f-3f3c4cb06b6f", "sighting--413efd31-c22d-47d1-a259-31f6012f98f7", "sighting--945473e6-cc15-430a-af71-6549d2ffdc0a", "sighting--7b32ff66-260f-48a3-b2e9-ad9302ff3067", "sighting--9f8803df-47f3-4752-b6ea-7a7aa155715a", "sighting--d0a300c4-b283-4b45-bff7-8caa39524fdb", "sighting--11ca5358-d88a-4d55-a9f6-2ea77c212a44", "sighting--57344709-2d05-4995-a026-3a54618bd051", "sighting--cd57f38f-984e-4136-8bf1-b9af97cb4111", "sighting--454d7588-e78a-477b-83b1-ccc4f1ca1d3d", "sighting--681b4aaa-21be-4055-b52d-cc52210c6b9a", "sighting--84f193b5-7f14-415c-82dd-22dbe0b0dfa5", "sighting--e7cb7b46-3129-4384-b2c7-e4c44c180cbe", "sighting--d0c2d35c-e337-487f-9157-0081e735cc1b", "sighting--501958d4-0487-4148-88a0-22714ca3d05c", "sighting--c99772c5-eeb6-475c-8c0e-ccd3d200680c", "sighting--bd02b4ee-c5ef-4856-b955-6cb37db9cc9b", "sighting--c82d9cef-1c64-40a5-be4d-6ecf4b9a3362", "sighting--a169a0e4-ff2a-4344-9147-761c0ec53cf6", "sighting--df338f74-67c0-4a62-82c4-8f335b5340d1", "sighting--a9f69363-e287-4d85-b03c-ca2f8ce0aff1", "sighting--59da855c-6a34-45cb-88e3-1328297ef4c9", "sighting--5189c7c9-fb36-434a-91c3-5580b9c43fa2", "sighting--a9ae9d6a-aae5-4a10-9ce3-53269dbc980c", "sighting--08ed0cea-f901-4e4f-a0e4-7c3e7a326f82", "sighting--9e951616-f0bd-4d90-8e41-db073dc11bd8", "sighting--42dfcadb-10de-4c87-89e5-ecc721211972", "sighting--ec2ff884-720c-4659-8265-c484c125e29e", "sighting--e1c5c4d9-0576-4323-9635-fa596043e7d8", "sighting--004f65f4-a0b4-456a-9bc8-c422d00b2c10", "sighting--23a558d9-c09c-4afb-8d00-2bb5f2eac889", "sighting--5c01f732-5b54-4314-b4ff-0f6b0082db20", "sighting--74f09c86-1ecb-4c36-8a9b-bbca96fb5506", "sighting--011fa295-ee13-4860-8c6b-989ead9cc683", "sighting--0141b670-8225-4961-b0a8-de7bd036df20", "sighting--c4e66f62-dd19-4720-8d60-ba24ac5bbf62", "sighting--31353b21-b9fd-48ae-b3d6-2f9345d7ad6d", "sighting--1a427801-9421-4d7e-9400-4138ff3b5d1e", "sighting--d1eec66f-ec71-4d01-9fd8-5d15cd808859", "sighting--e76cce69-407d-40e0-b990-c86bb9db43d7", "sighting--49c20f01-ac14-4f40-ba99-d4bed4ce5e31", "sighting--114bd4f8-b434-4f82-b182-82c8de42bbf1", "sighting--fe32920e-3eac-4b5d-8523-3b8b80534090", "sighting--cc179c4d-6256-4deb-b7a8-ef0547e85466", "sighting--c4295365-15d6-43e7-8be7-e2e9d664b282", "sighting--421411b5-02ef-4ba7-960d-14383b3af53a", "sighting--8ac418bf-a282-4cdc-8294-81c4e42f053e", "sighting--920ebc8b-2812-4aca-a094-af3558a8adb0", "sighting--78606f22-9487-4b1b-9909-f7c2f120cd97", "sighting--7c78fecf-444e-40bc-8fa7-0c454569786a", "sighting--dd348067-c8d4-4631-8d08-bce19090972f", "sighting--7da05016-92be-436b-9321-87f1589e429c", "sighting--ca842efa-7a8a-473e-8276-2317520af7c1", "sighting--7353f8d0-1cd8-47d4-981a-8d3c2c2e86f4", "sighting--ba10aa97-5057-4e4b-a9d7-bc11bb919246", "sighting--c4c63299-83ca-47e1-97c6-13c7dd8af58e", "sighting--691c9443-34d6-4098-8636-d7e2c6b4a807", "sighting--f7b299dc-bdeb-42ff-9333-f1c6caa269e0", "sighting--5e24dfd6-5555-40a8-97d0-c5cb5b18ad93", "sighting--00b1516e-f500-4796-9e1d-e769560f1b00", "sighting--d82ea59e-0b03-447c-84d5-6f3ce2fd2d71", "sighting--edab07a8-a90a-4c9d-957e-7e01142cecf7", "sighting--5295444b-0e5e-494f-9d55-7a07db971da5", "sighting--addabef1-36f3-4420-a269-e3e493bc2fad", "sighting--1fdd3c2e-fe66-4091-8ada-adc4cc5b5b2b", "sighting--7db59031-385f-4aa8-a4a6-7c09ec5bbfda", "sighting--429d05b5-b11c-4ef7-a171-ffc0f01cb0b5", "sighting--75af190f-e2f9-4377-83b0-f70120897e62", "sighting--9a05933a-a7f0-4b67-a8b0-9838ceff8d40", "sighting--6f0dcf99-4672-419b-a68e-0b3e242cef21", "sighting--cbeb58eb-7a79-45db-82f2-01d20db3be3d", "sighting--3761959e-ee3e-4c3f-a867-9d29d7e513c6", "sighting--bf0d02ed-97b6-4690-be34-4fe023a1635a", "sighting--08b946a9-6ae8-4184-a2d7-216e27a31412", "sighting--fe5af979-055d-4d6f-b878-1b0b96ec1218", "sighting--8d724445-b003-4246-b7c1-c88578dcc208", "sighting--8b51fbb0-ee67-4d95-bd1f-15ece9d0e80f", "sighting--6fcd9b28-9f12-4ca6-8968-9828fe8df002", "sighting--e92c6bfb-b70f-4fa2-a477-e3d07219cd7a", "sighting--3ea7c70e-cfce-46db-b7d0-552931ed0419", "sighting--e2550054-e0ba-4d69-b1f0-ecd744f17d86", "sighting--2a24e7bc-05c2-4fcb-af8c-6d5de8eab413", "sighting--55033680-b718-4f37-969b-caa5cafdffa5", "sighting--5a375a21-492d-460d-863d-3e752e792fd2", "sighting--f4e38075-6206-4af9-94b2-aa66bb459bfe", "sighting--eaf71ca0-bf6c-409c-a5b4-9aa543e07d91", "sighting--4de2b0b0-839a-487d-b803-0ea6f0fdedd4", "sighting--86702348-e6a6-4d5c-83a7-f9a58a11ead8", "sighting--8c9586bf-1ba2-4f40-8d10-1c47d69c6f65", "sighting--4a735258-a013-4998-a9f9-5a7b68203414", "sighting--373225e5-40d3-41b4-a195-801a70a0a0cf", "sighting--1af5573c-8eb9-4296-a0f2-fe5e1d8ddcab", "sighting--4505a504-263f-49dc-9f1e-8d41cb0e4dd1", "sighting--13f05fce-2264-4ab0-87b2-21b7f9a28b35", "sighting--c567463a-7ed5-4964-b078-521d116b7387", "sighting--a74870a5-4b93-4c00-9c84-d87a22732ac7", "sighting--5fa89683-f117-4622-a07d-19de6a402204", "sighting--857232ed-0304-49b2-bc01-f626e4bf197a", "sighting--32747a61-7304-4c55-b216-d406d7c95d83", "sighting--ba21daab-6ac5-42fa-89af-c1676a9c5d76", "sighting--7a29584c-0d93-4139-938f-f3c318887fd4", "sighting--7ab21169-2645-4542-ac23-62dc1dbdef6e", "sighting--7ada83f2-2069-4b88-aeec-afaef4bacc03", "sighting--c0317a42-a5c0-42a9-b560-8a17a959327c", "sighting--a0f67771-e1e4-4d2d-9507-42863b87bbfb", "sighting--2a2c4b4c-4c22-45a7-ac04-6cdd40daeaed", "sighting--64774277-3b71-4c70-bf15-113737520ea6", "sighting--43081a2f-3d99-46ec-b451-72edd5fa60aa", "sighting--66f36399-f6ec-45de-84db-684a3131d582", "sighting--34cfeeee-b63a-40ea-8fa7-5006d65aa865", "sighting--b0bfcf69-0394-4317-a0b0-ba6599a160c5", "sighting--c8cc0df2-fc53-40ca-92c6-3e28fad9bcf1", "sighting--fb3c0cc9-a57c-4194-a51d-401fc47977b3", "sighting--11174826-100a-47a2-94a4-c816f9a09340", "sighting--b8ea14ef-6a10-4af9-bf42-b8dd689b06e5", "sighting--9dab70fe-d30b-42fe-94a2-73dab343c527", "sighting--af9186ab-1deb-418b-a229-b8ece34e3b02", "sighting--b712bf72-a706-43f4-b925-1777dd3081af", "sighting--1b31280d-5d37-4756-b067-9c53fb36ffbc", "sighting--4be3a07f-3b5e-406f-b779-ebe2542c0e54", "sighting--5032e4ef-58eb-4e12-b378-30c86f995d21", "sighting--3adeecc3-2548-4719-9eff-03a7184aa977", "sighting--896bfe4b-4a35-43b4-9c2a-69951c0b9a27", "sighting--7c67629a-3e75-41a0-aa2d-52e5bb633a27", "sighting--f1b86aec-41e7-4710-8567-2bb88634af72", "sighting--9dc44ac7-fa81-4ee8-b442-701c98b666a0", "sighting--9594deb0-ee9c-411d-87f3-19b39dbc2543", "sighting--af198a4f-1c89-498d-9c11-1ab7b19c6118", "sighting--4430bec7-6f0c-4388-a45d-1e1df4bb2b10", "sighting--c2a5e9b3-1eb0-4f2f-9295-e298758bf41a", "sighting--bf1b63ca-a29e-45b4-9007-9a0b355656ae", "sighting--82153776-6a86-4d69-901d-0d666c6979df", "sighting--4a4ec23c-722d-4495-b08a-b4296d5a583e", "sighting--ec89a48a-543a-4122-9fae-f4d5ad64f68a", "sighting--251d2b49-35f9-45b4-8873-b201747507f8", "sighting--9398efd1-f96b-4106-8af8-9b159c9dc346", "sighting--07a1f39f-1905-4234-95e9-459474bfc630", "sighting--df75caa3-bdf5-44a9-8505-9c6df77221d7", "sighting--50f19238-a30a-4033-8a5e-570a2ad97fa2", "sighting--3063161c-31e4-46ce-8df8-6cc3ace53563", "sighting--83b917f9-dd1a-408d-8d30-676b4a3a815d", "sighting--4421aebe-3e3c-4df3-8f6a-17e4ea251e8f", "sighting--5e4be925-6fd7-4166-9fe4-3a2cbcded1a4", "sighting--634951ed-158a-4d8f-b37f-a82609eb9f12", "sighting--767c2e83-91d5-4164-9bc1-4530934adcd7", "sighting--edf6c929-3268-489a-976c-17d48a32b605", "sighting--6d41948c-7576-4188-8c5f-fd633e89b8e4", "sighting--1ad971dd-8b02-43b8-a7a1-7b808cfbf914", "sighting--db9a856b-46e4-498c-b11a-bbd1e3c830a7", "sighting--e83fe7f7-e08b-452c-84b2-38307599a289", "sighting--b7a39125-df4d-4bfc-8943-ca532d24556c", "sighting--366132e6-006c-4c6b-93f5-3e0a12923914", "sighting--baf3b073-8486-48f3-af19-8b1f61338c40", "sighting--dc743e99-8d95-4b59-a2e5-468b3c7998d2", "sighting--2dfc42ff-3e01-478e-88fe-d37d75442918", "sighting--d1c35afe-9db6-4f58-add4-1425a6f43efe", "sighting--3047c783-b55a-4b51-a5b8-74635bbaf3f2", "sighting--42607a0a-a854-4cbf-9e40-daefd0802b60", "sighting--6f1d0161-3197-4534-ae27-61e9a4906b2d", "sighting--2a6ee0fb-3af8-4994-bea7-55340a2215f2", "sighting--853f8355-2f32-404d-a93b-9da2c751f290", "sighting--7e53659d-9f17-4f1e-be44-e6532b67f8c4", "sighting--80539539-dbe0-4cc1-a9ba-0b65cb7aa3d6", "sighting--4729952f-019a-4b79-a5ab-c97f702c1616", "sighting--8e27d024-d0b2-4283-af02-938d5ca2a448", "sighting--0cba8321-db75-49ac-97b8-120e8b2a33b1", "sighting--ad3a99bc-6fdf-4d1d-8bc9-2e1d4ab6b03a", "sighting--62253925-b199-41cd-8506-6b0676dc01db", "sighting--d6684c24-cedf-467e-98a1-c47bc89957c0", "sighting--82d7536d-57e6-496b-8016-c5b25684b7c3", "sighting--c34bc1f9-a0f5-4029-b9cd-a27c6734e930", "sighting--dc08e68a-5047-4edf-833f-5d25ec8161ea", "sighting--366b6e7b-406b-4e45-b113-d6ec490b098e", "sighting--c5f272e3-5113-4b81-b365-56567215dc85", "sighting--6beee9a6-0a5e-4b48-8b66-7a10cb29671b", "sighting--972a17a1-d225-47d6-b5d3-061bf5019966", "sighting--e154f02d-c248-4658-8e4b-b2965f0bf8a7", "sighting--c910ab23-bcad-40b5-bc2e-09ed775d6c6a", "sighting--2edf8139-cb01-4a1f-b9a5-09db47fd999b", "sighting--6f9c10b8-33c3-480e-b8a7-2dc48aa630f2", "sighting--aab1b5bf-723b-42eb-9f77-9b12787ad872", "sighting--1d482809-3eb8-4011-aade-e6624836d2c2", "sighting--5753c4fa-98bc-4a81-be3e-3f2bec92ed8c", "sighting--cb3f2295-47e2-4b00-b7a3-fa18c03b267e", "sighting--30a20d46-3443-4526-b4db-a130f9564bfa", "sighting--54dc20a7-35db-45bd-97f5-5d89146c54fc", "sighting--90388908-7264-4f4d-aa2c-f1f129f62de9", "sighting--4769836c-bc77-448a-9aed-2e23866b3122", "sighting--1bf26cdc-2d51-4a00-922f-ae05b657f42f", "sighting--f5e03b7d-05d9-484c-a2f3-e9bab91fcbdd", "sighting--97a2a915-fbc8-490f-9665-5f217998a0d6", "sighting--8107d766-dc3e-4d76-ade4-334b2ea3a4dc", "sighting--d8646ef0-097b-4204-a158-df24c22b86b1", "sighting--f85f0350-f5a2-479f-a248-9e27f122b0f8", "sighting--411d1330-ec91-43ba-9c41-a15070a5f6cd", "sighting--7be35c6b-583e-4485-8800-81b23a5caec6", "sighting--1d599286-f459-4a8e-80a6-77161b5f80a5", "sighting--4ac77d72-5578-4ee9-a5bc-779b49cf88d1", "sighting--567f2f23-509d-4107-9ae7-da522356083c", "sighting--22d31ff9-3e87-480c-8e9a-4b56d6345a7e", "sighting--7c00ebca-adcf-43da-a5db-e6d2881839e7", "sighting--69578036-d217-4a63-baeb-39fc9bc83e25", "sighting--eb6ae809-2c83-472b-8fac-e5bc4e0cd4e6", "sighting--d9034128-159c-494c-b20b-01ce7bc8c463", "sighting--65589e84-c4a8-4a1a-af95-282fab670e93", "sighting--456bdd88-eb19-462f-8d6f-9ea6e82c3405", "sighting--86848bef-643e-4712-8976-a06d8746aa36", "sighting--0497fa2b-0caa-4e10-97fe-f1e163385c62", "sighting--8abab2d2-9a38-4547-a9d9-8d45e63751a0", "sighting--6ad04def-efb6-4ef3-b4c2-5b3ecaa20a38", "sighting--b7646130-ff27-43e4-a652-740ee9f4d65a", "sighting--4f0dd387-993b-4a13-be25-96b6decadbfd", "sighting--75a756fb-8dda-414d-89d0-bec28895854b", "sighting--85f99f17-f7f2-4298-b078-16f4466c6d74", "sighting--99260db4-f294-424c-bad6-a8184243c309", "sighting--d4d8863a-9ce3-4b1e-b018-496f131ca1f1", "sighting--8240c7f5-48e6-4bbf-aec7-c03bad7aee12", "sighting--9b856612-03ed-4cd6-832b-0f50814c0409", "sighting--272be5c5-d4d1-43da-89c1-d937afe11308", "sighting--b9a3cb3b-4a69-4954-857d-44070912ff52", "sighting--9c262925-253f-4ecd-88aa-d74894f28e97", "sighting--0ce32b33-c7b7-490a-963c-2d0608d6bd04", "sighting--c1bd0375-5530-4f2d-88f5-dc5d80bba433", "sighting--05ae3c0a-1edd-44a7-a247-bb6e591eb767", "sighting--f20c94d0-45ab-423c-a53b-9479ac1cd978", "sighting--ba10a3b0-1753-4243-980c-5c6b6b0f38b8", "sighting--c3d3eb79-34c1-46ca-a4a3-ac42a9c95d31", "sighting--3f608878-ac1a-45b7-bc89-d8b35e178654", "sighting--21fe9cef-9f2a-4e05-b0c1-b3bcd18b84a5", "sighting--7d7990cf-6c2c-46c2-b04b-4a7604c723e1", "sighting--a6a95ff7-3a43-474e-aacc-4c8f29194d31", "sighting--5348da77-ec6b-4886-9359-01a60cab2614", "sighting--22a060b1-5a2a-494d-884f-2537f22d2a8b", "sighting--47b4e3af-235b-4b07-b69c-ea6a03fed304", "sighting--f91d39da-0147-49e7-a321-ef1fd95a619b", "sighting--b469e0a2-9e51-4387-81c8-106e39836e26", "sighting--f262a11b-a149-4fc8-a6db-4f66dc12f1c8", "sighting--d81e32bc-b857-4440-bcc8-a811078dbcf9", "sighting--40099ea6-57eb-4484-a8ca-460bd6dde585", "sighting--34412961-ce10-4e0a-9e98-91471798af08", "sighting--789f3f5b-3115-44ea-b950-115af5e8b734", "sighting--989176ed-ab3b-4d10-9bfe-9b67ee6fa19f", "sighting--f6793c38-3711-48e0-a918-099f21b60d96", "sighting--7e592a43-7120-4094-a2cb-a43105b94483", "sighting--af56355e-b1f7-4562-ba11-127291f427b7", "sighting--9828251a-d035-47ac-a37d-159ed50d5097", "sighting--49d3b76d-38b5-412c-9f3f-cd719ce080e0", "sighting--1dcf7171-ca67-4492-b6ca-9c3c3093e1cd", "sighting--c7a1a56d-4c94-48cc-aa8c-763aee9eccf8", "sighting--8b5c1e2a-4739-477a-b2ba-e94353eab384", "sighting--30b2c012-799b-4cb3-9665-c43d369a2294", "sighting--9cc76e38-23cd-4951-81e9-b21266bedcd1", "sighting--0cbc2bac-b42d-4dfa-870f-c50fc035301b", "sighting--9620c883-2db2-48d8-a2d7-35ccdcb7e242", "sighting--ca3e351d-7049-49be-9470-f1b8df0ce06d", "sighting--ca204e41-710c-4930-a7ac-59d65053869b", "sighting--1dfa0721-2d3d-4ac7-9a53-f20adc528129", "sighting--3d409376-392d-4142-b025-58fda5e8d898", "sighting--32531753-6b26-4110-a192-ad73ecaebdb8", "sighting--6e60e79e-a0da-4e08-8c32-4802c7b47460", "sighting--7f438cfd-b5d5-4a16-b6b9-ecbc68eda394", "sighting--c8f30faa-ebe1-4efc-af1f-2e9fad79ea7b", "sighting--6d523a3f-4f74-4423-8a6d-c5e9ff67cd91", "sighting--a6e3c865-71d9-4e0e-99e2-b1c01584fb44", "sighting--2db067d9-70de-41a2-af88-80c016c5de80", "sighting--eba39961-d870-432e-a536-a7146f5c71a4", "sighting--73b814d7-7e0f-483c-ab5b-98359f61666a", "sighting--63af4ef0-fe85-446f-bfb3-ddbd22b9a74d", "sighting--da9d43b5-fa8e-4f40-abbc-19e42b2751ad", "sighting--a98af3fc-9665-4c28-a780-7e304f360f7f", "sighting--5029ac46-1131-44da-a253-4bb78d112e86", "sighting--f1822b04-5b96-4617-b1e5-becc6d4fe261", "sighting--776a48d0-c33e-4396-b075-17072d925652", "sighting--1cd52611-4761-432a-8779-d8a872a3381e", "sighting--86648dda-39c6-4bbd-a079-df0b7332edb3", "sighting--09e3f76d-eb07-4466-a175-492aa9f514a7", "sighting--76bb6f3a-89ed-4750-acca-c3b8af914270", "sighting--f266e8f5-efc4-4b6c-9e89-75e346455843", "sighting--e447d3f9-f5ef-4a41-bf09-df1dc2449e59", "sighting--87358489-02ea-4851-8f5d-ce454e535d3c", "sighting--73dcf014-ed44-4842-8b9f-e9c027d6721f", "sighting--333a67d4-641f-45a6-ab38-38472def9343", "sighting--53c99d7b-d0b7-4765-b02b-0b6ef7e0c227", "sighting--d8186d5e-0358-4b0f-83a2-27f4eebfcb5e", "sighting--70d2d4f7-8cce-4142-bafd-b665d38019fe", "sighting--fefdc77e-98f7-4c78-accc-14e36b28fb9c", "sighting--f00095cf-e636-4383-9cfe-4bfac579cc97", "sighting--7bcade4a-61a2-40f4-a192-b01fd3c902e1", "sighting--566c98d1-5ac7-4575-ae16-459e71f5ef27", "sighting--60496e1b-835c-40ae-a9ef-efc79ec7d395", "sighting--7ff0c8bb-3693-44b5-bb9d-9bed1099c73d", "sighting--5a777aeb-be91-419e-8cd4-26414e78b6a8", "sighting--e85fbe8c-b71c-4849-a845-5d51c59893ce", "sighting--beaf530d-e641-4faf-aa49-1a07f6efe132", "sighting--bcf133c7-ed12-48e6-987e-655c71e5e584", "sighting--25081247-42e6-476d-ab7e-f4e2960e1a64", "sighting--054092c2-f158-4255-b989-051592284090", "sighting--7ff6c3c2-71fc-4104-a2c7-902763715645", "sighting--1909da19-009b-4508-8b75-968027d8e603", "sighting--f6e322ed-4def-48bf-8ff0-b0eec051df68", "sighting--9813ffcc-756c-44d1-a7ad-d519cf260ee7", "sighting--28d006be-629f-4085-96df-13f73fdf2721", "sighting--57c6eb64-d0f7-40bc-af0f-de9f291125a3", "sighting--ad634756-8d28-4a46-94d0-a4033ecd81e3", "sighting--d4c31d55-e3ac-429f-acdb-22cbb4fb21d0", "sighting--ad77097f-1655-455d-a54a-cdaef82f4421", "sighting--764be8c4-1d17-4765-affc-fbb4142f5646", "sighting--de876389-f84d-4aaa-9817-a42e3e7b2dc9", "sighting--7a7d0c69-3a2d-4170-9fbc-8ad37dfb5d02", "sighting--ce1876da-cfdf-4f2f-a944-3bd3182634e1", "sighting--c353bbdc-6dd5-4166-8131-ed5dadbc71cc", "sighting--fdc68d0f-d8aa-461a-9799-8106339b6676", "sighting--91b9670a-7f69-404e-b160-f500bc35906a", "sighting--51e57d91-24ec-4a7d-85eb-9fda64059a38", "sighting--99264941-dbfb-4f02-af12-0543ec184eaf", "sighting--0e55ca79-ac0f-4b06-af1e-5c0f4175ae7b", "sighting--cb33d8e6-6827-40e5-a79e-f7bf98746d56", "sighting--0aa95e4b-0758-4660-bf38-c4593beadec4", "sighting--feba1924-5ab6-4151-89fc-7ca5870e5057", "sighting--b6cf15f4-facc-4499-aae8-7269b2c80bc6", "sighting--c8d29def-3764-40f9-bdc9-03466be21f13", "sighting--f4356e4e-b296-48cd-9920-7a407123240a", "sighting--00092c7e-3fc4-48c5-9f5e-984b5c27139d", "sighting--f5e190f8-e194-4069-8559-70b0ace3999d", "sighting--3c024073-9902-4e09-8ff3-37e4f0b2e00f", "sighting--09155f2c-3764-4b58-ac8b-50b76c8dcff2", "sighting--bca65b39-dcbb-459c-9f81-81007695dd9c", "sighting--b8a2736d-71fd-49ed-9f84-9fddcacce530", "sighting--3775bb82-e770-46ca-a186-67cb7aaf388b", "sighting--ac1b3823-7149-4d7b-8f2e-e9a34998d98a", "sighting--b7a8ccfb-2c2c-4a70-8876-8ec9df923611", "sighting--14305095-bb4e-4197-a885-4938f644e9e6", "sighting--2ab1f0c4-42d1-4bfe-a2df-9093407e2846", "sighting--0821fa5c-8140-4b08-937e-bb7d5ab29499", "sighting--3ee3265e-f15e-4cff-a125-884879eaca49", "sighting--2a4b2e37-f60e-4b86-b929-9ed3e470dfdf", "sighting--ae729848-fa53-4370-b108-4e33c9a20018", "sighting--9d888213-7ca0-460e-8b33-b275a27cc4cf", "sighting--192c91eb-5e86-49a6-982b-12e5d2879521", "sighting--22d4f54a-5837-4396-b9aa-b3122ae884a8", "sighting--0907249a-3fb6-4d95-a8ea-f58b5ee31fbd", "sighting--c3dc0ec0-4103-4780-a725-012b3b8b0d76", "sighting--1e2179b3-2ba2-4c13-92b7-6d3dcbb3cd4a", "sighting--bbff1f14-22e5-4972-9858-0952b328f3b8", "sighting--502a45ca-377a-4789-98b5-a8b5186556c1", "sighting--47199b8b-1e7f-4ac4-a613-83a3bc0ae882", "sighting--8a9e26a5-b822-4235-9b2c-82676865ce09", "sighting--e9474205-540e-4f5e-9f4d-bbfa6ac0f5ba", "sighting--8c401e92-efa0-46bb-8831-92a8386f2bc9", "sighting--e647cefa-d62b-453a-b06e-a56703d6aaae", "sighting--bb44cfb2-4e75-4de9-a78d-f7a54c9d2959", "sighting--d31bfc0e-3d19-4447-bb4b-1acb06932f5e", "sighting--2d988b00-4f71-46e4-b082-040fb9c006a1", "sighting--df517912-9ea6-4f14-ac8b-01bdba698626", "sighting--bd478a82-e2c2-4518-ae85-ecb74edb6125", "sighting--e77b253a-8880-4bd8-8170-31ed52f8ccbe", "sighting--d480c821-e4b3-479b-9077-efb2cebc3e40", "sighting--7d0cad8a-d2a4-43d9-97f0-366b1e88c94d", "sighting--cb684635-5d55-4550-bfaa-753c84ad6556", "sighting--a4f1bf39-d7f5-42ec-b2ff-7d77883c2715", "sighting--ba4177ec-f73b-4858-b5b2-3c9a4a9f560a", "sighting--b7a24fb0-40d2-4be1-b665-b2abf4adeac7", "sighting--3381aea4-e0be-40ae-b853-f4cd44948fce", "sighting--ba1fb375-be30-420b-9b7a-e964887f2229", "sighting--296a6daf-80a3-4dc1-a694-5a4121702472", "sighting--f84fb789-aa11-4163-b12c-4e675bc61097", "sighting--5d66b3af-c1a2-48d2-8ea2-b0133dd99122", "sighting--31cb0781-ad92-4342-8b0a-87c7360a099f", "sighting--94a8cd64-2acf-4fe3-ba5a-98d8c4890c20", "sighting--97b681a4-3afa-4736-978f-02353dc49c86", "sighting--5c99d385-d6c1-48e7-b63d-593ff28ae946", "sighting--df1be451-582c-4e8f-bde6-9236aa44c802", "sighting--8218c725-2001-4fb5-a31e-3cfffb07dfc6", "sighting--2532980d-9b5c-46cd-a6d2-e9288ed4a579", "sighting--af2cba93-8dfe-4501-9cae-31f122610696", "sighting--325f0efc-2027-4abf-8c58-6a8c9acda3b6", "sighting--4561d8bb-8bbf-497e-9e61-6f3443bf29ef", "sighting--524cb89c-f7dc-4b59-8511-da8f538744e3", "sighting--83a07aec-644b-4465-aa72-879869f9d0ac", "sighting--cc3c32b1-db63-412a-8010-ca91cac1ee90", "sighting--1db09488-6263-4438-8b57-419a35a0fa90", "sighting--5ecd3633-89c9-4fea-8d11-7b0c199865c0", "sighting--020a8bc9-2c92-445b-8038-a716f28ed0bd", "sighting--f6551a7a-57f3-4885-94d2-9c79b5edfa5f", "sighting--2296ba78-749a-4241-973f-0ea8d6b2e2fb", "sighting--f7b73502-a6b4-4b65-ba8e-bbd433237f63", "sighting--5c6fac41-a009-40aa-88ec-15f0988c10e7", "sighting--e00c0e11-65fa-4d6a-a518-53df237da3a7", "sighting--ba964909-8c93-4ed5-b2ca-f222f533b456", "sighting--2935daeb-a79c-486c-b485-3da9160a22b6", "sighting--873eed70-1ae1-49cd-b7d1-92b22a1337e0", "sighting--dc903dc5-d222-4d06-8550-a461e63657e4", "sighting--511b94db-7ab6-4355-a3ad-b35d2de3a27b", "sighting--ab2109c0-6bc1-4687-b1b0-9867900d6c8b", "sighting--62837a54-7cdc-4761-aaf4-0ab9245d36ba", "sighting--c71d87a4-e094-48c6-82b3-c68d703d1eff", "sighting--864d5e1b-6370-419f-8a21-ec4b11ee5d06", "sighting--e2016947-784c-4208-9224-85d5590fea93", "sighting--d4b54eb9-3486-4cd8-9887-719af8253d13", "sighting--07650362-7508-46f3-99d6-88b3756436bb", "sighting--09031439-4730-40ce-8efd-ec7bacddfc0c", "sighting--8d85f0bd-d3b2-4abc-bc60-806ee36cde6f", "sighting--caaea855-966e-4595-9276-d67912c3855f", "sighting--5f90a6b8-8160-492d-98fb-693ab65cf2af", "sighting--3bad6dff-2e9f-4aa0-8542-51bfd5635a29", "sighting--8d299e66-a72b-4689-89c0-0f214d9774e0", "sighting--2d40ba0e-d08d-4cda-ab2a-3446af3ddea3", "sighting--24800e66-0b13-459a-b6a7-1691a6342803", "sighting--ead12839-e903-48ad-a030-2fc0ffc8a223", "sighting--a9827562-f263-4100-b39d-e764b5348d89", "sighting--7a2f8323-2a07-4311-aea9-af9b62b581be", "sighting--50f1caed-32b8-4668-a05b-46aaf47120a4", "sighting--20992caf-eac6-493d-b4e4-6d836d9e8345", "sighting--c40d11b3-b474-49ab-bde6-872751101c9b", "sighting--589098d8-d01f-4baf-b6ae-9e5073d678e4", "sighting--0f79f1e4-e3ed-4657-a931-2b3368e5e887", "sighting--209ebca5-8764-48bb-a328-b50d1e117bf6", "sighting--c07b46b2-755b-45ae-a4bf-9b08d9de1250", "sighting--b7e9da31-af7c-4401-ba13-e86977cbe17e", "sighting--8154f258-d2ed-4d7b-bb04-2ac40614f864", "sighting--f59a6e5e-f090-4627-b737-a2a966b73847", "sighting--896e216c-7c06-4839-a6fd-e8132f3f4295", "sighting--3ee00aa9-c750-4524-acc6-3b0bc1c3e6e3", "sighting--cb9e300b-963c-465a-b01e-c5ca4da840c8", "sighting--cf2d58d0-bf46-4795-a6d5-0c465f1915fd", "sighting--e127b3a5-b555-40d2-ba49-5b38026756ed", "sighting--7a157ef6-9f97-4224-b891-5a94d485b009", "sighting--917646f1-f99a-41ef-a2df-c77b7d6f7295", "sighting--5ac32db1-5fc9-4b08-94fc-250b8b62637e", "sighting--54738129-8b80-4c45-8032-4a7053eda2f3", "sighting--ca6022f3-6fde-4a42-a934-6c1213068fd3", "sighting--89fcd278-4202-4604-ba85-85266549a7ac", "sighting--d4231e7a-13c8-4dfe-9d95-9316c06a1086", "sighting--08ac9a19-d73d-4c59-956f-eac97132b18a", "sighting--d5579e7d-5137-4b21-8ab4-04d9db4d87c3", "sighting--5404e6bc-d234-400d-ba38-aa7d6948ad1e", "sighting--4ab5cf84-010f-4124-8530-ef5f8ba47695", "sighting--3f1342ed-b6bd-48d7-a4b0-e15e47ebf183", "sighting--5b88f9ea-2498-4ff3-a271-6331f693b6eb", "sighting--9829976b-d12a-4e9a-8134-0660b3b5fb12", "sighting--eefbac8a-0c52-4b45-9a67-0ec838617411", "sighting--15907f9a-6c39-4d17-a4fa-104c7994a420", "sighting--d27ca05c-fe7e-45ba-953c-d9da4226f1d2", "sighting--6073593a-2a1f-417d-a63b-20099163d518", "sighting--51133561-c68a-43c9-aa8e-3c76522bc830", "sighting--d08eb636-671c-473b-b53b-887227428cf8", "sighting--61858488-5cb2-4c15-9eb2-39a1ffce90a7", "sighting--241e0172-21ed-4886-be8f-de0ba46e08ad", "sighting--484217c4-63b8-44ac-b6f8-1c23d9aecad8", "sighting--80746d18-9084-403c-9278-0b2a9b7a466e", "sighting--b6fa30f8-5922-4e9a-844b-c7b7454809e7", "sighting--9098fac8-0c45-4e4e-800b-210c9846b1cd", "sighting--5a0cd59b-0ad6-44fa-aef9-9a36ccdd4f9b", "sighting--ebdddee4-6cef-4c53-a1bb-a9450d012cfd", "sighting--a2f8cd22-3cf3-42fd-a778-46d029b6054e", "sighting--f4305bd4-9d72-4740-9c79-b3aa8cd11805", "sighting--0a0588eb-d9eb-460f-8162-d5ddcae960b8", "sighting--cddd57df-edbc-4fb9-9ffc-536e8b2daca5", "sighting--985ffa46-320d-4afe-8cc2-dc2f3c81864b", "sighting--412ffc17-14ed-4597-8fa8-c0220dae2018", "sighting--5a85dad0-7050-4739-b8d5-703049857c43", "sighting--f86e50af-1db3-4730-b73e-167ac417d769", "sighting--7769a4e3-5918-4ccd-8145-7d9e8461dec3", "sighting--8427a6aa-6dba-40a7-b483-69e447f15cc4", "sighting--77153786-5066-4c02-895f-42e902ad589e", "sighting--264808eb-63e7-416f-9ede-5006d7b9c503", "sighting--23306653-07ae-420f-bf51-d6d0f62104e5", "sighting--b3b3f8c8-8d42-491e-83c7-4e28a01deadb", "sighting--c21bed29-20cf-4555-86cf-d368ca497cb4", "sighting--c876d2af-0ee9-421d-b9f4-781e643b1ead", "sighting--f5eaef37-bb08-41ce-b129-d2f6c6cff76e", "sighting--d96ad939-b0d5-45b6-94a6-fb50b8d630b5", "sighting--3ace055d-3d3b-483d-a190-acc8ffef8ff0", "sighting--cb10c75d-c183-474f-b895-af94a07dfe66", "sighting--4957e33f-d473-4988-8d6d-e6874464bc80", "sighting--53d0e460-5368-4312-ab71-7a3ff2a37be5", "sighting--58ba5fe1-5c78-46a9-a28e-66ff02a28ae7", "sighting--b04e2cc1-5a83-4d75-8fbb-8aad48833196", "sighting--6962f9b6-417c-422e-a9dd-00ade88aee79", "sighting--027ebf3e-d4e9-4a25-9d45-e0616e62430f", "sighting--9b9ebf60-eb06-4641-a23f-0269a096f273", "sighting--3f355e00-905d-41dd-b55f-0d606df82bda", "sighting--0b310599-b966-45c8-bd46-9717c8e25fe6", "sighting--a14d5a34-1326-47b3-a70f-497605c9120b", "sighting--6056a898-0e43-4bba-b8e6-1690f1c0858b", "sighting--c1d75ac6-ee9d-40c6-8d75-9530f94afee3", "sighting--638a3860-97e7-44b7-9c38-62f9d6e50157", "sighting--61b36c0e-fa42-4496-b6e3-46b58620d3ad", "sighting--c2f6098f-8c4d-406c-b4db-6215a21c3f3c", "sighting--4388f0f0-2529-473a-9107-ed32a566725e", "sighting--1ab40fca-04ba-4696-9de8-a3df6da8716d", "sighting--57040e83-8e6f-4b2b-acce-ea2641ac7217", "sighting--e510822c-6c66-462b-a6d2-3026e2f52621", "sighting--bd108171-5500-4d41-9af9-703651f20d75", "sighting--3ab953f8-198f-4e5d-ba0e-d08554b577be", "sighting--6725ff9c-0937-4411-9f8e-ea3b4f76868a", "sighting--ca677f4c-dbc6-4fee-b9f4-ee257018da2f", "sighting--90e5f83f-bdfd-44db-9252-e87c3766a11a", "sighting--6cd8d53a-ead1-458e-a59b-f63781d4a05d", "sighting--8fc002b5-5520-41f2-aad2-fe0705eb0e16", "sighting--5cfa4f45-21df-44b0-9a31-f9654b17efb8", "sighting--976d31ac-438a-47dc-a94a-70c1d51d26cc", "sighting--6e53e882-9136-473b-a7b7-a5c3e9006180", "sighting--4dfaff7e-495d-4f13-885f-c2c0aa7acf08", "sighting--cbd2c76d-00da-4f33-b04d-157705a5b98f", "sighting--5a840057-861a-4f4b-b83c-c885ce540547", "sighting--6d907643-9616-4aa4-9dbf-76a596bca304", "sighting--f47077d8-58f1-4736-a300-458e42c93b8e", "sighting--57278220-7ff3-4b64-90df-a358aa58c053", "sighting--d3999726-6079-4fb2-abf7-eb5d1ebf6609", "sighting--7879e6d1-0be5-4f35-95ec-5ea15059dc60", "sighting--fc19dd73-dd82-491b-bbf8-8fa90841cf45", "sighting--84c6b814-efb0-449b-a52b-17372dee2cea", "sighting--25ccdc7b-54f3-4893-9725-c33f5de7512d", "sighting--d4f758e7-bee9-4e1f-aee1-138d3fa4454c", "sighting--c8455e54-1d74-44c9-8935-7e7facc54aa7", "sighting--6731dfb6-1147-4ac9-8945-57e7cdc44fab", "sighting--a474a4c4-4d33-433c-9df4-0b456efdfdbb", "sighting--88b8fa26-d880-4328-a0e2-6da349144d36", "sighting--269e265d-a591-4481-88c8-ca950b70183a", "sighting--8d4b92ad-6a64-4b7a-a8a9-b1d52ff8e878", "sighting--6b8d8aeb-721f-4bfe-a453-5cb837d2a90b", "sighting--9f5352e7-373e-4a6e-906f-6906b42bc0d1", "sighting--38deaf80-f73f-4e44-a6ba-83f098c69dae", "sighting--19f6001a-d076-4ff6-a775-9b7821b796af", "sighting--f2c66f95-33d3-47c1-95fe-d2424b2eb558", "sighting--02d3f3fa-4b18-419f-ba25-3bc9765df844", "sighting--ed9fa82b-1ecb-4e19-8c86-5f734633173e", "sighting--ee7f2cec-3da0-466d-97e5-b994106184fd", "sighting--57f022f0-4077-4ff3-bf93-a95efbe469dd", "sighting--1af6bea7-21ce-4a99-b782-83f787d4ff34", "sighting--cf47dd95-a16c-4daf-88f8-c14b676b1d7a", "sighting--5ca7b024-876d-438c-a5f2-4be23be4213f", "sighting--451fcfcc-f3e7-47ea-9288-8fc801d205a1", "sighting--dec90e49-9515-4103-bf20-a11ed2ea1496", "sighting--1a484529-cf44-45d0-a48e-ae608fd97e36", "sighting--fa691533-4f6f-4caf-a8c5-d7495bf80367", "sighting--f93b878f-bd24-44b3-8b69-fd3d5b83855f", "sighting--8bbec841-073b-4606-a7c4-0f212bc9ea57", "sighting--004536ff-bde1-44c7-81f3-0a368bee2dc6", "sighting--94c155ac-26f9-44f3-954b-3330a388392d", "sighting--76103fdc-9523-41f5-85e5-77ab4b50f96d", "sighting--83cf8973-95a9-491b-b319-a4204892ec78", "sighting--79556844-5394-46bf-a25c-e97c49a8922c", "sighting--0d0a14cf-28c1-4a4b-91cc-3a20398ca60e", "sighting--ef7f7f58-eae7-4a75-9baf-7d7a1f1b83ab", "sighting--3715ad0a-ab3b-4cdc-8bc3-8a6cd76857ac", "sighting--6780224a-4e03-412b-83e0-dff25b852c85", "sighting--a78ef837-09a4-4f59-a098-3aaa1f0796bf", "sighting--f2e326ab-4d3f-4c11-a042-fc6fc791e3f4", "sighting--37bef19a-33fc-48ab-8619-dca66c3ae373", "sighting--5573de94-2d69-4b2f-8d8d-395df43dd5d7", "sighting--8f4c6e9d-ce8c-49b7-a984-1d6b9107954b", "sighting--292eb68d-a9af-4446-9928-cc9e57637d22", "sighting--349173c7-1663-4d9a-821c-d94d1bd97696", "sighting--675d2529-4e0a-4f71-9a58-e3a36f30a7cb", "sighting--c51c2ea0-999c-4d98-80e0-cad97379d6e2", "sighting--b013f4f8-19b3-49e1-ab2d-1d2151f1d143", "sighting--282a84cd-f713-4c6b-ae6d-5dd2ef5d263a", "sighting--75babaaf-171c-412b-b2f3-478789b5ba8a", "sighting--8d77f0e4-7d9f-401f-9fa9-5e8b35f6d037", "sighting--9273f3ca-caf2-4dce-bdc1-8501b6f00da1", "sighting--a889164f-afd9-47be-80a9-21c24ee815bb", "sighting--29fed6e4-e548-4781-ac52-30ad4d3b63db", "sighting--afb81d65-43eb-4319-87a0-5140626ac4ba", "sighting--f9f5983e-bf75-4d43-87a2-7b4624990058", "sighting--c26d399b-4b85-4adb-be94-83117e743b31", "sighting--a984e2dd-034e-45eb-8697-dce5833cd01d", "sighting--61528049-7014-4b5a-a3a1-8d6b64ed4b47", "sighting--c93b8c45-cf3c-47dc-ad18-ee1a13113f8e", "sighting--b1039490-06b8-491f-887e-385c97c89eb5", "sighting--50553062-66de-470d-8b4f-ac6c96dceba8", "sighting--ec7bf58a-1802-4f3b-a544-00d265cb0a03", "sighting--3ea060bf-40dc-4f0d-95d8-e136012d1f4b", "sighting--3ad7e6a4-7cb8-4269-b0a5-3b75813331ac", "sighting--e2dd495a-e64e-4ad2-90b0-a58a3fc5552b", "sighting--c6ea03ee-6c63-4f11-b653-58f47dbb35fa", "sighting--f8b229e3-b11d-4f3c-a1fa-1d532821ee49", "sighting--38676fe0-8944-4b3c-ac46-3a381bdbc946", "sighting--1ce93264-763d-4ce5-beb4-c74f238ad548", "sighting--14d74d1b-0721-4a8e-9d4a-f4fcc1371851", "sighting--be190998-ab02-400a-afcb-b3c14c93aec5", "sighting--9bfd7e83-60f1-418d-857b-753c57f8df8f", "sighting--4431b476-6d6c-4ffc-bb55-8c46d6ae1557", "sighting--2a56228b-c167-410e-aae8-f783af027393", "sighting--8a177154-7037-433a-b9b1-661465aa27d7", "sighting--361231f9-ac15-4cb0-915f-7e96d9afad3f", "sighting--f7a01599-af59-4339-b2e4-d3542c4ff41f", "sighting--0f71af08-f420-462b-84c1-79d0cb7b6db2", "sighting--94518da7-da29-41bb-82b7-6ed9f2ade746", "sighting--fdd2e6ef-2a51-423e-98b1-efc1adb47749", "sighting--875bd4a3-454e-412b-b6c4-0375f864e311", "sighting--3d00c3a1-5fbd-48ff-bdb6-35ba45eee902", "sighting--9aaa8f1c-1c68-41d7-8864-50df78569385", "sighting--4280877d-7567-48ac-a8b0-1f45f6cb5c10", "sighting--07bfe487-057b-4559-b74b-bde3837e769c", "sighting--df07e9fd-c3c0-47d9-abab-65bf4b40ee04", "sighting--411bd2a9-2bd0-4083-9e9d-955c065ebda7", "sighting--5576cc86-1bdf-441e-b468-9d8741a00b69", "sighting--945cfc99-aa06-4db3-8826-f186866688ad", "sighting--a23a2e2d-4196-49c9-9a77-4331cab0f6c0", "sighting--a548441a-1fbc-4adf-bd7f-1dd60e3e2f6a", "sighting--bc8a5e4a-c9e0-4413-86a7-4e219fd5e4de", "sighting--55275c07-3d83-4bcb-b1d0-e13d1d0ed0ea", "sighting--d0c53fcc-2521-4d68-ae7a-8bdde33963ac", "sighting--cc3d6a20-a732-4fd4-ad30-d12dbbd4c064", "sighting--7d4fdd20-5589-47fc-ab01-bcccc3ddcbde", "sighting--d4a2de10-7897-411c-98da-57b29107da98", "sighting--01228ad7-20ad-4e3f-a791-7ce18274a32b", "sighting--5183042b-c65c-4429-9412-38ba0aab08d7", "sighting--1bb212ac-5c7f-45ea-9344-e7d978a8e194", "sighting--03932fc8-0706-4a8c-9bc8-02e711e494d6", "sighting--2a7a46a2-d0f2-4206-9fad-aa65a9d669b1", "sighting--12d6c0ae-090a-4fb5-8a2d-985d2130f079", "sighting--3d73461d-aa40-4281-bb54-ebff22528a10", "sighting--af97a139-62c4-4e54-a373-98d8fa69d6ab", "sighting--0aaf364b-946b-490f-b094-38a5e5cebe5a", "sighting--45d8f17f-7d59-4f26-bcd8-71c2fd4ff19b", "sighting--68aa27ef-0d36-4727-8819-72858ceec640", "sighting--66a3db82-e766-46e9-8daf-26e8b3b02a43", "sighting--79d0a577-028a-4819-97c5-9b2da41b11ad", "sighting--7bf2006c-c7de-48af-b7fb-f12deb580500", "sighting--8fbafb9c-2cfb-476f-bb17-3f47789315d2", "sighting--81d62353-77b5-4760-9245-c645d5ddb7bf", "sighting--46acdbb9-9091-4665-ac75-b95ea5ff9350", "sighting--894f8256-704c-48d2-a6ab-2cb94e49b1be", "sighting--c5f359fa-4723-43a7-949b-11812da5778b", "sighting--a04cd301-4305-4ff3-8d4b-09c93e28b123", "sighting--43c87e73-792f-439e-94e8-00890ee00abe", "sighting--2704d3ca-8414-4594-bbb0-c04b8cf7e5df", "sighting--b66d8f1e-e09b-4096-925c-51dedf277ac5", "sighting--305df7c4-9837-41c0-8cb1-085a67d16fe8", "sighting--43a5752e-8644-495b-95f1-2cfd51ccdb26", "sighting--de8db6b2-53f8-4ea2-920a-1d84f991fa54", "sighting--5cc9b89e-1f21-4152-a368-f185179884e8", "sighting--ca9393dd-da8c-448b-aba8-d451149adb65", "sighting--acc18743-cca9-4caf-a2df-48eb4b30f76e", "sighting--d92b1dcd-0a06-4d05-99dc-b96a2df75d65", "sighting--aac0072d-af62-4740-8e1c-db834b69989d", "sighting--e574a68a-e9b9-450c-9fd7-76da6ca216c2", "sighting--53d012a5-b17d-43df-bd2b-221c40177948", "sighting--9d8c4af0-5a1b-440f-becf-562e13a50b03", "sighting--93736272-a398-44e6-8020-dc8593b5e53f", "sighting--8035a266-883b-4867-8962-d7f9b60315ba", "sighting--f3f44ae0-f9d8-4edf-9764-0e945704728e", "sighting--a13d6851-4667-40e1-9593-6e6aacc60932", "sighting--2abe81a4-de81-4216-9c24-ddab4662bb06", "sighting--350e88e9-3f9e-4115-800e-fcc4b5f5ca61", "sighting--d8cba154-e0ce-4e01-90d6-0a1fc2a528d6", "sighting--18860a80-e0dc-435f-b70f-93acaed3cd04", "sighting--cf2f6bac-f754-406f-8a58-9faf45b81400", "sighting--b5fe2bdd-6d07-4058-8381-fd213dcfeb74", "sighting--845dbefa-968b-4bd1-afdb-96abb01d78b3", "sighting--65d2bdb4-17e6-49ba-be5b-cebfcdd1f1e1", "sighting--d479fe10-ef59-4adf-9924-0a8ea9227ebd", "sighting--8316ff67-c4cd-4504-b2ba-70b7c037d7ee", "sighting--8de5a2d9-8eb0-41fe-96c1-bfdc51445857", "sighting--b77340e8-276f-4e63-b283-f86edef5860f", "sighting--d9656521-19f7-469a-a419-2cce70fc27a6", "sighting--32aafb9f-f82b-491e-948f-ea8fbf3de213", "sighting--0da2bbb6-be9b-45b6-a349-e6eda0c1e7f8", "sighting--00ed185e-cc60-4a55-9c73-b013366d5293", "sighting--40123981-8ba6-4c83-a89c-d2868d481c0e", "sighting--dd16bfef-a657-4a77-a927-d19a1aa12b91", "sighting--6608dbfc-5256-4ef0-8234-2c1dd39b3dbc", "sighting--75ce6e03-dbc9-42d3-9e92-48733f50cb04", "sighting--72a1b88c-273e-486f-a241-e763658dc3b0", "sighting--06218f5b-4ce7-4384-8b6c-7bd00db22f12", "sighting--5122f096-26f4-416f-903a-2a8d94bcffe9", "sighting--481c2ced-e003-4bb7-8aa0-ddd8e9316099", "sighting--afcbaa74-f630-4252-b2e7-d94a80d962ea", "sighting--17035e90-f945-4e11-b028-00d4b9e21914", "sighting--c4dab9a7-4068-41f2-9555-8f76e5026210", "sighting--0d82f459-bded-4c40-ae5f-600ec995a45a", "sighting--6b011cba-1340-40de-b790-eebd773d2493", "sighting--198caa16-0320-4bc2-b0f9-51cc4eba6ad9", "sighting--547939a2-01bb-4fbe-9a2c-43aa61808147", "sighting--9895046a-6f1b-4571-8b33-590ff2b73f11", "sighting--cc8b7da1-afae-48f6-aa82-6a73b5f52642", "sighting--72be67a8-7289-43d9-b75d-a94df9e856e9", "sighting--7828be6d-80f6-4330-8cc8-b757a86646ea", "sighting--3044cd1d-69bd-4f1e-8207-9bb5ef1741e5", "sighting--5fcb546d-48a6-469d-8310-813abda2165f", "sighting--7f73ba3f-3e6f-4265-8dfb-84c860f76074", "sighting--93a6a993-4149-4410-8e91-c6736d503454", "sighting--55061a5a-beb7-463e-b7e3-36238f35012e", "sighting--e5e92f3a-5367-4ad2-bdcd-fd641018597b", "sighting--2f74e449-d05d-4b16-8128-11a1183c886c", "sighting--73e73dfa-b355-4385-a062-a9bdadf7d7b4", "sighting--1b0c5791-5db0-46cf-a270-a2990f2c3e04", "sighting--cdab5313-8521-41e5-9ef6-dc7bd80e027a", "sighting--2254afcc-01dd-4c82-8e5b-c546b2de94a4", "sighting--bb015f07-8373-4a33-8908-b0723bd1db87", "sighting--82f014aa-1dbe-4264-b113-f2ba44b6c8a8", "sighting--961133bd-3a4f-499b-b8a0-d243e821795f", "sighting--f0f1442e-bf10-4764-b048-7a51b4431e86", "sighting--47f71a3f-6e74-4f1f-88b4-68906c9fd080", "sighting--b9f4dc71-2349-4c21-95c6-e57e9fb32c79", "sighting--cd577d1a-b0f2-4c6d-8c4b-f3546c13e625", "sighting--30b9a568-74e9-4948-bc91-e87a8548e90b", "sighting--74dca3fc-6481-4e10-9359-d7ed19e39dc6", "sighting--90ee7238-26f7-4fd4-bbc6-b842a6eab2c4", "sighting--0444e7e8-d996-47ce-b610-49060b00b329", "sighting--5874ddfb-523c-4cec-9d83-5fd758370c35", "sighting--75666341-08ad-41eb-9744-fbb7030b69a6", "sighting--7f871946-ee37-4529-9738-acaa3790f1fd", "sighting--8fd8c11f-d6cd-4504-b0b0-00d359ff9d59", "sighting--ea8ecd18-e9b7-418f-9888-be78210f6683", "sighting--99f82c04-bd54-418e-9e16-7e7d8b4fc1fd", "sighting--534c5243-bd32-45ea-9fb7-7b726b4f2dca", "sighting--01fa4763-df9a-49a3-8d3d-b09bf546ceea", "sighting--5ce35dcc-9b34-4dd4-a1b8-176cd2f464a1", "sighting--22885754-9e3c-462d-ac27-492a6fb73df1", "sighting--4170df6c-eef3-4309-adfd-f05648957777", "sighting--d1644102-b0b9-47e4-b7e8-331d7c42290d", "sighting--e8ca1788-9954-48f6-8877-05377e4b9086", "sighting--cb345abf-7712-49e8-a9a3-968d936eb272", "sighting--22705276-0315-4b9d-84eb-d509dd61f535", "sighting--c79d4aca-8d71-4a7c-ac89-46e00a87c000", "sighting--a06a4ec4-5d1d-4d84-82ba-50095c553954", "sighting--282f13c8-6234-44f6-a8be-e3b6fc9615d9", "sighting--b13d0192-de11-4e95-86a7-580942375ad8", "sighting--fc0e40a6-3e6c-41e2-bb64-a7be099581d4", "sighting--a7157ebf-faff-4c80-9ee2-507d1a3304b8", "sighting--4ee433c9-bc84-449d-ab7c-7bff101a5154", "sighting--6e0c67af-0dd9-45fe-acd5-430564ae9746", "sighting--50116571-8314-4d46-b7b1-dd1f60cab74d", "sighting--8cb9c6c3-1d23-4d72-be5e-496c250f3ea4", "sighting--746fac5a-542d-4f6e-97aa-f560e5e079a0", "sighting--f19d88ef-8f00-4a2f-8442-bb175947dcca", "sighting--9bf1eddd-134d-4b27-a399-45baa2f16bc2", "sighting--1cefa3ee-877a-4e5b-8d99-ab52e8545a25", "sighting--c552bd3c-a0c1-40a9-a5de-022a5aadbfb1", "sighting--c4e92314-e33d-4837-b159-c387b2b39083", "sighting--62227cdd-e5f4-43b6-aaf5-a2a58886f3a8", "sighting--5bc7d9df-1ce4-4f8f-8124-4ba4ec0ca8e8", "sighting--b3c461f4-3bf1-4da5-bbce-b36723852b15", "sighting--069e1534-9378-42b0-80b2-f8af0e87558a", "sighting--a5d40cc8-b0b3-444c-8404-cdda439f82b6", "sighting--8f8148e3-9d82-4a0a-893f-734a4d4fe37f", "sighting--6d5fe1bb-d02b-4a53-a794-3effce27870a", "sighting--119ee61e-f64c-4903-9a5f-c46311ab7b2a", "sighting--5c3af33c-4f7e-4252-8c65-3d874c4268f1", "sighting--050fc7fa-4b40-4bc3-9a59-8056b037f484", "sighting--9a7ebada-0399-4c12-8252-c4926f21539d", "sighting--71aed1b9-e511-4912-a04f-bf85ccdd32ac", "sighting--2724295d-e5d9-4d7a-aba3-30beab6c9d99", "sighting--ab10524e-47a5-4f77-8e77-5cbf95c5bf25", "sighting--9e88f99e-1994-4d41-b037-e1900fb804e2", "sighting--54f9df8d-678d-47bc-9cda-9511d80d2e3a", "sighting--713a2d81-fed6-427e-bced-05b08417a6bc", "sighting--c6263ecd-792f-4727-8bbd-339e0c3aefe7", "sighting--ab5bffae-774b-479d-8d59-af4d47a31874", "sighting--b64a7f80-4938-4da8-a72b-a3678035f3b0", "sighting--0bc05c3c-1b85-4af6-8106-740b82b5cef5", "sighting--d25f9541-2f19-4ad3-896b-2fdac921dfee", "sighting--cd9c1d2d-926a-4441-8d75-475756a50e65", "sighting--14dce3ba-d411-4c78-bf14-ac314296771b", "sighting--36d23c6a-16b8-4171-ab56-d313c0aeb029", "sighting--3dc1edae-34b9-49c2-a1da-48e8fb86cd5e", "sighting--25a920df-6991-418f-84d7-6093ce99a7f9", "sighting--4c5852da-a6c4-4c39-99a8-ce96f7c6e9ce", "sighting--8a498970-7a0d-41ff-aaf0-c2890549ab8b", "sighting--a37ca413-d3a2-4f5d-bd16-ecdf27bf1435", "sighting--46a7ecd3-940f-44a5-b9ad-c108b6397a7b", "sighting--66a82f7b-83eb-4d05-b626-11c38331d8d4", "sighting--49f5c939-9c58-47f9-af99-26092771824a", "sighting--a078d9f2-e14f-4084-abf8-e69851f42694", "sighting--02a915ee-71a4-446f-9c81-921359766ce4", "sighting--adf97a9b-fa7f-45c8-8a22-1adb1fe09185", "sighting--bfc9f8b8-78bc-4742-93f2-61196aa7c215", "sighting--c2e765c8-1256-46b9-86ed-9eab05f761de", "sighting--3e3ad19b-2de9-4826-99f1-7ea9230b07f0", "sighting--29a25b3b-2ef4-4795-92f9-ebb357984667", "sighting--d109ecdc-d367-41b3-bd73-f820ae6747bb", "sighting--bec93576-4e3c-4fca-9239-4fbea49a4db9", "sighting--43bd2783-d7e4-4ae2-a3d8-02898f235c4a", "sighting--ebc11189-9713-46d5-8283-dfbb7007731a", "sighting--fe8164dd-9f9d-4989-b3ce-482684ebaea2", "sighting--3f37ec75-7a17-4c6b-960e-7635177f3d09", "sighting--8ede675b-4285-438b-8854-0c4ecd5820a3", "sighting--150c4a18-d87f-4371-9f57-95b243bf1fa3", "sighting--b2c5dc95-bcda-4cf8-895d-24e120003679", "sighting--6349fe01-e200-4d36-a322-4513ad781bdc", "sighting--156d7342-5706-4ce0-9cf0-cdccfabff483", "sighting--44e1d0d8-4ea8-4117-8298-6437e790cfd5", "sighting--cddd4b98-a166-4172-a197-164bfbb3ce92", "sighting--77415cfd-12f8-4f9f-a83b-8f21b1dd83d8", "sighting--2c551f9d-c56c-4cb6-ab00-b1a3a2dc8a17", "sighting--42c26c8b-b77c-423c-87a2-e7ce8aff389c", "sighting--c0e56b92-3a02-4091-b2ad-60d3a983d16a", "sighting--b3877aee-c7de-4976-bc45-25abba1f581a", "sighting--64b1462f-ca49-47a6-97f3-dc68810c9c46", "sighting--8a9ca27a-2678-433e-b3aa-390be8398cce", "sighting--b99dcead-9089-4c70-a95e-90a4c6d3bbfb", "sighting--1d39e5c0-3d9a-4717-964d-d5a24e9fca3e", "sighting--e3e41f5f-88c9-475e-a1fb-3cd7e6b71b98", "sighting--0a55d335-2869-4644-881e-59f663f2b143", "sighting--1b9643c6-bf16-46b1-afc2-9de6f8ab0c36", "sighting--4f9c37b1-c0da-4ea6-b9f0-a580181e54e1", "sighting--5392d236-08ce-471d-8617-43eef5a2a824", "sighting--d15075ff-6b00-49b0-8b24-6419f4daeed9", "sighting--c6c25b83-7830-48f8-b5dd-545d3fdc0848", "sighting--7c6cf4e4-cfef-4324-bd1c-03bde14c27e2", "sighting--fac44bdc-1cf1-4ed3-95cf-7dddf9213bc3", "sighting--8f1213d1-165d-4991-99cf-fd86132e919b", "sighting--010ebe44-1a98-49ca-aada-834fb5294897", "sighting--f9731b49-5fae-42bf-b3bf-34defdb0da33", "sighting--c725b975-2239-451b-9ea0-a73c152e0abb", "sighting--9b389e78-5aa7-44ea-b57a-b0c306878a54", "sighting--7037d1a0-3bca-484a-8453-dca2c5d92348", "sighting--e72c5232-16ae-44df-8d5d-0848c0936c22", "sighting--c745807b-c5c6-4d93-a30f-ee9d74c8a1e6", "sighting--b7d45c49-657b-4cee-b59d-bfa30c2d76af", "sighting--bfb24f75-10a8-4b23-bf52-15b9ea4a6485", "sighting--f2e61483-4463-49b9-a21d-35b7ff332611", "sighting--29d251b3-4c86-4170-9c83-51245231b597", "sighting--b6a103b4-2850-4579-890b-e6664ebaa3fb", "sighting--13272a83-e61b-4623-a347-0fe3ede06c93", "sighting--aa5f0817-f9a9-43bb-93c1-d1cc6993b87b", "sighting--1318dbae-439d-40b8-9fe1-03a40c5f0c73", "sighting--75f9cca5-4e3f-42a1-a25e-8fbd197c0417", "sighting--768a9f43-2488-4c66-82b6-93a9398cefd7", "sighting--beb805e4-2bbf-4f8a-9756-2fa4871f082e", "sighting--9683a98c-bd33-42d5-8b69-cb3cff355584", "sighting--e690827a-a18b-4793-90f2-411388ffd4cf", "sighting--974e4be1-2339-4a44-afb6-313f7704eb8d", "sighting--3718bb69-2b16-48c7-bd8c-0f8f9b3458d4", "sighting--279fb560-687e-419b-8303-b0d4e106df80", "sighting--5a6f77e2-cc1c-4d4d-9c56-659f71d8af05", "sighting--2cac9119-c4db-4f85-8d06-39566cacdb96", "sighting--f9392622-0b8a-4f51-8d6c-0246f7494443", "sighting--425de978-ffda-42f7-9b88-d194bf7c4476", "sighting--b0ed03ed-1dee-4dac-9256-0b481336ef8d", "sighting--298d9dce-9765-40b3-81cc-0dd130223862", "sighting--a9222f16-fd45-42e3-8ce1-08e410bfdc84", "sighting--9602307a-fec3-4f78-b7f8-169b995da9d9", "sighting--ba391982-bb80-49ea-84cb-c21e7cb8a556", "sighting--e0335de5-15a2-46f8-a3ba-3b86e26df154", "sighting--c70a3fe8-e46a-4b8e-a63b-0cc77c1a886f", "sighting--26beec17-b31c-4ed9-a3ac-5d1262c9aeff", "sighting--54d5cf65-1da5-4cab-ba20-c9a511988d8f", "sighting--66460b71-04db-42bd-8f3f-4d2913c9a3a8", "sighting--dfa92c68-4964-4349-93db-91e9ab9a6c40", "sighting--a1a2ed5c-cfe5-447f-9bae-00b43c3c2c70", "sighting--27971e6b-447b-4fbd-bf66-4f3a79329f5b", "sighting--c7a3bc89-12ea-450f-b59c-8c691d91c59e", "sighting--0f994813-1105-4ff0-909d-f1e347df1c82", "sighting--ae61c795-6fd9-4e40-950f-7367f349408e", "sighting--49db2363-1ba6-4efc-9796-d2f45c969c15", "sighting--a9291681-9fe4-46e2-92e0-19e678832584", "sighting--04fcb37d-29db-49f6-914d-9db659471869", "sighting--ee3aa8cd-5d44-4528-810b-bf6bcb1bd1da", "sighting--1e50eede-419c-4bc2-862a-5e2d58c49224", "sighting--31feb889-d6a7-4912-9e2b-187425120211", "sighting--c0e7ee44-c97f-4dd8-a19a-21f02fcd021a", "sighting--493e00a4-e565-4a2f-8acc-8b20df6234bb", "sighting--797cbb1d-c3dd-4fbd-a368-55320f53c45b", "sighting--8df8e16e-d915-4732-850f-92bdb042c622", "sighting--3d61746b-5225-4bf0-af06-e80f4e09cd71", "sighting--cc721ee2-b25a-4cf4-bc5a-1c07d91e470d", "sighting--6ecaa791-eb14-4e31-8782-00b3dc0e68bb", "sighting--1683ac70-3090-4aa0-8d56-2c36378fad38", "sighting--542eb900-d05b-414a-a624-19a6c47cd446", "sighting--f3e214da-f50e-4fb5-b556-0874feedca2c", "sighting--81ccc748-5456-4f05-9c80-0f8bf34bab87", "sighting--02c0b4d4-da21-474b-8800-ff8bbc244a8d", "sighting--aa8b7a23-da21-4580-b479-057719df5977", "sighting--017009ee-1707-470a-9c1e-4503a5146ae9", "sighting--50a780c1-f46f-4cd4-984e-d0e1daeb414d", "sighting--7ee1bf63-ca06-43d9-857f-4789ef175c12", "sighting--b8fd7d27-362d-4372-9cf9-e3013c2f484c", "sighting--25ab7de8-bbda-4dd8-a53f-b5885356204a", "sighting--810434cb-dcf4-446c-9f98-5d956310c833", "sighting--9b2dbd81-8a61-43d6-83ba-8a5736d4d3b2", "sighting--55486d96-18ad-4ea9-96ff-14fefd708fe4", "sighting--cf1f7e51-6882-43f4-8620-793cfc13d6f7", "sighting--f8679999-1a56-48b9-8f69-8493795feafd", "sighting--9dfca684-3f7d-4ae8-9ad1-5dc58db55db1", "sighting--7fdd183f-7f4e-4c15-9849-c0fb179a4c82", "sighting--516bc62b-129f-4015-8958-b4a0ff0da6d5", "sighting--6597be30-c030-4486-9b7b-fbbe25abfe4f", "sighting--939c414e-99df-489e-bbb1-29123d72988b", "sighting--3ef5cc9b-fd38-45bb-8572-f952ea8b5b7c", "sighting--17efb061-9640-464c-a087-f56ff0786f63", "sighting--e4471eeb-60e3-4c4f-9077-2768ad14874e", "sighting--55203491-86d9-4e18-84bf-8c8102c55d84", "sighting--9f12850f-1cf6-49c6-8537-c3623b2d9763", "sighting--8bce3fd8-c74f-4b5b-8b57-27359f3b7d05", "sighting--cd40aeae-443c-434f-a780-19cb23ecbd13", "sighting--dc100f9e-31d8-4569-9042-8b3bb986125c", "sighting--e77dbe92-59c7-4a92-9083-222900fdc21e", "sighting--95638ff0-439a-4d70-9ac8-9da5fbd0d53c", "sighting--c80dd9cb-b96c-41d7-b28c-e43b41b23312", "sighting--988298c0-7578-4664-8895-786a181bfe17", "sighting--ef451a1a-c114-46d5-b76a-fd1680b6e866", "sighting--e2b8de18-48e7-42dd-9892-7b663f585573", "sighting--1f691caa-0030-4579-980d-691bd3434684", "sighting--78486fe6-aa74-4e08-97e8-3837421c4d2d", "sighting--578eb71b-a9bb-459f-ab76-dbd676b6a1f5", "sighting--1aaa0442-4262-48ec-89b3-a313bbdb7d17", "sighting--a293787b-31c9-4987-8293-e86bfee43d3b", "sighting--22876ca9-3d69-4972-a133-33d436744a72", "sighting--9fcb1263-76ef-47a5-9783-a362b7b310e1", "sighting--4be7389b-5a2b-4d8b-9078-19e6101c51ee", "sighting--b4e4fe40-1f78-4c55-ae96-8d1fa83d0765", "sighting--2c48e94e-8e74-4d93-af8e-4d57ea87be56", "sighting--48bbae1d-0589-4779-be48-1677de207afe", "sighting--e788a5c4-db40-482b-a3bd-1c1b1ef47976", "sighting--82a85510-0a56-498a-b0e5-ddb13fff346c", "sighting--ecb9928c-8cb5-4074-8ccc-f537088deab2", "sighting--214a2d74-413e-468d-b4dd-54cce04141ee", "sighting--6eeda129-0bed-4466-82d9-6ed4e0db7620", "sighting--9cf488e2-3d00-4e0e-880c-c32b8a618ab7", "sighting--00b7db17-4304-4e51-b7cf-8783d18e328a", "sighting--2c3277a1-e5a4-4446-bc49-31061eec5097", "sighting--99634a31-835a-4c65-a219-e699e5bc550e", "sighting--024c0294-fadf-413d-b872-8640c617593f", "sighting--aeec67f5-d797-4bc4-93b6-822b9a8672fc", "sighting--f6cb6fd8-c8da-4c40-9a3c-36681b9ab25b", "sighting--1f729e06-ff6c-40dd-af02-0b5177f2b6b8", "sighting--dd282bd6-efc6-4e12-bdc8-abc5be8888ff", "sighting--9a8bda05-8b0f-4369-bedd-619b92735f3b", "sighting--5ab6c751-6e7b-4b5c-bc63-1fcfc3cd97ac", "sighting--ea1f0ee9-a6d1-4fdf-8208-8564d944c1b7", "sighting--2eaff447-e9a5-4924-aaf0-3acb7167d958", "sighting--195b5f17-77f5-45df-8acc-1b39caafdea0", "sighting--a58f2e5b-4162-489b-a964-2a76c2db9926", "sighting--19e364f7-6e01-4eef-973a-de70e8f2e7a0", "sighting--e9832a61-aff3-4a6a-8db7-1a7f72c0e9a8", "sighting--30453c03-7acc-4236-aef4-0abbc0d72db6", "sighting--f10e47a8-1b52-41ce-9910-e896cd477650", "sighting--812f05d7-a3bd-4bee-a2b1-5ca122301df1", "sighting--3bc233e5-bbf3-4be3-9a05-13f566c750d4", "sighting--55ca4340-093e-44c6-a398-5cbabd77aeae", "sighting--3b3b63c1-d09d-4ad2-b6ca-aa82ba219d9d", "sighting--2046fa34-6c46-4cdd-a694-9d707132c502", "sighting--b4e8ae29-c1ea-42eb-aa69-fcdc18bc6246", "sighting--78c9b1c4-f6f2-471c-89cb-a5910f8f0b57", "sighting--903f6509-4263-42cb-b8b3-fc2c4c534264", "sighting--1e49b894-f19b-44ed-8857-7519366ccce8", "sighting--a41cdaac-9aaf-4a01-ba70-3d7f2950a9b6", "sighting--ca837d6d-d562-4d8c-81a3-3d8a4f05aa48", "sighting--7bc7bea5-178f-4b19-8710-562a10c30a22", "sighting--375cfc4d-c814-4012-ae2d-598c932a2dcc", "sighting--e01d8603-8176-4e73-9d5a-84b7398032e4", "sighting--3ccae4bc-7c09-4630-8ac8-7f7f1e7fb77d", "sighting--a91a6f48-4497-4937-bbe1-36c78cba19b0", "sighting--a5481f2f-fe82-45b5-961e-144e39800bec", "sighting--5e3f3c72-d41b-49e8-95f6-1350563c831a", "sighting--f02caef5-e902-4028-bf5b-96351a114154", "sighting--9ce2da97-f4ab-40f3-923d-42ff6a787345", "sighting--947538e5-efb6-4713-8a3f-d077144298c7", "sighting--5ca7bcfa-b1cd-4ccf-9f9e-2b8f8a0f4129", "sighting--fe103b35-b788-46eb-beed-a58cc0d80658", "sighting--90ea03fc-7d51-49a1-9a3c-17e3a36ed03c", "sighting--4248e99b-50f3-4d7a-938d-cec7e0717b84", "sighting--9b458f61-b28f-47a7-8805-d35eabf3247d", "sighting--2d3a5fbc-d92d-426d-ac54-d7143a728f7e", "sighting--7c4a6800-e06a-451f-9769-98b27f3581d2", "sighting--0923b442-e304-4732-a940-a5ecc53b14c0", "sighting--ec5669e5-05f7-4fb2-b7ff-797af80dc23a", "sighting--41dc7040-1bc8-4bca-bfb2-3647155b5709", "sighting--eb7bfe2d-6370-488e-92b9-634718f2f66f", "sighting--3dbf3c53-48b4-4420-a862-1c9b8ffe1cae", "sighting--0a7c1c7a-4349-4965-9aed-d6c3e4415b92", "sighting--77137c55-9aa0-4572-97fe-f8d11c3c3b15", "sighting--beeae173-ea74-4436-9d67-a61e73d167a2", "sighting--bc9de9a4-9b43-4026-9f5f-cebcd6351437", "sighting--bdfa933c-38cd-42a9-8c65-bc6f703afcd3", "sighting--a0e05d3d-c937-4ba4-a4d0-45067e5eb84a", "sighting--7d92665f-1c4a-4935-9c7f-3027aec9f36b", "sighting--a7ccbe0c-84e4-43c4-898a-79daac052e48", "sighting--8a764c30-37b9-471d-bfc9-c5a3ac3e8e2e", "sighting--cbc1b4ca-2cc6-497c-9705-ea760ccd7d6b", "sighting--f2e5b562-69fc-43b4-90da-0a0777c4243e", "sighting--7e8d951c-764b-4bae-86a8-a1c98006483c", "sighting--c8e6c638-5d01-4c8c-b58e-28927368af94", "sighting--6d6abb4b-2d8d-43ff-ab96-ae57471a4968", "sighting--278c218c-a50a-46e4-9412-e53df075014e", "sighting--769f576d-750b-4e88-8708-53c892606819", "sighting--44c22bbc-c6f8-4cde-92fd-fb9dfef0539c", "sighting--677ab668-e732-4c99-80d8-1b6daf2ba885", "sighting--38d6658c-78a0-4148-9f18-a3532e0fdd7a", "sighting--6168125f-c046-4368-8011-e052b1539ae2", "sighting--f1d4b5fd-b6ef-4043-815a-6ba31aeb54ab", "sighting--edc55eba-640e-4398-ad5e-d0313997df20", "sighting--5c4b62ef-7d29-4a00-bf79-9016e83c7bed", "sighting--ee17f1fb-25ac-49be-9578-944dc3414ec7", "sighting--7e6d0185-9b63-4943-83a6-9d009ffb7fcd", "sighting--27f92b2c-e1cd-45ef-8d93-443223054607", "sighting--132ebbdb-5863-41bd-b652-8737b5393d3d", "sighting--3b4ee5be-3709-4fdb-b47e-c30de461c607", "sighting--59eb0df7-2cf3-46dc-809c-1dbfdf82d7d7", "sighting--d066150a-534e-4a0f-8bce-c1f38c397356", "sighting--62067d7c-0263-46a2-918f-8112b6214cf5", "sighting--5b226837-ffbf-416e-afd1-f02cbe2c44e6", "sighting--0b4dd505-4df3-4492-83d3-8e5801d533a4", "sighting--1ff3fa05-4981-4b86-a113-0440dfc7beae", "sighting--e8444859-10b2-46ed-8a64-bca1b2d97ecb", "sighting--7e632ce5-8e40-4aee-a6b2-5a014d6ec9ca", "sighting--d9891bd1-f62c-4d44-8818-96413cb4f806", "sighting--e8bce572-1948-4cc8-8b1c-5d94021f5fee", "sighting--3c39b083-4717-48f1-a07f-55ff50876e96", "sighting--f2a3e41e-e989-4aef-8491-5b5f32a648a0", "sighting--d21bbaa3-35e1-4f0e-a565-9533f431f2bb", "sighting--5db45916-a21a-43ea-80bc-ca4ea6f76045", "sighting--94469efa-f9ef-4ba5-ae44-e6a8026727dc", "sighting--30e6f323-8e85-4636-9917-383bb633718a", "sighting--27a2a470-25a8-4ce9-bd26-9cfa0eed3bf8", "sighting--84bba2e1-0998-4af7-a45d-8eb79f461917", "sighting--1f229936-a351-4645-93b1-df5f53167b69", "sighting--35e43a3c-1853-4039-877e-5f0c387e13ca", "sighting--9f3907eb-770b-43d7-a447-6b068eb01288", "sighting--99a9ae0b-558a-47ad-ba0b-f0f63d5747e2", "sighting--60edd34c-3ff4-4802-b317-3eaa0a2dc2c9", "sighting--229db2ad-1cd3-4fb2-97fa-7450c6a93a06", "sighting--62d30412-8579-40ad-a423-34d6a42d4df7", "sighting--b32e6cee-d2e3-4786-9c71-c62a9570cc84", "sighting--175df5bd-bc90-438e-91e2-59c224274577", "sighting--36375fe8-ca90-4f2b-b3c8-21920b047502", "sighting--acd57494-c3bf-41a9-ae01-8588fea7a09f", "sighting--eb1fba3d-4fc1-4961-9096-a3607fe3ea53", "sighting--a37a0bae-96bd-4997-9ef1-74655cbf36f8", "sighting--a298e3a8-b28f-465a-9159-0524b79be21f", "sighting--9932bdca-bfba-4561-ba40-548a3080751c", "sighting--91675e31-f2e1-4524-90db-1064467f86b0", "sighting--e49a0464-0495-4e99-890a-d11684d2d7fc", "sighting--367e0265-165b-45e5-a5e5-08635842c1f5", "sighting--c6bc2ca2-8764-4492-91e6-26d91d762555", "sighting--b71e3214-e153-457d-b29c-842d63077e3f", "sighting--e7ac39d1-e297-46bf-a666-bb2afd3844b5", "sighting--4d03e4c9-e5c5-4275-8ac7-73e40ae9c0cd", "sighting--907046c4-e560-4eac-8c23-f5ca40488428", "sighting--5fd73050-ef40-4717-b7b3-d5408fd742bb", "sighting--5fdaaa9c-1220-4e8a-b1cb-e7f9e706e47e", "sighting--d093003e-58c3-42e1-9eb8-c9023d875ea9", "sighting--f34d3f95-ba8c-4ae9-a8c9-aac7fe479a89", "sighting--0b7a7d14-ce8f-4253-9877-2aa3c7eb69af", "sighting--4474b233-2e50-4138-b372-912b7f931a09", "sighting--01486c25-2813-4bf5-abeb-6814c3b1e819", "sighting--d7685363-f690-44f5-94cf-d9855ad26ea4", "sighting--d3551a9e-4612-4965-b25c-67fe6f63f2bc", "sighting--f5bc44a2-b4fa-4a76-b85e-f1d56b25ae8f", "sighting--798d9328-aa24-41b1-bb5e-5bf40f5c2148", "sighting--f5376cbc-384e-410a-b8ad-81c815c2271c", "sighting--733f8402-df62-42d8-a316-3383275f4ee8", "sighting--1d50388c-4438-4055-829c-314784afea90", "sighting--20e4f21c-6ce9-4f83-a92a-0019663dceb4", "sighting--cc4025ec-ab6c-4d03-bc2b-60103f0d7faa", "sighting--c0956df1-2881-4d10-95eb-0b4d522390bf", "sighting--c25bddeb-23a1-408c-be29-109e64e88752", "sighting--5bc1facb-ce1d-4077-ab41-d4a01ce4d7a2", "sighting--5239963d-a2a3-4c37-8a07-49c2555ab287", "sighting--24968661-5a8a-4b54-ba7c-51b12e6ac905", "sighting--76ecdebe-e8d1-4ca5-87a4-94eb889c08a9", "sighting--a975ee2f-ba88-4955-af69-fb67f9b9c5ef", "sighting--74c2ff7d-479d-4f61-9973-f9b2a1628a18", "sighting--d0b3186a-997a-4050-80bb-bb7b69769bd0", "sighting--3782c56d-e9e6-4195-81d1-ada80468b8ad", "sighting--6a2a64e7-fb23-4125-aef9-3b2f0c35feb8", "sighting--4d0fad14-5f96-47f8-b69b-1c61ae750523", "sighting--e9c5e82e-cae3-4a20-8429-f33a7eb46cb2", "sighting--5675bff7-c934-4fde-b8d8-3d87ff89891c", "sighting--9b0c050d-a086-41ef-9eec-3ffbde9cbee4", "sighting--cd66fb77-2a49-4c57-83d6-72f1d19d5443", "sighting--74134377-db43-40e9-88c9-a6f9c0ec5c5a", "sighting--9268ed69-84e5-4cb2-a497-ab85e226a950", "sighting--011e61ce-2843-4dbe-bb0f-a2976a58f5ba", "sighting--cd0eb520-891b-46f3-ab7c-ba134fbf8bcb", "sighting--2f2d8fb0-bdfb-4528-aa94-a7a3cf29c7c5", "sighting--9f48d623-4841-4457-8b7d-abee819c87c7", "sighting--16a6156d-590b-4799-ad2d-688a5fdefb5f", "sighting--c6e20173-9215-4427-92e6-0e95ffefd257", "sighting--17d62b3c-0213-4949-8381-70bffebc6753", "sighting--31735a6c-aabb-49d1-9801-78e3accf3294", "sighting--3ff2488c-f739-481e-bff7-292971db811f", "sighting--5c90d2ba-bb46-474e-836b-164d66ff6aac", "sighting--7205d99d-e467-44b0-8e9d-b034fab1939e", "sighting--380dcf4c-5a87-463b-8c31-2c8c709be976", "sighting--ff94a9ff-3870-4f58-a2ff-d9fae3d143af", "sighting--e2dfdab2-9cdf-4bb2-add4-4d7c1ac89278", "sighting--99f19c9a-887c-4952-b2ed-f50fca6bfeb7", "sighting--335cd7d5-d6fb-4882-a326-8cfbdbadd5df", "sighting--4f637111-149f-437a-b105-d2785245098d", "sighting--4417596c-b6ad-452e-a741-846806b64ec3", "sighting--70c3b029-5599-4b9c-b613-666536d177d3", "sighting--4d91f9be-d14e-4f31-a7dd-add784c21642", "sighting--785652a8-1c2e-4b17-b436-4bef1568df50", "sighting--99db3620-7f1c-42ee-92d1-b99ec8a2c0e8", "sighting--2569ca28-867d-405d-96e4-8a954d96d015", "sighting--a1b7b172-e114-448d-95fb-323a3a8e895e", "sighting--e556f885-3239-413b-b079-10b76965bbf0", "sighting--044c401b-21c3-4896-b473-e2616dc1385c", "sighting--10465c0a-d9fb-4ffd-a001-d2d862b82562", "sighting--ce6a352a-48d9-4538-bbe1-c4bdbfd3f121", "sighting--c6103fc7-9f06-43e1-a44a-20186d08c34f", "sighting--7cbc12db-ec21-4590-afaf-4994998ed0d9", "sighting--1920693e-f941-43a6-92e9-a8fa0a6530cd", "sighting--51d73707-c4e3-4afb-a490-63492703abcd", "sighting--8d08f163-9e60-467a-8ebc-3385535d26d6", "sighting--4fbfe8d1-9255-41da-b8e3-e3cb94da1c3a", "sighting--9bd1cbc6-b854-49f7-81de-100ded2e7562", "sighting--2999346f-01f9-4b43-86a4-861d9c2a62d2", "sighting--48b4cb39-4aa8-46de-8b0c-23c153543e52", "sighting--c37a34d0-f202-4be2-8ef4-e5d8b4e47998", "sighting--1172f084-3705-4cae-bdc0-f31892a29174", "sighting--23d42df6-0ac7-4dc0-a4cb-7118bd5a5e43", "sighting--782294aa-5a0c-4c53-a694-c968de682db9", "sighting--5d85f5d4-7fe4-4d61-bd1b-c9ae5800344a", "sighting--988b0ac5-fa76-46eb-a0c6-90a8ccf7248b", "sighting--2d6b0421-8da8-480a-bd0b-259000fe053d", "sighting--5d3671df-b4ed-41e4-a064-d4a83f27c176", "sighting--d827277d-deb7-4b66-b23f-6801bf6e7c0d", "sighting--2f6254c9-cbea-41c4-8630-19f975cbd802", "sighting--cd23be28-c932-414a-b09e-4a674be9c496", "sighting--b71a8536-3d29-456b-98c0-d747fb0caace", "sighting--8101b592-a374-44a3-b591-fc59bb6aba10", "sighting--ab8ee216-3c91-4c30-8252-ace5ffc70bb0", "sighting--b002ec27-d6e3-4f1d-8c6a-0324072bca26", "sighting--b731cb44-e09d-44ea-a8a9-b3b7c327a68d", "sighting--efe18580-37be-4c5d-977d-d4a505a2f395", "sighting--8653bfaa-47bf-4870-b5b1-73c6e6c42e94", "sighting--0d0a15d0-43c9-464c-9c73-823a1afd2074", "sighting--200988f7-5130-4cee-9b3e-61921628013b", "sighting--a7875066-cbd4-443e-afcd-4045a78e0fbf", "sighting--c9236774-2d0a-4ebf-a9c1-5bf67101125e", "sighting--67ef9534-3743-4c70-85ba-5171231e5d62", "sighting--a8b214cc-bf25-4ef1-b4bc-2c5ed0a1e9fc", "sighting--3931df03-6f69-4aab-8c7e-3e05215254cf", "sighting--1f7ecc50-80bb-4bc8-9e8d-a1835cbe03a9", "sighting--c1ae4a35-48aa-4a18-a90f-43703148ee11", "sighting--5c7781f4-d8da-4a1a-8f6d-efceb42fb322", "sighting--61840ec5-cc63-4322-bd37-d55b829cdf69", "sighting--1ad4f9b7-6bc7-4e90-97fd-d679a1a194b8", "sighting--355ca8d0-d86e-40dd-9f72-9d17fdefb40c", "sighting--d5c7d666-d8bd-45cd-af71-bb8fc26e135a", "sighting--2c4dc502-21b9-4a80-8690-e5bac3651497", "sighting--fab9f8c2-8619-4764-89b8-154878142a71", "sighting--b6bb0ad1-9317-48b6-85d7-cc5229974938", "sighting--02dd9ada-f6da-4b2f-8c35-302d7b4f336b", "sighting--c80c09f9-6232-4994-87de-0b90e854c60e", "sighting--15b80f0f-f575-4769-b81e-79f8b6df1802", "sighting--d5c1f6c5-2f0a-45d5-b0df-3c242bde4f23", "sighting--4ea1e069-c948-4f68-86c4-72d9dd02d1c9", "sighting--832376f6-0098-423c-8e25-4b62a55b27c0", "sighting--399ee178-5cb6-4972-a300-7fd860ccc4db", "sighting--72ee4a8c-56e8-4154-9fa4-b9f065262c1b", "sighting--f5f50c9e-ea2f-484c-a2af-6c03300aecb4", "sighting--527375d7-b1ac-43c5-8baf-060c87b26d19", "sighting--11c43b96-d862-42e2-a650-019749fa514b", "sighting--54103481-9107-4329-8df5-db3102ab0d0b", "sighting--aaf38ecc-7569-4da5-812a-d8b1d49d79e3", "sighting--3db3f8bb-e929-4ef9-90c9-037db992b285", "sighting--8248ff4e-8d36-4255-8986-22d36d9fab2b", "sighting--dda633a5-9c4a-4c4a-90a9-7b6a8269b5b0", "sighting--2362ebe7-f3b1-4ea3-882c-22414bc1c059", "sighting--b38b4a0d-2d91-48b3-9b17-93586bf71f52", "sighting--473032d0-8ad7-4a6d-a336-03951e6c28be", "sighting--dd398172-5418-4efc-9172-7aca79d2d9c2", "sighting--b6d6d2b1-13ba-418e-bc4b-c47d70bff2fa", "sighting--0ddfdb2c-3800-421c-a80f-bb545891aae4", "sighting--b43a5bd2-2fdf-4921-88a6-7fcbad47691e", "sighting--24f2ca2c-0aa5-4856-9d2b-8ca1a08da280", "sighting--9577cf90-6a07-48e8-929e-9ac68dc4cec5", "sighting--b0b1cf11-5022-467b-a801-47c85c10a7ce", "sighting--dd78805a-285b-4909-9cab-b59077199400", "sighting--224fd751-1a4f-4d9e-9f32-44d1b256accc", "sighting--8ca24ba9-b2ce-4eb3-9a6b-a9a5e1997cbf", "sighting--8bb24152-cba8-4880-8f0b-705163a07854", "sighting--3e55f338-3b57-4c37-a3ca-a4f54d8588bd"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-11T11:00:02.227Z", "modified": "2026-06-11T11:00:02.227Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}